An Electric Scooter Community on a Mission to Stamp out Transportation Mediocrity.

Covers electric scooter models whether shared or for consumers.
By Chast
#57574
brightgloaming wrote:
Sat Jan 28, 2023 8:23 pm
I believe I have found all of the CAN bus messages needed to unlock the ES400A scooter (display + battery + motor controller). I will open source all of the findings on GitHub when i make sure that they work well. I will post an update here when it's finished (should take less than a month).
In the meantime, be careful of the user Chast - he is a scam and doesn't send you any source code when he receives the money.
Good luck.
As for your statement cheater, you got a hex file for arduino nano. Everyone who paid got it. You wanted the source code for arduino to show off your rework on github. If in a moment I will post screenshots from Discord where you blackmailed me with sharing the source code.
So scammer you claim to have developed the codes? You've analyzed what the arduino nano is sending and that's it. you are a cheater
By Chast
#57575
brightgloaming wrote:
Sat Jan 28, 2023 8:23 pm
I believe I have found all of the CAN bus messages needed to unlock the ES400A scooter (display + battery + motor controller). I will open source all of the findings on GitHub when i make sure that they work well. I will post an update here when it's finished (should take less than a month).
In the meantime, be careful of the user Chast - he is a scam and doesn't send you any source code when he receives the money.
Good luck.
Image
By Chast
#57576
Chast wrote:
Mon Jan 30, 2023 2:31 pm
brightgloaming wrote:
Sat Jan 28, 2023 8:23 pm
I believe I have found all of the CAN bus messages needed to unlock the ES400A scooter (display + battery + motor controller). I will open source all of the findings on GitHub when i make sure that they work well. I will post an update here when it's finished (should take less than a month).
In the meantime, be careful of the user Chast - he is a scam and doesn't send you any source code when he receives the money.
Good luck.
Image
Image
Image
Image
By Chast
#57577
Dirty rot. Still saying you didn't get the code? How much information on github is yours and how much is stolen from someone else? You are just a scammer impersonating someone else's work.
You don't even know what data frames do in CAN.
You don't know when they are sent and why.
You don't even know which keys they are.
You got a hex file. You uploaded it to arduino nano. You logged the CAN logs and brag about discovering everything?
you bastard.

Information about starting the scooter.
CAN instruction logging during rental includes only engine controller and display controller activation instructions.
When starting the IOT, the keys are entered into the controller, and only then. That is why many people get tired of starting the scooter.
By Chast
#57578
We reveal the cards

1,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x02181606,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x08,X| 01 00 1E 01 01 00 02 00
2,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x03FF1601,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x08,x| 6E 50 00 00 00 00 00 00
3,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x03FF1602,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x08,x| F2 43 27 00 00 00 00 00
4,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x02FF2602,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x08,x| 98 40 EC DB 09 D1 69 0B
5,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x05124609,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x07,x| 03 00 03 70 03 E8 00
6,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x05124609,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x07,x| 03 00 01 B8 03 CA 00
7,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x02203606,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x08,x| 01 01 00 01 00 01 00 00
8,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x04FF3400,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x08,x| 00 00 00 00 00 00 00 00
9,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x05124500,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x02,x| 01 02
10,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x02FF2602,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x08,x| EE F8 AA D3 2C 1C DF 1F
11,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x05124501,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x02,x| 01 17
12,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x03FF1500,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x08,x| 00 00 00 CE 00 00 00 00
13,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x03FF1501,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x08,x| 00 00 00 0D 00 00 00 00
14,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x05124502,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x08,x| 52 50 31 33 53 32 30 41
15,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x05124503,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x08,x| 00 13 09 18 00 00 0D 6A
16,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x04FF3502,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x04,x| 00 6F 00 66
17,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x05124504,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x01,x| 13
18,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x03FF1502,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x08,x| 01 00 00 00 00 00 00 00
19,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x03FF1503,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x08,x| 01 00 00 00 00 00 00 00
20,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x03FF1504,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x08,x| 00 00 00 13 00 00 00 00
21,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x05124611,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x08,x| 00 64 25 FA 00 00 21 64
22,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x04FF3400,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x08,x| 00 00 00 00 00 00 00 00
23,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x02FF2602,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x08,x| 27 F0 D7 53 29 3E 33 5B
24,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x05124612,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x08,x| 00 00 00 00 00 00 00 00
25,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x05124613,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x08,x| 00 00 00 00 00 00 00 00
26,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x05124614,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x08,x| 0F 94 05 0F 8C 0A 00 08
27,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x03FF1601,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x08,x| 6E 50 00 00 00 00 00 00
28,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x03FF1602,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x08,x| 00 00 05 00 00 00 00 00
29,12:09:07.598,ÎŢ,ch1,·˘ËÍ,0x03FF1400,ĘýľÝÖˇ,Ŕ©ŐąÖˇ,0x08,x| 00 00 00 00 00 00 00 00
By Chast
#57581
You need to write rolling code. During operation, an incremental code is sent to the battery. Or drill a 3cm hole with a hole saw and solder the jumper.

The scooter can be started with AT commands. There is also the possibility of unlocking via BT after changing the eeprom batch.
As for the info on NFC. It's not a reader. This is an NFC TAG.

Unfortunately, the information will not be made public. Waste of my time and money invested.
By Scootermansussex
#57582
Drill hole and solder jumper ? Do you mean solder onto battery negative to bypass BMS output negative or is there some other way sorry for all questions I not as clever as you
  • 1
  • 18
  • 19
  • 20
  • 21
  • 22
  • 28

Any one got any info on beryl bikes I seen a few i[…]

Hej Guys got my hands on this double battery pac[…]

As this was a rental version whos overstock was ev[…]

This last transistor needs to be soldered. https:[…]