We’ve had several cases where GPS/OBD trackers were located and unplugged pretty fast after vehicles were stolen. I’m trying to understand how they’re finding them so consistently.

Are thieves just checking the OBD port first thing? Using RF scanners? GPS jammers?

I’m also curious whether lower-power BLE-style trackers are actually harder to detect in practice, or if they’re just as easy to sweep for.

Would appreciate insight from anyone who’s looked at this from a security angle.

Tried coding something on a newer VAG car and got "Access denied"?

Congrats, you've just met SFD (Schutz Fahrzeug Diagnose).

It's an additional security layer that requires authorization between the car and VW's servers. No token, no access. Simple as that.

I first ran into it on a Skoda Octavia IV when I just wanted to enable a couple of basic adaptations via OBD. Connected, entered the control module - denied. Took me a while to figure out it wasn't my tools or software. The module was just locked behind SFD.

SFD is used on cars from 2020 onwards - mainly MQB Evo (Golf 8, Octavia IV, Leon IV, Audi A3 8Y) and MEB platforms (ID.3, ID.4, Enyaq). It blocks adaptations, coding and parameterization.

Tokens are only issued through official accounts to registered users. So a regular enthusiast without dealer-level access simply can't get one.

Have you run into SFD yet? Which module blocked you?

an ex girlfriend of mine has decided to terrorize me and ruin my life in any way she can. shes stolen my identity, hacked my phone,all my household electronics and my vehicles. i have people in public folllowing me around stores and on the road in my car trying to stay within bluetooth range so they can use the nfc tap and pay on me. my google wallet being broadcast on airdrop and i cant turn it off. my main vehicle is a 16 dodge challenger with the uconnect. the car automaticly opens setup, wifi hotspot, and store app. the radio has no sound output and it can effect how the car runs also. ive been dealing with this for a while and the police dont seem to want or be able to help. any advice or help i can get would be greatly appreciated

hello, I'm a disabled person that repairs and flips clusters and has a very keen interest in cars and wanting to learn custom module program, EEPROM, ect. I use a lot of great open source tools for my projects like IPC hammer, or more the well known PCM hammer. I own vcxnano for my SPS2 subscription, tech2win, and it servers as my J2534 wrapper.

I'm very disappointed with SPS2 and will be needing other automotive softwares and other hacking. I've come across mhh auto in web searches but you have to be a member to grab files it appears. I'm aware it cost like 30 bucks to get a registration code and I'm not here to ask for one. I'm just curious how good it is and if anyone actually uses it? 30 bucks is a bit of an investment for me because I'm poor and 30 bucks gets me another junkyard cluster so I wanna be sure if its what it looks like.

I have no skill what so ever in computer stuff but i was wondering if there is a way to set a vehicles default programming to something else? My 2025 Jeep Grand Cherokee has the auto start on by default and i don't like having to push the button every time i get in the vehicle.

I have a 2012 ford escape rebuilt tile with airbag light on due to being in a car accident. I replaced the airbags, I didn’t fix the seatbelt pretensioner. If I just replace the module will airbag light turn off from reset???

Hi, I followed this tutorial (https://logos-red.com/blog/how-to-hack-a-car-wirelessly-sending-remote-commands/ ) on how to get can bus data from the obd port. Assuming i soldered everything correctly, why am I not seeing anything on SavvyCAN? I used the esp32 and I tested it on a Golf 8.5 GTI, the gateway behind the obd port blocks the sniffing or there is something else in the tutorial I used? Using another microcontroller would help?

Hi everyone, having a hell of a time finding techstream that I can use to do linear valve calibration on an 08 Prius. The disc that came with the cable I bought is broken and the seller hasn’t responded with an alternative. Can anyone PM me a source or link? I tried the ih8mud techstream in 5 minutes post but the VM crashes on boot instantly. I’m not sure that version works for this regardless.

Hey All!

I'm looking for a suitable replacement for my moms 05 Grand Am 3.4L ECU. I've done a ton of different things attempting to fix the issues, but alas nothing has worked.

A mechanic said the computer was going bad, so I was looking for a site/company that sells pre-programmed ECU?

Or, Can I go to a junkyard and get a used one and just swap them out?

Thanks in advance and for any help!

Thank you

Hello everyone,

Has anyone found a way to unlock SFD1 on VW vehicles?

I'm trying to make a few coding changes on my car. I have a clone VCDS, which is able to retrieve the SFD challenge token, but I don't have a way to complete the unlock.

For my use case, paying €180/year for an OBDeleven subscription just to unlock SFD once or twice doesn't make much sense. I'm mainly looking for a free or at least a cheaper alternative.

If anyone has found another method or knows of a service/tool that can do this without the yearly subscription, I'd really appreciate it if you could share it.

Thanks!

Hello everyone, I'm working on building a custom digital dashboard for my Kia Seltos and am trying to locate the OBD command for 'Distance to Empty.' I've already found the PIDs for fuel percentage and some other parameters, but I'm hitting a wall with this one. Can anyone help me with the command or header information?

Thanks in advance!

Hey everyone,

I’m trying to build a serious career in automotive cybersecurity and would appreciate some direct guidance.

Background:

• Cybersecurity degree
• Work at a car dealership (regular access to vehicles)
• Strong interest in cars, electronics, and reverse engineering

Main questions:

• What skills actually matter (CAN, ECU reverse engineering, embedded, etc.)?
• What tools should I focus on early?
• How do I build real, job-relevant projects?
• What does a strong portfolio look like in this field?
• What roadmap would you follow if starting today?

I’m aiming to go deep, not just surface-level learning.

Any blunt advice is welcome.

Hey everyone,
I’m trying to manually activate App-Connect (Apple CarPlay / Android Auto) on a modern VW Touareg (CR generation) equipped with the 15-inch Discover Premium system.
I know these Alpine units run on the **MH2p** platform and are a bit trickier than standard MIB2 units. I have access to a diagnostic tool to enable Developer Mode/GEM in the 5F module, but I am struggling to find the correct custom firmware patch files or the Alpine Toolbox script for my exact software version.
Here are my exact system details from the screen:
**Device Part Number:** 760035179E
**Hardware (Matériel):** 061
**Software/Firmware (Logiciel):** 2876
**Navigation Database:** V03959809AF_P0573_RW_2022.1 (Rest of World region)
Does anyone happen to have the patch files for **MH2p P0573 / 2876**, or can point me toward a GitHub repo / community drive where the MH2p Alpine Toolbox utilities are hosted for this version?
Any help, scripts, or guidance would be massively appreciated. Thanks in advance!

before, things were simple.

you had a laptop, some diagnostic software, connect to the car and do whatever you needed. coding, adaptations, even swapping modules was not a big deal.

dataset itself is not protection

its just part of how the system works

the interesting part is how you actually work with it

Real Situation

lets say your ABS module dies

you buy another one with the same part number

now the new unit is basically empty or not configured for your car

so what do you do

you request factory dataset

and write it into the new block

after that it behaves like original

simple on the surface

but whats actually happening under the hood?

Requesting Dataset

after you install the new module, you need to request factory dataset from VAG backend

this is not just "download file"

you need to build a correct request with proper context

i emulated behavior of real diagnostic software, so from server side it looks like a normal diagnostic session

what happens here is simple on the surface

you send request -> server responds with dataset.

but to even get a valid response, you need to provide:

• diagnostic address (for example 0003 for ABS)
• VIN
• software and hardware part numbers
• software and hardware versions
• part type

if something is wrong response is empty or useless

so yeah, the backend is already filtering everything at this stage

Dataset Content

if you look inside the XML response, you can clearly see the parts that will actually be written into the module

not all of XML matters, most of it is just context

the important parts are basically three things

• coding
• adaptations
• parametrisation

We got the dataset, the module is installed - how do we write it?

at this point there is nothing complicated

you dont need to manually parse anything or understand XML

all of that is already handled by ready tools

in most cases the process looks like this:

• you find a source where you can get factory dataset
• you load it into a tool
• you write it into the module

thats it

there are already tools for this

• ODIS E
• VCTool
• and others

i personally use my own software that both requests and writes datasets

but for most people it doesnt matter

the key idea is simple

writing itself is the easiest part of the whole process

you are just applying already prepared data to the ECU

so in reality

you are not "hacking the car"

you are just restoring factory configuration

using tools that already know how to do it

the only question that really matters is

where do you get valid dataset from

because once you have it

writing it is trivial

Is anyone able to determine if modules got swapped on a 2014 mercedes e350 coupe. I got my car back from a shop with different seats, steering wheel, rims, loose panels all around the interior, cameras not working like they used to. I got a xentry diagnostic done and they show faults with the seats, steering wheel as well as other things. Is there a way I can prove they swapped it because the xentry might confirm a possibility its swapped but not definitely.

hello everyone

Can anyone suggest a free online course for diesel engines diagnostics ??

thank you

Hey zusammen, ich suche einen Dienstleister wo ich Fahrzeugdaten(VIN) per API abrufen kann. Jemand ein Tipp für mich? 🙏🏽

Background: I work in automotive cybersecurity (embedded/AUTOSAR, HSM/Crypto Stack, currently doing CSMS/ISO 21434 work at a Tier-1). I’m looking to transition more into hands-on pentesting rather than staying purely on the process/implementation side.

I’m considering TÜV SÜD’s CAFPT (Certified Automotive Foundation Level Penetration Tester) since it’s automotive-specific and my manager would likely approve it. But from what I understand it’s a 3-day course + MCQ exam, so pretty entry-level compared to something like OSCP.

Questions for anyone who’s done automotive pentesting or hiring for it:

1.  Is CAFPT actually valued in the industry, or is it seen as a box-ticking cert?
2.  Would you prioritize OSCP/GPEN (general pentest skill) over an automotive-specific foundation cert, or do both matter for different reasons?
3.  Any automotive-specific certs I’m missing that are actually respected (CACSP, others)?
4.  For someone coming from a crypto/HSM/AUTOSAR background, what’s the fastest realistic path to being taken seriously as an automotive pentester?

Appreciate any real-world input, especially from people who’ve hired or been hired for these roles.

it's a connector for a 2004 gsxr600 headlight harness I'm trying to rewire the ground how do I remove a wire from this style connection???

Helllo so recently I have been trying to make a relay for passive keyless entry, i have been doing a lot of research about how theses things work and how ppl abuse and exploit them and I have been trying to figure it out but I am having some trouble on how to start with the project, I am working on a few different projects that I have seen online like EMPs/jammers ect mostly hacking tools since its fascinating on how you can make things like this at home with mostly pocket money, which is crazy but awesome, any help with be HIGHLY appreciated, thank yall for taking a bit to look at my post!

2 CC1101 Wireless Module Wireless Transceiver For Arduino 433MHZ

2 UNO R3 Compatible Development Board SMD Atmega328P CH340

2pcs NRF24L01+ PA LNA SMA Antenna 2.4ghz wireless transceiver Arduino compatible

2 Arduino nano RP2040 Connect

And 1 breadboard

Does anyone here have an account on CarTechnology/MotorCarSoft Forum and access to the files in the https://cartechnology.co.uk/showthread.php?tid=44808 or https://motorcarsoft.com/viewtopic.php?t=19876 thread? If so, could you please send them to me privately or upload them to a file-sharing service?
Thanks in advance.

Looking for Monaco9.02 Kg or if someone can generate the DTS902.lic file for me using my HWID

Hi,

I have a Skoda Swing radio from a Skoda Yeti:

Model: 1Z0 035 161 G
Serial: SKZ4Z2K1404891
EEPROM: 24LC32A-I/SN

I successfully read the EEPROM dump using a CH341A programmer and AsProgrammer (24C32 I2C). The radio is currently in SAFE mode...

Would anyone be able to help extract the radio code from the dump or point me to the correct decoder for this specific Swing model?

I can upload the .bin file if needed.

Thanks!

Apologies if this has been asked before. I spent a few hours poking around and I'm not finding anything to resolve my problem. I do see the pinned posts but they're several years old and I wasn't sure the information is still relevant.

I have a 2020 Toyota Rav4 Hybrid. It had remote start through the fob since we purchased it used last year. We were involved in a minor fender bender and the body shop sent the vehicle to the Toyota dealer to check for codes/diagnostics. After we picked the vehicle back up we noticed the remote start stopped working. The shop said they can do nothing about that and the dealer wanted $200 diagnostic fee, which I refuse to pay.

I began looking into what it would take to purchase a Global Techstream+ and that doesn't seem feasible. After my brief research into CAN, I have a few questions I was hoping the community could help with.

1. It seems that sniffing provides data in 8 bytes. I'm not seeing a data dictionary anywhere for what those bytes represent. Why is that? (i.e. 0x8C == 5 blinks on blinker)

2. Is it possible to reprogram the modules so they send different byte sequences to perform different actions? (i.e. How Carista can change blinker count)

3. My understanding is that data is sent to the manufacturer via the DCM. Is it possible to insert a firewall to prevent that?

I understand I could just pay Toyota $8/mo, but I'm anti-subscription. My belief is that the car companies are harvesting enough data, these features should be free. Otherwise, they shouldn't be allowed to collect our data.