#canhacking — Public Fediverse posts

So, I think I can now claim to have the most complete CAN protocol documentation for the Huawei R48xx power supply/charger (with the exception of Huawei themselves maybe).

For this, I've gathered/summarized information from various forum posts, several implementations, blog articles, messing around myself and probably-should-not-be-public documentation.

https://github.com/patagonaa/huawei-r48xx

#r4850g #r4850 #CANHacking #ReverseEngineering

So, I think I can now claim to have the most complete CAN protocol documentation for the Huawei R48xx power supply/charger (with the exception of Huawei themselves maybe).

For this, I've gathered/summarized information from various forum posts, several implementations, blog articles, messing around myself and probably-should-not-be-public documentation.

https://github.com/patagonaa/huawei-r48xx

#r4850g #r4850 #CANHacking #ReverseEngineering

So, I think I can now claim to have the most complete CAN protocol documentation for the Huawei R48xx power supply/charger (with the exception of Huawei themselves maybe).

For this, I've gathered/summarized information from various forum posts, several implementations, blog articles, messing around myself and probably-should-not-be-public documentation.

https://github.com/patagonaa/huawei-r48xx

#r4850g #r4850 #CANHacking #ReverseEngineering

So, I think I can now claim to have the most complete CAN protocol documentation for the Huawei R48xx power supply/charger (with the exception of Huawei themselves maybe).

For this, I've gathered/summarized information from various forum posts, several implementations, blog articles, messing around myself and probably-should-not-be-public documentation.

https://github.com/patagonaa/huawei-r48xx

#r4850g #r4850 #CANHacking #ReverseEngineering

So, I think I can now claim to have the most complete CAN protocol documentation for the Huawei R48xx power supply/charger (with the exception of Huawei themselves maybe).

For this, I've gathered/summarized information from various forum posts, several implementations, blog articles, messing around myself and probably-should-not-be-public documentation.

https://github.com/patagonaa/huawei-r48xx

#r4850g #r4850 #CANHacking #ReverseEngineering

Fuck yeah! Finally got _any_ #CAN output out of the #MHEV #BSG!

I'm glad it actually was something stupid ^^
I did test it with and without 48V connected in the past, but apparently I neglected to connect the two GNDs (power and signal GND) together.
I did now and the behaviour changed completely.
It now draws 250mA instead of 11, goes into sleep (0mA) after 5s of no CAN activity and most importantly, spews out a bunch of messages after detecting any CAN activity, wohoo \o/

#CANHacking

Fuck yeah! Finally got _any_ #CAN output out of the #MHEV #BSG!

I'm glad it actually was something stupid ^^
I did test it with and without 48V connected in the past, but apparently I neglected to connect the two GNDs (power and signal GND) together.
I did now and the behaviour changed completely.
It now draws 250mA instead of 11, goes into sleep (0mA) after 5s of no CAN activity and most importantly, spews out a bunch of messages after detecting any CAN activity, wohoo \o/

#CANHacking

Fuck yeah! Finally got _any_ #CAN output out of the #MHEV #BSG!

I'm glad it actually was something stupid ^^
I did test it with and without 48V connected in the past, but apparently I neglected to connect the two GNDs (power and signal GND) together.
I did now and the behaviour changed completely.
It now draws 250mA instead of 11, goes into sleep (0mA) after 5s of no CAN activity and most importantly, spews out a bunch of messages after detecting any CAN activity, wohoo \o/

#CANHacking

Fuck yeah! Finally got _any_ #CAN output out of the #MHEV #BSG!

I'm glad it actually was something stupid ^^
I did test it with and without 48V connected in the past, but apparently I neglected to connect the two GNDs (power and signal GND) together.
I did now and the behaviour changed completely.
It now draws 250mA instead of 11, goes into sleep (0mA) after 5s of no CAN activity and most importantly, spews out a bunch of messages after detecting any CAN activity, wohoo \o/

#CANHacking

Fuck yeah! Finally got _any_ #CAN output out of the #MHEV #BSG!

I'm glad it actually was something stupid ^^
I did test it with and without 48V connected in the past, but apparently I neglected to connect the two GNDs (power and signal GND) together.
I did now and the behaviour changed completely.
It now draws 250mA instead of 11, goes into sleep (0mA) after 5s of no CAN activity and most importantly, spews out a bunch of messages after detecting any CAN activity, wohoo \o/

#CANHacking

this damn CAN bus installed on my desk does not compute! I'm actually considering writing my own parser...

#LearningProcess #AutomotiveSecurity #canhacking #carhacking

Published make_cabana_route, a tool to import locally captured CAN logs into comma.ai's Cabana tool for analysis. https://github.com/projectgus/make_cabana_route/

Plus a blog post about the overall challenge of analyzing CAN logs from these Kona EVs:
https://www.projectgus.com//2023/10/kona-can-decoding/

#KonaHacking #reverseengineering #CANhacking

Published make_cabana_route, a tool to import locally captured CAN logs into comma.ai's Cabana tool for analysis. https://github.com/projectgus/make_cabana_route/

Plus a blog post about the overall challenge of analyzing CAN logs from these Kona EVs:
https://www.projectgus.com//2023/10/kona-can-decoding/

#KonaHacking #reverseengineering #CANhacking

Published make_cabana_route, a tool to import locally captured CAN logs into comma.ai's Cabana tool for analysis. https://github.com/projectgus/make_cabana_route/

Plus a blog post about the overall challenge of analyzing CAN logs from these Kona EVs:
https://www.projectgus.com//2023/10/kona-can-decoding/

#KonaHacking #reverseengineering #CANhacking

Published make_cabana_route, a tool to import locally captured CAN logs into comma.ai's Cabana tool for analysis. https://github.com/projectgus/make_cabana_route/

Plus a blog post about the overall challenge of analyzing CAN logs from these Kona EVs:
https://www.projectgus.com//2023/10/kona-can-decoding/

#KonaHacking #reverseengineering #CANhacking

Published make_cabana_route, a tool to import locally captured CAN logs into comma.ai's Cabana tool for analysis. https://github.com/projectgus/make_cabana_route/

Plus a blog post about the overall challenge of analyzing CAN logs from these Kona EVs:
https://www.projectgus.com//2023/10/kona-can-decoding/

#KonaHacking #reverseengineering #CANhacking

Trying to send some #CAN messages to the #startergenerator didn't prove successful either.
I'm not well versed in CAN, but the dongle just kept trying to send the single message on repeat.
So I guess it didn't receive a CAN ACK?
Afaik, all transceivers in a bus should ACK a frame, no matter if they're addressed or not.

Not sure why it didn't work. Maybe I was on the wrong baud rate or this device behaves weirdly and only sends ACKs after getting a magic message?

#CANhacking #carhacking

Trying to send some #CAN messages to the #startergenerator didn't prove successful either.
I'm not well versed in CAN, but the dongle just kept trying to send the single message on repeat.
So I guess it didn't receive a CAN ACK?
Afaik, all transceivers in a bus should ACK a frame, no matter if they're addressed or not.

Not sure why it didn't work. Maybe I was on the wrong baud rate or this device behaves weirdly and only sends ACKs after getting a magic message?

#CANhacking #carhacking

Trying to send some #CAN messages to the #startergenerator didn't prove successful either.
I'm not well versed in CAN, but the dongle just kept trying to send the single message on repeat.
So I guess it didn't receive a CAN ACK?
Afaik, all transceivers in a bus should ACK a frame, no matter if they're addressed or not.

Not sure why it didn't work. Maybe I was on the wrong baud rate or this device behaves weirdly and only sends ACKs after getting a magic message?

#CANhacking #carhacking

Trying to send some #CAN messages to the #startergenerator didn't prove successful either.
I'm not well versed in CAN, but the dongle just kept trying to send the single message on repeat.
So I guess it didn't receive a CAN ACK?
Afaik, all transceivers in a bus should ACK a frame, no matter if they're addressed or not.

Not sure why it didn't work. Maybe I was on the wrong baud rate or this device behaves weirdly and only sends ACKs after getting a magic message?

#CANhacking #carhacking

Trying to send some #CAN messages to the #startergenerator didn't prove successful either.
I'm not well versed in CAN, but the dongle just kept trying to send the single message on repeat.
So I guess it didn't receive a CAN ACK?
Afaik, all transceivers in a bus should ACK a frame, no matter if they're addressed or not.

Not sure why it didn't work. Maybe I was on the wrong baud rate or this device behaves weirdly and only sends ACKs after getting a magic message?

#CANhacking #carhacking

Bought a #Mercedes #48V #MHEV #startergenerator for #reverseengineering.
The specs are impressive, especially for the price point of a few hundred euros.

- 48V / ~200A
- 12.5 kW peak
- 165 Nm peak

The main difficulty lies in finding out the #CAN commands for initialization and control.

I don't have access to a Mercedes E200 EQ Boost (or similar), so "just sniffing" is out.
Maybe somebody could help me with that tho? ^^'

#CANhacking #carhacking #BSG

Bought a #Mercedes #48V #MHEV #startergenerator for #reverseengineering.
The specs are impressive, especially for the price point of a few hundred euros.

- 48V / ~200A
- 12.5 kW peak
- 165 Nm peak

The main difficulty lies in finding out the #CAN commands for initialization and control.

I don't have access to a Mercedes E200 EQ Boost (or similar), so "just sniffing" is out.
Maybe somebody could help me with that tho? ^^'

#CANhacking #carhacking #BSG

Bought a #Mercedes #48V #MHEV #startergenerator for #reverseengineering.
The specs are impressive, especially for the price point of a few hundred euros.

- 48V / ~200A
- 12.5 kW peak
- 165 Nm peak

The main difficulty lies in finding out the #CAN commands for initialization and control.

I don't have access to a Mercedes E200 EQ Boost (or similar), so "just sniffing" is out.
Maybe somebody could help me with that tho? ^^'

#CANhacking #carhacking #BSG

Bought a #Mercedes #48V #MHEV #startergenerator for #reverseengineering.
The specs are impressive, especially for the price point of a few hundred euros.

- 48V / ~200A
- 12.5 kW peak
- 165 Nm peak

The main difficulty lies in finding out the #CAN commands for initialization and control.

I don't have access to a Mercedes E200 EQ Boost (or similar), so "just sniffing" is out.
Maybe somebody could help me with that tho? ^^'

#CANhacking #carhacking #BSG

Bought a #Mercedes #48V #MHEV #startergenerator for #reverseengineering.
The specs are impressive, especially for the price point of a few hundred euros.

- 48V / ~200A
- 12.5 kW peak
- 165 Nm peak

The main difficulty lies in finding out the #CAN commands for initialization and control.

I don't have access to a Mercedes E200 EQ Boost (or similar), so "just sniffing" is out.
Maybe somebody could help me with that tho? ^^'

#CANhacking #carhacking #BSG