Go Back   DODGE RAM FORUM - Dodge Truck Forums > Dodge Ram Generations Forum > 4th Gen : 2009 - Present > Audio & Electronics


Audio & Electronics

Hacking UConnect update data


This is a discussion on Hacking UConnect update data within the Audio & Electronics forums, part of the 4th Gen : 2009 - Present category!
Looks like I'd need to have a different firmware set or iso to jailbreak and get root access... I assume ...


Like Tree7Likes

Reply
 
LinkBack Thread Tools Display Modes
Old 01-04-2017, 11:22 AM   #11 (permalink)
 
LoneJeeper's Avatar
Junior Member
 
Join Date: Jan 2017
Location: Earth
Age: 37
Posts: 9

Ram Year: 2013
Engine: Hemi 5.7
Default
Looks like I'd need to have a different firmware set or iso to jailbreak and get root access... I assume I can do some clever google dorking to find the iso's I'd need but haven't given it much time.

I've got a plan to dump the entire filesystem to my thumbdrive via sh script. I've got a QNX emulation setup started to test with. If I can emulate the UConnect setup in a VM it gives me a lot more power (and I don't risk bricking my truck).

Hopefully the process Valesek used is still viable, I haven't found anyone trying it since updated firmware from the Wired/Jeep fiasco.

There's some ferrari-related interface stuff under /usr/share/SKINS/Ferrari, unless you want a FIAT logo as your wallpaper, that's there, too.


Sponsored Ad
Register to remove this ad.


__________________
ಠ_ಠ
LoneJeeper is offline   Reply With Quote
Old 01-04-2017, 11:38 AM   #12 (permalink)
Supporting Member

 
Join Date: Apr 2016
Location: CT
Age: 29
Posts: 1,327

Ram Year: 2013
Engine: 5.7 HEMI
Default
Originally Posted by Ram Man View Post
These are my favorite types of threads. Taking the path less followed!

The different color schemes only apply to the newer model uconnects so it would be awesome to have them on the 13 too!

Check out mr_z_automotive on Instagram or zautotech.com, I have been following him for awhile, he does some great work on the uconnects in chargers/challengers.


Zautotech doesn't do anything with the UConnect software itself. His stuff commands modules and sets configuration options over the CAN bus.
00R/T is offline   Reply With Quote
Old 01-04-2017, 02:47 PM   #13 (permalink)
 
LoneJeeper's Avatar
Junior Member
 
Join Date: Jan 2017
Location: Earth
Age: 37
Posts: 9

Ram Year: 2013
Engine: Hemi 5.7
Default
The UConnect does (or at least did) have the same ability. The jeep hack early last year used a service that was open on the Sprint network to gain access and then send message through the UConnect to CAN to disable brakes, muck with HVAC, etc.

A lot of the CAN stuff via ODB2 interface used to simply use packet flooding to pull things off (it might still, I haven't kept up). When the CAN processor received more messages from the ODB2 hardware than the actual hardware it simply followed the direction of whoever sent the most messages, or the message that got there first, essentially.

That's why CAN needs packet authentication and authorization, WAN/LAN networks started out with the same problems, but we as a species just can't seem to avoid making the same mistakes over and over. There's not a technical reason why spoofing should still work, it boils down to laziness and/or cost.


__________________
ಠ_ಠ
LoneJeeper is offline   Reply With Quote
Old 01-04-2017, 03:10 PM   #14 (permalink)
Supporting Member

 
Join Date: Apr 2016
Location: CT
Age: 29
Posts: 1,327

Ram Year: 2013
Engine: 5.7 HEMI
Default
Right, you can control pretty much anything in the vehicle via one of the CAN buses. My point was that zautotech has done nothing directly to the radios themselves. It accomplishes things like activating the backup camera or SRT pages by modifying the BCM configuration so the radio thinks it's in a car that is supposed to have those options. It's a very different method and has far less potential than what you would get if you could execute custom code on the radio.
00R/T is offline   Reply With Quote
Old 01-05-2017, 08:16 AM   #15 (permalink)
 
LoneJeeper's Avatar
Junior Member
 
Join Date: Jan 2017
Location: Earth
Age: 37
Posts: 9

Ram Year: 2013
Engine: Hemi 5.7
Default
yep, I'm with you, the UConnect is a better target than ODB2 control.


__________________
ಠ_ಠ
LoneJeeper is offline   Reply With Quote
Old 01-11-2017, 09:38 AM   #16 (permalink)
 
LoneJeeper's Avatar
Junior Member
 
Join Date: Jan 2017
Location: Earth
Age: 37
Posts: 9

Ram Year: 2013
Engine: Hemi 5.7
Default
Updated my UConnect with some custom script work and have a full filesystem copy on a USB drive. They do a verification of the .iso at first, but you can pull the USB after the first reboot and swap in a different USB with a hacked .iso. It does not appear to reverify the iso. I edited some of the .sh files to perform a backup to the USB disk and then also copy the entire filesystem to the same.

It appears to also let you reinstall the same firmware version again, so you'd be able to make multiple attempts.

For now, I'm working on copying the filesystem into the QNX VM to see if I can emulate UConnect on my laptop.


__________________
ಠ_ಠ
LoneJeeper is offline   Reply With Quote
Old 01-11-2017, 06:30 PM   #17 (permalink)
Member
 
Join Date: Nov 2016
Location: Victoria, Canada
Posts: 38

Ram Year: 2016
Engine: 3.6
Default
That's great progress you are making. Would like to see the future things you can pull-off using a VM environment where you are not worried about bricking your Uconnect!!
Brew99 is offline   Reply With Quote
Old 01-12-2017, 08:11 AM   #18 (permalink)
Member
 
Join Date: Jun 2014
Age: 45
Posts: 43

Ram Year: 2014
Engine: 6.7L
Default
Awesome work!
HeavyOne is offline   Reply With Quote
Old 01-12-2017, 08:34 AM   #19 (permalink)
 
LoneJeeper's Avatar
Junior Member
 
Join Date: Jan 2017
Location: Earth
Age: 37
Posts: 9

Ram Year: 2013
Engine: Hemi 5.7
Default
When I get something worth sharing, I'll prop up a github repo and share the code/vm files.


__________________
ಠ_ಠ
LoneJeeper is offline   Reply With Quote
Old 01-12-2017, 10:47 PM   #20 (permalink)
Junior Member
 
Join Date: Jan 2017
Age: 36
Posts: 15

Ram Year: 2014
Engine: Hemi 5.7
Default
In for update

Sent from my SM-N910T using Tapatalk
timjthomas23 is offline   Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
Thread Thread Starter Forum Replies Last Post
Uconnect Update FlynDutchman Audio & Electronics 67 04-17-2016 12:05 PM
uconnect 5.0 update 9/8/14 luigi1285 Audio & Electronics 19 09-25-2014 12:56 PM
Can UConnect use phones data plan? jc55 Audio & Electronics 1 06-01-2014 04:02 PM
Uconnect Update? Doc221 Audio & Electronics 5 07-27-2013 01:22 PM
UConnect update for 5/21/13 jwb Audio & Electronics 124 07-08-2013 10:07 AM

<




GM Truck Forum
Ford Raptor Forum
Chevy Tahoe Forum
Chevy Cobalt Forum
Chevy Camaro Forum
Toyota FJ Cruiser Forum
Ford Truck Forum
88-98 GM Truck Forum
73-87 Gm Truck Forum
Ford Expedition Forum
Chevy Equinox Forum
Chevy Cruze Forum
Jeep Liberty Forum
Jeep Forum
Dodge Ram SRT10 Forum
Chrysler 200 Forum
Scion xD Forum
Scion xB Forum
Dodge Challenger Forum
SRT Forum
Nissan Titan Forum
Buick Enclave Forum
Cadillac Forum
Cadillac XTS Forum