HACK Navigation/Multimedia systems KIA/HYUNDAI and install third-party applications

Search This thread

RndlArs40

New member
Feb 12, 2021
2
0
:D Sorry for my English! :D
CAUTION: USE THIS AT YOUR OWN RISK!
YouTube, your favorite navigation app, video player, online radio, online TV etc. now works on factory multimedia.
No need to connect your multimedia to internet!
This method works fine on models 2016-2018 of issue:
KIA: Optima JF (K5), Rio, Soul, Ceed, Sorento Prime, Stinger, Sportage, Cerato (Forte) (may be other).
HYUNDAI: Solaris, SantaFe, Sonata, Elantra, Creta, Genesis G70, Genesis G80 (may be other).
On board we have Navigation/Multimedia system on Android 4.2.2;

All fine-work applications on my Cloud drive HERE
Please watch all videos from my YouTube channel Everything about everything

If you like this please — Donate!:fingers-crossed:
PayPal – zavpasha@inbox.ru
If you are not sure in your actions - I can lead you by Skype (WhatsApp, Telegram)

WARNING!
Do not install any LAUNCHERS (NovaLauncher etc.) or ROOT - it`s brick your device.
Do not do anything else! Do not enter in other sections of Engineering mode.
Be patient and follow the instructions strictly!

FIRST:
Download all the apps from my Cloud drive HERE
And put all this files to root of the USB drive (FAT32)

Let`s Go!
This hack method no need`s to connect your multimedia to internet, if necessary
- activate wifi access point on your phone or use wifi router. Connect your multimedia system to hotspot.
You can watch my VIDEO MANUAL on YouTube HERE

ENGINEERING MODE:
Go to All Menus -> Settings -> Screensaver.
To enter in the Engineering mode you need to tap 7 times under screensavers icons (on red rings) from left to right and back.

do it fast.
Great! Now we have password window! The password is – time on your clock now!


Ok, its luck!

ANDROID SETTINGS:
Now we need to enter to Android settings -> Security and activate Unknown resources.

Done! This will give us the opportunity to install applications from the USB drive.
Note: this system hasn`t go Google apps, Play Market etc.
Push Home button and then we need to access to Engineering mode again.

INSTALLING FILE MANAGER:
To access to the USB drive and install all the applications we need to install File Manager first!
Go to All Menus -> Settings -> Screensaver, tap-tap-tap-tap-tap-tap-tap, password - time on clock.
Engineering mode -> All Applications -> Browser

On adress bar write: file:///storage/usb0/file.apk and tap OK!

Now you can install the File Manager, install it and tap Open!


Got it!

INSTALLING APPS:
In File Manager -> USB Storage you will see all apps.
Fist install EasyTouch, when it`s intalled tap Open.

Play EasyTouch Demo and them tap Go.
Note: EasyTouch Settings works only on portrait orientation (don`t be afraid it`s mormal).
So, there are many settings, they are no need us now, we need just activate EasyTouch button.

Done! Now push Home and than tap EasyTouch button to open а window. Now we have BACK and HOME buttons.


With long press on any icon in this window it can changed. Change one of them by choosing Engineering mode shortcut on Choose app -Done! Tap anywhere to close window.
Call the window again, swipe left and open Android settings -> Special abilities -> Services EasyTouch - ON

That’s Ok, now we can normally surf in internet and have all shortcuts of any apps.

SOUND FIX:
Note:
Sound on third-party apps works only on MEDIA MODE whit connected USB flash drive (with media files) or with connected Bluetooth device.
On RADIO or AUX MODE sounds from third-party apps doesn’t works!
So, push EasyTouch button then swipe window and choose File Manager. Open USB storage and install SoundAbout, the Open it.

Now we in SoundAbout settings. Choose on MEDIA AUDIO - Wired Headphones and that`s all.
Tap EasyTouch button and BACK.
Now we need to restart the multimedia - push reset button in SD card slot one time (or find it near you screen). Or you can turn off ACC, open and close driver door and wait 5 minutes to restart the Multimedia.
Sound fixed!
Now you can install any apps and it will be working fine with sound!

YOUTUBE:
On board we hasn`t got Google apps, so we need to install YouTube modification – YOUTUBE VANCED
Push EasyTouch button then swipe window and choose File Manager. Open USB storage and install YouTube Vanced.
Now you can try it!
Open EasyTouch window and place YOUTUBE VANCED shortcut.

VLC PLAYER:
Push EasyTouch button then swipe window and choose File Manager. Open USB storage and install VLC Lite.
Go to VLC Settings -> Hardware accelerationFull acceleration. Set it because we has poor hardware.
Now you can watch films, clips, cartoons and everything you want from your USB flash drive or SD card.
Don`t forget about shortcut.

HERE NAVIGATION (or another favorite navigation):
Note:
Do not forget to connect WIFI first.
Push EasyTouch button then swipe window and choose File Manager. Open USB storage and install HERE WeGo, launch, place shortcut.

You can install everything applications you need but remember:
DO NOT INSTALL ANY LAUNCHERS AND ROOT. DO NOT OPEN ANYTHING ELSE IN THE ENGINEERING MENU.

If you are not sure in your actions - I can lead you by Skype (WhatsApp, Telegram)
Thanks!:victory:

Does it work on a 2019 sonata limited??
 

SuperPiskot

New member
Feb 13, 2021
1
0
Hi.

please help me :)

i have this software.
Smart-Select-20210211-192504-Gallery.jpg

and all start say this mesage or when i chose live information dont work and say this mesage.
20210208-131215.jpg

Thank you.
 
Last edited:

Toug

Senior Member
May 15, 2008
138
10
Toulouse
Hi, I am using Kia_empowerment 2.0 for sound routing fixe. But now I don't have sound in Bluetooth media player, even if I don't use Android Auto. I would like to have the last updates on Kia empowerment, but I don't where I can buy it.
 

Kaza4ok

New member
Oct 15, 2007
3
0
Hi everyone. How to access the engineering mode and android settings on kia niro usa 2017. I have typed 7 times on screen saver settings and nothing happens .
IMG_20210304_170736.jpg
 
Last edited:

olega59

Senior Member
Apr 20, 2015
69
12
[QUOTE = "Kaza4ok, post: 84599285, member: 648271"]
Всем привет. Как получить доступ к инженерному режиму и настройкам Android на kia niro usa 2017. Я набрал 7 раз в настройках заставки, и ничего не происходит.
View attachment 5239845
[/ЦИТИРОВАТЬ]
5 раз слева от кнопки Обновить и один раз справа
 

Kaza4ok

New member
Oct 15, 2007
3
0
[QUOTE = "Kaza4ok, post: 84599285, member: 648271"]
Всем привет. Как получить доступ к инженерному режиму и настройкам Android на kia niro usa 2017. Я набрал 7 раз в настройках заставки, и ничего не происходит.
View attachment 5239845
[/ЦИТИРОВАТЬ]
5 раз слева от кнопки Обновить и один раз справа
Мне удалось в без парольное инженерное меню зайти через 10 и 2 касания во вкладке Storage. если 5 и 1 раз тыкать от кнопки апдейт то выходит предупреждение об обновлении . Добраться до настроек андройда не получилось.
 

Unjustified Dev

Recognized Developer
Oct 21, 2012
7,185
13,082
26
Memphis , TN
To the people who keep saying the engineering password doesn't work. Most sites don't list them all this is from the decompiled EngineerMode system app. For me on my Kia optima 2020 after I had my radio replaced by KIA 2801 worked.
Code:
    <string name="eng_pswd_default">2014</string>
    <string name="eng_pswd_0">2900</string>
    <string name="eng_pswd_1">2801</string>
    <string name="eng_pswd_2">2702</string>
    <string name="eng_pswd_3">2603</string>
    <string name="eng_pswd_4">2504</string>
    <string name="eng_pswd_5">2405</string>
    <string name="eng_pswd_6">2306</string>
    <string name="eng_pswd_7">2207</string>
    <string name="eng_pswd_8">2108</string>
    <string name="eng_pswd_9">2009</string>
 
Aug 1, 2019
8
0
To the people who keep saying the engineering password doesn't work. Most sites don't list them all this is from the decompiled EngineerMode system app. For me on my Kia optima 2020 after I had my radio replaced by KIA 2801 worked.
Code:
    <string name="eng_pswd_default">2014</string>
    <string name="eng_pswd_0">2900</string>
    <string name="eng_pswd_1">2801</string>
    <string name="eng_pswd_2">2702</string>
    <string name="eng_pswd_3">2603</string>
    <string name="eng_pswd_4">2504</string>
    <string name="eng_pswd_5">2405</string>
    <string name="eng_pswd_6">2306</string>
    <string name="eng_pswd_7">2207</string>
    <string name="eng_pswd_8">2108</string>
    <string name="eng_pswd_9">2009</string>
2801 worked. .... THANKS!
 

SergeyAsa

Member
Mar 9, 2021
5
1
If you don't have a second button the right to use 7 ,3 ,and 1 but instead one button to the left for AV ON/OFF. Then you need to hold the Left button + the software "Media" button until the Engineer mode is displayed.
I have a button on the right, but I cannot use it to enter the dealer menu. I use screen tap on screen. In this place
IMG_3318.jpeg


Pass 2400. But it dealer menu.
IMG_3321.jpeg
 

Unjustified Dev

Recognized Developer
Oct 21, 2012
7,185
13,082
26
Memphis , TN
I have a button on the right, but I cannot use it to enter the dealer menu. I use screen tap on screen. In this placeView attachment 5247435

Pass 2400. But it dealer menu.
View attachment 5247437
Hey, I was wrong so first you need to enable screen capture on sw info/update screen do 5 taps to the left of the "UPDATE " button and about 6-7 taps to the right until it says screen capture enabled. After that hold "MEDIA" until the Korean words are displayed, then after about 3 or 4 toast messages are displayed Engineer mode all in one should open on its own. BTW we have the same STDG5W I didn't know how to get into dealer mode. I'm trying to get in factory mode. If I can get access to /dev/tcc-otp we can decrypt firmware and have a restore method. I won't do any tweaking until then. The kernel source and bootloader are both legit and complete this time so it's even more interesting.
 
Last edited:
  • Like
Reactions: natesc0tt

SergeyAsa

Member
Mar 9, 2021
5
1
Hey, I was wrong so first you need to enable screen capture on sw info/update screen do 5 taps to the left of the "UPDATE " button and about 6-7 taps to the right until it says screen capture enabled. After that hold "MEDIA" until the Korean words are displayed, then after about 3 or 4 toast messages are displayed Engineer mode all in one should open on its own. BTW we have the same STDG5W I didn't know how to get into dealer mode. I'm trying to get in factory mode. If I can get access to /dev/tcc-otp we can decrypt firmware and have a restore method. I won't do any tweaking until then. The kernel source and bootloader are both legit and complete this time so it's even more interesting.
It’s work!!! Thanks
 

SergeyAsa

Member
Mar 9, 2021
5
1
Hey, I was wrong so first you need to enable screen capture on sw info/update screen do 5 taps to the left of the "UPDATE " button and about 6-7 taps to the right until it says screen capture enabled. After that hold "MEDIA" until the Korean words are displayed, then after about 3 or 4 toast messages are displayed Engineer mode all in one should open on its own. BTW we have the same STDG5W I didn't know how to get into dealer mode. I'm trying to get in factory mode. If I can get access to /dev/tcc-otp we can decrypt firmware and have a restore method. I won't do any tweaking until then. The kernel source and bootloader are both legit and complete this time so it's even more interesting.
Maybe you know too things)

How to change a SIM card and is it possible to download cards from another region. In my case, change South Korea to Russia.
 

SergeyAsa

Member
Mar 9, 2021
5
1
Unfortunately, I don't have any information. More than likely it's embedded into the device I can't say for sure without physically opening it.
maybe it will be useful
 

emad.hazaimeh93

New member
Feb 9, 2021
4
0
How can I enter the hidden menu of this screen and access its settings, make changes to its system and add new languages and maps because there is a pre-installed South Korea map on it. Thank you.
 

Attachments

  • IMG20210216193314.jpg
    IMG20210216193314.jpg
    1.8 MB · Views: 706
Last edited:

Top Liked Posts

  • There are no posts matching your filters.
  • 1
    Hi,

    Does anyone have any dea how to access engineering mode on my i40 Gen4 Unit with software ST.VFIA.EUR.E536.230920? I need to change amp modes but I cant seem to even get the password prompt to appear as of yet. Thanks.

    EDIT: I've managed to get the password screen to appear, it was on the storage info screen, 5 taps in the bottom left and then 1 tap in the bottom right, I mustn't have been tapping quite far enough into the corner. I'll have a try at getting the codes from the update file tomorrow and post back with any updates (if there are any).
    1
    Hi,

    Does anyone have any dea how to access engineering mode on my i40 Gen4 Unit with software ST.VFIA.EUR.E536.230920? I need to change amp modes but I cant seem to even get the password prompt to appear as of yet. Thanks.

    EDIT: I've managed to get the password screen to appear, it was on the storage info screen, 5 taps in the bottom left and then 1 tap in the bottom right, I mustn't have been tapping quite far enough into the corner. I'll have a try at getting the codes from the update file tomorrow and post back with any updates (if there are any).

    Ok, so the password seems to be 2504 and that gets me to an engineering menu but when I go to variant coding -> amp it gives me 3 options but wont let me select any of them, internal is selected but i need to change it to external. Anybody got any ideas? Am I in some sort of dealer mode and need a different passcode?
    1
    Hi,
    Do any of you have a firmware file for HYUNDAI Kona Non-Nav e.g.: OS.EUR.SOP.V085 DAU_A etc?

    My radio is on loop: Making quickboot image I tried to upload the software from the Navi version, but some of the buttons do not work properly. I uploaded a copy of eMMC from another radio but I still have a boot loop.

    I need update files for version V085 from this or another radio without navi on the Mobis platform.
    Or some other software to fix my radio ;)
    1
    There was no need to download software from another model!
    Now it is already DIFFICULT to repair.
    I'm not afraid of challenges, but sometimes I need a little help ;)
    Other software will allow me to get the boot.img file that I am missing, but it must be exactly version V085.

    Maybe qb_data_image will fix the boot loop error. I don't know how Quickboot works. I wonder if it could be turned off, because the radio reboots to the system for a few seconds, but after a while I get the message: QB System preparing.. and restart to Making Quickboot..

    I tried to create files from a copy of emmc, I created boot.img, recovery.img, splash.img, system.img, I have the lk.rom file from another version of the software. I encrypted everything and uploaded it from USB, but the boot loop still occurs.
    I tested another system, downloaded the emmc memory, created files and uploaded them from USB and everything is fine. I think that the emmc copy from another radio may be missing or damaged. That's why I need the original software ;)

    20240413_194237.jpg
    20240413_194513.jpg
  • 17
    :D Sorry for my English! :D
    CAUTION: USE THIS AT YOUR OWN RISK!
    YouTube, your favorite navigation app, video player, online radio, online TV etc. now works on factory multimedia.
    No need to connect your multimedia to internet!
    This method works fine on models 2016-2018 of issue:
    KIA: Optima JF (K5), Rio, Soul, Ceed, Sorento Prime, Stinger, Sportage, Cerato (Forte) (may be other).
    HYUNDAI: Solaris, SantaFe, Sonata, Elantra, Creta, Genesis G70, Genesis G80 (may be other).
    On board we have Navigation/Multimedia system on Android 4.2.2;

    All fine-work applications on my Cloud drive HERE
    Please watch all videos from my YouTube channel Everything about everything

    If you like this please — Donate!:fingers-crossed:
    PayPal – zavpasha@inbox.ru
    If you are not sure in your actions - I can lead you by Skype (WhatsApp, Telegram)

    WARNING!
    Do not install any LAUNCHERS (NovaLauncher etc.) or ROOT - it`s brick your device.
    Do not do anything else! Do not enter in other sections of Engineering mode.
    Be patient and follow the instructions strictly!

    FIRST:
    Download all the apps from my Cloud drive HERE
    And put all this files to root of the USB drive (FAT32)

    Let`s Go!
    This hack method no need`s to connect your multimedia to internet, if necessary
    - activate wifi access point on your phone or use wifi router. Connect your multimedia system to hotspot.
    You can watch my VIDEO MANUAL on YouTube HERE

    ENGINEERING MODE:
    Go to All Menus -> Settings -> Screensaver.
    To enter in the Engineering mode you need to tap 7 times under screensavers icons (on red rings) from left to right and back.

    do it fast.
    Great! Now we have password window! The password is – time on your clock now!


    Ok, its luck!

    ANDROID SETTINGS:
    Now we need to enter to Android settings -> Security and activate Unknown resources.

    Done! This will give us the opportunity to install applications from the USB drive.
    Note: this system hasn`t go Google apps, Play Market etc.
    Push Home button and then we need to access to Engineering mode again.

    INSTALLING FILE MANAGER:
    To access to the USB drive and install all the applications we need to install File Manager first!
    Go to All Menus -> Settings -> Screensaver, tap-tap-tap-tap-tap-tap-tap, password - time on clock.
    Engineering mode -> All Applications -> Browser

    On adress bar write: file:///storage/usb0/file.apk and tap OK!

    Now you can install the File Manager, install it and tap Open!


    Got it!

    INSTALLING APPS:
    In File Manager -> USB Storage you will see all apps.
    Fist install EasyTouch, when it`s intalled tap Open.

    Play EasyTouch Demo and them tap Go.
    Note: EasyTouch Settings works only on portrait orientation (don`t be afraid it`s mormal).
    So, there are many settings, they are no need us now, we need just activate EasyTouch button.

    Done! Now push Home and than tap EasyTouch button to open а window. Now we have BACK and HOME buttons.


    With long press on any icon in this window it can changed. Change one of them by choosing Engineering mode shortcut on Choose app -Done! Tap anywhere to close window.
    Call the window again, swipe left and open Android settings -> Special abilities -> Services EasyTouch - ON

    That’s Ok, now we can normally surf in internet and have all shortcuts of any apps.

    SOUND FIX:
    Note: Sound on third-party apps works only on MEDIA MODE whit connected USB flash drive (with media files) or with connected Bluetooth device.
    On RADIO or AUX MODE sounds from third-party apps doesn’t works!
    So, push EasyTouch button then swipe window and choose File Manager. Open USB storage and install SoundAbout, the Open it.

    Now we in SoundAbout settings. Choose on MEDIA AUDIO - Wired Headphones and that`s all.
    Tap EasyTouch button and BACK.
    Now we need to restart the multimedia - push reset button in SD card slot one time (or find it near you screen). Or you can turn off ACC, open and close driver door and wait 5 minutes to restart the Multimedia.
    Sound fixed!
    Now you can install any apps and it will be working fine with sound!

    YOUTUBE:
    On board we hasn`t got Google apps, so we need to install YouTube modification – YOUTUBE VANCED
    Push EasyTouch button then swipe window and choose File Manager. Open USB storage and install YouTube Vanced.
    Now you can try it!
    Open EasyTouch window and place YOUTUBE VANCED shortcut.

    VLC PLAYER:
    Push EasyTouch button then swipe window and choose File Manager. Open USB storage and install VLC Lite.
    Go to VLC Settings -> Hardware accelerationFull acceleration. Set it because we has poor hardware.
    Now you can watch films, clips, cartoons and everything you want from your USB flash drive or SD card.
    Don`t forget about shortcut.

    HERE NAVIGATION (or another favorite navigation):
    Note: Do not forget to connect WIFI first.
    Push EasyTouch button then swipe window and choose File Manager. Open USB storage and install HERE WeGo, launch, place shortcut.

    You can install everything applications you need but remember:
    DO NOT INSTALL ANY LAUNCHERS AND ROOT. DO NOT OPEN ANYTHING ELSE IN THE ENGINEERING MENU.

    If you are not sure in your actions - I can lead you by Skype (WhatsApp, Telegram)
    Thanks!:victory:
    7
    Just purchased a 2022 Telluride SX with the wide screen. Been reading this thread and noticing no one has found a way to get into engineering mode for these newer firmware, right?

    I would just like to side load some apps and be able to run them from the Kia main menu.

    If for some reason I am incorrect in that there’s no way to side load these newer widescreens then please do let me know. It’s Likely I may have scanned across a post or something that had that info.

    Thanks!

    Today on the Valentines day we have made a secret go public.
    We have been able to gain root access on the Gen5WIDE headunits from europe.

    with this hack you can grab and dump the whole system.
    extracts info, keys, decrypt files and perhaps create ur own custom fw.

    we provide this info for free, so people can share knowledge and new findings.

    Please be aware that this is mainly for devs and technical nerds and linux lovers. untill someone perhaps creates a more user friendly hack.

    Happy hunting

    4
    Hi guys,
    On my Tucson (2018 - AA) I can only access the engineering mode where I don't...

    Update on another model thet does not allow the "full engineering menu":
    2018 Elantra SEL USA version.
    NO: Cannot access the engineering mode that enables app installations (7 taps over 3 points on settings/screensaver).
    YES. Can access the engineering mode from Settings/System Info (5 taps left - 1 tab right).

    Looking forward to the hero that finds out how to jailbreak these versions!!
    3
    Now that we can sideload apps, is there any way to let Android auto work wirelessly?

    Inviato dal mio MI PAD 4 utilizzando Tapatalk

    Of course ! Just install Headunit Reloaded (4.6) on the car system.
    Set it with your phone name (SSID) used for wifi server, and leave IP blank (auto).

    The wifi mode of Headunit will automatically connect to Android Auto if this one is in developer mode and its server mode launched.

    Everything can be totally automatic, the phone can stay in the pocket. Android Auto appears on the main screen few seconds after the wifi connnection to the phone.