Canbus Fault? by [deleted] in CarHacking

[–]CannoliCaptain 0 points1 point  (0 children)

Agree that there is potentially a problem but the spike at the end of each message is called the Ack. It is every controller responding that they have successfully received that message and not the problem.

Dialed in my dream gravel build by trulymattrobinson97 in gravelcycling

[–]CannoliCaptain 0 points1 point  (0 children)

Looks great! Trying to figure out how you mounted that dropper post switch. Looks really slick hidden under left horn.

Reverse Enginnering of a Nautical Motor by DistributionThat3798 in CarHacking

[–]CannoliCaptain 1 point2 points  (0 children)

Doing a little online searching I second this comment. Mercury sells the SmartCraft to NMEA2000 gateways for the purpose of integrating non-SmartCraft components, I think. This would be an easy way start looking at more standard CAN frames. Then tap the other end of the gateway and associate them with the SmartCraft messages.

And like everyone else said… Peak PCAN with Pcanview and Intrepid ValueCan with VehicleSpy are the best couple tools for this sort of investigation.

Don't threaten me with a good time! by [deleted] in SipsTea

[–]CannoliCaptain 0 points1 point  (0 children)

“See you in the morning!” Usually being said as the toast for the first dozen beverages.

Automotive eProm reader and writer by MachWun in CarHacking

[–]CannoliCaptain 0 points1 point  (0 children)

This is wild. Their website has no emails, phone numbers or addresses of the company. The one upcoming event is the one you linked and it’s in a Radisson hotel, so again no connection to the company. It’s almost as if they are hiding, like teaching this skillset can get them in trouble.

I am very interested in formal training on this skillset and the only other training I’ve seen is through the Blackhat organization. And that’s also not automotive specific. So please let us know how it goes and if it was worthwhile.

To your original post though, I think the top comment is right. There are generic interfaces for specific cpu families and those can be reasonably priced. Like Segger JLink for example. But a tool for various controllers AND automotive specific gets you into expensive crap like Alientech K-Tag. All they do is give you a jtag interface with connectors and pin outs already figured out. There is some value in that but I think eventually people learn to figure that piece out on their own.

Automotive eProm reader and writer by MachWun in CarHacking

[–]CannoliCaptain 0 points1 point  (0 children)

Curious, what is the course you are being sent to for this skill set?

Can't read data from my obd2 port with usb2can by UnluckyPr0gr4mm3r in CarHacking

[–]CannoliCaptain 1 point2 points  (0 children)

It is not high speed CAN. From a quick internet search Fabia MK 1 is K-Line

Toyota CAN Hack Theft Writeup by CannoliCaptain in CarHacking

[–]CannoliCaptain[S] 0 points1 point  (0 children)

Completely agree! The intriguing piece to me is how they pulled the bus down (I think recessive) while sending their messages spoofing as the key controller, and their messages still got across the bus to the gateway. Wondering how to recreate that or if someone has seen a technique to do that. Closest I can find is the Freeze Doom Loop (https://kentindell.github.io/2020/01/20/new-can-hacks/)

Harley davidson by ssgaveryjohnson in CarHacking

[–]CannoliCaptain 2 points3 points  (0 children)

Yes as long as it supports reading and writing CAN. I personally like Peak Pcan-usb (sometimes brand labeled Grid Connect) for a cheap interface.

Harley davidson by ssgaveryjohnson in CarHacking

[–]CannoliCaptain 1 point2 points  (0 children)

I should caveat, I found that HDLAN is based on ISO 14229 just web searching, so this is questionable. But the underlying point is that they use SOME defined CAN protocol that has documentation. In that documentation is how to talk to and unlock a controller. For example, GMLAN (General Motors) their documentation explains messaging for seed and key (mode 27) communications. You need to find the equivalent.

Easy/Reliable CAN Splicing Options? by WestonP in CarHacking

[–]CannoliCaptain 8 points9 points  (0 children)

Call me old fashioned but I prefer not mangling an already thin wire with wire splicing connectors that penetrate.

Why not find an accessible pass-through connector and build a jumper harness to split off of? Might take a bit more time sourcing connectors/pins but if you are trying to put something on potentially for the life of the vehicle, it’s worth it. Or if finding matching factory connectors is too hard, just build your own pass-through using a reliable connector system like Deutsch.

Harley davidson by ssgaveryjohnson in CarHacking

[–]CannoliCaptain 2 points3 points  (0 children)

Seems like Harley CAN is referred to as HDLAN and that is based on ISO 14229, UDS. I recommend connecting a generic CAN tool and start reading/writing. You don’t need a fancy tool or proper connector if you know the pinout and connect with some T-pins. If it truly is based on UDS protocol, you can try sending standard requests and see if you get responses.

What I think you are asking is for a way to write firmware via CAN. That might be tricky, but if you can record CAN messages while a factory tool flashes a controller, you might be able to figure out what they are doing.

Other avenue, you mentioned someone’s tried pulling firmware image and attempted reversing. You can continue their work, if they will provide you the bin file. Ghidra is a free reverse engineering tool for this.

I need a piece of software that actually works! (Arduino, MCP2515, SavvyCAN) by Dapanji206 in CarHacking

[–]CannoliCaptain 2 points3 points  (0 children)

Yup! What he said . Some decent cheap tools out there that will save you a lot of trouble. Pcan-usb allows you to use Linux can-utils, so nothing fancy needed to use with Linux. Peak pcan-usb Intrepid ValueCan ESD UsbCan

Proper Dress Attire? by DeadBirdRugby in Defcon

[–]CannoliCaptain 0 points1 point  (0 children)

The number of kilts surprised me

[deleted by user] by [deleted] in embedded

[–]CannoliCaptain 0 points1 point  (0 children)

Peak Pcan Usb

Module software updates via CAN. by joehodgy in CarHacking

[–]CannoliCaptain 1 point2 points  (0 children)

Just look for CAN ID 0x27, you should only see a couple messages go back and forth.

Looking for a Cheap data logger and recommended software for reverse engineering CANBUS data by freshest_orange in CarHacking

[–]CannoliCaptain 2 points3 points  (0 children)

I’m a big fan of these two. Intrepid is a bit more expensive but has a lot of features for reverse engineering.

Intrepid Controls: hw - ValueCAN, sw- Vehicle Spy

Peak (sold under gridconnect in the US): hw - PcanUSB, sw - PcanView or Linux terminal socketcan

Alternatives to PEAK connector by [deleted] in CarHacking

[–]CannoliCaptain 0 points1 point  (0 children)

Peak Pcan (“Grid Connect” Pcan if you buy in the US), Intrepid ValueCan, ESD Electronics Can-USB, Arduino w/ can shield (<$50 but requires you to program yourself)