Page 20 of 28

Re: Tier ES400 unlock development

Posted: Mon Jan 30, 2023 11:56 am
by Nissan
Scootermansussex wrote:
Sun Jan 29, 2023 7:38 am
Well done buddy I would be happy with the battery codes 😁
No 😂😂😂

Re: Tier ES400 unlock development

Posted: Mon Jan 30, 2023 2:28 pm
by Chast
brightgloaming wrote:
Sat Jan 28, 2023 8:23 pm
I believe I have found all of the CAN bus messages needed to unlock the ES400A scooter (display + battery + motor controller). I will open source all of the findings on GitHub when i make sure that they work well. I will post an update here when it's finished (should take less than a month).
In the meantime, be careful of the user Chast - he is a scam and doesn't send you any source code when he receives the money.
Good luck.
As for your statement cheater, you got a hex file for arduino nano. Everyone who paid got it. You wanted the source code for arduino to show off your rework on github. If in a moment I will post screenshots from Discord where you blackmailed me with sharing the source code.
So scammer you claim to have developed the codes? You've analyzed what the arduino nano is sending and that's it. you are a cheater

Re: Tier ES400 unlock development

Posted: Mon Jan 30, 2023 2:31 pm
by Chast
brightgloaming wrote:
Sat Jan 28, 2023 8:23 pm
I believe I have found all of the CAN bus messages needed to unlock the ES400A scooter (display + battery + motor controller). I will open source all of the findings on GitHub when i make sure that they work well. I will post an update here when it's finished (should take less than a month).
In the meantime, be careful of the user Chast - he is a scam and doesn't send you any source code when he receives the money.
Good luck.
Image

Re: Tier ES400 unlock development

Posted: Mon Jan 30, 2023 2:46 pm
by Chast
Chast wrote:
Mon Jan 30, 2023 2:31 pm
brightgloaming wrote:
Sat Jan 28, 2023 8:23 pm
I believe I have found all of the CAN bus messages needed to unlock the ES400A scooter (display + battery + motor controller). I will open source all of the findings on GitHub when i make sure that they work well. I will post an update here when it's finished (should take less than a month).
In the meantime, be careful of the user Chast - he is a scam and doesn't send you any source code when he receives the money.
Good luck.
Image
Image
Image
Image

Re: Tier ES400 unlock development

Posted: Mon Jan 30, 2023 3:03 pm
by Chast
Dirty rot. Still saying you didn't get the code? How much information on github is yours and how much is stolen from someone else? You are just a scammer impersonating someone else's work.
You don't even know what data frames do in CAN.
You don't know when they are sent and why.
You don't even know which keys they are.
You got a hex file. You uploaded it to arduino nano. You logged the CAN logs and brag about discovering everything?
you bastard.

Information about starting the scooter.
CAN instruction logging during rental includes only engine controller and display controller activation instructions.
When starting the IOT, the keys are entered into the controller, and only then. That is why many people get tired of starting the scooter.

Re: Tier ES400 unlock development

Posted: Mon Jan 30, 2023 3:15 pm
by Chast
We reveal the cards

1,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x02181606,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x08,X| 01 00 1E 01 01 00 02 00
2,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x03FF1601,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x08,x| 6E 50 00 00 00 00 00 00
3,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x03FF1602,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x08,x| F2 43 27 00 00 00 00 00
4,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x02FF2602,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x08,x| 98 40 EC DB 09 D1 69 0B
5,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x05124609,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x07,x| 03 00 03 70 03 E8 00
6,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x05124609,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x07,x| 03 00 01 B8 03 CA 00
7,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x02203606,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x08,x| 01 01 00 01 00 01 00 00
8,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x04FF3400,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x08,x| 00 00 00 00 00 00 00 00
9,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x05124500,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x02,x| 01 02
10,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x02FF2602,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x08,x| EE F8 AA D3 2C 1C DF 1F
11,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x05124501,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x02,x| 01 17
12,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x03FF1500,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x08,x| 00 00 00 CE 00 00 00 00
13,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x03FF1501,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x08,x| 00 00 00 0D 00 00 00 00
14,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x05124502,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x08,x| 52 50 31 33 53 32 30 41
15,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x05124503,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x08,x| 00 13 09 18 00 00 0D 6A
16,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x04FF3502,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x04,x| 00 6F 00 66
17,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x05124504,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x01,x| 13
18,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x03FF1502,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x08,x| 01 00 00 00 00 00 00 00
19,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x03FF1503,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x08,x| 01 00 00 00 00 00 00 00
20,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x03FF1504,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x08,x| 00 00 00 13 00 00 00 00
21,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x05124611,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x08,x| 00 64 25 FA 00 00 21 64
22,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x04FF3400,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x08,x| 00 00 00 00 00 00 00 00
23,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x02FF2602,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x08,x| 27 F0 D7 53 29 3E 33 5B
24,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x05124612,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x08,x| 00 00 00 00 00 00 00 00
25,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x05124613,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x08,x| 00 00 00 00 00 00 00 00
26,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x05124614,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x08,x| 0F 94 05 0F 8C 0A 00 08
27,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x03FF1601,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x08,x| 6E 50 00 00 00 00 00 00
28,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x03FF1602,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x08,x| 00 00 05 00 00 00 00 00
29,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x03FF1400,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x08,x| 00 00 00 00 00 00 00 00

Re: Tier ES400 unlock development

Posted: Mon Jan 30, 2023 3:26 pm
by Scootermansussex
Is it possible to unlock to battery as I sick of cutting them open 🤣😂😅😂

Re: Tier ES400 unlock development

Posted: Mon Jan 30, 2023 3:27 pm
by Scootermansussex
Es400c just in case they are different

Re: Tier ES400 unlock development

Posted: Mon Jan 30, 2023 3:56 pm
by Chast
You need to write rolling code. During operation, an incremental code is sent to the battery. Or drill a 3cm hole with a hole saw and solder the jumper.

The scooter can be started with AT commands. There is also the possibility of unlocking via BT after changing the eeprom batch.
As for the info on NFC. It's not a reader. This is an NFC TAG.

Unfortunately, the information will not be made public. Waste of my time and money invested.

Re: Tier ES400 unlock development

Posted: Mon Jan 30, 2023 7:20 pm
by Scootermansussex
Drill hole and solder jumper ? Do you mean solder onto battery negative to bypass BMS output negative or is there some other way sorry for all questions I not as clever as you