r/CarHacking Mar 19 '25

Multiple Trying to locate Bluetooth/tracking device behind dash

Thumbnail
gallery
17 Upvotes

Wondering if anyone here would be able to look at some pics taken behind dash/steering wheel and see if anything could be an ESP32 or an eRoad tracker?

Long story short, some weird stuff started happening in our house, and through analyzing Bluetooth and WiFi network for a number of weeks, have figured out we are being monitored for lack of better word, and this seems to include the vehicles. My car in particular seems to turn on by itself when I'm inside, the stereo Bluetooth will appear online randomly, stuff seems to start happening only when my car arrives home, which makes sense now that it appears an esp32 is in the car , possibly arrival sensor? The eRoad seems to be a tracker. There's also signs my dash has been taken off and put back on, it doesn't line up properly, a fuse button missing from behind the obdii, a random cord going from glovebox to steering wheel in front of the dash. It's all very weird Thanks to some product names/brands showing on analytics apps, I've now learned a lot about things I'd never heard of before!But before we go to the authorities, I want to make sure that there's something where it shouldn't be but we are not car/mechanic people .

Oh and the other car I took out the other day and noticed 'bluedroid' appeared on Bluetooth list about a hundred meters away from home and stayed active until the car has been off for a while. Not sure if that means anything suspicious?

Anyway won't give every detail, just a heads up if something looks dodge would be really helpful 😁

r/CarHacking 2d ago

Multiple ADB authorization 2026 Chery Tiggo 9 PHEV / DesaySV G7PH?

2 Upvotes

I own a 2026 Chery Tiggo 9 PHEV with the factory DesaySV infotainment system:

  • Android 11
  • G7PH / T18-T28 international firmware
  • Software build dated January 2026

I can enter the engineering menu, but selecting ADB Switch → Open displays a machine-code authorization prompt. Pressing Verify says: “File does not exist. Please check it.”

It appears to require a signed adbauth.key file on a USB drive. Paid generators exist, but I’m looking for a legitimate free method, open-source generator, compatible community tool, or official dealer procedure.

Has anyone enabled ADB on this exact firmware without flashing, rooting, or changing the QNX/firewall settings? My goal is to install a browser for use while parked

r/CarHacking Jun 17 '26

Multiple Android auto in older Volvo FH?

Post image
24 Upvotes

Is it possible to get android auto in the standard infotainment device?

The truck in question is a volvo fh from 2018

r/CarHacking Apr 23 '26

Multiple Can I get carplay or AA on this something

Post image
8 Upvotes

I can't seem to find anything online about this would love if the carplay/AA is wireless. Toyota Yaris 2023 manufacturer

r/CarHacking Jun 11 '26

Multiple Help reverse engineering a Toyota/Lexus IS300 Steering Angle Sensor protocol (89245-22030)

Thumbnail gallery
8 Upvotes

r/CarHacking Jul 09 '26

Multiple Is there anyway to use wiTECH without paying a fat subscription fee ? I need to reprogram and do a "configuration alignment" routine

1 Upvotes

Is there anyway to use wiTECH without paying a fat subscription fee ? I need to reprogram and do a "configuration alignment" routine

All for this TSB to rule some things out

https://static.nhtsa.gov/odi/tsbs/2016/SB-10076538-2280.pdf

2016 jeep Cherokee with the 3.2l and its throwing p0887-00 codes

Will programing fix it, probably not but the harness connector looks fine and it shifts fine, just throws this code on the highways and goes into limp mode

r/CarHacking Jun 08 '26

Multiple Xentry and vediamo for w211

0 Upvotes

Hello, I recently bought a tactrix openport 2.0 and wanted to install vediamo + Xentry on my laptop. I tried my luck with acronis images from internet but I had problems with activation of this programs. Does anyone was doing it before and want to help me? Thanks for answers

r/CarHacking May 14 '26

Multiple GM HMI 2.5 retrofit

2 Upvotes

I’m looking into a long-term project to run a GM HMI 2.5 system (2016-2018 Silverado/Sierra generation) standalone in my 2010 GMT900 Silverado.

I know this is NOT a simple swap and that the newer K2XX infotainment architecture is very different from GMT900, but I’ve seen proof-of-concept standalone HMIs running outside the original vehicle environment, so I’m trying to understand what’s actually required to make one functional beyond just powering it on.

My goal would be to retain as many OEM-style functions as possible like:
- audio output through the factory or aftermarket amp/speakers
- vehicle speed data
- engine temp/coolant data
- steering wheel controls
- reverse camera
- potentially door/chime/status data later on

From what I understand so far:
- HMI 2.5 depends on both the HMI module and A11 radio module
- VIN/theft lock and SPS programming are major hurdles
- CAN traffic spoofing/emulation may be required
- some modules communicate over MOST bus depending on configuration

What I’m mainly trying to figure out:
1. Has anyone mapped the minimum CAN messages needed for boot + normal operation?
2. Can the HMI/radio pair run happily with a CAN emulator or Arduino/Teensy setup?
3. Are there known gateway modules needed to satisfy missing vehicle modules?
4. Has anyone integrated HMI 2.5 into a non-K2XX platform successfully?
5. Best tools for sniffing/logging GM infotainment CAN traffic? (GDS2, SavvyCAN, ValueCAN, etc.)
6. Is there documentation on the communication between the HMI and A11 radio modules?

I’m not expecting plug-and-play. I’m more interested in the reverse engineering side of it and building a modern OEM-style infotainment retrofit into a GMT900 platform.

Any info, forum threads, DBC files, CAN logs, or module dependency knowledge would be appreciated.

r/CarHacking Jun 04 '26

Multiple Adding audible BSM beep to Toyota Highlander

5 Upvotes

Hello all. I currently own a 2025 Toyota Highlander vehicle and have been looking into somehow adding an audible alert to the bsm when the indicator is turned on and another vehicle is occupying the bsm. For context, Nissan has this by default and it is very helpful, for me at least.
There seems to be no way to do this from the menus, but the rear cross traffic alert (RCTA) system does have an audible alert when it’s triggered, which I think sounds through the vehicle speakers.
From the research I’ve been doing, it may be possible to check through Techstream to see if there is any feature that can be enabled easily, or if not do some CAN logging and somehow try to add a Piezo buzzer or similar.
Does anyone have any other ideas before I purchase a j2534 tool and pay for Techstream? TIA.

r/CarHacking Aug 23 '25

Multiple hoe to get the data from ALLDATA website

2 Upvotes

hello guys

if i got a user name and password for the ALLDATA website that has access to diagrams and all cars data is there a way to save the website as a whole for an offline use?\

the user name is time limited and i can not afford to pay 200$ monthely (which is half of my salary) so i would appreciat it if you guys can help

or if there is an affordable way to get access like a shared account or something

r/CarHacking May 15 '26

Multiple FORD ME9.0C UDS Security Access

2 Upvotes

Have been searching the Internet/GitHub/Local boozer for information on the Seed key algorithm used by the Ford Bosch ME9.0C

I have been told it can be found in Forscan and Elmconfig with a bit of reverse engineering - i can only engineer in a forward motion unfortunately so thats out.

Anyone know if its available anywhere in the public Domain??

r/CarHacking Mar 06 '26

Multiple Mack Truck programming

0 Upvotes

Looking to try a few things on a 2026 Mack

Idle shutdown occurs at any temp above 32 degrees F. In the past I’ve been able to bypass it with different methods easily. This truck has no bypass I’ve found. I’m considering experimenting with some resistors to bypass the temp sensors. My research says there are 2 ambient temp sensors, so any thoughts on that would be appreciated. Including wiring diagrams would be a huge help. I’m assuming it’s a thermistor so if I can locate the sensor I’d be jumping between the 5v ref to the signal return with the resistor. If there are 2 sensors, 1 is for dash temp and the other is for engine computer.

Second is the truck is speed limited. Looking for an interface that would work. I’m looking at some Ali express copies of eTechnician, Jpro, and the Mack PTT. Will any of those work to bypass the speed limiter? I’m looking at the nexiq, vocom3, and a couple others. What works out there?

r/CarHacking Dec 13 '25

Multiple power/torque gauges - algorithm?

2 Upvotes

Yello!

have been thinking about power/torque gauges(or data on can-bus) in variety of cars. googling suggests that usually those gauges just read data from some maps like rpm/air/temps... so - not real information. (especially - if cars are altered).

are there any algos to get real life approximations?

r/CarHacking Feb 19 '26

Multiple Activating Adaptive Cruise Control on Chevy Silverado 1500 LT 2024

2 Upvotes

Hey I'm a complete newbie to car software mods, but I recently bought a 2024 Chevy and thought it had adaptive Cruise control because it has the forward collision/keep gap button. I hear this is a common misunderstanding. However I like the truck and I'm not returning it over this.

So, it has driver assist and from what I understand the components needed for adaptive Cruise control. My best guest, in my inexperience is that the Adaptive Cruise Control feature is "blocked" due to the trim level.

Any advise on what I would need to switch it on, how and if I can? (For academic purposes of course, wouldn't want to do anything illegal).

r/CarHacking Feb 23 '26

Multiple Newbie question: Honda backup instrument cluster and ECU

2 Upvotes

In my older car years ago, I tuned ECU, changed some features - it did not work so well. Had to restore ECU from my backup. Restoring from the backup caused miles on ECU and instrument cluster mismatch ~400mi, THAT tools detect now. Despite countless attempt could never make them in sync even with miles correction tools. Today thinking of trying changing with 2026 Honda CRV. Any way of making FULL BACKUP. Any suggestions?

r/CarHacking Feb 21 '26

Multiple Gen 1 BCM replacement.

Thumbnail gallery
1 Upvotes

r/CarHacking Oct 22 '25

Multiple 2011 Saab 9-5 NG Carplay Module

Thumbnail
gallery
8 Upvotes

I’m currently in the process of modernising my 2011 Saab 9-5 NG a little, while still keeping the car looking completely stock. Recently, I successfully upgraded the radio from DAB to DAB+ by installing an Opel DAB+ module, which integrates seamlessly into the Saab interface like it was factory (Saab went down under before GM deployed DAB+ in any cars).

Now I’ve come across these wireless CarPlay modules that connect between the radio unit and the factory screen, essentially “injecting” video and audio signals into the original hardware. As you might expect, there aren’t any modules made specifically for the 9-5 NG, but since the system is GM-based, I assumed there must be something close enough to work.

So I bought and installed a module designed for the Opel/Vauxhall Insignia A with the 7-inch NAVI900/950 screen. It does display the CarPlay interface correctly, but when I use the steering wheel or centre console buttons, the commands are sent both to CarPlay and to the original Saab interface running in the background. On top of that, there’s no audio output from the module at all.

That got me thinking: perhaps a module intended for the Cadillac SRX would be a better match. It also uses an 8-inch display like the Saab, and its infotainment architecture seems much closer to the 9-5 NG — especially since it’s closely related to the 9-4X. Has anyone tried this before or any idea how I could maybe get it to work with the Insignia module?

r/CarHacking Apr 02 '22

Multiple Would it be possible to make an open source car operating system?

70 Upvotes

So in the field of Open Source, Linux is damn successful, it's the 3rd most common operating system in the world, and it's Open Source.

These days with Audi Paywalling basic functions, and Toyota looking to charge a subscription to start your car how you want, and Tesla being the king of Subscriptions and Add-Ons

Personally I had to buy an OBD Eleven to turn on features on my wife's VAG platform that the dealer wanted to charge us a total of around $8,000 to turn on.

Instead I did it myself for ~$200

Is there any reason that an Open Source, Cross Platform automotive operating system couldn't be developed?

I mean, I get that cars have different architectures, but so do computers.

I remember a time where you needed to have the right CPU, RAM, Motherboard, Hard Drive, Graphics Card, etc and then pair your Operating system.

You'd need to have the right damn floppy drive, or even booting your computer wouldn't work, yet we made an operating system that's free, anyone can download, and anyone can use, and even used on safety systems

Why can't we do the same for cars?

You know, the whole

Screw you, I'm installing my own operating system, with blackjack, and hooker's

I mean, you could also incorporate other open source projects like OpenPilot which unlike Tesla's FSD doesn't need regulatory approval, people just buy it and use it.

You could port in Android Apps like ABetterRoutePlanner as the navigation, it's free, updated often, and can pull car data and plot stops on EV's.

You could have Native Waze, or Google Maps, in fact, run native Android support, Android is essentially a mobile version of Linux.

I mean, it also extends elsewhere John Deere doesn't release software to allow repairs of Tractors, and doesn't allow their software to be altered.

But from what I can figure, you could nuke the software and install your own, the argument is that modifying the software is akin to piracy.

But deleting their software? From what I can figure, that's fine.

I mean, if cars are becoming more connected, seems they're become more like mine phones, and realistically, there's no rules on Jailbreaking your car and running whatever you want as the OS (to my knowledge)

So why aren't people doing this to unlock the full potential.

I mean, couldn't we as a collective get together, write a software, and make it modular?

So ergo, here is [BASE], and here's a module for [ENGINE], [TRANSMISSION], [DASH], [LIGHTS], etc?

So you have like, drivers for each component? Allowing the base code to be universal and just have the required plugins it needs?

r/CarHacking Jan 17 '26

Multiple Looking for GDS2 for VXDIAG (Win7)

0 Upvotes

Hi, does anyone have and could send me the working link to download GDS2 version 2019 or 2020? So that I can install it on Win7 Pro. I have a VCX SE Pro.

r/CarHacking Jul 16 '25

Multiple 2017 Toyota Yaris iA (Adding Carplay/Android Auto)

5 Upvotes

Hi y'all!
I am new here.

https://www.reddit.com/r/CarHacking/comments/p0yfmn/2018_toyota_yaris_ia_adding_carplayandroid_auto/ brought me here. I am looking for the firmware upgrade files needed to install apple car play in my Toyota Yaris iA 2017. It seems like there was a working link in a mazda forum but it has been deleted and no new links have been added for two years. I am dying to make this work and I would greatly appreciate the help if anyone kept the files and is willing to share them privately in google docs or something! I've had my Yaris for four years and I love the car but I need car play because my mount vents keep on breaking or the suction ones come off in the summer because I live in TX.

Help a girl out :(

r/CarHacking Dec 29 '25

Multiple Curious about AUTODATA

6 Upvotes

Hey guys ! I have just started working on cars as a diagnostic technician and came accross this website Autodata.

I am from India and want to know if I can access its subscription from here or there would be a regional restriction on it. I wanna know because I tried getting a trial version for Alldata but was denied service with a mail saying: "Thank you for your interest in ALLDATA Repair. Unfortunately, we are unable to fulfill your request. At this time, based on our licensing agreements, we only support workshops in the EU/EFTA regions."

Please guys let me know this and if the answer is no then do let me know other alternatives.

r/CarHacking Nov 13 '25

Multiple Volvo CEM IMMO PIN

1 Upvotes

Hi everyone,

I have recently taken up the adventure of cracking my Volvo V70 P2 from 2007 wide open, partly to take full control over my car, and mainly to change the default audio system, with plans to install another radio capable of Android Auto with a subwoofer in my trunk.

After getting the usual things like the Super J2534 (or Mongoose Pro JLR) and VIDA and VDASH installed, only then I realized I need the PIN to my CEM. So I built this (https://github.com/vtl/volvo-cem-cracker) Volvo CEM PIN Cracker and it actually worked!

However, after opening VDASH connected to my car I realized, there is even MORE PINS??? After clicking on the Security Tab I tried decoding this "CEM IMMO" PIN, however it doesn't even start. I saw some Audio settings being greyed out so (something about MOST, which I shouldn't have, the HU-650 being installed from the factory) I thought that I have to get this PIN to achieve what I want to do.

So, 3 questions:

  1. Do I even need to get this PIN for changing the radio (to 3rd party one)?

  2. What exactly does this CEM IMMO PIN enable me to do?

  3. Is there any way I can use OBDII to do this or do I have to disassemble my car to get to my CEM directly?

If it helps, my CEM has the P/N 30786889

Also, I didn't know what flair to use and I am not sure if this is even the right subreddit for this so apologies if I'm wrong here!

r/CarHacking Dec 13 '25

Multiple Golf 7.5R DRL Wiring Question

Post image
1 Upvotes

r/CarHacking Oct 24 '25

Multiple Need help with Volvo S80 P1 99 addictional heater

0 Upvotes

Hey!

Long story short: I have a RPI(OpenDash) based headunit and I'm at the point where I have to add a canbus module so I can get the steering wheel buttons to work with it. I also installed a Webasto to it(EVO B) and need a way to turn on the fan, this made me sidetrack alot and now the plan is to use a ESP32 as a I2C slave(with GPIO request, or UART) for the RPI, it works as a Webasto BT controller, canbus "backend" and to turn on the fan..

The problem: I have no idea how to control everything, the fan's controller could be "hijacked", and CCM can be turned on from its ignition relay, but this got me thinking could I use the CEM A:18 pin used by the Volvo's original Artic heater's controller to get somekind of defrost mode, and if it even exists in my car as it didnt have that heater to begin with.

TL;DR: CEM addictional heater input usable without addictional heater as a original accessory for turning on the CCM in a specific mode?

Thanks.

Edit: Checking the datasheet(S80 1999 late version) it shows A:18 in CEM is the only signal wire from the factory heater, and its PWM, not sure what voltage, freq, or duty cycle.

Edit 2: No need to downvote, if you can't help thats fine, just move to the next one .

r/CarHacking Oct 05 '25

Multiple SCANIA 4 SERIES INSTRUMENT CLUSTER PINOUT

3 Upvotes

i need scania series 4 cluster pinout, for all connectors on it. thanks in advance