Page 5 of 5

Re: FLASH / CIRC Custom scooter information

Posted: Mon Mar 08, 2021 4:01 am
by HelgeG
miloniko wrote:
Thu Feb 04, 2021 4:10 am

On weekend my goal is to disassemble the whole scooter, to check what wires, plugs (julet), goes through the scooter. Maybe I can understand then, what wire does what.
The "easiest" way from my point of view, would be, to "flash" the system to original firmware, so the basic functionality works only, without GPS and SIM Card. Do ýou have some ideas?

KR
I had my hands also on two old Circ scooters. Inside the IoT Box is a nRF51802 SoC that seems to be "The Brain".

The IoT Box communicates via RS485 with the BMS and ESC. I did some Pythoncode to readout the actual speed and driven meters. I wasnt (now) able to unlock the Scooter via RS485 but in theory with the captured logs of the unlocking process and the RS485 USB Interface, finding the unlocking procedure should be possible.

Ill try to get some time this week to search and document my results, maybe we can hack this old scooter a bit To view images REGISTER or LOGIN for full access.

Re: FLASH / CIRC Custom scooter information

Posted: Sun Apr 11, 2021 4:36 am
by miloniko
HelgeG wrote:
Mon Mar 08, 2021 4:01 am
miloniko wrote:
Thu Feb 04, 2021 4:10 am

On weekend my goal is to disassemble the whole scooter, to check what wires, plugs (julet), goes through the scooter. Maybe I can understand then, what wire does what.
The "easiest" way from my point of view, would be, to "flash" the system to original firmware, so the basic functionality works only, without GPS and SIM Card. Do ýou have some ideas?

KR
I had my hands also on two old Circ scooters. Inside the IoT Box is a nRF51802 SoC that seems to be "The Brain".

The IoT Box communicates via RS485 with the BMS and ESC. I did some Pythoncode to readout the actual speed and driven meters. I wasnt (now) able to unlock the Scooter via RS485 but in theory with the captured logs of the unlocking process and the RS485 USB Interface, finding the unlocking procedure should be possible.

Ill try to get some time this week to search and document my results, maybe we can hack this old scooter a bit To view images REGISTER or LOGIN for full access.
Hi!
I am also trying to read out data via bluetooth with success, but still not get unlocked by my own, only with an app. Should be possible in the future.

I got some data, better say an array of data, but it is hard to interpret what information meens what - can you help me reading out the speed and driven meters? What value is that in the byteArray? Or how does the data look like after your reading out?

KR
Milo