CAN-BUS sniffing: Difference between revisions
Jump to navigation
Jump to search
No edit summary |
|||
| (8 intermediate revisions by the same user not shown) | |||
| Line 2: | Line 2: | ||
== Hardware == | == Hardware == | ||
* USB to CAN Adapter https://s.click.aliexpress.com/e/_ooTCYX7 | * USB to CAN Adapter https://s.click.aliexpress.com/e/_ooTCYX7 | ||
== Firmware == | == Firmware == | ||
* https://canable.io/updater/ → SL CAN with FD support | * https://canable.io/updater/ → SL CAN with FD support | ||
== Software == | == Software == | ||
* https://www.savvycan.com (Linux, Win, macOS) | * https://www.savvycan.com (Linux, Win, macOS) | ||
=== Connection config === | |||
Connection → Open Connection Window → Add New Device → LAWICEL/SLCAN Serial → cu.usbmodem*; 500k; 500k | Connection → Open Connection Window → Add New Device → LAWICEL/SLCAN Serial → cu.usbmodem*; 500k; 500k | ||
== | == VAG UDS IDs over the diagnostic BUS<ref>https://github.com/ConnorHowell/vag-uds-ids</ref> == | ||
{| class="wikitable" | |||
! module !! request ID !! response ID | |||
|- | |||
| Engine 1 || <code>0x7E0</code> || <code>0x7E8</code> | |||
|- | |||
| Engine 2 || <code>0x7E2</code> || <code>0x7EA</code> | |||
|- | |||
| Transmission || <code>0x7E1</code> || <code>0x7E9</code> | |||
|- | |||
| AllWheelDrive || <code>0x70F</code> || <code>0x779</code> | |||
|- | |||
| Gateway || <code>0x710</code> || <code>0x77A</code> | |||
|- | |||
| ABS || <code>0x713</code> || <code>0x77D</code> | |||
|- | |||
| Dashboard || <code>0x714</code> || <code>0x77E</code> | |||
|- | |||
| SRS || <code>0x715</code> || <code>0x77F</code> | |||
|- | |||
| HVAC || <code>0x746</code> || <code>0x7B0</code> | |||
|} | |||
== For future reference... == | == For future reference... == | ||
* https://github.com/kostaszaf/can-gateway-sniffer | * VAG sniffer with ifTtT-like integration: https://github.com/kostaszaf/can-gateway-sniffer | ||
* https://www.drive2.ru/l/663539875273774343/ | * PoC insertion of messages into cluster via BAP: https://www.drive2.ru/l/663539875273774343/ | ||
* https://habr.com/ru/articles/442184/ | * DIY VirtualCockpit: https://habr.com/ru/articles/442184/ | ||
* https://theksmith.com/software/hack-vehicle-bus-cheap-easy-part-1/ | * CAN-BUS communication basics: https://theksmith.com/software/hack-vehicle-bus-cheap-easy-part-1/ | ||
* http://www.loopybunny.co.uk/CarPC/k_can.html (BMW E8x) | * http://www.loopybunny.co.uk/CarPC/k_can.html (BMW E8x) | ||
* https://forum.macchina.cc/t/some-vw-can-stuff-to-help-out-people-with-mk5-and-some-mk6-type-platform-vehicles/660 | * https://forum.macchina.cc/t/some-vw-can-stuff-to-help-out-people-with-mk5-and-some-mk6-type-platform-vehicles/660 | ||
* https://forums.ross-tech.com/index.php?threads/18564/page-2 | * https://forums.ross-tech.com/index.php?threads/18564/page-2 | ||
* https://avtoad.com.ua/en/base/uds-protocol-unified-diagnostic-services | |||
* https://github.com/commaai/opendbc/blob/master/opendbc/dbc/vw_mqb.dbc | |||
* Porsche 718 https://planetkris.com/porsche-718-cayman-can-bus-track-day-data/?unapproved=10934&moderation-hash=ca30f165d22d57110206c33bc0dc0eb5#comment-10934 | |||
* Porsche 718 https://www.718forum.com/threads/successfully-hacked-my-718-gts-can-bus-for-racechrono-data.31918 | |||
Latest revision as of 18:07, 29 May 2025
Purpose
Hardware
- USB to CAN Adapter https://s.click.aliexpress.com/e/_ooTCYX7
Firmware
- https://canable.io/updater/ → SL CAN with FD support
Software
- https://www.savvycan.com (Linux, Win, macOS)
Connection config
Connection → Open Connection Window → Add New Device → LAWICEL/SLCAN Serial → cu.usbmodem*; 500k; 500k
VAG UDS IDs over the diagnostic BUS[1]
| module | request ID | response ID |
|---|---|---|
| Engine 1 | 0x7E0 |
0x7E8
|
| Engine 2 | 0x7E2 |
0x7EA
|
| Transmission | 0x7E1 |
0x7E9
|
| AllWheelDrive | 0x70F |
0x779
|
| Gateway | 0x710 |
0x77A
|
| ABS | 0x713 |
0x77D
|
| Dashboard | 0x714 |
0x77E
|
| SRS | 0x715 |
0x77F
|
| HVAC | 0x746 |
0x7B0
|
For future reference...
- VAG sniffer with ifTtT-like integration: https://github.com/kostaszaf/can-gateway-sniffer
- PoC insertion of messages into cluster via BAP: https://www.drive2.ru/l/663539875273774343/
- DIY VirtualCockpit: https://habr.com/ru/articles/442184/
- CAN-BUS communication basics: https://theksmith.com/software/hack-vehicle-bus-cheap-easy-part-1/
- http://www.loopybunny.co.uk/CarPC/k_can.html (BMW E8x)
- https://forum.macchina.cc/t/some-vw-can-stuff-to-help-out-people-with-mk5-and-some-mk6-type-platform-vehicles/660
- https://forums.ross-tech.com/index.php?threads/18564/page-2
- https://avtoad.com.ua/en/base/uds-protocol-unified-diagnostic-services
- https://github.com/commaai/opendbc/blob/master/opendbc/dbc/vw_mqb.dbc