https://github.com/jakka351/ford-ecu-bruteforcer
Bruteforce Security Access on Ford ECU's
https://github.com/jakka351/ford-ecu-bruteforcer
0x27 bruteforce diagnostics ford j2534 securityaccess
Last synced: 8 months ago
JSON representation
Bruteforce Security Access on Ford ECU's
- Host: GitHub
- URL: https://github.com/jakka351/ford-ecu-bruteforcer
- Owner: jakka351
- Created: 2024-05-01T04:26:32.000Z (over 1 year ago)
- Default Branch: main
- Last Pushed: 2025-02-20T04:38:28.000Z (8 months ago)
- Last Synced: 2025-02-20T05:29:07.235Z (8 months ago)
- Topics: 0x27, bruteforce, diagnostics, ford, j2534, securityaccess
- Language: C#
- Homepage: https://testerpresent.com.au
- Size: 13.2 MB
- Stars: 27
- Watchers: 1
- Forks: 4
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# Ford-ECU-Bruteforcer
Bruteforce Security Access on Ford ECU's
I have tested this on an Audio Control Module, an Audio Interface Module and an Instrument Cluster with success. Uses the keybag from the Ford Hack to bruteforce 0x27 Security Access, and finds a matching key that unlocks the module. Options to select Midspeed or High Speed CAN, and options to select which type of diagnostic session you want to try the bruteforce in, handles 0x7F errors by aborting the bruteforce attempt. This should work on any Ford ECU that is pre 2011, assuming it is a 3 Byte Seed and a 5 Byte Key.
## Update on 17/10/2024
Uploaded the visual studio solution including all code, so people can properly fork and play with the software.
## Update on 24/05/2024
I have rejigged the user interface and implemented 18 Volts FEPS on OBD pin 13, so this will now hypothetically also be able to unlock Ford Powertrain Control Modules that require FEPS voltage to unlock security access. Also added a bunch of keys pulled out of Forscan with Ghidra.
## Interface
Development done with an OBDxPro FT J2534 interface. https://obdxpro.com/product/obdx-pro-fx-ford-obd2-j2534-diagnostics-and-tuning/
## User Interface Updated 24/05/24
