Just left a comment under one of modunlock's youtube video, pointing to that discussion, and guess what? It got removed promptly ;) His website also does not refer to our project anymore, like it used to. I know the modunlock's owner reads this. Honor our hard work, respect the GPLv3 license, abide ...

I thought that seemed Formilar , that company claimes it can do the p3 cem , I thought that was pulled from the cem cracker? Well, that was sort of a common knowledge, as well as MY06+ P2 can be cracked with UDS/P3 proto. The algo was floating around the internet. MY05 P2 is 100% timing attack. Als...

180-190 pounds is fine

oscilloscope wrote: ↑12 Jul 2023, 09:17 I'm not sure which usbjtag you're looking at but I just checked on there site and it's $65

$65 is a lot of beer! Arduino is like $5, and it's a great chance you have one laying around.

Look at 0x4000 or 0x6000.
There should be 6 bytes pretty visible.

ChatGPT spam detected.

AA 00 - Clear the list of all identifiers Add an entry to the list by address or identifier. AA 50 00 EE 10 16 - Append Record Address with length byte. (Address 00EE10, 16 bytes) or AA 20 11 22 - Append Record Identifier (Identifier 1122) A6 F0 00 01 - Read first record 1 time. Result 16 bytes from...

Another example.

Hey y'all, so I just read the flash off of my spare cem IMG_6140.jpg I got data off of the flash memory in hexadecimal, now I don't really know where to go from here. Do I need the entirety of the bin in order to crack the pin, or do I just need the security block, which in Luke's code as "rea...

@jeffbolem You can read the type of CEM with 40 B9 F0 This is needed to find the correct meaning of the different configuration bytes. 40 B9 FB Vehicle information 40 B9 FC Vehicle type (configuration) cembrick.csv Second byte in response is possibly length + 16*high byte of checksum. Not tested or ...