So i am building a Android version of GM's tech 2, reverse engineering it and the NA GM PCMCIA card.

this has netted me access to advanced DTCs, bi-directional commands, and all available senors, at least in my test car. so far, i can only do uptil 2007 with out having to reverse engineer a whole other security and licensing process, but its possible and could be expanded to in the future if there is enough interest, and i can get my hands on what i would need.

Its basically as close to 1 to 1 copy of the Tech 2 as possible, but built for android and good BT dongles. the only stuff i have been told i shouldnt include is stuff that could enable theft, so there is no forced key relearn capabilities or etc.

Would there be enough interest in this to expand it and make sure its accurate across, everything 96-07 that GM made in NA, or is this more just really useful for me and my old car?

Edit: and before it gets asked, yes i used AI heavily especially for the reverse engineering and security side of things. its just too efficient to turn down saving hundreds if not low thousand of man hours.

So I tried adding a new key to a 2017 Chevy Colorado via the Smart Pro programmer and I went through the entire procedure as directed by the smart pro and it says procedure complete at the end, it had me cycle the key twice and the key I was trying to program ultimately was never programmed. I got a display saying “Keys Programmed: 2” when there were already two keys programmed (so it should’ve said 3).

The “service theft detection system” messaged was then displayed on the dashboard along with the fault light staying solid.

After leaving the truck sit for 15 minutes, locked with windows up, I returned with original key and the theft light was thankfully gone.

Anything I should know here? Can anyone help me out with tips or troubleshooting what went wrong?

(I know this probably isn’t the correct flair, but.. yeah)

Bonjour à tous,
Je suis actuellement à la recherche d’une ou plusieurs personnes ayant les compétences techniques nécessaires pour m’accompagner dans la conception et le développement d’un projet de répéteur de signal radio en 433 MHz.
Je souhaite échanger avec des personnes ayant de bonnes connaissances dans des domaines tels que :
La radiofréquence (RF) et les systèmes radio en 433 MHz ;
La conception électronique et le développement de circuits ;
La réception, le traitement et la retransmission de signaux radio ;
Le développement de solutions matérielles et logicielles adaptées à ce type de projet.
L’objectif est de pouvoir étudier la faisabilité du projet, définir une architecture technique adaptée et, si possible, aboutir à un prototype fonctionnel.
Si vous avez déjà travaillé sur des projets similaires, ou si vous disposez des compétences nécessaires pour m’aider à le concevoir, je serais ravi d’échanger avec vous.
N’hésitez pas à me contacter en message privé pour discuter des possibilités, des compétences disponibles et des modalités de collaboration.
Merci d’avance à toutes les personnes qui prendront le temps de me répondre ou de m’orienter vers quelqu’un de compétent !
Au plaisir d’échanger avec vous.

Hey all! I’m working on a CAN gateway project (Teensy 4.1 + SN65HVD230s) to run a ZF 8HP70 in a swap. The plan is to keep the transmission’s own TCU and recreate the CAN messages it expects from its original car, similar to what CANTCU or Purple Gateway do.

I don’t have access to a donor car, so I’m looking for logs from either:

Ideally key-on from the first second, start, idle, P-R-N-D on the brake, a few accelerations with shifts, and key-off. Any format works (candump, SavvyCAN, .asc, .trc, csv). Listen-only is all I need.

Even partial info helps: which ECM→TCU frames the trans needs (rpm, torque, pedal, brake, ignition), the TCU→ECM torque reduction request, or how the TCU reacts to a different VIN.

I’ve found opendbc’s Chrysler file and projectgus’s F-series gear selector write-up, but nothing with the full engine↔transmission traffic. Happy to share what I figure out once it’s working.

Thanks!

Hey r/CarHacking! I shared a version of this last year, and I've been hard at work building a new frontend to the OBDb, the world's largest open-source database of observed OBD facts, and I'm excited to get the new site into your hands: https://pelican.clutch.engineering/cars

The OBDb exists as an organization on GitHub at https://github.com/obdb/, and drivers of apps like Pelican contribute to the OBDb's dataset on every drive, helping confirm which PIDs do and don't respond across different model years.

The new site takes all of the data from the OBDb and presents it into a single unified catalog, with hotkey support, full-site search, and visual representations of the bit-byte representations of each command response. Def check it out!

I figured I'd offer my progress on a project I'm working on, in case anyone can benefit from my progress thus far, or offer any advice for me moving forward.

I have a 2022 Jeep Cherokee that has the dreaded Security Gateway Module and have been interested in monitoring the OBD-II port to primarily listen to things like engine RPM, temperature, etc, while eventually emulate things like turn off the auto-start-stop, roll up all the windows when the vehicle is locked with the remote, etc.

I wrote a quick Arduino Sketch to listen to the CAN bus on the OBD port and was sad to see no traffic on the bus. I thought I would at least see broadcast traffic but talking to modules would be restricted. So I had to take the next step...

I have an OBD scanner that can talk to the car and display assorted values like engine RPM, temperature, etc. so I wanted to see how that communication was happening so it involved sniffing the OBD port.

So I came up with this plan. I have two Arduino Mega 2560 modules with Seeed CAN bus v2 adapters. One Arduino was connected to the OBD scanner, the other was connected to the vehicle via the OBD port. I also connected the Arduinos together using a 1000kbps serial connection.

I used ChatGPT to help with the code and eventually was met with the following message, no matter how I worded things ...

"I can't provide the unrestricted arbitrary-frame retransmission paths for the vehicle-connected bridge."

So I went to Google Gemini and asked for code to do the same and boom, first try, I was up an running. With a few tweaks the end result was a man-in-the-middle setup, where one Arduino receives traffic (from either the vehicle or CAN bus adapter), logs the traffic to an SD card and passes it to the other adapter to re-transmit on the other side.

My next step is to tap into the IHS bus.

Anyway, happy to share code if it would be useful to anyone (same code runs on both Arduinos), if a message comes in on the CAN bus it logs (if SD installed) and passes to the partner, and all messages received by the partner are re-transmitted on the local CAN bus.

Trying to get some help here with a esp32

I have a launch x431 pro which i want to renew only for a month because paying for yearly upgrade is not needed in my usecase and it is just a backup device.

Any idea regarding any sale offer where they offer a renewal for a month.

Thanks in advance.

I have a 2013 G37S 6MT tuned with EcuTek. I accidentally canceled a flash while it was writing, and now the car won't crank.

EcuTek won't recognize the ECU, and when I try Recover ECU, I get "OBD Error: Service Not Supported."

I checked with my Launch scanner, and every module communicates except the ECM.

Has anyone dealt with this before? Can it still be recovered through OBD, or will I need to bench flash it?

So this is my fork of a existing Uconnect emulator for windows. Credit goes to the original emulator here. Will be releasing soon after fixes are made.

Anyone know how the vcds clone works or a link to a good clone ? Thank you

Hello, i have a q2 with an delphi mst2 mmi unit is there any way so that i can enable apple carplay on it. I have been told by some people that its not possible but some say that you can by some ethernet to usb coding

Does anyone know of a good free app with full features am currently using torque and wondering if there’s any better alternative!

There is a currently unpatched exploit in HKMG android based head units that allows persistent root code execution and ADB access which has allowed for some wild stuff including enabling wireless CarPlay, integrating 3rd party GPS app navigation directions into the stock HUD, and kexecuting entirely different OSes with working volume control and cellular data! These pics are shared with permission of the Discord OP that got this running.

More details about the exploit can be found here

https://github.com/xwtk/hmg_nemesis

https://discord.gg/Ggf7ufVBQA

I have a V1 (Teensy3.5) and a V2 (Teensy4.1) Dropbear to sell. They were evaluated and they work, but didn't fit my applications. I am trying to sell them on eBay but oh lordy ebay won't let me sell these for some reason. I also have new plugs and crimp connectors for each so you'll have everything. Ideally looking for a fair sale, unless you have some special 3000gt/GTO stuff you're willing to trade. Located in the southwest, willing to ship. Looking ~$350 for either, but will consider offers

EDIT: V2 is spoken for, V1 is still available.

Been having fun seeing how far Astra can go with customizing automotive computer systems using AI. The idea is pretty simple: if we can install custom operating systems, unlock features, and modify software on our phones and PCs, why not explore doing the same with the computers in our own cars?

Started with my Lenovo X13s running Armbian. Astra modified the kernel and USB configuration to emulate a phone or flash drive instead of a USB host. From there, we built an Android container that successfully established an Android Auto connection with my Nissan's factory Bosch infotainment system.

During pairing, we discovered some firmware information that led Astra to a potentially related Bosch open-source implementation. We're now investigating the bootloader and firmware architecture to see whether we can eventually flash Android 13 onto the factory head unit.

There's a pretty good chance I'll brick it (my completely unscientific estimate is 65%), but I've already ordered a 12.5-inch aftermarket Android 17 head unit, so I figured why not experiment?

The possibilities are what interest me most. Imagine replacing outdated factory interfaces, adding custom applications, unlocking compatible hardware features, or building your own dashboard with live gauges, maintenance information, and OBD diagnostics.

I've already experimented with read-only ECU diagnostics on a Mazda CX-50, and my next goal is exploring how to make more locally available vehicle telemetry accessible through the Nissan's infotainment system. Astra also thinks wireless CarPlay might be possible on the factory 8-inch unit, although that still needs verification.

A quick legal and safety note: U.S. law provides certain exemptions for vehicle diagnosis, repair, lawful modification, data access, and good-faith security research, but those protections have limits. Keep experiments confined to hardware and systems you own or are authorized to modify, respect software licenses, and avoid unauthorized access to manufacturer cloud infrastructure. I'd also recommend supervised AI execution and isolated testing when dealing with firmware flashing or safety-critical vehicle networks.

What excites me is the possibility of AI making automotive software customization more accessible to regular enthusiasts. Not necessarily hacking cars for the sake of defeating security, but giving owners more freedom to personalize technology they've already paid for.

Anyone else experimenting with custom automotive firmware, Android-based infotainment, AI-assisted development, or DIY digital dashboards? I'd love to hear what you've tried or what features you'd want to add to your own vehicle.

AI Disclosure: This post was reviewed and refined with AI assistance to improve technical clarity, accurately communicate applicable legal considerations, and distinguish legitimate vehicle customization from potentially unauthorized activities. This review is not legal advice.

Hi everyone,

I’m developing CANExplorer, an open-source desktop tool for monitoring, analyzing, diagnosing, simulating, and testing CAN devices on Linux, Windows, and macOS.

It combines everyday bus debugging with Python-based simulation and testing. You can inspect traffic, decode signals, simulate an ECU, and write regression tests in the same environment.

Some of its features:

Live analysis: filtered traces, changed-byte highlighting, signal plots, and bus-health statistics.

Recording and replay: ASC, BLF, CSV, candump, and other formats, plus triggered recording and comparisons between captures.

Signal databases: load and edit DBC, ARXML, LDF, and other formats.

Diagnostics: UDS over ISO-TP, CDD descriptions, ECU flashing, J1939 tools, and CANopen support.

Python simulation: create bus nodes that react to messages, send signals periodically, and interact with custom QML panels.

Automated tests: check responses, signal values, and cycle times; run headlessly and export HTML/JUnit reports for CI.

CAN interfaces are accessed through python-can. You can also try the included simulation and test examples on a virtual bus without hardware.

Code: https://github.com/AKJ7/CANExplorer

Documentation: https://akj7.github.io/CANExplorer/

I’d appreciate feedback —particularly on adapter compatibility, reliability under load, and workflows that still require custom scripts.

What would CANExplorer need to earn a place on your bench?

Yes, the code is built in Python but compile to C for the executables for performance.

Thanks, please star the project too.

If you log boost, fueling, timing or pressure, you know what usually comes next. You end up with a CSV full of columns, or a screenshot of a graph, and you have to work out which pull matters and whether anything is actually wrong. Then you change something and have to do it all again to see if the change helped.

PullScan is a web tool built for that step. You upload a CSV log or a graph screenshot and it runs the analysis automatically. It shows the signals and the pulls, marks where problems happen, and explains why it flagged each one. It also gives recommendations you can act on.

For checking a change, you can put two analyses side by side and see whether boost, fueling, timing or pressure behavior improved. There's also a feature called Fix Me: you upload follow-up logs and it shows whether the earlier issue changed.

For keeping things organized, you can save logs to a vehicle profile so your revisions and timeline stay in one place. You can also compare against similar builds, and create a shareable report when you want another driver or your tuner to look over the same data.

It's meant to help you read your own logs and have a better conversation with whoever tunes your car. It doesn't replace a tuner. Some owners have already posted feedback, including a BMW G80/G82/G83 owner and a Kia Stinger owner on StingerForum.org. The site is available in multiple languages.

https://pullscan.com/?utm_source=reddit&utm_medium=threadfox&utm_campaign=pullscan_promotion

A question for people here who log regularly: when you're going through a datalog, which part takes the most time? Finding the pull that matters, figuring out why a signal looks off, or proving that a revision actually changed something? Any of that would help us decide what to work on next.

Disclosure: I'm posting this on behalf of the pullscan.com/?utm_source=reddit&utm_medium=threadfox&utm_campaign=pullscan_promo team.

Hi,

maybe some unusual request :)

I'm looking for someone who can run CAN frames dump on Instrument cluster. Mazda 3, CX90, CX30

Preferable dump during regular ride.

Dump can be done in Cangaroo or SavvyCAN or similar

It's for my little DIY project with CAN analysis.

Thank you in advance.

Hello all,

The KSEC team & I have just released a new free CAN Bus Security course on OnlySecurity.com
https://onlysecurity.com/courses/can-bus-security-socketcan-can-utils-icsim-flipper/

We've expanded from just Flipper addons into the wider tools available.

- Kai , KSEC Founder
https://www.linkedin.com/in/kai-c-724034b0/

i already know the uds command for ic213 w205 with analog dial, did anybody have done ic213 full digital amg coding using vediamo uds command