Golf MK7 Discover Pro Hack possible?

Search This thread

a4cocker

New member
Apr 3, 2009
4
0
Dlink Dub100 connection issue

Hi
I am trying to connect to my MIB2 Discover Media with Dlink.
Green menu activated, but IP address was not created.
S6xpHThzRTT1yAkF6


USB seems to work (checking with Odis), only device class is not identified. Any advice to me what is the issue?

wiE61MXeokYFzGB17



Thanks
 
Last edited:

punkforever

Member
Feb 8, 2011
23
2
Hi
I am trying to connect to my MIB2 Discover Media with Dlink.
Green menu activated, but IP address was not created.
S6xpHThzRTT1yAkF6



USB seems to work (checking with Odis), only device class is not identified. Any advice to me what is the issue?

wiE61MXeokYFzGB17



Thanks
Your picture doesn't show.
Your unit is made by Technisat or Delphi? My post you quoted was about connecting to Discover Media Pro made by Harman.
Post your SW version from Service Menu.
 

a4cocker

New member
Apr 3, 2009
4
0
Your picture doesn't show.
Your unit is made by Technisat or Delphi? My post you quoted was about connecting to Discover Media Pro made by Harman.
Post your SW version from Service Menu.

Hi
unit is Delphi 3Q0035846b, soft 891.
Sorry I am not able to place pics here

---------- Post added at 02:52 PM ---------- Previous post was at 02:50 PM ----------

S6xpHThzRTT1yAkF6
 

cocooma

New member
May 13, 2010
1
0
Login

Appreciate your help Chillout! As I can recall I saw these kind of login error messages, but haven't seen any command prompt. So I think I need some work to do today evening once I get home :) I'll try, especially this very special command called "stfu" ;)
And how can I put the device in wifi client mode? Should I have the vag-com cable for that? Thanks again for the help!

Hello Horacos,

I was wondering have you managed to login to the unit after using the xon/xoff flow control?

Thanks,
Cocooma
 

filip97

Member
May 24, 2016
5
0
Hi everyone.
I tried connecting through WiFi, and i have few ports open, but not 23. Telneting to port 54321 gives me one way log, and I don’t have login anywhere. How to enable telnet?
Open ports are 1234, 15001, 15361, 25010, 54321.
Sw version is 0241, MST_EU_VW_ZR_P0241T, part number 3Q0035846
 
Last edited:

punkforever

Member
Feb 8, 2011
23
2
Hi everyone.
I tried connecting through WiFi, and i have few ports open, but not 23. Telneting to port 54321 gives me one way log, and I don’t have login anywhere. How to enable telnet?
Open ports are 1234, 15001, 15361, 25010, 54321.
Sw version is 0241, MST_EU_VW_ZR_P0241T, part number 3Q0035846



This thread is about Discover Pro made by Harman, your unit is Discover Media made by Technisat... No shell/ telnet access without accessing eMMC and modifying file
 
Last edited:

caf28035

New member
Nov 21, 2020
2
0
Back to factory Fw

Hi,
I am trying to recover a MIB1 harman that was hacked by a polish company, the unit had problems and now I am trying to return it to factory state. I updated the Fw, but not all files was replaced with the factory files, specifically those of the RCC were replaced but it seems that the MMX continues with its previous versions. I cannot see the green menu and i cannot activate it in vcds.
I have acces to uart in emergency mode and I could flash some files but I have some questions, surelly @Chillout or other friend know it:
Where is located green menu? App.img?
It is possible recover app.img from emergency boot? how?

Thanks!
 

caf28035

New member
Nov 21, 2020
2
0
Back to factory Fw

Hi,
I am trying to recover a MIB1 harman that was hacked by a polish company, the unit had problems and now I am trying to return it to factory state. I updated the Fw, but not all files was replaced with the factory files, specifically those of the RCC were replaced but it seems that the MMX continues with its previous versions. I cannot see the green menu and i cannot activate it in vcds.
I have acces to uart in emergency mode and I could flash some files but I have some questions, surelly @Chillout or other friend know it:
Where is located green menu? App.img?
It is possible recover app.img from emergency boot? how?

Thanks!
Solved!
 

Top Liked Posts

  • There are no posts matching your filters.
  • 2
    Hello everyone, hope I'm posting in the right place!

    I own a VW Golf MK7 with the Discover Pro media system.

    Recently I found a copy of the update package for it, and dabbling inside I found out a ton of cool info.

    It's based ona Tegra 2 platform, and runs QNX 1.2b. There seems to be a way to telnet to the system somehow. Inside the files I found a ton of stuff, like what seems to be the user and root passwords?

    Code:
    root:x:0:0::/root/:/bin/sh
    user:x:100:100::/eso:/bin/sh
    nopasswd root::0:0::/root/:/bin/sh
    user::100:100:FTP User:/eso:/bin/sh
    group root:x:0:
    user:x:100:user
    root:f7otIPwQDbHLw:1320853303:0:0
    user:6TfLBY3WGivFU:1324310912:0:0
    ffs3.1ver #DATUM 2037

    I don't know much about QNX, maybe someone can help and something can be done? Unlocking Mirrorlink? Unlocking other features? Installing apps? Installing android on it since it's Tegra 2 Based?

    Thanks for the time and help!
    2
    I found by root this text: daPzPBI8LXeWY could you help me with decrypt???
    You have a Skoda? ;)
    2
    Sorry for the late reply... but you inspired me some time ago to start digging into this.

    I've built a serial cable to connect into the back of the Discover Pro MIB1 unit, and now I've got root access to the unit. So far I haven't been able to enable SWAP features, but I did make some changes to the Green Engineering Menu, that allow me to set stuff and run scripts from SD again.

    I also enabled WLAN hotspot on the Non-telephone-capable unit, but I haven't been able to put it into WLAN Client mode yet... that's another hurdle for an other time, I guess. Enabling wlan unhides the Google Earth and online services checkboxes in the navigation, but since it doesn't have any connection yet... it doesn't do much.


    I would love to exchange thoughts and experiences about this device!!
    2
    Yes indeed.

    Open efs-system.img from the firmware files, search for root:
    If you find root:, you will see the password hash. This hash is 3des, and can be cracked. That will be your password.
    2
    Hi,

    Some questions:

    1) This can be possible also with MIB2 "non-pro"?

    2) To enable the TELNET access is required to enable the Green Manufacturer Menu?

    3) The USB dongle has all the time the TELNET server enabled, or only when the Green Menu is enabled?

    Thank you for sharing this info.

    1: should be possible, just use one of the network adapters I mentioned
    2: as far as I can tell, this is always on. But it doesn't hurt to enable developer mode
    3: all the time.