Hi, I have some progress with hacking my Skoda Octavia. I use canbus shield for raspberry pi and a sniffer written by me.
At this moment I can open/close windows, control central lock and get different information from sensors.
I have written a article about hacking can bus, but in Russia I haven't found many interested people,
https://geektimes.ru/post/282338/ (see pictures).
Some commands, that I retrieve:
// Front Left Glass up/down
cansend can0 181#0200
cansend can0 181#0800
// Front Right Glass up/down
cansend can0 181#2000
cansend can0 181#8000
// Back Left Glass up/down
cansend can0 181#0002
cansend can0 181#0008
// Back Right Glass up/down
cansend can0 181#0020
cansend can0 181#0080
// Central Lock Open/Close
cansend can0 291#09AA020000
cansend can0 291#0900000000
Some commands need to do with delay
// Open all windows, like from key
#!/bin/bash
cansend can0 391#004000
sleep 2
cansend can0 391#AA4000
sleep 1
cansend can0 391#00000
// Close all windows, like from key
#!/bin/bash
cansend can0 391#008000
sleep 2
cansend can0 391#558000
sleep 3
cansend can0 391#000000
Now I want to open a back door using CAN command. When I long press button on keyfob, the back door opens and in sniffer I see next changes:
cansend can0 291#1900000000
sleep 1.2
cansend can0 291#1900080000
sleep 0.2
cansend can0 291#1900000000
sleep 1
cansend can0 291#0900000000
But when I try to repeat this commands with delays nothing happens. Has anyone researched with this issue?