MicroHacker Forum

Per principle, the bootloader take full control of the module (BCM) and provide a comm channel via a CAN protocol to receive commands to read and send, or receive and program the modules internal and external flash memories. One solution could be to develop an own bootloader, which would be a huge c...

Hey guys, i still look for a way to read the BCM flashes by CAN. Anybody knows how to do this? With the update bootloader should be able to do this, per principle...

Interesting aspect. Means, once you used the PATS function, your Foscan will be locked to the VIN of the car you used it and refuses to do PATS for other cars?

As we know technicalywise the mileage registers can only keep numbers up to 999.999 Had anybody ever tested what happens when you set your mileage to this value and drive on for a km/mile? Shouldn't it rollover to 000.000 again? That would be the most easiest way to change it to a value you want, as...

Great, thank you!

Have anybody ever tried to program PATS for keyless vehicles with Forscan? This option was recently added to Forscan, but until yet i never dared to use it

That is a very neat and smart idea, thanks for sharing!

I know try to start reversing it like malware analysts do, but hope you can help me with that! Think it can't be simply "decoded" offline, it needs to run some code at the entry-point of the DLL which then decrypts the contents before exporting the functions. Malware analysts and hackers u...

Have you every tried to decrypt "MCPFunctionManager.dll" ? I know that inside we would find the security algorithm for UDS 0x27 (SecurityAccess). I could already get the "keybag" from "AlgData.dll", but it's worthless without the algo. Currently i don't really know wher...

Hey, what do you think about a shared/live hack session on my slack channel? Should i invite you and we arrange a date and time?