Page 4 of 6

Re: Vin protection

Posted: 10 Jan 2020, 18:34
by paxtonix
Yep, Theory was right.
I was able to decrypt files. DES-CBC algorithm is used for encryption. So we are one step forward boyz

Code: Select all

https://tools.ietf.org/html/rfc2405
12.png
21.png

Re: Vin protection

Posted: 12 Jan 2020, 18:12
by Stevebe
leader wrote: 09 Jan 2020, 08:30 . With a simple bash script you can regenerate the whole firmware from the CAN messages....
are you running Linux / OSX

Re: Vin protection

Posted: 12 Jan 2020, 21:14
by DGAlexandru
I did clean the LOG it with Notepad++ then copy the HEX values in HXD... so it can be done in Win too.. or Phyton script.... there are many options today :)

Re: Vin protection

Posted: 12 Jan 2020, 23:46
by Stevebe
DGAlexandru wrote: 12 Jan 2020, 21:14 I did clean the LOG it with Notepad++ then copy the HEX values in HXD... so it can be done in Win too.. or Phyton script.... there are many options today :)
Yeah so I am beginning to see, I wish I had started to study code when I was younger lol. You guys amaze me_

Re: Vin protection

Posted: 13 Jan 2020, 00:06
by Stevebe
leader wrote: 09 Jan 2020, 00:43

The VBF files are stored as resource in the MondeElmLoader.exe file. So you need to open the exe with a Resource Editor and save the firmwares with it.

Can I ask which resource editor to use as the one I have does not shown the resource data

Re: Vin protection

Posted: 13 Jan 2020, 07:13
by DGAlexandru
If you have old version of ELMLoader, that is unencrypted, you can go even with online .NET dissasemblers.

Re: Vin protection

Posted: 13 Jan 2020, 13:25
by Stevebe
DGAlexandru wrote: 13 Jan 2020, 07:13 If you have old version of ELMLoader, that is unencrypted, you can go even with online .NET dissasemblers.
The old version Of the mondeoElmLoader jet rains will open the file and enable yu to export the data
https://www.jetbrains.com/decompiler/do ... standalone and
https://www.telerik.com/products/decompiler.aspx
seems to work on most and if you run vis studio 17 these will intergrate hope this will help others

Re: Vin protection

Posted: 14 Jan 2020, 07:34
by leader
Stevebe wrote: 12 Jan 2020, 18:12
leader wrote: 09 Jan 2020, 08:30 . With a simple bash script you can regenerate the whole firmware from the CAN messages....
are you running Linux / OSX
Yes, I mainly work on Linux and OSX (with GNU tools).

Re: Vin protection

Posted: 14 Jan 2020, 07:35
by leader
Stevebe wrote: 13 Jan 2020, 00:06
leader wrote: 09 Jan 2020, 00:43

The VBF files are stored as resource in the MondeElmLoader.exe file. So you need to open the exe with a Resource Editor and save the firmwares with it.

Can I ask which resource editor to use as the one I have does not shown the resource data
You can simply use dnSpye disassambler to extract resource also.

Re: Vin protection

Posted: 15 Jan 2020, 03:25
by Stevebe
Leader
leader wrote: 09 Jan 2020, 08:30

Another easy way to obtain the modified firmware is to use the MondeoElmTester program which will read the content of the firmware from the IPC and stores all the CAN messages int the log file. With a simple bash script you can regenerate the whole firmware from the CAN messages....
Based on m0rtal's tester program I also created my little program to read/write the vbs files and now there is the IPC Updater tool developed here on the forum which can also read the firmware from any Convers+ IPC
i no nothin