# Welcome to Kanzentrale This is my ongoing notes from taking apart and documenting "modern" VW Group electronics. The focus here is on platforms that are _worth keeping_, the ones the OEMs quietly dropped. Cars without mandatory internet connections, subscriptions/apps just to have heated seats or lane assist. Hardware that still does the job, but where the documentation or support has long since disappeared. If the manufacturer won’t support it, I will. Inside you’ll find firmware analysis, CAN traces, Ghidra projects, and patches; The kind of experiments that turn into fixes, retrofits, or features that never officially existed. Some pages are polished, some are half-finished, but that’s the point: it’s live research and docs, if I find something worth sharing I will post it. --- ## Ongoing work ### [[UHV Bluetooth Patch]] A firmware patch for VW’s common 5K0/7P6 UHV Bluetooth modules (2009-2014), restoring compatibility with older B6/Mk5 steering wheels. - Background: why 1-byte button messages stopped working - JTAG dump and live debugging on a TMS470R1SF55 MCU - Firmware patch offsets and explanations - Repacked ODX with corrected checksum - Result: full button compatibility with both 1 and 4-byte steering wheels ### [[BAP Protocol Overview]] My attempt at the most complete BAP reverse engineering effort available, this is about 20% of the way there. - Full protocol specification with frame examples - Cross-platform analysis (PQ and MQB variants) - Tools for decoding, simulation, and testing (Coming soon) - Bench and in-vehicle testing - [Github Repo](https://github.com/MIGINC/BAP_RE) --- ### [[MIB2 STD PQ Reverse Engineering]] My [Hackaday.io project](https://hackaday.io/project/203094-mib2-std-pq-reverse-engineering) on unlocking hidden MQB features, fixing bugs, and injecting custom logic into PQ head units. - Interface with the DSI (Device Service Interface) - Update the HMI state from external tools - Patch known PQ firmware bugs - Build a modular framework for future feature expansion --- ### [[TRW450 Reverse Engineering Writeup]] A deep dive into the TRW450 ABS firmware, including the patch I released to enable Adaptive Cruise Control across all units. - Technical breakdown of the ACC firmware patch - Checksum details and validation - [Github Repo](https://github.com/MIGINC/TRW450-Unlock) ## Contact Want to contribute, ask a question, or say hi? Reach me via [GitHub](https://github.com/MIGINC) or the email on my GitHub profile ---