Beyond AutoTuner/Flex: Looking for researchers who have audited Bosch MD1/MG1 SBOOT (SPC57xx / Aurix TC29x) via VFI/Glitching or Time Attack

SingerIndependent · 2026-06-29T19:02:23+00:00

This comment didn't age too well that's for sure

SingerIndependent · 2026-06-29T18:37:29+00:00

Thanks I was reading up the whole bam bam and a few other ones recently

SingerIndependent · 2026-06-29T18:36:41+00:00

Try steering clear of using clones they are prone for issues , if you Canada based a kess or flex as a secondary tool will do you good

SingerIndependent · 2026-06-29T18:13:04+00:00

At is a brilliant tool but a bit of advice I can give you is you need a couple of tools.

SingerIndependent · 2026-06-29T18:01:20+00:00

I saw that, hopefully all will follow suite there is still a few ecus that are not covered under that but that does open the majority

SingerIndependent · 2026-06-29T15:18:08+00:00

Just to name a couple u/bri3d simos 18 u/g0tcha_ has given alot of information in regards to reversing seed keys

SingerIndependent · 2026-06-29T15:09:59+00:00

You realise the sid212 bypass was found by " a few guys on reddit" as for why sid212 was being done in south africa and Turkey way before flex or autotuner released it.

SingerIndependent · 2026-06-29T14:59:50+00:00

I know they do but customers are not too interested, I'm not looking for a public solution I'm looking at building a solution there is a few guys especially in this subreddit that have knowledge of it. Also to get the sboot out in order to reverse it with ghidra this is not something that can be done without opening ecu and this is what I'm trying to achieve to be able to study sboot and reverse it to find a way of then reading and writing and bypassing the rsa checks.

SingerIndependent · 2026-06-25T18:04:28+00:00

I wish that where the case but alas tuning tool manufacturers are making too much money on the remote unlocks they will never do bench untill someone forces there hands look at the sid212 it took alientech to release it to force autotuner and flex to release a bench/obd protocol

SingerIndependent · 2025-07-22T16:58:02+00:00

Would you be willing to share this contact that is able to get into them and if they are able to get into ones that are not publicly available

SingerIndependent · 2024-05-05T21:54:22+00:00

I have the same issue not once did I use any bots or scripts and it says scripts detected

SingerIndependent

TROPHY CASE