Lime SJ2.5 hacking

[azorox]

Hi I playing with this, but I get a lot of hex E0 E0 E0 ... message from the scooter, but none of sent codes do anything. zs2.5 model. Anyone has a tip?

[htamas]

Hello!

Did somebody find new working hex codes for LIS01_FW_1.8.5_201911162121000 ?

[CDogg]

Hello!

Did somebody find new working hex codes for LIS01_FW_1.8.5_201911162121000 ?

I'm still working on finding a way to operate it with just hardware mods. I'm pretty sure there's a way to replace the IoT power on with a physical switch. looking to any electrical engineers for advice. I'm happy to donate hardware, schematics, battery or whatever would be required to anyone willing to help.

[Scrubb3]

Any updates on the LIS01_FW_1.8.5_201911162121000 start-up HEX commands? Just got my SPP hooked up and was hoping someone smarter than me on the subject would have made some progress. It was cool to actually see the few commands that people managed to cipher working but unfortunately the light blinking one has nothing to reverse it's effect. Hoping there is still someone making progress concerning this situation...

[CDogg]

Any updates on the LIS01_FW_1.8.5_201911162121000 start-up HEX commands? Just got my SPP hooked up and was hoping someone smarter than me on the subject would have made some progress. It was cool to actually see the few commands that people managed to cipher working but unfortunately the light blinking one has nothing to reverse it's effect. Hoping there is still someone making progress concerning this situation...

Not sure if you'll find what you need, but I found a bunch of relevant info in the Wiki that I hadn't seen before. Link is at the top of the page.

[Scrubb3]

I just found out how the guy on reddit got the hex commands in the first place. He did not remove the SIM card or the bigger circuit board. He just attached the SPP bluetooth module and unlocked the scooter via the official lime application. He recorded the flood of HEX that the scooter submitted upon unlocking and found the command. I'm going to try this on my project.

[dani3l0]

For quite a long time I've been trying to turn on the scooter via Serial. Finally (or yet), I didn't manage to do it.
I've send over 70000 various commands to the controller. The 'valid' commands get echoed, however nothing happens with the electronics.
Disassembling the firmware didn't help either (I'm kinda scared of Assembly)

(I'm on 1.8.5 FW)

Here's my bruteforce script written in Python, might help someone (or not)
https://gitlab.com/dani3l0/limesj2.5-stuff

[AlistairESP]

how i use the java i have to use bluetooth

[AlistairESP]

how i use the java i have to use bluetooth