An Electric Scooter Community on a Mission to Stamp out Transportation Mediocrity.

Brains of the e-scooter. Topics covering controllers, throttles, etc in this section.
By HelgeG
Posts
#52732
miloniko wrote:
Thu Feb 04, 2021 4:10 am

On weekend my goal is to disassemble the whole scooter, to check what wires, plugs (julet), goes through the scooter. Maybe I can understand then, what wire does what.
The "easiest" way from my point of view, would be, to "flash" the system to original firmware, so the basic functionality works only, without GPS and SIM Card. Do ýou have some ideas?

KR
I had my hands also on two old Circ scooters. Inside the IoT Box is a nRF51802 SoC that seems to be "The Brain".

The IoT Box communicates via RS485 with the BMS and ESC. I did some Pythoncode to readout the actual speed and driven meters. I wasnt (now) able to unlock the Scooter via RS485 but in theory with the captured logs of the unlocking process and the RS485 USB Interface, finding the unlocking procedure should be possible.

Ill try to get some time this week to search and document my results, maybe we can hack this old scooter a bit To view images REGISTER or LOGIN for full access.

By miloniko
Posts
#52872
HelgeG wrote:
Mon Mar 08, 2021 4:01 am
miloniko wrote:
Thu Feb 04, 2021 4:10 am

On weekend my goal is to disassemble the whole scooter, to check what wires, plugs (julet), goes through the scooter. Maybe I can understand then, what wire does what.
The "easiest" way from my point of view, would be, to "flash" the system to original firmware, so the basic functionality works only, without GPS and SIM Card. Do ýou have some ideas?

KR
I had my hands also on two old Circ scooters. Inside the IoT Box is a nRF51802 SoC that seems to be "The Brain".

The IoT Box communicates via RS485 with the BMS and ESC. I did some Pythoncode to readout the actual speed and driven meters. I wasnt (now) able to unlock the Scooter via RS485 but in theory with the captured logs of the unlocking process and the RS485 USB Interface, finding the unlocking procedure should be possible.

Ill try to get some time this week to search and document my results, maybe we can hack this old scooter a bit To view images REGISTER or LOGIN for full access.
Hi!
I am also trying to read out data via bluetooth with success, but still not get unlocked by my own, only with an app. Should be possible in the future.

I got some data, better say an array of data, but it is hard to interpret what information meens what - can you help me reading out the speed and driven meters? What value is that in the byteArray? Or how does the data look like after your reading out?

KR
Milo

By MJPVDH
Posts
#53679
Hello, I am new here.

I have recently acquired a Circ V2 step e-scooter.

Is there anyone who has already upgraded this model? Or got the sim card working so you can put your own sim card in it?

I would like to hear it.

Greetings Martin
To view images REGISTER or LOGIN for full access.

To view images REGISTER or LOGIN for full access.

By rimidalv
Posts
#54236
HelgeG wrote:
Mon Mar 08, 2021 4:01 am
miloniko wrote:
Thu Feb 04, 2021 4:10 am

On weekend my goal is to disassemble the whole scooter, to check what wires, plugs (julet), goes through the scooter. Maybe I can understand then, what wire does what.
The "easiest" way from my point of view, would be, to "flash" the system to original firmware, so the basic functionality works only, without GPS and SIM Card. Do ýou have some ideas?

KR
I had my hands also on two old Circ scooters. Inside the IoT Box is a nRF51802 SoC that seems to be "The Brain".

The IoT Box communicates via RS485 with the BMS and ESC. I did some Pythoncode to readout the actual speed and driven meters. I wasnt (now) able to unlock the Scooter via RS485 but in theory with the captured logs of the unlocking process and the RS485 USB Interface, finding the unlocking procedure should be possible.

Ill try to get some time this week to search and document my results, maybe we can hack this old scooter a bit To view images REGISTER or LOGIN for full access.

Any news?

By soadzoor
Posts
#54539
miloniko wrote:
Thu Feb 04, 2021 4:10 am
m0rtyr wrote:
Mon Feb 01, 2021 5:38 pm
I also have a few of this scooters, would you be able to share the app? My approach would be to bypass it, I think its possible.

Meanwhile be careful because Circ had to stop ops because a fork problem
ok, thanks for info, I did not know that! I will check the current state of the fork.
Regarding the app: I am sorry, I can only take screenshot of the app, the username and password I got from my seller. It would be interesting to find out, where the url service go out, on what server, but anyway, my goal is to remove the IOT and make it for personal use, but really, I read so much about, debugging, serial data, arduino, tx - rx, and so on and so on... My Problem is, I do not know exactly how to find out, what wire should be soldered from scooter to arduino and vica versa.
On weekend my goal is to disassemble the whole scooter, to check what wires, plugs (julet), goes through the scooter. Maybe I can understand then, what wire does what.
The "easiest" way from my point of view, would be, to "flash" the system to original firmware, so the basic functionality works only, without GPS and SIM Card. Do ýou have some ideas?

KR
I have successfully decompiled this app, and I can assure you that the username and password don't go out to any server, they're only checked within the app. I've tried it without internet connection (just to be sure) and it works fine. I'm working on a new app by the way To view images REGISTER or LOGIN for full access.


Cheers

NEW BIRD ONE - MODEL 590

Not to spam but this is an update. I finally got t[…]

Bird 2

I will order the parts. Is just m365 pro enough?

Tier ES400 unlock development

These keys are for different locking-mechanisms.

https://www.ebay.com/itm/302935557367 I have been[…]