success to hack Technisat MIB2 infotainment system

Search This thread

nimlyel

New member
Jul 8, 2022
1
0
Hello, I have MIB2 STD and basically I want to activate Full link.
HU version is MST2_EU_SE_ZR_P0359T and that device does not have navigation. It has only 1 SD card slot. Device part no 5QA035824A.

I tried to install MIB2 toolbox and some patches but it was not successful. Is there any way to do activation in that device?

Edit, I have learnt it is possible but I need to activate telnet/console for it and to do that I need to solder Hu but I could not find that how to do that. Is there any article or example for it?

I would be happy if someone show me how to do that.
 
Last edited:

dec123ua

Member
Oct 17, 2017
6
0
48
Kiev
Hello, I have MIB2 STD and basically I want to activate Full link.
HU version is MST2_EU_SE_ZR_P0359T and that device does not have navigation. It has only 1 SD card slot. Device part no 5QA035824A.

I tried to install MIB2 toolbox and some patches but it was not successful. Is there any way to do activation in that device?

Edit, I have learnt it is possible but I need to activate telnet/console for it and to do that I need to solder Hu but I could not find that how to do that. Is there any article or example for it?

I would be happy if someone show me how to do that.
read EMMC directly before
 

w1n73rf3ll

Senior Member
Jul 17, 2013
59
2
Espaillat
hello have a mib std2 pq+nav ... i want to install it on a jetta 2013 this radio was remove it from crashed jetta 2017 i need cp remove it and help with the retrofit im able to donate to someone that can help me
 

lucacloch

Member
Feb 7, 2023
5
0
CIAO,

ho la prossima domanda :) che provo ad attivare SWaP/FEC, ma senza attivazione riuscita. CP_OFF funziona correttamente, ma SWaP/FEC no.

1) Lo provo anche con toolbox 8.3, GEM 4.11t e 4.3. Scarica SWAP su SD, patchalo su PC con SWaPPatcher.exe, quindi ricaricalo da SD su unità con toolbox. Niente è cambiato. Lo stesso provo con FEC e signed_exception_list.txt.

2) Lo provo con patch per 478T, per la prima volta con la versione scaricata, la prossima volta con patched swap.

Dove può essere problema? Anch'io ho ODIS, mesi fa lo faccio con ODIS, ma ora non riesco a connettermi a VAS da VMware tramite bluetooth, ce l'ho su sistema base Windows 11. Quindi l'ho provato senza ODIS.

Grazie!

EDIT: l'ho fatto con ODIS, ma se qualcuno può rispondere, può aiutare altri utenti, forse:)
Hai risolto?
 

swenak

Member
Feb 22, 2005
35
1
As I wrote, solved with ODIS (unlocked with sending SWAP codes, that I generated on other app). VCDS can do it too (hidden functionality) and VCP can do it too.
 

swenak

Member
Feb 22, 2005
35
1
Procedure for entering FeC/SWaP codes with ODIS-E....
  1. Start ODIS-E and enter 5F Information Electronics
  2. On the menu to the right, go to 009-Diagnostic Session, select 'End of assembly line mode (EOL)' and click 'Perform'
  3. On the menu to the right, go to 007-Adaptation, scroll down to 'Transfer of release code for a SWaP function' and enter the hexadecimal code in the 4th column in yellow ('Entry'), then click Apply
  4. On the menu to the right, to go 005-Basic Setting, select 'Activation of a SWaP function', don't enter any data, and click the next arrow 3 times.
  5. Click the green arrow at the top (you can see it in my photo above) and the code is now entered. Repeat 3-5 for any further codes
 

lucacloch

Member
Feb 7, 2023
5
0
Я смотрел на странице mibsolution, в какой папке я могу найти эти инструкции?
 

PeterB79

New member
Aug 6, 2017
1
0
Hello, i have a MIB STD2 PQ Unit and after updating the firmware, the device is in a boot loop.
I tried Emergency Update but it does not load and i got error messages. Do any of you know these messages? Unable to start "/sbin/devc-pty" or Unable to access /dev/name/gns_client? Any Idea?

EMUPD.png
 

electro_bordeaux1

Senior Member
Nov 8, 2020
90
2
Hello to all members
I have a MIB2 STD2 ZR plus navi car radio that is stuck on the vw logo
is there an update to this post?
and thank you
 

Attachments

  • MIB2.jpg
    MIB2.jpg
    110.5 KB · Views: 19

electro_bordeaux1

Senior Member
Nov 8, 2020
90
2
Hello to all members
I have a MIB2 STD2 ZR plus navi car radio which is stuck on the vw logo but all the buttons work and when I unplug the whole thing and plug it back in the screen works for almost a minute then it crashes on the logo and me you can change the stations using the buttons except that the screen remains fixed on the vw logo
my question how to recover the system and the necessary tools?
and thank you
 

Attachments

  • MIB2.jpg
    MIB2.jpg
    110.5 KB · Views: 21
  • MIB22.jpg
    MIB22.jpg
    127.7 KB · Views: 22

dizzy2604

Member
Mar 21, 2007
23
1
Samsung Galaxy S8
Try this, it is not my work, so, thanks to authors.
Hello there, I succesfully patched my 3Q0035842B unit, olii toolbox is installed, radio with all required functionality is working. only think which is disturbing me is 15360768 error from 5F and 19 cluster. ok it's a cosmetic issue but here in the technisat solution document I found a mention of the eeprom content where the vin information could be corrected. Has anyone got this sorted out? can you point me in the right direction? Thank you
Try this, it is not my work, so, thanks to authors.
 

Top Liked Posts

  • There are no posts matching your filters.
  • 7
    Device: Technisat MIB STD2 PQ nav

    This device does not have serial shell .
    But I successfully hacked the emmc filesystem
    Now serial port has a shell

    Step1.
    Desolder the EMMC chip

    Step2.
    Dump EMMC chip via SD card reader

    Step3.
    qemu-img convert -f raw d:\682C_EMMC_DUMP.bin -O vmdk d:\682c.vmdk

    Step4.
    Start QNX x86 vmware machine to modify the 682c.vmdk

    Step5.
    modify the file /fs/hd1-qnx6/tsd/bin/system/startup
    add following line
    --------------------
    echo ser1 "/bin/login -f root" qansi-m on > /tmp/ttys
    /sbin/tinit -f /tmp/ttys &
    --------------------
    Save the file

    Step6.
    Shutdown QNX6 VM

    Step7.
    qemu-img convert -f vmdk d:\682c.vmdk -O raw C:\682C_EMMC_DUMP.bin

    Step8.
    write C:\682C_EMMC_DUMP.bin to EMMC via SD card reader

    Step9.
    Solder the EMMC chip back

    done.
    ;)
    5
    I can fully unlock all MIB units. If you need it free free to contact me.
    2
    [QUOTE = "nevergiveup3, post: 84106841, member: 11340019"]
    Привет, ребята, есть шанс, что кто-то снова сможет поделиться этими материалами, потому что ссылки выше не работают. Думаю, многие из нас это оценили бы.

    Заранее спасибо.
    [/ QUOTE]
    1
    reading MMC without desoldering

    Maybe somebody found a way to read eMMC without desoldering chip?
    1
    hello have a mib std2 pq+nav ... i want to install it on a jetta 2013 this radio was remove it from crashed jetta 2017 i need cp remove it and help with the retrofit im able to donate to someone that can help me
    Check mibwiki and telegram channel. You will get help faster there.