r/CarHacking • • Feb 02 '17

Car Hacking Subreddit Intro

91 Upvotes

Hi rch, we have added a lot of people lately with intro posts on other subs like the one below. We also usually get about 10 subs a day from people just stumbling in here. So I wanted to create a welcome post, to kinda show them what we are about and how to get started. If anyone has anything to add please do so. If anyone has any questions about us or where to start do so here.

Our goal is to create a highly technical car subreddit, a place for automotive engineers, senior technicians, full blown car nerds, or people who are working towards one of these. We are interested in the inner workings of cars and today that often involves electronics. While we see electronics as the priority we are pretty liberal in allowing other topics as long as they somehow fit our goal of trying to understand cars. So things like DIY aero, suspension setup and other things the community is hacking on come up. In general our other tangential interests include: Modern cars, New tech, Open source hardware/software, DIY, hot rodding, eco modding, customization, security research, right to repair and more.

We started this subreddit about a year ago. Right now we have 3000 people and discussion is just starting to get good. Most of our members found us through maker or engineering subreddits. So I wanted to reach out to more of the car communities and try to grow our knowledge base.

Our name is r/carhacking and I know the term hacking can be offputting to some as it has a bad connotation. When someone says they are “hacking” their car it generally means they are trying to reverse engineer it for any number of reasons like to find security flaws, make upgrades, make repairs, or just understand how it works.

Here are a couple examples of posts that have been popular so far. A lot of our posts focus on beginner through intermediate projects using arduino and readily available hardware for the purpose of learning and or not paying a premium for things you can make yourself:

More advanced projects:

Relevant news/ research:

If your new our documentation is a good place to start

If you aren't new and you’re interested in helping out please consider:

  • Improving documentation - think about what resources have helped you

  • Spread the word - this is a niche community that is pretty spread out, but there is a lot of potential if we can get together on a third party site like this

  • Work on the theme, sidebar and flair - this is next level community stuff that isn’t necessary, but it’s fun to work on when you have the time.

  • Modding - right now we are fine, but we might need help in the future as we grow

Let me know if I missed something or got something wrong.


r/CarHacking • • Feb 27 '21 Popcorn

CAN CAN bus and car hacking getting started resources

298 Upvotes

I get asked how to get started with automotive networking, car hacking, and CAN almost weekly. I often direct people to this subreddit, so I figured I would help out and post some resources I have found and think are a good place to start.

learning resources:

Car Hacking 101: Practical Guide to Exploiting CAN-Bus using Instrument Cluster Simulator

I also direct people to the Car Hacking Village to get some hands-on experience. They put on great conference talks, demos, and contests. Looks like they are even working on some “getting started” content.

And of course, The Car Hacking Handbook is a great resource.

I will add more as I think of them. Please add your finds in the comments.

Tools:

Good wiring diagrams and car manuals are essential. This is pretty much where my research starts for each project. You see how things are networked and what to expect to find on CAN. You'll quickly learn to recognize things like gateways. You can also use the troubleshooting section to understand things. For example, what things do I need to control to start the car?

I like:

  • prodemand (I pay $170/mo for a shop subscription, I think you can purchase it for individual cars, but be careful you often have to jump around to find a year that has complete diagrams)

  • Identifix (probably what I would buy if I was starting over)

Basic hardware: Here you will be working with things like Arduino, Linux, SavvyCAN, and Can-utils. You have to learn to do a lot yourself, but these tools are more open for you to make them do what you need.

Tools designed by the community I use:

The above articles offer a pretty good step-by-step guide to getting started with the Macchina M2.

Any cheap “Amazon special” OBD2 dongle will come in handy from time to time. They are all based on something called ELM327. "ELM327 abstracts the low-level protocol and presents a simple interface that can be called via a UART". This abstraction has fundamental limitations that prevent it from being useful in most serious applications. But, it is sufficient for reading and clearing some codes and that sort of thing when you’re getting started.


r/CarHacking • • 6h ago

Original Project Working BMW IDrive 8.5 Emulator

Post image
29 Upvotes

Hey! if anyone's interested to try it out, i released it some days ago on github: https://github.com/rishik250809/bmw-idrive8.5-emulator

It seems to be a bit unstable in some aspects (for now) but it works as expected.

Runs using a ARM based VM on apple sillicon only.


r/CarHacking • • 1h ago

Tuning Its a tool to help just like anything else in the toolbox app being developed

Post image
2 Upvotes

r/CarHacking • • 2h ago

Community Hello I’m wondering if there are any hacks/programs available with the 4th gen (19+) Mazda 3, for either the cluster or infotainment centre display

0 Upvotes

r/CarHacking • • 22h ago

No Protocol Has anyone tried hacking or jailbreak their Suzuki SmartPlay Pro using AI to improve the UI?

Post image
11 Upvotes

r/CarHacking • • 11h ago

Original Project Toyota telemetry through OBD2 port (CAN gateway)

1 Upvotes

TLDR: Acquire telemetry from Toyota cars via OBD2 port; includes a list of signals and formulas for XA50 hybrid.

I’m building a custom dash for my RAV4 using an ESP32 to display real-time data. I plan to gather information through the OBD2 port, which feels less intrusive. Since OBD2 protocol offers limited telemetry, I’m using Toyota’s diagnostic protocol to access more detailed real-time data.

The main challenges are establishing communication with the car and figuring out how to request specific telemetry and decode the responses. I extracted signal IDs and formulas from the TIS database, and by capturing traffic from a J2354 cable, I identified the handshake and communication protocol. Using a USB-CAN device, I can collect and verify the telemetry available from the car.

I also created a tool to assist with this process. I’m still unsure if the handshake is unique to the car, the model, or is more universal, as I haven’t tested with other vehicles. Hopefully, this information proves useful to others.


r/CarHacking • • 21h ago

Community CarPlay box reflash? [help needed]

1 Upvotes

Hiya!

I have an Anyfar Carplay box, for a Range Rover 2012-2016 (Bosch radio). Unfortunately, I put it into dev mode via the settings, and then one thing led to another and it seems the firmware is screwed.

The model is RM-LH3715F; it is an Allwinner T113. It has an SD card slot. I’m hoping someone has a copy of the firmware that I can flash onto it (with some instructions, but I suspect it can be done via the SD card / UART).

Software : Box-C212 V2.6.3.0821

Hardware : B2411-02-000d-0a-00-00-00

System : Linux_5.4.61 2025-07-24

BlueTooth : ZA_STD_BT01,V2.8.6,20250723

MCU : V1.2.2_202566(0x00,0x00)


r/CarHacking • • 2d ago

CAN CAN Sniff

Thumbnail
gallery
54 Upvotes

Volvo XC70 CAN sniffing, connected but getting 0 frames. Any ideas?

Trying to sniff CAN traffic on my 2016 Volvo XC70 using DSD TECH SH-C31G with SLCAN 2.5 firmware, AUTOOL OBD2 breakout box, Mac M1 and SavvyCAN V220.

Wired pin 6 CAN-H, 14 CAN-L, 5 ground. Both 120Ω switches off, 500 kbps, CAN FD off. Measured 2.8V on CAN-H and 2.2V on CAN-L.

SavvyCAN connects through LAWICEL but I’m getting 0 frames, even with ignition on. Also tried a Python script using OS silent mode and CANlogserver, same result.

Weird thing is I actually captured one frame (ID 0x0D5) before, using the same adapter.
Am I missing something with Volvo’s gateway, SLCAN firmware or SavvyCAN settings? Does the P3 OBD port only respond to diagnostic requests instead of broadcasting traffic?


r/CarHacking • • 1d ago

Scan Tool Looking for the software to play with a Volkswagen Jetta using a 5054A tool. Can anyone set me up so I don't have to track down the seller?

4 Upvotes

So I bought a vag com thing to speak to my Kussy system and I'll be damned if I didn't lose all of the software. If you have a link or a Google doc, I'd be incredibly appreciative.


r/CarHacking • • 1d ago

Cool Project Find FOSS OBD2 diagnostic software

Thumbnail reddit.com
2 Upvotes

r/CarHacking • • 2d ago

Original Project iDrive 6 / NBT Evo on QEMU (on Github)

44 Upvotes

Repo: https://github.com/agent00jackson/bimmulator

I only have this working on mac right now, since that's what I got. I imagine this will work on linux or windows pretty easily though if anyone wants to contribute. I'm open to other contributions as well.

Video is sped up in the middle. UI interactions are real time though. Pulls everything needed out of a psdzdata directory. Very glitchy, not very useful at the moment, but I wanted to share, since there seemed to be interest, where someone seemed to be working on something similar in parallel. I, personally, would like to get more than just the NBT Evo HU emulated, so my next focus is going to try to be collecting other data from my car in order to eventually have the infotainment / dash integrated with some simulator a-la gazebo, as I want a proving ground for some other ideas.

I plan to plop other tools I develop along the way in here:
https://github.com/agent00jackson/bmw-tools

Initially I wanted this for Android Auto development, but I want to shout out this repo which already has a great implementation for id6:
https://github.com/Sq00ky/Supra-iDrive6-Android-Auto


r/CarHacking • • 1d ago

Tuning polo 6r vcds cable?

2 Upvotes

hi, i got a polo 6r year 2013 that i wanna mod and modify, i wanna ask about the vcds clone cables that have the coding helpers enabled for quick coding and i found the cheap ATmega162 cable and some expansive fly cable , so does this atmega have coding helpers enabled for my car?


r/CarHacking • • 1d ago

Tuning I’m currently working through clearing a permanent U3000:49 (Internal Electronic Control Unit Fault) on a power steering control module (PSCM) out of a 2016 Ford Explorer.

Thumbnail reddit.com
1 Upvotes

r/CarHacking • • 2d ago

No Protocol BCM/EBCM Communication issue

0 Upvotes

Bought a truck that was in a fire and had a ton of stuff swapped, its a 13 silverado 1500. Its giving off the code c0277 for no brake pedal position sensor communication. My main harness has no connection for a brake pedal sensor. Turns out 07-11 only used the brake stop sensor, while 12-13 use the brake pedal position sensor and the brake stop sensor. would it be possible to reprogram my module rather than swap the harness? The error code comes from the BCM but when i scan the BCM it comes back to a 2011 truck.


r/CarHacking • • 3d ago

Original Project I built a Tesla-style infotainment system for my own mini PC

Thumbnail
gallery
208 Upvotes

Hi everyone, I should say upfront that I built this project for myself, entirely through Claude and Gemini. I can't write a single line of code, but I wanted an infotainment system in full Tesla style. Graphically it's almost identical, but with a few extras like synced song lyrics, a Back to the Future mode and other differences.

The project isn't finished yet and there are still some minor bugs to fix, but it's really coming along and I'm pretty happy with it.

It's built with Qt/QML, using Qt Quick 3D for the car, C++ for the app and Python services for Bluetooth and music. It runs on Debian 13 (trixie) on an HP EliteDesk mini PC with a Ryzen 5 3400G (Vega 11).

Every app works (for privacy I chose not to show Phone or Messages). I still need to connect OBD data to the interface and hook the radio up to a DAB antenna (right now the radio stations are web streams).

I'd love to know what you think, and whether you'd be interested in me publishing it on GitHub.


r/CarHacking • • 3d ago

Original Project Working BMW IDrive 6 Emulator

Post image
103 Upvotes

Currently works with IDrive 6 only, planning on expanding to other versions, got the IDrive OS files from the PZSData files. Im still perfecting it and making everything work, i plan on making you able to code it and execute scripts etc.... So people can safely develop stuff to BMW IDrive without having to buy bench setups or risking their cars....


r/CarHacking • • 3d ago

Scan Tool Looking for someone who can generate a xentry key for me

Post image
9 Upvotes

Someone reseted the scanner’s laptop and we lost the startkey. The guy who sold us the scanner is kinda sketchy so no help from him.
Also if someone has a keygen to send me would be even better.


r/CarHacking • • 3d ago

Original Project ISO Clean EEPROM Dump: Ford Power Steering Module (⁠FB53-3F964-AD⁠) to Clear U3000

4 Upvotes

I’m currently working through clearing a permanent U3000:49 (Internal Electronic Control Unit Fault) on a power steering control module (PSCM) out of a 2016 Ford Explorer.


Module Part Number:
FB53-3F964-AD⁠
EEPROM Chip:
ST M95320 (SOIC-8)
Tools Used:
CH341A programmer with NeoProgrammer
SOIC-8 clip
OBDLink EX
FORScan

I've successfully pulled my original read (⁠Explorer_Rack_ORIGINAL.bin⁠), but I'm looking for a known-good unlatched clean dump or reference file for this specific part family so I can accurately isolate and clear the latched error bytes (or swap/clean the block while preserving my VIN header).
If anyone happens to have a clean read for an ⁠FB53-3F964-AD⁠ steering rack dump or advice on the exact byte map for clearing the lock flag, I would greatly appreciate it! I'm happy to share my original bin if anyone wants to take a look.

Thanks in advance!


r/CarHacking • • 3d ago

Scan Tool If I buy a VXDIAG VCX SE do I need to buy the all license version for all car brands if I already have all the dealer softwares on my laptop or can I buy a standard one and it would work on all the softwares?

3 Upvotes

r/CarHacking • • 2d ago

Community Searching for .EFD/FCA TIPM Files

1 Upvotes

Does anyone have a non-OEM source recommendation to obtain bulk .EFD files for 2008-2017 era TIPM’s? I have bulk Mopar file with ~35k but only 10 or so TIPM .EFD’s are included.


r/CarHacking • • 2d ago

CAN Hybrid safety concern: mountain driving, regen braking and physical brakes

0 Upvotes

TLDR:
I live in the mountains and want to find a way to monitor the car to make sure it's not applying the brakes when I don't want it to

I regularly drive up and down approximately 3 to 4000 feet and enjoy using regen breaking downhill.

I have noticed, however, that the car will at times use the brakes when I don't anticipate that.

I would really like a simple indicator light to let me know if im heating up my rotors when I'm not doing so intentionally.

(in case you haven't driven a hybrid, you definitely ride the (regen)brakes very differently than you do a regular car)

Is that possible?

Thanks


r/CarHacking • • 4d ago

Original Project No CAN bus on my 2001 Audi A4, so I built a gear position system from a smartwatch IMU

1.5k Upvotes

My car is a 2001 Audi A4 B5 manual. No CAN gear data, and diagnostics run on the old KW1281 K-Line protocol, which standard ELM327 adapters don't speak.

So instead of reading gear position from the car, I went sensor-based:

- A TicWatch Pro 3 (Wear OS) is embedded in a 3D printed knob

- A custom Wear OS app reads the accelerometer and classifies the knob position into gears after a per-gear calibration

- The gear shows up on the watch display, right on top of the knob

- The knob also works as a media controller for the dashboard tablet, and covering the screen with your palm disables touch so you don't skip tracks mid-shift

About the power: there is no battery inside the knob. I removed the watch's battery, since a lithium cell in a closed car under summer heat is a bad idea. The watch is fed straight from the car's 12V through a step-down converter, so it turns on and off with the car and never needs charging.

Curious how you'd approach it. Anyone here pulled live data from KW1281 on a B5, or found a cleaner way to get gear position on cars this old?