Car Hacking & CAN Bus Reverse Engineering Seminar

[@Buggymon]

Thank you so much! Looking forward to working with the CAN commander. Your hard work is much appreciated!

[@Emsh10n]

As a mechanic with one more brain cell than the average mechanic, this is groundbreaking and exciting. I would love an assembled and flashed can commander when this drops for the flipper zero. This would put me leagues above services I’d be able to provide currently

[@apythonprogrammer7877]

As someone trying to fix my own car without needing to visit the dealership for ECM/BCM/etc configs, thank you. I've always been curious about all of this and I've finally reached a point where most of the language and abstraction involved doesn't look or sound like technobabble.

[@6ffm70]

Tremendous production and insight, Matthew! Thank you.

[@jakewastaken]

Damn this is huge. Cant wait for CAN Commander.

[@honestlocksmith5428]

I appreciate this project and am learning a lot. I'm hoping to help contribute.

[@vallorahn]

OMG that was good one. I only hope you add an option for any CANbus, not only car ones with fixed voltages. There is alot of automation that uses CANbus, but with different voltages, etc. Cooper iLight systems (Cooper iLlumin or Cooper WaveLinx Wired in US), many heat pumps, etc. etc. It would be great if I could just put my own CANbus parameters in flipper and maybe it could even warn me to not use Flipper due to the voltages being to high or maybe there could be a version that accepts higher voltages? I mean it is a hat and it would be possible to add voltage conversion, maybe even isolated ones like network ports have on routers? We would probably need to add GND for that, but that's ok, since it is available in CANbus systems. Thank you for the great work! I can't wait to order mine.

[@chadbeardall3660]

When are you planning to have these boards available? I am in the process of modifying my car and this would be so useful!

[@regularguy5412]

This is great stuff, hey I'm looking for crankshaft position sensor data and cam shaft position sensor data, any idea where to find it in the CAN bus data?

[@julio9791]

Thank you! Really helpful explanation

[@WangLees]

Nice work Matt!

[@mindracing]

What a great piece of work and very well expaoined. However, I'm at a loss with finding where to buy the Cancommander board. Do you have a link to get me there please?

[@palanik1960]

I have seen so many noting like this. well demonstrated . Well done.

[@CHIPSIMS-h2n]

So stoked for this. I love hacking my car already haha & use mechanic software with ELM ODB readers.

[@damiangarcia609]

great job,im subscribed. thank you for making knowledge rich content also very well broken down.

[@bitnotfound]

I will be buying a CAN Commander day 1, for sure. Have you looked into the Comma 3X before? I have one, and it basically takes over vehicle LKAS and gives you some level of self-driving. It’s basically a MITM attack between the LKAS module and the rest of the CAN network to insert its own commands. P.S. Thank you for all the work you’ve put into this!

[@flyboy3633]

Howdy. A quick question if you're still taking questions. I noticed on your example DBC frame at around 40 minutes into the video where you're decoding the 621 RPM value that the maximum value is 8,031. That seems pretty high for an RPM value for a stock car engine. Yet if I apply the scale to it calculates down around a 1000 RPM. So can I assume that the maximum value is the post-scale calculated value ? Or is this just example data and in a real world situation that value would be something different ?

[@MatthewKuKanich]

@@flyboy3633 Good question and I hope I understand it properly. The Min and Max value represent the min and max after decoding, so after the scalar and offset are applied. A max of 8000 may be high for some cars but not abnormal to see Tachometers labeled up to it.

[@kwisin1337]

Great job, looking forward to more

[@TRLYx]

That “CAN Bus Beat” song went way harder than it had any right to🔥

[@killuaz1149]

You are surely the best ❤️ love you bro

[@iconoclad]

Video doesn't start til 12:12. Maybe not even then.

[@Breezyraps214]

Thank you for uploading this I missed the seminar

[@benjaminjones4601]

Have you worked with DIMO? I know they are re doing grants fo decrypting the CAN

[@adammontgomery7980]

Very cool. I've been wanting to fish around on my truck's can bus and plot speed, and acceleration. Just FYI, you don't want a digital tach, the dial is much better.

[@falsedragon33]

But a dial is just a needle with a stepper motor in it. Still gets its data from the canbus. Although probably at a much faster refresh rate. And the ecu will smooth out the needle movement. OK, yeah, needles are better either way, lol.

[@adammontgomery7980]

@@falsedragon33 I really just meant that you're better off with less resolution for something like that. Think about how an analog clock is easier to tell what time it is within 15 minutes, vs a digital clock that gives you the exact time and you need to calculate. Plus, as you mention, the refresh rate is too fast to read the ones (or even tens) place on a digital tach.

[@aleksandarsavanovic4746]

great information thank you very much. Can you pleae tell me or even better mak a video how can we connect arduino to some specific can parsing app like savvyCan, i was trying to do it but faild... ? Thank you again and keep up the good work and products!

[@NTG88-HOG]

Is there can commander hardware available to buy or a recommendation for a logic analyzer that will interface with can commander software tool or other opensource programs?

[@ye8488]

Nice job dude, ive been thinking for a while to do some like this.

[@padesmo]

jo man, nice video! I Drive an RX8 and also want to change the LCD Info text. can u now change text via the ODB port or do u need to connect on this connector behind the screen?

[@ronwilson896]

27:35 You area actually looking for 60 Ohms resistance between Can-H and Can-L. The two 120 Ohm terminating resistors are in parallel.

[@MatthewKuKanich]

You're correct, I was thinking of it from schematic design where there is a 120 ohm resistor directly between the two lines. When measuring it is indeed in parallel so it should read 60 ohms. If it reads 120 ohms then it's likely missing a termination resistor on one of the nodes. Thanks!

[@ronwilson896]

@@MatthewKuKanich All good. I'm looking forward to playing with the commander.

[@squishypotatos9654]

Where can I buy one????

[@jpcarnut]

Where can I buy the CAN commander?

[@CHIPSIMS-h2n]

Rabbit labs …soon but not yet.

[@CHIPSIMS-h2n]

Pre-order sales next week.

[@jpcarnut]

@@CHIPSIMS-h2n Put me on the list. I'll take the first one. I can't wait to try it on the Holley Fuel Injection CAN system (among others).

[@Diegorussod.r]

How can i preorder?

[@Michaelcneumann]

An entire community of Land Rover Discovery 1 and 2 owners are very interested in this. Many of us are pulling the old engine and ECU out and dropping LS6 engines in because of the need yet inability to tune the OEM ones

[@bennguyen1313]

I have a Flipper Zero and would love to try this! But I can't seem to find The Can Commander on Rabbit-Labs.. it doesn't help they don't have a search button :( BTW, any thoughts on the Can Triple by Mitch Minton Performance? (canb us) Also any tips on how to create a DBC file if there's nothing publicly available?

[@bigdilliams]

can you show us a man in the middle attach with a simple esp32 device?

[@logicman91]

I want this board would be an awesome tool. My goal slowly working towards installing a raspberry pi with lte hat and iot data sim to remote start my car for an opensource remote start and not pay a subscription other then data or text service. Already installed remote start with fob and immobilizer bypass myself.

[@JesHim-f3i]

When and where does it come out

[@DavidLindes]

Cool stuff. Do you have the hardware as a kit or anything? Might be nice to be able to get either a pre-built thing or at least a kit that can be assembled without having to source a bunch of parts and such.

[@EdonPalenchargaming]

How to buy or make the Cancommander

[@Atmatan]

❤️‍🔥❤️‍🔥❤️‍🔥

[@3DCharacterArt]

any plans to use Raspberry pi?

[@joepastafari]

love this

[@ACatttttt]

🔥🔥🔥🔥🔥

[@ACatttttt]

seeing your car like that makes me feel better about mine being torn apart

[@1000Tune]

Please help us in the racing community and crack the 2024 ford f150 ecu so we can get some aftermarket tuning done.

[@MatthewKuKanich]

That sort of crack would be easier to pull off with physical access to the ECU. Maybe I'll do a seminar on dumping flash to get the firmware and reversing it in Ghidra.

[@1000Tune]

@@MatthewKuKanich with your expertise I’m sure someone would be a donor. It’s so very well needed. I subscribed to your channel and will be watching. Any help is appreciated

[@rudymoralesjr]

@MatthewKuKanich That would be amazing! Bought a Flipper Zero just to be prepared for CAN Commander tinkering, but would love more to be able to tune my engine that has next to no aftermarket support. An ECU Ghidra crash course would be amazing!

[@mattsold1267]

⁠@@MatthewKuKanichplease make a seminar on how to use Ghidra in auto application and find obd2 pids and functions for the service modes. Need to find readiness functions 🙏Maybe more Beginner friendly? 😅 Also any idea on how to manipulate the messages sent by modules on the can network? Like somehow filtering the return bytes when requesting service modes with a scanner

[@tintruder224]

Great

[@tubehelpr]

very cool

[@danielhook8653]

Great info, but audio is a disaster

[@MatthewKuKanich]

I'm glad you got some good info from the video, I apologize for the audio issues. My mic had the noise suppression turned up way too high so it makes it sounds like a bunch of audio cuts every time I pause. Apologies

[@predragbalorda]

B.S. cyber security engineering? Faq me what they won't come up with just to get those tuition fees...