jilleb / mib2-toolbox Goto Github PK

Hey, I realized that all MIB2High units have a DLNA service working on port 49152 which is based on https://github.com/plutinosoft/Platinum and I was thinking of fuzzing the binary to find a vuln.

I know that this isn't an issue, just didn't know how else to contact you.
Please hit me up on yal (at) tuta.io

hi, jilleb. On the audi A7 A8 Q8, the screen is full touch, and there is no menu button. Would you like to know how to enter the green screen mode?As far as I know, two fingers in the upper right corner of the screen long press to enter engineering mode. Thank you so much! The firmware version of my car is MH2p_US_AUG35_P2539.

Not to be rude, but some people really shoudn't have a green menu in their cars... I get many many mails on a daily basis from people who think they don't need to read any manual or warning, and mess up their systems... 🤕

These people really need a button that removes the entire green menu and all of its features.
I think it's best if this will be a button with the name "FIX ALL YOUR ISSUES" 😜

Hello,

Thank you for your awesome job with the toolkit!

Unfortunately it dosnet work for my skoda. My firmware is 1433 and no matter what I do, if I use USB stick or a SD card (16 and 32 GB) in slot 1 or 2, if the master the or toolbox v2 it will show me constantly metafile2.txt error :/ hope I will be able to flash soon too :)

Possible to enable Google Traffic overlay you get with Carnet? My device has WiFi client connection to my phone so it has internet, but I do not have Guide & Inform which this requires. I tried to play around with vcds a while back and could get Traffic option to show up (View button in Navigation) but it wanted a license every time I tapped it... So the feature is not missing it is just being blocked. Any way around it through your exploits?
Thanks!

Hi Jille. As Discover Pro headunits (at least in Europe) has WiFi module it seems very much that it is only the software that is the limitation. Can you dig into if this could be activated? I know you do stuff for free and we appreciate it but I would really like to donate a good amount if you found a way... And I dont think Im the only one 👍

Great work!

I have one question, is it possible to recover to factory state after installation?

Skoda Kodiaq Columbus not work, not with v2.0....same error metainfo2.txt

Y try with sdcard formated exfat and usbstick formated fat32. All files correct extracted in sdcard/stick 🙁 same error.

Hello, I took some time to analyze the firmware for audi. I would like to ask if you know which files are responsible for the language. I would like to change a few words.

Hi!
in first, thank you for the amazing work 👍
In future you can add Compostion Media support? Android Auto patch is a very useful feature.

Is there anyway to flash this on a "hacked" (component protection removed, etc) MIB2 Discover Pro unit with 1161 software?

The code is currently :
sed -i 's/drawRockTree = false/drawRockTree = true/g' /gemib/drivers.ini

And it should be modifying this entry in drivers.ini, but I currently don't understand why it's causing an error:

hi , Andy.

Please tell me how it's possible to make CarPlay work wireless ??
i am doing activation of harman mib2.

Yes in a Audi its working, but the question is, how to get this functionallity into our VW software, because in the audi its a MIB2 high system like ours.

Originally posted by @andy0172 in #22 (comment)

pible a script to put on SD card to activate the green menu of MIB1 VW because my MIB1 and block on Metainfo2.txt

Hi guys! I'm another one who got metainfo read error on VW MIB2.5 v1367 (bootloader 210, application 8863)
@jilleb is it possible to add script files manually?
Mount sdcard and cp all of it to mib filesystem?

Thank you!

Originally posted by @darkmag666 in #1 (comment)

Is it possible to make so that bluetooth is connected to a secondary phone (for taking calls) while primary phone is connected with USB and running CarPlay/Android Auto?

Hello

Cannot activate Dev menu of Audi A6 facelift firmware P0034, with VCDS clone 19.
After 5F - Security tried S12345 and 20103 security codes and both let me enter in adaptation menu. After that when try to change Developer mode in active I receive an error: “Request out of range:” and Green Menu remain unactivated.
Do you know other way to activate ?

I have VCP clone 5.5.1 and OBDEleven prof. I tried with ODIS too. Error and not activated ...

Is there a way to activate it with MIB2 toolbox ?

I need to activate Dev menu because I need green menu activation in order to acitvate user define mode for firmware update of my MIb2 units. If there onother way for firmware update ... let me know. If I don't activate user define mode mode before begining firmware update, MIB2 units restart to the main menu after couple fo seconds of Update firmware begins.

Hi, I have not seen information about a toolbox option and I would like to ask before touching anything. within customization / various

there is an option that will be called user-switchable menumode

I don't know exactly what you mean could you help me?

Thank you very much and congratulations on your good work.

Hi,

i wrote the error at facebook some days ago.

The installation of this tools works without any problems.

When i want to start any script it will show me this error: Execute failed: java.io.IOException: Unable to start programm

Tested with version 1.4B and 2.0.

Its not the SD-Card. The SD-Card worked on a other Harman Unit perfect.

My Navi is a crossflashed unit from Skoda (one with dual-antenna for LTE and SIM slot) with Seat Firmware 1409. I Got this unit from MQB-Coding.de (Mike).

Greetings

Are there any plans to support the MIB2.5 High (Discover Pro) support? Or is this already compatible?

Hello,

When I'm trying to install it from the SD card I get the following error:
"Variant conflict"
"Medium: device doesn't support this (MainUnit: variant)"

My software version is 0363

Please let me know what you think could be the problem..

Thank you

It wont find the command out of the script!

Cannot execute - no such file or directory

Btw. flash unlock needs to be written together "flashunlock". Can this be fixed? Thanks

Is there an chance you could explain how the third party apps on Android auto works? I did run the patch neither can I add custom apps nor do I find anything in the gal.json to activate anything. Maybe add something to the Readme?

Thank you in advance

He instalado la herramienta mib2-toolkit en mi seat leon con unidad high con software 1338 hack y ha funcionado correctamente.
Gracias por compartir su trabajo con nosotros. Un saludo!!

hi, is this tool any how would help to allow disabling the limitation to use google maps navigation and mmi navigation at the same time. As you know, mmi does not allow to use mmi maps whie using android auto maps..

Hi Jille,

hope all is good , i would like to know if possible to activate carplay with performance monitor .
ive tried to update my unit and use dlink100 to add the patch but no success

with all my research i find out that your the only honest person that can help and assist

i am in canada , so my version will be NAR

any idea ?

thank you so much for your help and support

Owner of a Seat Leon 2020 Model, with MIB2 STD entertaiment system:

SW TRAIN = MST2_EU_SE_ZR_P0514T
SW MU = 0514
HARDWARE = H50

Photo for illustration:

Are there plans to support the STD Version?

Is it so different in hardware than the High version?
Could I support the development of the STD Version mib2-toolbox?

Hello

For a Passat B8 2016 with MIB2 there is always an error when trying to update firmware to 3G0919360BK MHI2_ER_VWG11_K3332 MU1187.
I activated from Green Menu user define mode in order to update but I can't find how to make update using user define mode menu..

Thx

Hi have Discover Pro Mib1 (5G0035043) and it was cracked one fw 0388, when I updated my unit to fw 0407 component protection enabled on the screen and someone disabled component protection after that Navigation didnt work anymore and when I wanted to go into the green engineering menu it says screen -1 not found. How can I fix it?

Hi there,

first of all, thank you very much for your hard work :)

I would like to get more into everything but couldn't find any good source. For example what does "String per 30 1966083" mean? In the end I think it's reading a string from a memory address but where can you find the information that the MU Version is at "1966083".

keyValue
    value   String per 30 1966083
    label   "MU Version"

And what about:

BIOSCtrl
       	value           int per 0 0x501848ff
       	label           "Byte 18 - startup screen"
       	entry		"not set" 0
        entry		"Family" 0c
        poll            1000

value is clear, but what does poll mean for example, is it a refresh of the value each 1000ms?

Is there any information source?

Thanks again,
Cheers

Hi, metainfo signature is not correct pn pcm 4.1

I have a problem, I'm trying in every way but it doesn't read the metainfo file as it happens to many :/

I have already tried the classic solutions (fat32, unzip directly to SD with 7zip or winrar etc ..)

I tried to modify the metainfo using the metainfo files that I use for the POIs but it doesn't work (obviously without altering the fundamental configurations for the correct indexing)

after the VW recall I have the
hardware revision 3G0035043K
MU 0199
SW train MHI2_ER_VWG11_S0259

before the recall was made
hardware revision 3G0035043A
MU 0199
SW train MHI2_ER_VWG11_K0259

I checked the IOC though and nothing has changed from the old to the "new"

should I try manual installation with the D-Link Dub-E100 ????

if I don't make the modification I can't modify the eeprom to install the revision MU1187 (K3332) because SW train is not compatible (could I try the SWDL in the green menu or not ??) .....

and then there is the modification of the FEC: P ... I would like to avoid using USB / uart

thanks again for the help :)

On MIB1High it was possible to run a finalscript after SWDL without the need for a signature:

[common]
skipSaveTrainName = "true"
vendor = "ESO"
skipCheckSignatureAndVariant = "true"
region = "Europe"
region2 = "RoW"
variant = "FMU-H-*-*-*"
release = "Test update"
skipMetaCRC = "true"
MetafileChecksum = "71f6f0a8b36ed1080a94dfc140f65f7d1ffe441a"
skipFileCopyCrc = "true"
FinalScript = "./common/tools/0/default/finalScript.sh"
FinalScriptName = "Final Script"
FinalScriptChecksum = "0b5e409c12153ddc8e9752f27a7d03a21bf45828"
FinalScriptMaxTime = "20"

I never dug too deep into this to see if it was possible on MIB2High, but it's worth trying with the current issue #1 .

There are also the following preference flags we could experiment with:

skipCheckVariant
skipCheckRegion
skipChecksum
skipMetaCRC
skipMetaChecksum
MetafileCRC = skip
CheckDefaultMedium = true
skipScriptCRC
skipCRC
skipScriptChecksum
disableEsoFWCheck
disableEsoFwCheckEmergency
EsoFwCheckMaxResets
EsoFwCheckTimeout
AutoHandlePopup = true
SkipNotReconnectedDevicesAfterReboot = true
SummaryAck = true
StandaloneUpdate = true
UserSwdl = true
finalScript
scriptPre
scriptPost
finalScriptName
scriptPreName
scriptPostName
scriptPreChecksum
finalScriptChecksum
scriptPreChecksum
scriptPostChecksum
scriptPreMaxTime
scriptPostMaxTime

To install the Toolbox, we only need to be able to change 1 Green Engineering Menu screen.. the rest is easy. So let's try and test to make this goal:

• put 1 file into the /net/mmx/mnt/app/eso/hmi/engdefs/ folder by SWDL

See topic

Skoda Octavia
Mib 2,5
SW 1440

Metainfo problem

Hi, I tried the toolbox with my audi harman MIB2 High Firmware 0875, and when i choose the SD-Card at the update menu, i get the error: "the signature of metainfo2.txt is not correct"
Is there something i can do? Thank you!

Hi Jille, is it possible to prevent the engine from stopping while in GTE-mode on a Golf GTE 2016-model, pre-facelift? # # #

Hi , im from spain i need help step by step how to use all , i will create tutorial for make all proccess good , its a new coming to help you.

its incredible your work !

thanks

Is this something that could be added? You know when you hold MENU for 5 seconds then choose software/updates. You will basically see a list of all updates made to the Discover Pro unit, including firmware, patches and map upgrades. Can this list be cleared?

For instance, for editing Video in motion:

DS_Velocity_Threshold= in storage1.raw and storage2.raw determines the thresholds for video in motion.

I have a feature request: Currently, mmi does not allow to use mmi maps with google maps navigation on android auto. I am just wondering If this tool would help disabling this limitation of mmi?

The password has been changed for me. How can I view the new one?

Ok I have the metadata2 error but just had a thought, what would happen if I plugged in obdeleven and changed the service to developer mode? It’s probably nothing but earlier I was playing and I needed to change mode to get something working and thought about this problem

is it possible to activate app connect on devices that only have mirrorlinks (MIB2 high before 10/2015) ??

on the version of the sign 0199 is certainly not present, is it possible to install it? I add that to date for the same units there is the 1100 version of the firmware which however does not seem to enable it automatically, in this case it would be possible ??

When i try to install this on mi unit, the updater give an error, "can't open/read release info"
SEAT MIB High with SW 1308

Currently, the MIB2 saves a lot of privacy-sensitive data.
Add a new screen/script that can:

• remove phonebook/pictures of contacts/etc.
• remove history of GPS trips
• remove other sensitive data
• [DONE] change default console password
• [DONE] remove all logs
• [DONE] remove SWDL logs

with calls for updates vw has fixed root access. D-link 100 and uart hack not work!

I don't know if mib 2 toolbox can be installed or used after the update unfortunately.

Currently, each script has it's own backup feature.. it might be better to just use 1 "create backup on SD-drive" script that is called with parameters.

That way, there's less repeating code.