Tester Engineering Suite v1.0.9-2026 Released

[jakka]

Here's what currently covered under the ECU Flash Programming, generic FORD VBF Flashing is also implemented but not yet fully tested for all models up to 2018.

Simos 8/10/12/12.2/16/18/18.10/18.41 DQ250
MQB, DQ381, Haldex >> FRF, BIN, ODX Full unlock + re-lock
Ford EEC-VI (Spanish Oak)
Ford Focus, Fiesta, Mondeo, Falcon, Transit, Ranger, Mustang, F-150 >>> VBF format, SBL bootloader 300+ module keys VID + Data
Ford (IPC) FG Mk1/Mk2/FGX VDO Cluster BA Falcon
BMW MS41/42/43/45, MSS70, MSV70 BMS46 (ABS) BIN format, dual-memory RSA signature recalculation
Honda Multiple ECU types RWD + BIN, CAN-based 1000+ pre-calculated keys
Subaru Denso (CAN + K-Line) Hitachi, M32R BIN w/ encryption SSM2 diagnostics, 300+ keys
General Motors PCM (Powertrain) IPC (Instrument Panel) VPW protocol
ZF Transmissions 6HP26 (6-speed auto TCM) 960KB flash + 128KB cal Adaptation read/reset
Volvo P1/P2/P3/SPA, P80 SBL bootloader, VBF + Intel HEX D2 CAN protocol, LFSR security
Hyundai / Kia SIM2K (Infineon) Full flash, EEPROM SMARTRA PIN calculator
Mazda RX-8 Denso SH7055 BIN format LFSR key generation
PSA (Stellantis) VD46/56, CMM, SIM82 PIN-based security Brute-force support
Saab Trionic T5.2/5.5/T7/T8 BIN + checksum correction XOR ByteCoder encryption
Aston Martin V8/V12 (Ford EEC-VI)

[jakka]

Some further information on how the Remote Diagnostics and Reprogramming capabilities work:
Remote Diagnostic & Programming Technology

Code: Select all

Tester Engineering Suite's proprietary remote reprogramming system is an industry-first solution that tunnels the complete J2534
PassThru API over the internet via a secure cloud relay. This enables automotive technicians to perform full ECU diagnostics, flash
programming, and fault code management on vehicles at any location worldwide -- as if they were physically connected to the
vehicle's OBD2 port.

Three-Tier Cloud Architecture
Master Console
Remote technician workstation
JSON-RPC 2.0 over WSS
Cloud Relay Server
On-site J2534 device Connected to vehicle OBD2 port
Azure WebSocket Relay
Session routing + HMAC signing
Secure Session Pairing

• Cryptographically random 6-character session codes
• 10-minute expiry, extended to 60 minutes on pairing
• HMAC-SHA256 response signing (anti-MITM)
• 30-second heartbeat keep-alive mechanism

Full J2534 Tunneling
• All 14 protocols supported remotely
• Remote device enumeration and connection
• Raw CAN frame send/receive with filtering
• ELM327 shim layer for non-native hardware
Remote Flash Programming
• Chunked firmware transfer (65KB) with SHA256 verification
• 12-step UDS flash sequence with vendor extensions
• Real-time progress notifications
• Safe abort with 600-second timeout protection

No VPN. No port forwarding. No direct IP connection required. The cloud relay server handles all session routing -- both master and
slave connect outbound, making the system firewall-friendly and deployable anywhere with an internet connection.

[jakka]

VIN History Integrity Chain: Locally stored, never uploaded, considered private user data - the full Vehicle History, Integrity Chained with SHA256.

Vehicle History & Audit Ledger
• Per-VIN event store — DTC scans, clears, flashes, unlocks, coding, service routines
• SHA-256 chained audit log — tamper-evident record of every operation
• Pre-flash ROM backup capture — automatic snapshot before every write operation
• Multi-page PDF export with operator signature block and integrity hash
• VIN sanitisation and fallback handling (filesystem-safe, Unicode-aware)
• Producer coverage: OBD2 + UDS + KWP1281 + flash workers + security unlock

[jakka]

I have updated the original post with the latest information about the software and some current screenshots of the UI.

[jakka]

one of the smaller additions to the software is the use of Australian and US Vehicle API data - that grabs recall and warranty information upon VIN look up, and displays it in the vehicle information tab. Alongside that is Australian Registration lookup and PPSR Check runner as well. These sit along side the offline VIN decoder, and with the Technicians notes which are appended per VIN to the SHA256 integrity chain that is stored locally on the users PC - never uploaded to the server.