11–18 of 18 posts
If the author is reading this, the version info screen shot[0] includes a unit serial number that can absolutely be traced back to you. [0] https://github.com/ea/bosch_headunit_root/blob/main/images/0...
very instructional how you can use properties of external drives and filesystems to expolit mountpath variables for path traversal.
“Kai” is probably 改, roughly translates to “Modified” or “Upgraded”.
I'm pretty sure my Nissan Versa has one of these and I'm going to give it a shot tomorrow I think.
This is a really good reverse engineering exercise but as a cautionary note: If you are doing this in your real car most of the trim on the dashboard is secured by plastic clips. You need specialized car trim tools (similar to the phone case ones but well bigger) to remove them along the edges without denting the outer plastic edges. Also most of them are meant to clip-on once. So if you take them apart too many time…
Earlier quoted context omitted.
This is a really good reverse engineering exercise but as a cautionary note: If you are doing this in your real car most of the trim on the dashboard is secured by plastic clips. You need specialized car trim tools (similar to the phone case ones but well bigger) to remove them along the edges without denting the outer plastic edges. Also most of them are meant to clip-on once. So if you take them apart too many time…
The exploit doesn't require removing the unit. Simply inserting a prepared flash drive is all that is required.