Members Login
Username 
 
Password 
    Remember Me  
Post Info TOPIC: How to start Keihin ECU hacking


Newbie

Status: Offline
Posts: 2
Date:
How to start Keihin ECU hacking


Hi all,

I want to crack ECU on my 2013 Triumph Street Triple, but don't have much experience with ECU hacking, could you please give me some links to read about, where to start?

I've already bought spare Keihin ECU for my bike (with wire harness). My current approach is to disassemble the case, then extract ROM memory banks and read the software binary, then decompile it and analyze the code... is it naive approach? :)

Do you have any hints how to disassemble the case? I've already tried brutal force on ECU from 2011 (used knife to separate plastic case from rubber, then pilers to rip off the plastic, but removing rubber for PCB is not easy, I've alredy destroyed some SMD resistors...). Is there easier way to obtain  the board?

Or maybe should I use the ODB2 interface to connect to ECU and try out sending "random" commands?

Where and how to start?



__________________


Guru

Status: Offline
Posts: 963
Date:


Most the ECUs I've run into from Mitsubishi and Denso actually use polyurethane potting. The best solvent I've found for this is MEK (methyl ethyl keytone) which can be found anywhere they sell paint supplies.

if it is polyurethane the case will be marked PUR somewhere.

You can soak the ecu in it for days with no damage to the ECU plastics or electronics. Carve off as much of the big chunks of potting as you can with a knife. Then soak it in MEK for a couple hours. Use a small screwdriver or knife to carefully scrape away the dissolved chunks. Repeat. When you get close to the circuit board use an old tooth brush to clean the remaining potting from the circuit board.

It usually takes several days. Soak for a couple hours, work on it for 10 mins, soak for a couple more hours etc. It is not the fastest method but it works well and gives you a very clean board without tearing off any small surface mount parts or damaging cpu pins.

When done wash with a lot of water and blow dry or dry in the sun.

BTW do this outside. The MEK fumes are not only very flammable but very noxious.

Step one once the board is uncovered is to identify the CPU part number.



__________________


Newbie

Status: Offline
Posts: 2
Date:

Thanks for the first step! I found PUR on the case, will follow your advice to extract circuit board

__________________
Page 1 of 1  sorted by
 
Quick Reply

Please log in to post quick replies.

Tweet this page Post to Digg Post to Del.icio.us


Create your own FREE Forum
Report Abuse
Powered by ActiveBoard