Mobis Gen5 firmware tool - Connected Car

Hi,
I have released a new tool for firmware modifications of Standard-class Gen5 navigation used by Hyundai, KIA and Genesis:
GitHub - rgerganov/gen5fw: Firmware tools for Mobis Gen5 navigation
Firmware tools for Mobis Gen5 navigation. Contribute to rgerganov/gen5fw development by creating an account on GitHub.
github.com
It is based on a "secret" recovery mechanism which is triggered by holding POWER+MAP or POWER+HOME buttons.
I will publish a blog post with some reverse engineering details soon.
Any feedback welcome!

I have published a blog post with all of my findings for Gen5: https://xakcop.com/post/hyundai-hack-2/

xakcop said:
I have published a blog post with all of my findings for Gen5: https://xakcop.com/post/hyundai-hack-2/
Click to expand...
Click to collapse
i have tried getting the zip uncompressed haven't been successful any other insights that might help?
how did you calculate the MS DOS date?

Related

Have you requested kernel source from Microsoft Mobile?

If you've requested kernel source from Microsoft Mobile please post here to let us know:
* When you wrote
* Which device & firmware revision you requested kernel source code for
* If you received source code (if/when you do please upload it & post links here)
If you'd like to support community development efforts please write a letter to Microsoft Mobile to request kernel source code for your device/firmware revision- the address to write can be found here.
Here is a template you can use for the letter, please adjust for your device & firmware and add your personal particulars (return address; maybe phone number & email address) and signature:
Code:
To whom it may concern,
I'm an owner of a Nokia X running version 1.2.4.1 of the Nokia X Software Platform. May I please have a copy of the source code for the Linux kernel used in this firmware revision?
Thank you in advance for your efforts. Looking forward to hearing from you.
I've written on the 4th of September requesting source code pertaining to version 1.2.4.1 of the Nokia X Software Platform for Nokia X. I have not received any response (yet?).
spacenerf said:
If you've requested kernel source from Microsoft Mobile please post here to let us know:
* When you wrote
* Which device & firmware revision you requested kernel source code for
* If you received source code (if/when you do please upload it & post links here)
If you'd like to support community development efforts please write a letter to Microsoft Mobile to request kernel source code for your device/firmware revision- the address to write can be found here.
Here is a template you can use for the letter, please adjust for your device & firmware and add your personal particulars (return address; maybe phone number & email address) and signature:
Code:
To whom it may concern,
I'm an owner of a Nokia X running version 1.2.4.1 of the Nokia X Software Platform. May I please have a copy of the source code for the Linux kernel used in this firmware revision?
Thank you in advance for your efforts. Looking forward to hearing from you.
I've written on the 4th of September requesting source code pertaining to version 1.2.4.1 of the Nokia X Software Platform for Nokia X. I have not received any response (yet?).
Click to expand...
Click to collapse
i view some of the conversation in github about that i think its in may or june but until right now still no response
pak microsoft
we already asked them long ago, april i think?
they insist to get written letter send to them via snail mail which one user from russia already did.
now its october but still no news from them.
mdfzhi said:
we already asked them long ago, april i think?
they insist to get written letter send to them via snail mail which one user from russia already did.
now its october but still no news from them.
Click to expand...
Click to collapse
we are here for technology and they insist to make a snail mail haha funny microsoft
Yeh I am pretty sure this is a tactic to show contempt for free software. They do have an obligation to release it - whether this matters to them I'm not sure. Thinking is that more people writing could help put pressure on them (and maybe provoke some sort of response?).
Ok, so I just found out yesterday our national post office has been on strike for the past 11 weeks and that the whole thing is pretty much on the brink of collapse. This doesn't bode well for me getting my hands on the source code. http://www.timeslive.co.za/businesstimes/2014/10/19/leaked-audit-report-points-to-post-office-chaos

[Index] Motorola Stock Firmware

Motorola Firmware
[INDEX]
Helpful Information​
Welcome, this thread has been created to encompass everything you may need to use this Index. Please only post in this thread with feedback on how to improve this document. Do not post "Thank you" type responses. Do not use this as a general help thread If you require more help, post in Your Devices forum.
Click on a link below for More Info
Official Source
Rescue and Smart Assistant (LMSA)
Will Motorola update my device?
Motorola update policy
Motorola Firmware Mirrors​Search for Firmware by codename, software channel, and Software Version.​Firmware is normally compressed and will need to be unzipped before use.​
Lolinet Mirrors Most updated
https://t.me/MotoUpdatesTracker
Motorola Firmware Team (Android File Host) includes hash sums
Firmware Center @Zorge.RCoinHive is running on the site -28 March 2018 -
Google Drive Mirror
https://yadi.sk/d/MCliEyCPfj7ZZ by @CrashXXL
​
[Guide] Using Fastboot.exe with Motorola devices
Guide: Using Fastboot.exe with Motorola Devices If your device has its own section please post in that section. You can ping me with @sd_shadow MediaTek or Qualcomm Chip? Do I have a MediaTek Device? see post #26 Info: If you have a MediaTek...
forum.xda-developers.com
​
Update Tools
[TOOL][WIN] OTA Updates (Motorola)
[TOOL] Motorola OTA Link Generator Tool
Older Devices
sd_shadow's [Collection] of Links
Updated often RootJunkysdl.com/ by Tomsgt - be sure to thank him in one of his threads.
Motorola SBF Files by 1kds be sure to thank him in one of his threads.
Mirrors By Pzyduck be sure to thank him in one of his threads.
Mirrors by daywalker04 be sure to thank him in one of his threads.
Web Archive of sbf.droid-developers.org Please try last.
Firmware Mobi @Chainfire
Dead Dr Devs
Dead Moto Firmware Center
Forum Rules | New Users Guide | XDA Tour | Report Posts
Please look for a similar INDEX thread when visiting another device forum.
If you would like to create an [INDEX] please Click Here.
A special thanks to everyone who contributed to the production of this INDEX
Please note: This is and will be, an ongoing WIP​
is motostockrom legit?
mutttt said:
is motostockrom legit?
Click to expand...
Click to collapse
I don't know, it's probably ok.
Motorola Update Policy
Basically, Motorola will only provide One major Android update and two years of regular security updates.
But may extend support for devices that see longer than normal usage.
9 to 5 Google said:
For instance, this policy depends on the majority, so people who switch/upgrade their devices early could ruin the long-time use of a phone for others. Further, it’s just a paradox. Motorola is essentially saying that it will update phones the longer people keep them, but people will be more likely to upgrade their phone if they feel it’s been abandoned.
Click to expand...
Click to collapse
Motorola Support said:
Motorola is committed to regular and timely security updates as recommended by Google/Android. While phones cannot be upgraded indefinitely, we provide security updates within the industry standard on both our regular and our Android One devices.
Click to expand...
Click to collapse
[Update: Retraction] Motorola's new Android update policy depends on how long customers keep phones
Motorola just announced a new Android update policy that paradoxically ties long-term support to how long most customers keep their phones.
9to5google.com
Software Upgrade | Motorola Support US
Visit the customer support page to view user guides, FAQs, bluetooth pairing, software downloads, drivers, tutorials and to get repair and contact us information.
motorola-global-portal.custhelp.com
The Problem With Motorola Phones
The smartphone maker ranks No. 3 in the US, but its software update strategy is one of the worst in the industry. And that's not all.
www.wired.com
Motorola reveals which of its phones will receive Android 12
Motorola has announced which of its smartphones will be updated to Android 12, and there seem to be a lot of phones missing.
www.xda-developers.com
Does Motorola still use blur_* OTA updates? If so, is there any other tool to get them? I tried the OTAU.exe and the online version... Couldn't find anything. Also, OTAU says it couldn't find the software version. I entered it manually, but still, it doesn't find anything.
sd_shadow said:
Motorola Firmware
[INDEX]
Helpful Information​
Welcome, this thread has been created to encompass everything you may need to use this Index. Please only post in this thread with feedback on how to improve this document. Do not post "Thank you" type responses. Do not use this as a general help thread If you require more help, post in Your Devices forum.
Click on a link below for More Info
Official Source
Rescue and Smart Assistant (LMSA)
Will Motorola update my device?
Motorola update policy
Motorola Firmware Mirrors​Search for Firmware by codename, software channel, and Software Version.​Firmware is normally compressed and will need to be unzipped before use.​
Lolinet Mirrors Most updated
https://t.me/MotoUpdatesTracker
Motorola Firmware Team (Android File Host) includes hash sums
Firmware Center @Zorge.RCoinHive is running on the site -28 March 2018 -
Google Drive Mirror
https://yadi.sk/d/MCliEyCPfj7ZZ by @CrashXXL
​
[Guide] Using Fastboot.exe with Motorola devices
Guide: Using Fastboot.exe with Motorola Devices If your device has its own section please post in that section. You can ping me with @sd_shadow MediaTek or Qualcomm Chip? Do I have a MediaTek Device? see post #26 Info: If you have a MediaTek...
forum.xda-developers.com
​
Update Tools
[TOOL][WIN] OTA Updates (Motorola)
[TOOL] Motorola OTA Link Generator Tool
Older Devices
sd_shadow's [Collection] of Links
Updated often RootJunkysdl.com/ by Tomsgt - be sure to thank him in one of his threads.
Motorola SBF Files by 1kds be sure to thank him in one of his threads.
Mirrors By Pzyduck be sure to thank him in one of his threads.
Mirrors by daywalker04 be sure to thank him in one of his threads.
Web Archive of sbf.droid-developers.org Please try last.
Firmware Mobi @Chainfire
Dead Dr Devs
Dead Moto Firmware Center
Forum Rules | New Users Guide | XDA Tour | Report Posts
Please look for a similar INDEX thread when visiting another device forum.
If you would like to create an [INDEX] please Click Here.
A special thanks to everyone who contributed to the production of this INDEX
Please note: This is and will be, an ongoing WIP​
Click to expand...
Click to collapse
Great info all easy to find!
I tried everything I could think of to find the stock ROM to get the boot.img out of to use Magisk on for my Moto g32 XT2235-2 (devon) and did not find it anywhere. No PC to run the Lenovo assistant (although this is my backup plan if nothing else works in a few days is find someone with a PC - I've used the tool before and it has saved phones for me that I messed up somehow).
Is there any way to pull the boot.img out of the phone itself with unlocked bootloader using fastboot commands or something?
vdun1188 said:
Great info all easy to find!
I tried everything I could think of to find the stock ROM to get the boot.img out of to use Magisk on for my Moto g32 XT2235-2 (devon) and did not find it anywhere. No PC to run the Lenovo assistant (although this is my backup plan if nothing else works in a few days is find someone with a PC - I've used the tool before and it has saved phones for me that I messed up somehow).
Is there any way to pull the boot.img out of the phone itself with unlocked bootloader using fastboot commands or something?
Click to expand...
Click to collapse
I have it here https://www.stockrom.net/2022/11/xt2235-1-retbr-12-s2sn32-34-60.html
dispzin said:
I have it here https://www.stockrom.net/2022/11/xt2235-1-retbr-12-s2sn32-34-60.html
Click to expand...
Click to collapse
Thanks for the link. It looks like that is for the xt2235-1 which by "retbr" I'm guessing means retail Brazil. I was looking to find xt2235-2 / "reteu" or retail Europe. I might try it eventually, but I'm in no hurry so I'll probably wait. Perhaps Lineage or other ROM will eventually be made.

Which version of Android (GSI) can I run on a device with VNDK 27.0?

My plan is to flash a GSI image (LineageOS) for android 9. Specifically the following
- https://github.com/LineageOS/android/tree/lineage-16.0
- https://github.com/AndyCGYan/lineage_build_unified/tree/lineage-16.0
Is there a chance of getting this to run on my device? Please see the attached file for the output of the Treble Info app.
I cannot find any information about the impact of VNDK version 27.0 so any help is much appreciated.
Device info:
- Processor: Rockchip 3399
jossdb said:
My plan is to flash a GSI image (LineageOS) for android 9. Specifically the following
- https://github.com/LineageOS/android/tree/lineage-16.0
- https://github.com/AndyCGYan/lineage_build_unified/tree/lineage-16.0
Is there a chance of getting this to run on my device? Please see the attached file for the output of the Treble Info app.
I cannot find any information about the impact of VNDK version 27.0 so any help is much appreciated.
Device info:
- Processor: Rockchip 3399
Click to expand...
Click to collapse
I have the same issue, only thing I could find out, some features not gonna work, (who know what), if you install a newer vndk you wont be able to return to an older one. Be honest, Project Treble is made for seamlessly update phones, but it is a mess, versions, vndks, legacy phones, A-B-A/B images, etc. it doesnt do what it meant to do.
The XDA forum was a good place to ask questions like this, it was, still remember to get answer about my 10 years old phone, however things really changed over the years. Members change their phones on montly basis, so dont expect any professional answer.
Hi, you ma find usefull information in:
Frequently Asked Questions (FAQ)
Notes about tinkering with Android Project Treble. Contribute to phhusson/treble_experimentations development by creating an account on GitHub.
github.com

Gen5W for HKMC root access

Hello guys! I am a bit tired today to explain all the details, we will be writing a better post soon. But for now this will have to suffice.
TL; DR;
We are going public on how to hack the headunit for HKMC vehicles. This applies to pretty much all Gen5W models, requires no soldering, and yeah, its fun I guess.
This is pretty much for devs tho, so if you expect to run youtube with this today, sorry, but not yet. It will be possible tho, but so far we were focused on getting the access.
What is all this about?​This project aims to give users ownership of the headunit on their cars. You paid for your car, you own it. That includes its computers. With this project we aim to provide you with the ability to extend your stock functionality on certain korean models.
We are not on this for commercial gain, however, you can use whatever we've learnt so far to build and sell CFW if you wish, that is up to you. I only ask that you contribute back and share your findings. Basically, open source mentality between us here. We all want the same at the end of the day, which is completely owning our cars and the systems on it.
We do not sell the access to the hack.
We do not sell the tools to get access to the system.
We share our knowledge.
You can:
Build and sell your CFW using the tools / knowledge that comes from collaborating. (Please, strongly consider sharing how things are done so we can attract more developers when we decide to go "public")
Also, consider safety first. Let's try not allow non-technical people to drive while watching netflix. But this is completely to your discretion.
Tha Links
hkm-gen5 / gen5w / update_decryptor · GitLab
This is just a docker image that you can build on your own. You must provide the files yourself, we can't provide them to you. But its got...
gitlab.com
hkm-gen5 / gen5w / navi_extended · GitLab
This app is meant to replace AppNavi temporarily so you can execute things from the headunit.
gitlab.com
README.md · main · hkm-gen5 / DOKUMENTATION · GitLab
This is the place were you'll find all the general documentation for the project. What we've learned so far, and how to get things done. WIthin the projects...
gitlab.com
We will be posting things on the forums, but if you want to start doing stuff, that's where we have it. Good luck, and please share back whatever you find / learn.
EDIT: We have a new face!, you can find relevant links there as well as some troubleshooting! https://g4933.gitlab.io/wideopen
more info to come
im a bit too tired to repost the images here
but i have posted them here
Gen5W for HKMC root access
Hello guys! I am a bit tired today to explain all the details, we will be writing a better post soon. But for now this will have to suffice. TL; DR; We are going public on how to hack the headunit for HKMC vehicles. This applies to pretty much all Gen5W models, requires no soldering, and yeah...
www.ioniqforum.com
gen5w said:
Hello guys! I am a bit tired today to explain all the details, we will be writing a better post soon. But for now this will have to suffice.
TL; DR;
We are going public on how to hack the headunit for HKMC vehicles. This applies to pretty much all Gen5W models, requires no soldering, and yeah, its fun I guess.
This is pretty much for devs tho, so if you expect to run youtube with this today, sorry, but not yet. It will be possible tho, but so far we were focused on getting the access.
What is all this about?​This project aims to give users ownership of the headunit on their cars. You paid for your car, you own it. That includes its computers. With this project we aim to provide you with the ability to extend your stock functionality on certain korean models.
We are not on this for commercial gain, however, you can use whatever we've learnt so far to build and sell CFW if you wish, that is up to you. I only ask that you contribute back and share your findings. Basically, open source mentality between us here. We all want the same at the end of the day, which is completely owning our cars and the systems on it.
We do not sell the access to the hack.
We do not sell the tools to get access to the system.
We share our knowledge.
You can:
Build and sell your CFW using the tools / knowledge that comes from collaborating. (Please, strongly consider sharing how things are done so we can attract more developers when we decide to go "public")
Also, consider safety first. Let's try not allow non-technical people to drive while watching netflix. But this is completely to your discretion.
Tha Links
hkm-gen5 / gen5w / update_decryptor · GitLab
This is just a docker image that you can build on your own. You must provide the files yourself, we can't provide them to you. But its got...
gitlab.com
hkm-gen5 / gen5w / navi_extended · GitLab
This app is meant to replace AppNavi temporarily so you can execute things from the headunit.
gitlab.com
README.md · main · hkm-gen5 / DOKUMENTATION · GitLab
This is the place were you'll find all the general documentation for the project. What we've learned so far, and how to get things done. WIthin the projects...
gitlab.com
We will be posting things on the forums, but if you want to start doing stuff, that's where we have it. Good luck, and please share back whatever you find / learn.
Click to expand...
Click to collapse
hello good friend. Do you have any information about HU Gen5w using Motrex's android 9.0 backend?
Gen5Premium has different encryption key i guess. All files are empty
Tank-piercing said:
Gen5Premium has different encryption key i guess. All files are empty
Click to expand...
Click to collapse
Just to be clear, did you extract a key already from the unit? I haven’t included any decryption binary nor key on the gitlab, the files you see there (DecryptToPIPE & the .DER file) are just placeholders, read te contents of those files for details
trannamptv said:
hello good friend. Do you have any information about HU Gen5w using Motrex's android 9.0 backend?
Click to expand...
Click to collapse
American Units actually use Android, but I don’t think it’s that latest android tho. In any case i know somebody else is working with android units but I don’t know how far they are
gen5w said:
did you extract a key already from the unit?
Click to expand...
Click to collapse
Ah, that's it. You need to dump headunits software first.
So decryption key is uniq for each car?
Tank-piercing said:
Ah, that's it. You need to dump headunits software first.
So decryption key is uniq for each car?
Click to expand...
Click to collapse
Not entirely sure. Nobody has yet found the key besides me (or haven’t spoken up) so I can’t compare if keys are unique across units. But the key in your unit will be able to decrypt all gen5w updates up to date. To get the key you don’t need to dump the whole software, it’s enough to just rename a program in the unit, put a shell script where that program was , once called, get the args passed to the script (you’ll have one of the args as a path) copy the content of that path to your usb and then lastly call the original program so the process works as expected for the headunit. (Man in the middle).
The reason we don’t share the key (or the DecryptToPIPE software) it’s because that might be copyrighted material, and we are avoiding any copyright infringement.
I don't have AppNavi update option in Engeneering Mode > Dynamics > Navigation.
There is no Config section. I checked the rest with no luck.
210513 firmware. Should i update to 220210?
Tank-piercing said:
I don't have AppNavi update option in Engeneering Mode > Dynamics > Navigation.
There is no Config section. I checked the rest with no luck.
210513 firmware. Should i update to 220210?
Click to expand...
Click to collapse
Yup. You need to update to the latest.
FYI: I've updated the repo and added the method to extract encryption keys for the updates:
https://gitlab.com/g4933/gen5w/navi...REMELY_RISKY_BECAREFUL/spoof_decrypttopipe.sh
USB_FILES/DecryptToPIPE_FK · main · hkm-gen5 / gen5w / navi_extended · GitLab
This app is meant to replace AppNavi temporarily so you can execute things from the headunit.
gitlab.com
maybe someone can decrypt Appengineermode app codes from february update?
Tank-piercing said:
maybe someone can decrypt Appengineermode app codes from february update?
Click to expand...
Click to collapse
Codes don't seem to have changed... is it not working for you? (0652)
0652 no longer works
andreaslev said:
0652 no longer works
Click to expand...
Click to collapse
That’s strange. Are you from the US or EU? Can you share the details of your unit ? (Version and model )
Gen5Prem
RJAS.P5LN.RU
RJ.RUS.P5.001.008.220210
Can anyone decode the Appengineermode app from the February update?
DNA.USA.S5W_M.V007.001.211123
model
DN8AS.S5BMC.D4US
platfrom
standard-class Gen5W Navigation
Hello guys, I want to tell you my story, and I need a little help from you also :
My car : Kia Sportage QLE Gen5 navi, updated to sw : 211029 fw : 210930
After update , no way to find pin for engineering mode, only dealer mode with pin 2400 and 7,3,1 volume combination. But with navigation hack, showed in this thread I managed to enter engineering, and managed to make adb to work on ethernet, but the only way to do adb to work was by installing an USB to Ethernet converter into USB, connect and ethernet cable between converter and my laptop. Don't know for sure if it is necessary or not, but after installing everything ( usb, cable, etc) I made an Reset to factory . Connected the wifi of unit and phone to house router, and finally was able to install apps with Easy fire tools.
I manage to install boot hack and now when I press 2 times on SETUP is going to engineering menu, and from there I can access all other applications that I have installed ( file manager, soundabout).
So I hope someone else who wants , can now get adb to work and install what he wants.
Now I want to ask the ones who already managed to install apps, if they can help my with some apps that are tested and working OK : I need an IPTV software, I installed GSE IPTV, with was working ok before upgrade, but now it does not start playing, only loads m3u list, you can select channel, but .. not start. Youtube working has anyone? I installed an older version, but it say it can not work without google services. And last, is there a way to add shortcuts to apps in oem menu? or a way to quick access them? or something like task manager? not to be forced every time to go to all apps and start app from there?
Thank you, end if someone needs more help with adb to work, and did not understood complete what I said, please fell free to ask, if I can I help with pleasure.
I downloaded the my20 update for xceed, but the installation checks update files section gives an error at %30 and I still could not update. Can you help me?
New updates on this guys ? Is this project abandoned ?

[CLOSED] Malware In GSI Images From Google's AOSP Website?

This Google website offers frequently updated daily GSI builds of AOSP, where code changes from literally any contributor to the Android Open Source Project are built and hosted on Google Servers.
Branch Grid
ci.android.com
The FAQ states that there is a two factor security system in place to ensure the added code is genuine and safe.
Reviewers check the added code and make sure it's consistent with Google Guidelines.
Verifiers build the changes and verify it if everything checks out.
That's basically it.
Meaning the code inside those images ready for download on ci.android.com has only been vetted by a single reviewer, before a verifier builds them for testing and it is hosted as an artifact.
I understand that these img files are not meant to be used by anyone, but it still seems a little crazy to me that Google would publicly host an image file of AOSP which could potentially be downloaded or even flashed by anyone, while the code inside has basically undergone 0 scrutiny.
@tablet_seeker Thread closed as duplicate of
Malicious Code in GSI Images From Google's Developer AOSP Branch?
This Google website offers frequently updated daily GSI builds of AOSP, where code changes from literally any contributor to the Android Open Source Project are built and hosted on Google Servers...
forum.xda-developers.com
Welcome to XDA! I hope you'll always get the support you require. However, please review the XDA Forum Rules with special emphasis on rule no. 5 and post only ONCE! Thanks for your cooperation, and remember you agreed to adhere to the forum rules when you registered a few days ago.
Regards
Oswald Boelcke
Senior Moderator

Categories

Resources