Tutorial!!! SNSC 2.3 Aka Ninebot Max Plus conversion

Spoooky
Posts: 23
Joined: Fri Aug 26, 2022 12:02 am

Tutorial!!! SNSC 2.3 Aka Ninebot Max Plus conversion

Postby Spoooky Fri Aug 26, 2022 1:00 am

In this tutorial we will talk about how to convert your Legaly aquired Ninebot max Plus which i will be referring to as SNSC 2.3 in this tutorial.

In this tutorial i am going to talk about the Voi one, Bolt and etc have slight changes that include the removal of an openly accesable IoT box and overall some difference‘s.

First of all you need
-STLink
-CP2102 UART flasher
-PC or Laptop with Ninebot IAP
And some patience :)


The very first thing were gonna do is flash the BMS, but be careful!!! There are 3 Batteries i know of,
1. 27800MAH not flashable with working BMS but can flash DRV on to to bypass it
2. newest Battery 300000MAH with 21700 cells!!!! Unknown if flashable, try BMS 153 if error also flash random DRV
3. 15300MAH battery model number NE1006-M1 flashable ✅
so what your gonna do if the legal seller didn’t do it already is remove the 3 screw holding in the IoT Box, and unplugging it, then unplug the interconnect cable from the Juliet Plug (the round green 5 pin), then you get something really thin like needles and wrap your CP2102 wires around them, the side with the arrow is the top, from there connect ground to the upper right RX beneath and TX at the bottom, DONT SWITCH UP SIDES!!! if you accidentally connect to the holes on the left you fry you adapter and probably your computers USB port as the one in the top left is the 36V output, once everything wired up you need to plug the battery in the Controller, now start Ninebot IAP on your pc and go to the serial tab, then find out in device manager on which port your CP2102 is and connect matchingly, if it says connected but no version infos showing switch up TX and RX, then you wanna enable Advanced settings in the Ninebot IAP app, after that you will flash the BMS, select BMS and then load from repo, select Ninebot max and upload BMS to your liking, that it, now everything should work, if not you did something wrong and probably bricked your BMS, which isnt that bad cuz then its 99% bypassed, if that happens go to Xiaodash and emulate the BMS, there is enough info on the internet.

So, the dashboard is a different story, first of all remove that pesky cover by getting rid of the sticker (yes its a sticker) and start unscrewing, then disconnect all the cables and throw it away, seriously, there isnt even an on button on there and adding one+flashing isn’t worth it, it also has no Speedometer only 3 dots, so throw it straight out and get a cheap replacement if possible original, fakes sometimes dont have a proper storage which causes them to brick after flashing over BLE.


Now for the hardest party, the Controller, this needs to be done via stlink, the Pinout is:
Square Pad=Ground
Middle one is SWDCLK
And the last it SWIDO
Connect your 5V on the battery connector on the Data pin in the center, DO NOT connect it to either the minus or the plus, this will cause your STLink to short out and your USB port too(speaking from experience), when connected disable readout protection and flash DRV to your liking, i you have problems, just look up a Ninebot max STLink guide, no need to rewire anything then its just plug‘n play, i haven’t found a place where to buy new dashboard cover, if YOU find one please send the link here :)
I do have an 3D Printer files for one tho, i also got it from the internet, pn for it if i dont respond look for it yourself, easy to find.

Info!!!
————————————————————————

the Newest Battery uses 21700 Samung Cells!!! Which is pretty darn good for a (ex)shared scooter, this is by faar the best battery of the three

The other one with 27800MAH uses Samsung E50 cells if im not mistaken, they are also quite good, the battery fits in an Normal ninebot max without the stupid housing.

The worst but also the best uses Shitty 18650cells from Eve (cheap china manufacturer) they are by far the cheapest and the worst, but the have a working BMS tho



There are also several Motor‘s, all of them have a serial number that starts with an 6, but there is a version that is even better than the gen 2 Motor!!!
It goes 45KMH with 41V (BMS bypassed) and has waaay more torque, id like to call it Gen2+ :)
The other ones are just gen 1 Motors, you can tell them apart by the housing, the Bad ones have screws on both sides of the Motor, on the Serial number side and on the other side and the Gen2+ motors only have screws on the Serial number side, the newer Scooters also go completely away from the Ninebot max‘s design language and dont even use CST tires anymore, the newer ones have a 12inch front wheel compared to the 10inch ones, the newer ones also have an uglier mudgard, but Ninebot Max‘s is interchangeable.





This is not a tutorial for Stolen scooters and i take no responsibility for stolen scooters and or damage caused while trying this tutorial.

If you have improvement suggestions please drop them down below.
I will also try to help if you pn me.
Sorry for some mistakes, i am just an 14 YO german student :)
brixsat
Posts: 10
Joined: Mon Nov 01, 2021 5:05 pm

Re: Tutorial!!! SNSC 2.3 Aka Ninebot Max Plus conversion

Postby brixsat Sun Aug 28, 2022 11:07 am

Amazing post. if you could add some pictures it would be awesome.

I will try to follow the process and if possible make pics and be even more detailed. But never the less this is awesome.

Thanks
Seek and you will find.
Spoooky
Posts: 23
Joined: Fri Aug 26, 2022 12:02 am

Re: Tutorial!!! SNSC 2.3 Aka Ninebot Max Plus conversion

Postby Spoooky Sun Aug 28, 2022 10:41 pm

Hey brixsat, i am currently unable to add pictures, but if you need any help or explanation on parts, i am there :)
brixsat
Posts: 10
Joined: Mon Nov 01, 2021 5:05 pm

Re: Tutorial!!! SNSC 2.3 Aka Ninebot Max Plus conversion

Postby brixsat Mon Aug 29, 2022 8:24 pm

Let me decompose your post so anyone can understand.
Let me start by the battery and the bms.

You say "15300MAH battery model number NE1006-M1 flashable ✅ ", Im with luck 😀i have this one.

What have you flashed? Can you share the file?

I think i figured out the pin out since i could detect it once.
The reference:
Image
My job
Image



Can you please share the file i should use to flash the bms?

Then i will proceed to the esc.

Thanks in advance.
Seek and you will find.
Spoooky
Posts: 23
Joined: Fri Aug 26, 2022 12:02 am

Re: Tutorial!!! SNSC 2.3 Aka Ninebot Max Plus conversion

Postby Spoooky Mon Aug 29, 2022 9:28 pm

Hey no need to take apart battery, if you have the gps cable, just connect like i said, if you dont have it or whatever you need to flash via STLink via the pinout you sent, just be aware you need to enter SWIM mode on your STLink or how its called and you need a hex file, no fulldump or whatever, just search it here: https://files.scooterhacking.org/firmware/
Just use a Ninebot Max G30 File, to my knowledge it should be flashable, but if you end up bricking the BMS somehow please tell me so i can update the tutorial :)
Hope this helps
CDogg
Posts: 79
Joined: Tue Sep 03, 2019 7:08 am

Re: Tutorial!!! SNSC 2.3 Aka Ninebot Max Plus conversion

Postby CDogg Sat Sep 10, 2022 2:34 pm

Hey no need to take apart battery, if you have the gps cable, just connect like i said, if you dont have it or whatever you need to flash via STLink via the pinout you sent, just be aware you need to enter SWIM mode on your STLink or how its called and you need a hex file, no fulldump or whatever, just search it here: https://files.scooterhacking.org/firmware/
Just use a Ninebot Max G30 File, to my knowledge it should be flashable, but if you end up bricking the BMS somehow please tell me so i can update the tutorial :)
Hope this helps
Do you know if this method will work if the rental company applied "write protection" to the BMS?
I have ran into this problem on several batteries from this one particular rental company located here in the US. I have found a couple work-arounds, one method even includes a BMS board swap with a clean board purchased from AliExpress. But for the sake of using the parts that came with the scooter, I would love to know how well this method works with the extra layer of security
Iluhis
Posts: 1
Joined: Tue Oct 04, 2022 7:15 am

Re: Tutorial!!! SNSC 2.3 Aka Ninebot Max Plus conversion

Postby Iluhis Wed Oct 05, 2022 7:16 am

Whal dash would you recommend? Do I need to reflash the dash or it will work properly as is? I have a voi one. Can I make the battery latch to open with a button?

Can I put another, faster motor on it and what motor should I look for? Will I need to reflash scooter or change some other parts with the motor? Native 25-30 km is too slow, I lack about 5-7 kmph to move with the traffic. And will this motorfit the drum brakes?
HateHead666Dicksson
Posts: 2
Joined: Fri Sep 16, 2022 10:53 am

Re: Tutorial!!! SNSC 2.3 Aka Ninebot Max Plus conversion

Postby HateHead666Dicksson Sat Oct 08, 2022 1:34 pm

Can someone please tell me the serial number i need for bypassing the 29700 battery!
Spoooky
Posts: 23
Joined: Fri Aug 26, 2022 12:02 am

Re: Tutorial!!! SNSC 2.3 Aka Ninebot Max Plus conversion

Postby Spoooky Fri Oct 28, 2022 6:02 pm

Hey no need to take apart battery, if you have the gps cable, just connect like i said, if you dont have it or whatever you need to flash via STLink via the pinout you sent, just be aware you need to enter SWIM mode on your STLink or how its called and you need a hex file, no fulldump or whatever, just search it here: https://files.scooterhacking.org/firmware/
Just use a Ninebot Max G30 File, to my knowledge it should be flashable, but if you end up bricking the BMS somehow please tell me so i can update the tutorial :)
Hope this helps
Do you know if this method will work if the rental company applied "write protection" to the BMS?
I have ran into this problem on several batteries from this one particular rental company located here in the US. I have found a couple work-arounds, one method even includes a BMS board swap with a clean board purchased from AliExpress. But for the sake of using the parts that came with the scooter, I would love to know how well this method works with the extra layer of security


Yes, writing protection is bypassed if connecting Via GPS cable, with STLink, i actually dont know, just remember the 27800MaH battery uses a CPU which needs hex files!!!
Spoooky
Posts: 23
Joined: Fri Aug 26, 2022 12:02 am

Re: Tutorial!!! SNSC 2.3 Aka Ninebot Max Plus conversion

Postby Spoooky Fri Oct 28, 2022 6:05 pm

Can someone please tell me the serial number i need for bypassing the 29700 battery!


You will need to reflash the BmS, i will get one of these batteries soon with good BmS flash, they need a special file which is only available to Internals at rental companies, but i will share my file as soon as i get it!!!

Btw the BMS is spot welded on the Nickel strips of the Battery.

Return to “Ninebot Max”

Who is online

Users browsing this forum: No registered users and 45 guests