ECM Cracking

[the_road_less_traveled]

Ok, so I used to be a service engineer for a Fortune 500 engine designer, manufacturer, and servicer. As such, I had all the factory tools and proprietary software needed to access ECM's. Toward the end of my stent there I was doing some developmental encoding and ECM programming. So I understand how to read hexidecimal coming down the pipeline to get information and all, but since I was given the tools to access and edit the ECM, I dont fully understand how you gain entry into the ECM. I'd imagine its no different than ping hacking a pc, but I'm not certain.

Anyone have any USEFUL feedback? I already know they'll be the usual non-contributing comments, but lets keep this to those that understand what I'm asking and have useful information!

Thanks!!

[BPMSport]

You have to have the proper flashing tools. If you want a stock file Ill send you one but without knowing the map locations its a shot in the dark.

[the_road_less_traveled]

Originally Posted by Mike Benvo

You have to have the proper flashing tools. If you want a stock file Ill send you one but without knowing the map locations its a shot in the dark.

Sure, this is another area I'm unsure of as I dont know what protocol BMW uses. Working for the factory, we used CANalyzers on J1708 and J1939 protocal networks. What protocol does BMW use? What analyzers can access BMW ECM's?