MEDC17 UDS Flashing Exploit

Just finished writing the backbone of my flashtool last week. Can flash any MEDC17(presently only UDS based). Here’s a snippet of a EDC17C46 being flashed on bench:

It’s not just an FRF flash. Any modified file can be flashed(code and data area). An exploit in the bootloader is leveraged to allow RSA check(TPROT) to be bypassed and allow unsigned code to execute.

Presently using Tactrix Openport 2.0(J2534) as an interface and Arduino Due for logging CAN traffic.

MED17 MapSwitch

A lot of tuners contacted us for a solution to switch between maps on the newer generation MED17 ECUs. After a few weeks of rigorous testing we have been able to come up with a robust solution. Here is a video of it in action on an VW Golf MED17.5:

Contact us for a quote and we would be happy to design a solution suiting your requirements.