looking for your shadow passwords (E84 and more)

E38 E92 and many others. Approximately 2007 and newer
fl0wl0w
Posts: 32
Joined: Thu Jun 21, 2018 4:44 pm
cars: L83/8L90 swapped 2013 W204 Mercedes, 1986 LS3 Swapped BMW E30, 1995 LS swapped GMC Truck, Custom Vehicle

Re: looking for your shadow passwords (E84 and more)

Post by fl0wl0w »

Shadow flash is located at 0x00FF_FC00–0x00FF_FFFF

The password is somewhere in there. I think the MPC5566 datasheet says where it is. Shouldn't be too hard to infer either. Most stuff in there is 0xFF except for the password and a couple other things.
Top
User avatar
morfi
Posts: 32
Joined: Wed Jan 22, 2025 7:17 pm
cars: Insignia 2014

Re: looking for your shadow passwords (E84 and more)

Post by morfi »

In case of E39A's the shadow password is a lone set of bytes in between huge sections of 0xff's so its very easy to spot
Image
Image
Image
Top
kur4o
Posts: 1145
Joined: Sun Apr 10, 2016 11:20 am

Re: looking for your shadow passwords (E84 and more)

Post by kur4o »

Got this as serial and shadow
86AB7RK15314FFAA
6F48112C1C317CBF -45 50 55 AA

Some script for dumping e78 shadow using Universal Patcher logger attached.
You do not have the required permissions to view the files attached to this post.
Top
kostia111
Posts: 57
Joined: Sun Oct 20, 2019 6:58 pm

Re: looking for your shadow passwords (E84 and more)

Post by kostia111 »

I'm not much of an expert,
but I think you can read the password with just command 23.
Top
User avatar
Holden202T
Posts: 10435
Joined: Sat Feb 28, 2009 11:05 am
Location: Tenambit, NSW

Re: looking for your shadow passwords (E84 and more)

Post by Holden202T »

E92

Serial: 1114064002711RTX
Shadow: DC6F83D691C31105
Top
gmtech825
Posts: 301
Joined: Fri Feb 24, 2017 1:27 am

Re: looking for your shadow passwords (E84 and more)

Post by gmtech825 »

e92:

1116355025809SVP
A3A98CEC874FD757
Top
User avatar
antus
Site Admin
Posts: 10012
Joined: Sat Feb 28, 2009 10:34 am
cars: TX Gemini 2L Twincam 8psi
TX Gemini SR20 18psi
Datsun 1200 Ute
Subaru Blitzen '06 EZ30 4th gen, 3.0R Spec B
Subaru WRX 2007

Re: looking for your shadow passwords (E84 and more)

Post by antus »

E92

[19:07:28.732] Traceability (MTC): 11152403172813HP
[19:07:36.115] Shadow Password: 6A7A1C2B6C589FB2 (455055AA)

Update to PCMHammer in the test version soon.
You do not have the required permissions to view the files attached to this post.
Have you read the FAQ? For lots of information and links to significant threads see here: http://pcmhacking.net/forums/viewtopic.php?f=7&t=1396
Top
gmtech825
Posts: 301
Joined: Fri Feb 24, 2017 1:27 am

Re: looking for your shadow passwords (E84 and more)

Post by gmtech825 »

E92A:

111734612830Y9KT

F789399935E6C296
Top
l0x2
Posts: 1
Joined: Tue Apr 28, 2020 2:10 am

Re: looking for your shadow passwords (E84 and more)

Post by l0x2 »

E78:

86ABRLK15008RQ66
E92F7FA4843B8465

86ABRLK13275NKKS
3EEF3999F02368E4

86AAZ6K003354FSB
500D50FA2AEC35E8

86ACHLK49007786U
D1A8B1D646EDCB52
Top
gmtech825
Posts: 301
Joined: Fri Feb 24, 2017 1:27 am

Re: looking for your shadow passwords (E84 and more)

Post by gmtech825 »

E92A

1116301024808LA3

30532D0F24AF2EA1
Top

Return to “GM Can bus computers”