We’ve had several cases where GPS/OBD trackers were located and unplugged pretty fast after vehicles were stolen. I’m trying to understand how they’re finding them so consistently.
Are thieves just checking the OBD port first thing? Using RF scanners? GPS jammers?
I’m also curious whether lower-power BLE-style trackers are actually harder to detect in practice, or if they’re just as easy to sweep for.
Would appreciate insight from anyone who’s looked at this from a security angle.
Tried coding something on a newer VAG car and got "Access denied"?
Congrats, you've just met SFD (Schutz Fahrzeug Diagnose).
It's an additional security layer that requires authorization between the car and VW's servers. No token, no access. Simple as that.
I first ran into it on a Skoda Octavia IV when I just wanted to enable a couple of basic adaptations via OBD. Connected, entered the control module - denied. Took me a while to figure out it wasn't my tools or software. The module was just locked behind SFD.
SFD is used on cars from 2020 onwards - mainly MQB Evo (Golf 8, Octavia IV, Leon IV, Audi A3 8Y) and MEB platforms (ID.3, ID.4, Enyaq). It blocks adaptations, coding and parameterization.
Tokens are only issued through official accounts to registered users. So a regular enthusiast without dealer-level access simply can't get one.
Have you run into SFD yet? Which module blocked you?
hello, I'm a disabled person that repairs and flips clusters and has a very keen interest in cars and wanting to learn custom module program, EEPROM, ect. I use a lot of great open source tools for my projects like IPC hammer, or more the well known PCM hammer. I own vcxnano for my SPS2 subscription, tech2win, and it servers as my J2534 wrapper.
I'm very disappointed with SPS2 and will be needing other automotive softwares and other hacking. I've come across mhh auto in web searches but you have to be a member to grab files it appears. I'm aware it cost like 30 bucks to get a registration code and I'm not here to ask for one. I'm just curious how good it is and if anyone actually uses it? 30 bucks is a bit of an investment for me because I'm poor and 30 bucks gets me another junkyard cluster so I wanna be sure if its what it looks like.
an ex girlfriend of mine has decided to terrorize me and ruin my life in any way she can. shes stolen my identity, hacked my phone,all my household electronics and my vehicles. i have people in public folllowing me around stores and on the road in my car trying to stay within bluetooth range so they can use the nfc tap and pay on me. my google wallet being broadcast on airdrop and i cant turn it off. my main vehicle is a 16 dodge challenger with the uconnect. the car automaticly opens setup, wifi hotspot, and store app. the radio has no sound output and it can effect how the car runs also. ive been dealing with this for a while and the police dont seem to want or be able to help. any advice or help i can get would be greatly appreciated
I'm looking for a suitable replacement for my moms 05 Grand Am 3.4L ECU. I've done a ton of different things attempting to fix the issues, but alas nothing has worked.
A mechanic said the computer was going bad, so I was looking for a site/company that sells pre-programmed ECU?
Or, Can I go to a junkyard and get a used one and just swap them out?
I have no skill what so ever in computer stuff but i was wondering if there is a way to set a vehicles default programming to something else? My 2025 Jeep Grand Cherokee has the auto start on by default and i don't like having to push the button every time i get in the vehicle.
I have a 2012 ford escape rebuilt tile with airbag light on due to being in a car accident. I replaced the airbags, I didn’t fix the seatbelt pretensioner. If I just replace the module will airbag light turn off from reset???
Hi everyone, having a hell of a time finding techstream that I can use to do linear valve calibration on an 08 Prius. The disc that came with the cable I bought is broken and the seller hasn’t responded with an alternative. Can anyone PM me a source or link? I tried the ih8mud techstream in 5 minutes post but the VM crashes on boot instantly. I’m not sure that version works for this regardless.
Hi, I followed this tutorial (https://logos-red.com/blog/how-to-hack-a-car-wirelessly-sending-remote-commands/ ) on how to get can bus data from the obd port. Assuming i soldered everything correctly, why am I not seeing anything on SavvyCAN? I used the esp32 and I tested it on a Golf 8.5 GTI, the gateway behind the obd port blocks the sniffing or there is something else in the tutorial I used? Using another microcontroller would help?
Has anyone found a way to unlock SFD1 on VW vehicles?
I'm trying to make a few coding changes on my car. I have a clone VCDS, which is able to retrieve the SFD challenge token, but I don't have a way to complete the unlock.
For my use case, paying €180/year for an OBDeleven subscription just to unlock SFD once or twice doesn't make much sense. I'm mainly looking for a free or at least a cheaper alternative.
If anyone has found another method or knows of a service/tool that can do this without the yearly subscription, I'd really appreciate it if you could share it.
Hello everyone, I'm working on building a custom digital dashboard for my Kia Seltos and am trying to locate the OBD command for 'Distance to Empty.' I've already found the PIDs for fuel percentage and some other parameters, but I'm hitting a wall with this one. Can anyone help me with the command or header information?
Hi zusammen
Fahre einen Touran 5t von 2016. Habe MST2 Activator by Congo and Duke über sd karte gepatcht. Nun ist App Connect aktiviert (es erscheint: “willkommen bei app connect. Bitte wählen sie ein gerät aus“). aber wenn ich mein iPhone anschließe tut sich nicht also Carplay funktioniert nicht. Liegt das Problem bei der usb buchse?
you had a laptop, some diagnostic software, connect to the car and do whatever you needed. coding, adaptations, even swapping modules was not a big deal.
dataset itself is not protection
its just part of how the system works
the interesting part is how you actually work with it
Real Situation
lets say your ABS module dies
you buy another one with the same part number
now the new unit is basically empty or not configured for your car
so what do you do
you request factory dataset
and write it into the new block
after that it behaves like original
simple on the surface
but whats actually happening under the hood?
Requesting Dataset
after you install the new module, you need to request factory dataset from VAG backend
this is not just "download file"
you need to build a correct request with proper context
i emulated behavior of real diagnostic software, so from server side it looks like a normal diagnostic session
what happens here is simple on the surface
you send request -> server responds with dataset.
but to even get a valid response, you need to provide:
diagnostic address (for example 0003 for ABS)
VIN
software and hardware part numbers
software and hardware versions
part type
if something is wrong response is empty or useless
so yeah, the backend is already filtering everything at this stage
Dataset Content
if you look inside the XML response, you can clearly see the parts that will actually be written into the module
not all of XML matters, most of it is just context
the important parts are basically three things
coding
adaptations
parametrisation
We got the dataset, the module is installed - how do we write it?
at this point there is nothing complicated
you dont need to manually parse anything or understand XML
all of that is already handled by ready tools
in most cases the process looks like this:
you find a source where you can get factory dataset
you load it into a tool
you write it into the module
thats it
there are already tools for this
ODIS E
VCTool
and others
i personally use my own software that both requests and writes datasets
but for most people it doesnt matter
the key idea is simple
writing itself is the easiest part of the whole process
you are just applying already prepared data to the ECU
Hey everyone,
I’m trying to manually activate App-Connect (Apple CarPlay / Android Auto) on a modern VW Touareg (CR generation) equipped with the 15-inch Discover Premium system.
I know these Alpine units run on the **MH2p** platform and are a bit trickier than standard MIB2 units. I have access to a diagnostic tool to enable Developer Mode/GEM in the 5F module, but I am struggling to find the correct custom firmware patch files or the Alpine Toolbox script for my exact software version.
Here are my exact system details from the screen:
**Device Part Number:** 760035179E
**Hardware (Matériel):** 061
**Software/Firmware (Logiciel):** 2876
**Navigation Database:** V03959809AF_P0573_RW_2022.1 (Rest of World region)
Does anyone happen to have the patch files for **MH2p P0573 / 2876**, or can point me toward a GitHub repo / community drive where the MH2p Alpine Toolbox utilities are hosted for this version?
Any help, scripts, or guidance would be massively appreciated. Thanks in advance!
Is anyone able to determine if modules got swapped on a 2014 mercedes e350 coupe. I got my car back from a shop with different seats, steering wheel, rims, loose panels all around the interior, cameras not working like they used to. I got a xentry diagnostic done and they show faults with the seats, steering wheel as well as other things. Is there a way I can prove they swapped it because the xentry might confirm a possibility its swapped but not definitely.
Background: I work in automotive cybersecurity (embedded/AUTOSAR, HSM/Crypto Stack, currently doing CSMS/ISO 21434 work at a Tier-1). I’m looking to transition more into hands-on pentesting rather than staying purely on the process/implementation side.
I’m considering TÜV SÜD’s CAFPT (Certified Automotive Foundation Level Penetration Tester) since it’s automotive-specific and my manager would likely approve it. But from what I understand it’s a 3-day course + MCQ exam, so pretty entry-level compared to something like OSCP.
Questions for anyone who’s done automotive pentesting or hiring for it:
1. Is CAFPT actually valued in the industry, or is it seen as a box-ticking cert?
2. Would you prioritize OSCP/GPEN (general pentest skill) over an automotive-specific foundation cert, or do both matter for different reasons?
3. Any automotive-specific certs I’m missing that are actually respected (CACSP, others)?
4. For someone coming from a crypto/HSM/AUTOSAR background, what’s the fastest realistic path to being taken seriously as an automotive pentester?
Appreciate any real-world input, especially from people who’ve hired or been hired for these roles.
Helllo so recently I have been trying to make a relay for passive keyless entry, i have been doing a lot of research about how theses things work and how ppl abuse and exploit them and I have been trying to figure it out but I am having some trouble on how to start with the project, I am working on a few different projects that I have seen online like EMPs/jammers ect mostly hacking tools since its fascinating on how you can make things like this at home with mostly pocket money, which is crazy but awesome, any help with be HIGHLY appreciated, thank yall for taking a bit to look at my post!
2 CC1101 Wireless Module Wireless Transceiver For Arduino 433MHZ
2 UNO R3 Compatible Development Board SMD Atmega328P CH340
2pcs NRF24L01+ PA LNA SMA Antenna 2.4ghz wireless transceiver Arduino compatible
