We get a lot of emails requesting classes on hacking ECUs to modify code and add custom functionality.After some deliberation we decided to do a 2-day class in collaboration with advancedsecurity.training Dmitry was really helpful in setting everything up and getting the live stream goingWe showed the following ECUs-1. BMW MG12. Audi MED17.1.623. VW EDC17C464. […]
Nitrous/water meth control using stock ECU(VW/Audi/BMW/etc)
We were recently asked to add a set of port injectors and nitrous in an engine with full control over it. So we reprogrammed the ECU to not only control the injectors but to adjust the values live from OBD port! Check out the video below: We started off by looking for non-essential pins that […]
Simos18 mapswitch
Switch maps with any combination such as Brake + acc pedal or brake + cruise set. Check out the video below:
Mclaren 650S Multimap
Another world first! Mclaren 650 custom code including mapswitch and rolling LC now available, here’s a video:
BMW S55 multimap
Made mapswitch for MEVD17 ECUs found in BMW. Stay tuned for features on F90 ! TC29x is a pain but making huge headway into the new MG1 platform 🙂 Check out this video of S55 multimap with Acc pedal+brake in the meantime:
Mercedes MED1775 multimap
So a first for us here at Tangent and worldwide! Great car to have multiple modes on. Maps are switched with Acc pedal + brake. A video here showing how it works: Listen to that engine roar!
EGS52 CAN message reversing
So a tuner and long time map switch partner asked us if we could reverse the CAN messages and modify the message bytes on his EGS52 gearbox on W203 Mercedes Of course! some testing and we had a working solution with all necessary mods Here’s a video showing the Winter Mode and D+- buttons being […]
Mclaren 720s multimap
Switch upto 9 map sets of unlimited number of maps(flash storage is the only limit!)
MEDC17 UDS Flashing Exploit
Just finished writing the backbone of my flashtool last week. Can flash any MEDC17(presently only UDS based). Here’s a snippet of a EDC17C46 being flashed on bench: It’s not just an FRF flash. Any modified file can be flashed(code and data area). An exploit in the bootloader is leveraged to allow RSA check(TPROT) to be […]
Audi RS3 MED17.1.62 Mapswitch
On this engine there are a lot of maps for timing control. I have developed a solution to switch all the maps(84!) in the IgnCtl module. This means you have full control on timing for E85 setups.Another solution to change timing by adding a correction factor from a separate map is being developed. Here’s a […]