"Hi, I've made some progress hacking my Skoda Octavia. I'm using a CAN bus shield for the Raspberry Pi and a sniffer that I wrote myself."
Right now, I can open/close windows, control the central locking system, and retrieve various data from sensors.
I have written an article about hacking CAN bus, but in Russia I haven't found many interested people,
https://geektimes.ru/post/282338/ (see pictures).
Here are some commands that I retrieved:
// Front left window, up/down.
cansend can0 181#0200
cansend can0 181#0800
// Front right window, up/down.
cansend can0 181#2000
cansend can0 181#8000
// Rear left window up/down
cansend can0 181#0002
cansend can0 181#0008
// Rear right window up/down.
cansend can0 181#0020
cansend can0 181#0080
text
// Central Lock Open/Close
cansend can0 291#09AA020000
cansend can0 291#0900000000
Certain commands involve delays.
text
// Open all windows, as if using a keyboard shortcut.
text
#!/bin/bash
cansend can0 391#004000
sleep 2
cansend can0 391#AA4000
sleep 1
cansend can0 391#00000
text
// Close all windows, as if using a keyboard shortcut.
text
#!/bin/bash
cansend can0 391#008000
sleep 2
cansend can0 391#558000
sleep 3
cansend can0 391#000000
Okay, here's the translation:
"Now I want to open the tailgate using a CAN command. When I hold down the button on the key fob, the tailgate opens, and in the sniffer, I observe the following changes:"
cansend can0 291#1900000000
sleep 1.2
cansend can0 291#1900080000
sleep 0.2
cansend can0 291#1900000000
sleep 1
cansend can0 291#0900000000
"But when I try to repeat these commands with delays, nothing happens. Has anyone else encountered this issue?"