Go Back   DODGE RAM FORUM - Dodge Truck Forums > Dodge Ram Generations Forum > 4th Gen : 2009 - Present > Audio & Electronics


Audio & Electronics

Hacking UConnect update data


This is a discussion on Hacking UConnect update data within the Audio & Electronics forums, part of the 4th Gen : 2009 - Present category!
Hello all. Perhaps my google-fu is failing me, as I didn't find much related to what I'm up to.... so ...


Like Tree7Likes

Reply
 
LinkBack Thread Tools Display Modes
Old 01-03-2017, 02:12 PM   #1 (permalink)
 
LoneJeeper's Avatar
Junior Member
 
Join Date: Jan 2017
Location: Earth
Age: 37
Posts: 9

Ram Year: 2013
Engine: Hemi 5.7
Default Hacking UConnect update data
Hello all.

Perhaps my google-fu is failing me, as I didn't find much related to what I'm up to.... so far what I've found is interesting.

I have a fair amount of hardware and software hacking experience under my belt, so when I found out that I'm eligible for a UConnect update, and that I can apply it myself the wheels in my brain started turning. At this point, I'm mostly curious as to if this has been explored or if anyone has a source on it that I couldn't find.

It is possible to 'explode' the update file, explore the updates' file structure, files themselves, make edits, recompile the update files and the truck will use this new data to update the UConnect system.

Obviously, the usual warnings and caveats regarding warranty, bricking, etc all apply here.... I also think it is a huge mistake to put these files into the hands of end users as opposed to it being a dealer-only operation.

I've only given this a couple hours, but I've found where I could change dashboard colors, icons, and some text. It appears I can also export a system backup back out to my USB drive and run whatever shell commands I'd want. My end goal is to have my truck connect to the wireless internet at my house and transfer files to USB storage.

Other interesting finds:

Proxy options:
* Set up the truck to proxy all traffic through my home lab.
* This lets me see what requests and data are being sent/received and intercept any/all files, plus inject my own.

Sat/Nav setup options:
* I have Sat/Nav, so I'd have to see how other update files differ, but perhaps you could enable it through here.

Cameras:
* I have seen some camera information in the .lua code, need to dig here more.

Button action data:
* decompiling the *.swf files, I've seen some ActionScript concerning button names and corresponding scripts which I'd have to pull from the filesystem, but I can run my own edited .sh scrips... I just don't know, yet, how to trigger a second update once I've got those files.


I haven't yet seen where there is any tamper detection or MD5/SHA checksum going on, nor have I found where it is tied to the VIN. Given the RAX hack needs the VIN, it's probably in there somewhere I haven't found... I expect a method very similar to what I'm up to is used in the RAX kit.

So, anyone else know of some research into this area?
SitKneelBend likes this.


Sponsored Ad
Register to remove this ad.


__________________
ಠ_ಠ
LoneJeeper is offline   Reply With Quote
Old 01-03-2017, 02:15 PM   #2 (permalink)
Member
 
Join Date: Dec 2016
Age: 35
Posts: 98

Ram Year: 2014
Engine: Hemi 5.7
Default
This is interesting. I'll have to take a look.
lowvaluetarget is offline   Reply With Quote
Old 01-03-2017, 02:33 PM   #3 (permalink)
 
LoneJeeper's Avatar
Junior Member
 
Join Date: Jan 2017
Location: Earth
Age: 37
Posts: 9

Ram Year: 2013
Engine: Hemi 5.7
Default
Some of the Theme spec, looks like most of the interface is .swf. There's a call for the wallpaper toward the end.

I'd be glad to share any/all of what I have or have found.

package {
public class RAM142LonghornTanThemeDocumentClass extends BaseThemeDocumentClass {
override protected function defineFontSWFFileName():void{
super.defineFontSWFFileName(); mFontSWFFileName = "NimbusSanL-Regu.swf"; } override protected function defineColorValues():void{
super.defineColorValues(); mColorValues["MainThemeColor"] = {
hexValue:12671279, hue:17, saturation:76, brightness:76, contrast:0 }; mColorValues["SecondaryThemeColor"] = {
hexValue:12142105, hue:17, saturation:86, brightness:73, contrast:0 }; mColorValues["BarThemeColor"] = {
hexValue:10446654, hue:25, saturation:61, brightness:62, contrast:0 }; } override protected function defineStyles():void{
super.defineStyles(); mBarGraphic = {
method:"colorTransform", alpha:1, color:colorValues["BarThemeColor"] }; } } }//package package {
import flash.display.*; public dynamic class WallpaperBitmapData extends BitmapData {
public function WallpaperBitmapData(_arg1:int=640, _arg2:int=480){
super(_arg1, _arg2); } } }//package package {
import flash.display.*; public dynamic class ThumbnailBitmapData extends BitmapData {
public function ThumbnailBitmapData(_arg1:int=200, _arg2:int=90){
super(_arg1, _arg2); } } }//package


__________________
ಠ_ಠ
LoneJeeper is offline   Reply With Quote
Old 01-03-2017, 03:33 PM   #4 (permalink)
 
LoneJeeper's Avatar
Junior Member
 
Join Date: Jan 2017
Location: Earth
Age: 37
Posts: 9

Ram Year: 2013
Engine: Hemi 5.7
Default
Good stuff here, should have thought to look up these two, they did the Jeep hack wired lost their minds about.

http://ioactive.com/pdfs/IOActive_Re...ar_Hacking.pdf


__________________
ಠ_ಠ
LoneJeeper is offline   Reply With Quote
Old 01-03-2017, 05:57 PM   #5 (permalink)
Supporting Member

 
Join Date: Apr 2016
Location: CT
Age: 29
Posts: 1,275

Ram Year: 2013
Engine: 5.7 HEMI
Default
There's a guy on a Jeep forum that has done some promising work. There is a checksum verification in the boot loader, but it may be possible to bypass it. I messed with the files for a few days but ended up putting it on the back burner because I wanted to focus my tinkering time on my CAN bus projects.

I'm looking forward to seeing what you find.
R.L.K. and SitKneelBend like this.
00R/T is offline   Reply With Quote
Old 01-04-2017, 09:11 AM   #6 (permalink)
 
BAMF's Avatar
Member
 
Join Date: May 2016
Age: 36
Posts: 63

Ram Year: 2015
Engine: Hemi 5.7
Default
Way over my head.... Haha. Interesting though

Sent from my SM-N910V using Tapatalk
R.L.K. likes this.
BAMF is offline   Reply With Quote
Old 01-04-2017, 09:15 AM   #7 (permalink)
Senior Member
 
Join Date: Dec 2016
Posts: 186

Ram Year: 2013
Engine: 5.7L
Default
I'd love to find an ability to manipulate the comfort settings to adjust the auto on air conditioned seat function at a lower temp like say 72. I hate having to click the air seats on every time lol first world problems.
adrianp89 likes this.
tcazes is offline   Reply With Quote
Old 01-04-2017, 09:23 AM   #8 (permalink)
Senior Member
 
Join Date: Sep 2015
Location: Tampa Bay, FL
Age: 27
Posts: 1,603

Ram Year: 2013
Engine: Hemi 5.7
Default
^^ This, except I want opposite lol. I want heated seats to turn on at 65.


__________________
2013 1500 Laramie 4x4 Brilliant Black
BakFlip G1 w/ BakBox | SpinTech Muffler | 15% Tint |PAC BCI-CH41v2 & VS41 w/ Front & Side Cameras | Bullet Antenna | Waiting to be installed: JBL 660GTIs | JL Audio 13TW5 | Alpine PDX-V9 | PAC AP4-CH41
2016 Dodge Charger R/T Road & Track Go Mango
adrianp89 is offline   Reply With Quote
Old 01-04-2017, 09:30 AM   #9 (permalink)
Senior Member
 
Join Date: Dec 2016
Posts: 186

Ram Year: 2013
Engine: 5.7L
Default
Lol you and my wife both. I'd like heat to kick on at 55-60 and below and air to come on around 70-72 and above
tcazes is offline   Reply With Quote
Old 01-04-2017, 09:54 AM   #10 (permalink)
 
Ram Man's Avatar
Senior Member
 
Join Date: Jul 2010
Location: FL
Name: Daniel
Posts: 441

Ram Year: 2013 Sport
Engine: 5.7
Default
These are my favorite types of threads. Taking the path less followed!

The different color schemes only apply to the newer model uconnects so it would be awesome to have them on the 13 too!

Check out mr_z_automotive on Instagram or zautotech.com, I have been following him for awhile, he does some great work on the uconnects in chargers/challengers.


__________________
2013 CC loaded Sport- CAI, Catch Can, Diablo tuned, Weathertechs, EZ tailgate assist, Morimoto 5500k HIDs, Leveled, Toyo ATII's 275/65/20

2009 PONTIAC G8-GONE
2004 RAM 1500 QC SLT-GONE
Ram Man is offline   Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
Thread Thread Starter Forum Replies Last Post
Uconnect Update FlynDutchman Audio & Electronics 67 04-17-2016 12:05 PM
uconnect 5.0 update 9/8/14 luigi1285 Audio & Electronics 19 09-25-2014 12:56 PM
Can UConnect use phones data plan? jc55 Audio & Electronics 1 06-01-2014 04:02 PM
Uconnect Update? Doc221 Audio & Electronics 5 07-27-2013 01:22 PM
UConnect update for 5/21/13 jwb Audio & Electronics 124 07-08-2013 10:07 AM

<




GM Truck Forum
Ford Raptor Forum
Chevy Tahoe Forum
Chevy Cobalt Forum
Chevy Camaro Forum
Toyota FJ Cruiser Forum
Ford Truck Forum
88-98 GM Truck Forum
73-87 Gm Truck Forum
Ford Expedition Forum
Chevy Equinox Forum
Chevy Cruze Forum
Jeep Liberty Forum
Jeep Forum
Dodge Ram SRT10 Forum
Chrysler 200 Forum
Scion xD Forum
Scion xB Forum
Dodge Challenger Forum
SRT Forum
Nissan Titan Forum
Buick Enclave Forum
Cadillac Forum
Cadillac XTS Forum