- Mon Mar 08, 2021 4:01 am
#52732
The IoT Box communicates via RS485 with the BMS and ESC. I did some Pythoncode to readout the actual speed and driven meters. I wasnt (now) able to unlock the Scooter via RS485 but in theory with the captured logs of the unlocking process and the RS485 USB Interface, finding the unlocking procedure should be possible.
Ill try to get some time this week to search and document my results, maybe we can hack this old scooter a bit
I had my hands also on two old Circ scooters. Inside the IoT Box is a nRF51802 SoC that seems to be "The Brain".miloniko wrote: ↑Thu Feb 04, 2021 4:10 am
On weekend my goal is to disassemble the whole scooter, to check what wires, plugs (julet), goes through the scooter. Maybe I can understand then, what wire does what.
The "easiest" way from my point of view, would be, to "flash" the system to original firmware, so the basic functionality works only, without GPS and SIM Card. Do ýou have some ideas?
KR
The IoT Box communicates via RS485 with the BMS and ESC. I did some Pythoncode to readout the actual speed and driven meters. I wasnt (now) able to unlock the Scooter via RS485 but in theory with the captured logs of the unlocking process and the RS485 USB Interface, finding the unlocking procedure should be possible.
Ill try to get some time this week to search and document my results, maybe we can hack this old scooter a bit
