PDA

View Full Version : Tesla 40bit dump


ray-ray
11th September, 2019, 02:56 AM
Working on something new figured out the key position the ago and customer PIN number. I read it in circuit 93c56 with page 1 (FF) page 2 (00) on a 4D.. put the chip next to the door handle and they pop out inside next to the usb charge started the car.
ray-ray
11th September, 2019, 03:14 AM
Inside the dump all the info. The bits are swap pretty easy.. I will share a pdf. With all members
https://www.blackhat.com/docs/us-17/thursday/us-17-Nie-Free-Fall-Hacking-Tesla-From-Wireless-To-CAN-Bus-wp.pdf
K1nd3r
11th September, 2019, 07:21 AM
in market already is key programmer for tesla
drugowaz
11th September, 2019, 01:55 PM
Key cost astronomical prices. No profit
ray-ray
11th September, 2019, 07:06 PM
Do you have link to the tool?
solitaire
11th September, 2019, 08:08 PM
SEC – Security controller (Add Keyfob Key)

http://bacila.com/
Meat-Head
11th September, 2019, 08:23 PM
Key cost astronomical prices. No profit

Vague price, great question for pub quiz, thanks
Tkswdr
29th September, 2020, 09:29 PM
Are these the dumps of the BCM controller? Can the EEPROM contents be modified to enable a always on state? What happens on the hardware when the doors get unlocked?
Is there a modification possible to emulate that? In my case i just need to the BCM to turn the car on.
the_big_d
30th September, 2020, 02:40 PM
Out of curiosity what key blade does the Tesla use for the door barrel?
sleepyrz
10th October, 2020, 09:14 AM
[23:59:38] Warning! for add keys you must have one working key or working Tesla APP to switch "RAIL ON"
[23:59:38] Warning! Keys that were paired with the vehicle but not present when learning new keys will cease to work.Before proceed you must have all keys.
[23:59:38] After the procedure starts, steps requiring user action will be displayed in log window : 0002 0002 0002 - mean no keys are learned now.
[23:59:38] 000200020002 - mean no keys are learned now.(must press front and rear trunk buttons together for5 seconds and release it (dont hold more 5 sec !)
[23:59:38] 000200030002 - (2 from 3)mean key entered in programming mode.(can be in different row), press top button lock/unlock
[23:59:38] 000400030002 - mean key Active.
[23:59:38] 000300030003 - mean all 3 keys are captured and active.
[23:59:38] Press "STORE" button to save learned keys
[23:59:38] Check every one key, if fail repeat procedure.
[23:59:38] Hint: when program key, hold key near cups holder 10cm to front


http://bacila.com/wp-content/uploads/2020/09/T-CAN-Manual_2020.04.16.pdf