Seed/key tool - in 'beta'

06t200
Posts: 10
Joined: Sun Jun 26, 2016 11:49 pm

Seed/key tool - in 'beta'

Post by 06t200 »

I wrote a basic (very crude) script that will run in Windows 7 or above, just point it at your com port, and change paths as needed and it should work. This is a rough draft of the tool but it did unlock my module fwiw. I should have time to add some other features, but wanted to share since it may help others.

Results
Results
Enjoy!
Attachments
KeyScript-Rev2.ps1.txt
Script, remove .txt off end to open
(3.77 KiB) Downloaded 675 times
User avatar
antus
Site Admin
Posts: 8237
Joined: Sat Feb 28, 2009 8:34 pm
cars: TX Gemini 2L Twincam
TX Gemini SR20 18psi
Datsun 1200 Ute
Subaru Blitzen '06 EZ30 4th gen, 3.0R Spec B
Contact:

Re: Seed/key tool - in 'beta'

Post by antus »

Cool, nice litte brute forcer. Thanks for sharing!
Have you read the FAQ? For lots of information and links to significant threads see here: http://pcmhacking.net/forums/viewtopic.php?f=7&t=1396
06t200
Posts: 10
Joined: Sun Jun 26, 2016 11:49 pm

Re: Seed/key tool - in 'beta'

Post by 06t200 »

Thanks antus, I owe you and many others on the site a big thanks for the inspiration/knowledge to keep exploring and learning. Fun stuff!
Working on a mode $35 routine to explore some memory next. One hurdle at a time ;)
User avatar
antus
Site Admin
Posts: 8237
Joined: Sat Feb 28, 2009 8:34 pm
cars: TX Gemini 2L Twincam
TX Gemini SR20 18psi
Datsun 1200 Ute
Subaru Blitzen '06 EZ30 4th gen, 3.0R Spec B
Contact:

Re: Seed/key tool - in 'beta'

Post by antus »

What PCM are you working on?
Have you read the FAQ? For lots of information and links to significant threads see here: http://pcmhacking.net/forums/viewtopic.php?f=7&t=1396
06t200
Posts: 10
Joined: Sun Jun 26, 2016 11:49 pm

Re: Seed/key tool - in 'beta'

Post by 06t200 »

I have a few on the bench, one from a 03 J-body (Cavalier?) with '747' last 3 of the pn. a Delphi box.

Odd ball's that have been unlocked: Korean Delphi MR140, and a model MT-34 - small Delphi boxes. Were OE in 04-08 T body (Aveo) and other GM/Opel/Daewoo platforms. I was going to post about them but not sure where they belong yet, (or if anyone even cares? lol) they are used all over the place. 32-bit flavored controllers, use K-line (KWP2000) protocol, 1mb of memory, still being produced by erae - the company that was Delphi Korea. So nothing too fun. ;)
06t200
Posts: 10
Joined: Sun Jun 26, 2016 11:49 pm

Re: Seed/key tool - in 'beta'

Post by 06t200 »

Here is some code to add that will fetch the VIN and stick it into a variable. These newer eOBD boxes just use plain old Mode$09 02 to get the VIN, so ez pz.

# Scripted version =====Get VIN=========
$ecuPort.open()
$ecuPort.writeline("0902" + [char]13) # Vin request
start-sleep -m 200
$input = $port.ReadExisting() # -split(" ")

# Parse the array for only the VIN then convert to ASCII
$vin = $input.split(" ")[6,10,11,12,13,17,18,19,20,24,25,26,27,31,32,33,34] |
ForEach-Object { [Convert]::ToInt32($_,16) } |
ForEach-Object { [Convert]::ToChar($_) } |
ForEach-Object { $_ }

$vin -join ""

$vin can be used to name log files and such, - for example.
06t200
Posts: 10
Joined: Sun Jun 26, 2016 11:49 pm

Re: Seed/key tool - in 'beta'

Post by 06t200 »

For giggles, here are some photos of the Korean Delphi boxes on the chopping block.
http://www.aveoforum.com/forum/f82/ecm- ... 4-a-14372/

Just in the rare random event anyone else is working on them as well.
User avatar
antus
Site Admin
Posts: 8237
Joined: Sat Feb 28, 2009 8:34 pm
cars: TX Gemini 2L Twincam
TX Gemini SR20 18psi
Datsun 1200 Ute
Subaru Blitzen '06 EZ30 4th gen, 3.0R Spec B
Contact:

Re: Seed/key tool - in 'beta'

Post by antus »

Anything you want to post, please do. Theres pics of a couple of daewoo ecms based on the delcos through this thread already http://pcmhacking.net/forums/viewtopic.php?f=17&t=579
Have you read the FAQ? For lots of information and links to significant threads see here: http://pcmhacking.net/forums/viewtopic.php?f=7&t=1396
06t200
Posts: 10
Joined: Sun Jun 26, 2016 11:49 pm

Re: Seed/key tool - in 'beta'

Post by 06t200 »

Thanks antus. Will do.
Gosh what with the new DMCA class 21 'exemption' - maybe now instead of GM/John Deere brow beating us owners for repairing what they won't, maybe they can open up the CTS library so well spoken of in GMW3110 for us all to just have for our personal reference, life would be a whole lot easier for those of us trying to get stuff done. ;) (rant off!)
User avatar
rolls
Posts: 407
Joined: Wed Sep 07, 2016 11:22 am
cars: bf xr6t falcon

Re: Seed/key tool - in 'beta'

Post by rolls »

What happens if it isn't a static response key and it changes based upon a seed? This may not unlock it for weeks as the number of combinations is pretty high.
Post Reply