Something to look for when you debug the hw part of the cracker. At 500K baud the CAN tick happens every 2 us. Teensy running at 600 MHz is capable of detecting the signal level transition in about 100 ns (0.1 us). The clean signal spread over latency buckets looks like that: us: 83 84 85 86 87 88 8...

I have updated PINMagic to deal with the DiCE session log files, this should work for P3 now since DOIP is not an option with VIDA. If you have a VIDA log file with a CEM unlock in it, you can get your PIN in seconds. If anyone tries it out let me know if you have problems, I had an extremely limite...

Sorry was 50 downloads only, here are both again...

Also Windows 10 doesn't notice me about anything, maybe it is location based on 3 computers i get nothing. Maybe defender in US sees something problematic in this code...

Hi all, like I said previously, I share with you my work on SBL for P1. With this software running on raspberry Pi and a dual CAN board I was able to dump (EEPROM and Flash) the CEM on High Speed and Low Speed CAN bus line and also the DIM on both on bench and in car. I was able to flash eeprom and ...

Don't need a flipper, just use an SDR dongle and SDR#. record the audio from the frequency that matches the remote, open it in audacity, zoom all the way in, and decode your 1s and 0s manually. Thats how I broke direktstart FM remotes 15 years ago. Cheap pocket oscilloscope works on antenna just as...

Hello everyone, please test the program for reading and writing flash via BDM, configuration changes, writing and reading configuration via OBD (J2534), Volvo CEM blocks (S60, S80, V70, XC90) 2002 - 2004 based on CEMB MC68376 28F400. The BDM device is based on the Weact-STM32G431CBU6 mini core board...

I'll rewrite the script to find config block automatically, no matter of dump size and organization. Just give me some time , as spring has come and I do not spend much time on the computer

Searching for pin on P1 - 29 seconds...