Troubleshooting & Technical Questions & Modifications Have technical or modification questions about the Crossfire? Find out the answer, or give advice in here!

I hacked the Skreem, the Skreemulator

Thread Tools
 
Old Apr 22, 2020 | 09:12 AM
  #141 (permalink)  
nemiro's Avatar
Administrator
Joined: Mar 2020
Posts: 985
Likes: 633
From: NW FL
Default Re: I hacked the Skreem, the Skreemulator

Sure thing. Just let me know what I can help with.
 
Reply
Old Apr 23, 2020 | 02:33 PM
  #142 (permalink)  
Spamman_tx's Avatar
Joined: Jun 2015
Posts: 9
Likes: 0
From: San Antonio
Default Re: I hacked the Skreem, the Skreemulator

That’s amazing can’t wait for updates
 
Reply
Old Apr 24, 2020 | 07:21 PM
  #143 (permalink)  
ecuserwis's Avatar
Joined: Jan 2019
Posts: 4
Likes: 0
From: Arcade Game
Default Re: I hacked the Skreem, the Skreemulator

Hello

in Europe there exist a real SKREEM emulator for a long time, without any restrictions, it works like the original in terms of unlocking the immobilizer, the SKREEMULATOR pretends to be every of the key implemented in the immo 0 to 7 , with the right numbers of starts as programmed in the MB(Yes MB , it no mistake) factory.
For add EMULATOR don't need change any one byte in PCM : www.instagram.com/p/B_W6MWehLPq/ ... solution it's not plug and play.

B.R. from Poland


 

Last edited by ecuserwis; Apr 24, 2020 at 07:25 PM.
Reply
Old Apr 24, 2020 | 09:42 PM
  #144 (permalink)  
nemiro's Avatar
Administrator
Joined: Mar 2020
Posts: 985
Likes: 633
From: NW FL
Default Re: I hacked the Skreem, the Skreemulator

OK. I'll bite. Can we get complete information on this solution?
 
Reply
Old Apr 25, 2020 | 08:03 AM
  #145 (permalink)  
ecuserwis's Avatar
Joined: Jan 2019
Posts: 4
Likes: 0
From: Arcade Game
Default Re: I hacked the Skreem, the Skreemulator

My post is not a commercial offer, I am currently using my solution in Europe to run these cars.
Because I found this thread on the forum, I understood that I should show the existing solution.
If any company wants to distribute this device in the US, please contact to PM.
Brief information on how to add My SKREEMULATOR (copyright for this pretty name - of course belongs to Viper-666) :
there are two ways:
One is to read the eeprom from the ECU (95P08) , from this data I will create content for the emulator.
Second way : the data needed to work the emulator can be read by communicating with the ECU via CANBUS , in this case it is not necessary to open the ECU, and as in the first case I create data content for the emulator from the information readed info content,
and as in the first case I create data content for the emulator from the information readed info content .
Using both methods, we do not change anything in the ECU files in and the data in eeprom remain original.
We can use the SKREEM immobilizer with the keys and the emulator- interchangeably an emulator and SKREEM, of course the emulator must be paired with other key numbers (the ECU has 8 keys stored) and cannot be connected simultaneously - we either use one or the other
 

Last edited by ecuserwis; Apr 25, 2020 at 08:22 AM.
Reply
Old Apr 25, 2020 | 12:56 PM
  #146 (permalink)  
a1976's Avatar
Joined: Feb 2020
Posts: 11
Likes: 0
From: Des Planes
Default Re: I hacked the Skreem, the Skreemulator

Originally Posted by ecuserwis
Hello

in Europe there exist a real SKREEM emulator for a long time, without any restrictions, it works like the original in terms of unlocking the immobilizer, the SKREEMULATOR pretends to be every of the key implemented in the immo 0 to 7 , with the right numbers of starts as programmed in the MB(Yes MB , it no mistake) factory.
For add EMULATOR don't need change any one byte in PCM : www.instagram.com/p/B_W6MWehLPq/ ... solution it's not plug and play.

B.R. from Poland
In USA a real SKREEM emulator exist for a long time too, proven and tested. Solution IS Plug n Play.

https://www.ebay.com/itm/2004-2008-C...gAAOSw791ebTCR

B.R. from USA
 

Last edited by a1976; Apr 25, 2020 at 01:18 PM.
Reply
Old Apr 25, 2020 | 01:19 PM
  #147 (permalink)  
Viper-666's Avatar
Thread Starter
Joined: Aug 2017
Posts: 210
Likes: 41
From: Germany
Default Re: I hacked the Skreem, the Skreemulator

Originally Posted by ecuserwis
Hello

in Europe there exist a real SKREEM emulator for a long time, without any restrictions, it works like the original in terms of unlocking the immobilizer, the SKREEMULATOR pretends to be every of the key implemented in the immo 0 to 7 , with the right numbers of starts as programmed in the MB(Yes MB , it no mistake) factory.
For add EMULATOR don't need change any one byte in PCM : www.instagram.com/p/B_W6MWehLPq/ ... solution it's not plug and play.

B.R. from Poland
Hello,
nice device and it seems like it woks similar to the first version of my skreemulator. With the difference that you probably managed to create new valid codes from two valid codes. I haven't got that right yet.
But this also means that your system has also the limitation in the maximum number of codes.
My new solution would no longer have this limitation.
And I'm from Europe (Germany) and have never heard about your solution...
 
Reply
Old Apr 25, 2020 | 01:22 PM
  #148 (permalink)  
ecuserwis's Avatar
Joined: Jan 2019
Posts: 4
Likes: 0
From: Arcade Game
Default Re: I hacked the Skreem, the Skreemulator

First of all, congratulations - breaking this security system is not easy ,I know something about it.
Secondly, I have seen this auction a long time ago and it is clearly written: "For this service, you will have to send in the ECM (original or replacement) and SKREEM module"... What if we don't have SKREEM ?
A real emulator doesn't need any data from SKREEM , only ECU is needed , but always any solution is good , if it works well
 
Reply
Old Apr 25, 2020 | 01:34 PM
  #149 (permalink)  
ecuserwis's Avatar
Joined: Jan 2019
Posts: 4
Likes: 0
From: Arcade Game
Default Re: I hacked the Skreem, the Skreemulator

Originally Posted by Viper-666
Hello,
nice device and it seems like it woks similar to the first version of my skreemulator. With the difference that you probably managed to create new valid codes from two valid codes. I haven't got that right yet.
But this also means that your system has also the limitation in the maximum number of codes.
My new solution would no longer have this limitation,
And I'm from Europe (Germany) and have never heard about your solution...
Hi

First - I'm sorry that I entered in your thread with my information, I believe you will forgive me.
So about maximum numers of codes : There are no restrictions more other than the original SKREEM, because the emulator code is 100% compatible with the original software implemented in SKREEM , in the original immobilizer we have 8 keys and each of them has 196,607 permits to starting car , from start to end of life, this is not a "code player / recorder", it calculates rolling codes just as one to one as the original SKREEM
Why haven't you heard of them? because crossfire is only 1% of my work with immobilizer systems This is not a great discovery, but one of many studies ...
 

Last edited by ecuserwis; Apr 25, 2020 at 01:44 PM.
Reply
Old Apr 26, 2020 | 05:54 AM
  #150 (permalink)  
Viper-666's Avatar
Thread Starter
Joined: Aug 2017
Posts: 210
Likes: 41
From: Germany
Default Re: I hacked the Skreem, the Skreemulator

Originally Posted by ecuserwis
Hi

First - I'm sorry that I entered in your thread with my information, I believe you will forgive me.
So about maximum numers of codes : There are no restrictions more other than the original SKREEM, because the emulator code is 100% compatible with the original software implemented in SKREEM , in the original immobilizer we have 8 keys and each of them has 196,607 permits to starting car , from start to end of life, this is not a "code player / recorder", it calculates rolling codes just as one to one as the original SKREEM
Why haven't you heard of them? because crossfire is only 1% of my work with immobilizer systems This is not a great discovery, but one of many studies ...
No problem, that you have entered my threat, first I don't have the intention to make a business with this module, it's a hobby for me, second you tell me the number of how many codes the skreem can send I don't know that and thinked it was 65.000 thank you for that.
 
Reply
Old Dec 28, 2020 | 03:00 PM
  #151 (permalink)  
phil alvirez's Avatar
Senior Member
Joined: Jun 2019
Posts: 1,047
Likes: 40
From: windsor ontario next to detroit
Default Re: I hacked the Skreem, the Skreemulator

just saw this: https://www.youtube.com/watch?v=PCQN...=AndreHoltkamp
could you please tell us more about it? thanks
 
Reply
Old Jan 4, 2021 | 07:02 AM
  #152 (permalink)  
Viper-666's Avatar
Thread Starter
Joined: Aug 2017
Posts: 210
Likes: 41
From: Germany
Default Re: I hacked the Skreem, the Skreemulator

Originally Posted by phil alvirez
just saw this: https://www.youtube.com/watch?v=PCQN...=AndreHoltkamp
could you please tell us more about it? thanks
Hello Phil,
to find a way to open/close the Crossfire's central locking system and enable/disable the alarm was the last missing goal for my Skreemulator. I this video you can see how I open/close the Crossfire and enable/disable the alarm with a Arduino. So I could now (expecting the obd diagnose) fully emulate a skreem module.
I'm actually designing the hardware and the PCB, I hope to get a working prototype this month. I have also to optimize and write some parts of the software, I hope I get this also ready this month. Then I will search for some people to make a beta test.
I think in the middle of this year I could sell my Skreemulator.
 
Reply
Old Jan 24, 2021 | 12:51 PM
  #153 (permalink)  
Viper-666's Avatar
Thread Starter
Joined: Aug 2017
Posts: 210
Likes: 41
From: Germany
Default Re: I hacked the Skreem, the Skreemulator

A other Update:
The first prototype PCB of the Skreemulator is ready.
There are still a few small things that need to be changed but generally everything works as it should in my test setup.
Next week it will be installed in the Crossfire.

The raw PCB

PCB with plugs

With housing
 
Reply
Old Jan 24, 2021 | 01:32 PM
  #154 (permalink)  
phil alvirez's Avatar
Senior Member
Joined: Jun 2019
Posts: 1,047
Likes: 40
From: windsor ontario next to detroit
Default Re: I hacked the Skreem, the Skreemulator

excellent. congratulations. we all have been following you on your endeavor. long journey for you, i would say.
looking forward for what is next.
willing to get 1 anytime.
now, could you please explain in detail what is we are supposed to do to have it installed and working?
thanks
 

Last edited by phil alvirez; Jan 25, 2021 at 09:40 AM.
Reply
Old Feb 1, 2021 | 06:10 AM
  #155 (permalink)  
Viper-666's Avatar
Thread Starter
Joined: Aug 2017
Posts: 210
Likes: 41
From: Germany
Default Re: I hacked the Skreem, the Skreemulator

The first test of the second prototype (on PCB not on perfboard) in my Crossfire.
The installing is realy easy, unplug the Skreem module and plug my Skreemulator on.
Then install the ECU it has to be programmed to work with the Skreemulator.
On the Skreemulator is a aftermarket keyless open system connected so you don't need the Crossfire remote any more.
I will deliver the Skreemulator with a simple keyless open system what is ready to be pluged into the Skreemulator to work.
But technicaly every after market keless open or keless go systems will work.
The US user also been able to just open the door with the key.

 
Reply
Old Feb 1, 2021 | 06:41 AM
  #156 (permalink)  
phil alvirez's Avatar
Senior Member
Joined: Jun 2019
Posts: 1,047
Likes: 40
From: windsor ontario next to detroit
Default Re: I hacked the Skreem, the Skreemulator

terrific ! thank you for notifying us.
the way i understand it is:
1-whenever it is ready, you tell us that it is available-and the $ we have to pay
2-we pay you paypal
3-you send to us the skreemulator (it is a part like the 1 shown in your post 153)
question: do you send also something else? another part? please explain if so
4-then we install the ECU
this tells me that we have to remove it before, right? what for?
you said that it has to be programmed. please tell if we do so. i think you mentioned before that it has to be sent to some1 in the usa. is that right?
thanks again. looking forward for your explanation.
am enclosing sequence to remove the skreem. https://www.crossfireforum.org/forum...crossfire.html
is this what we have to do to replace it?
 

Last edited by phil alvirez; Feb 1, 2021 at 06:58 AM.
Reply
Old Feb 1, 2021 | 07:45 AM
  #157 (permalink)  
nemiro's Avatar
Administrator
Joined: Mar 2020
Posts: 985
Likes: 633
From: NW FL
Default Re: I hacked the Skreem, the Skreemulator

Love it! Tell me more about the button setup on your steering wheel. I was looking to do something like that to control my RealDash setup. Thanks!
 
Reply
Old Feb 8, 2021 | 07:02 PM
  #158 (permalink)  
onehundred80's Avatar
Senior Member
Joined: Apr 2006
Posts: 25,432
Likes: 647
From: Ontario
Default Re: I hacked the Skreem, the Skreemulator

Originally Posted by nemiro
Love it! Tell me more about the button setup on your steering wheel. I was looking to do something like that to control my RealDash setup. Thanks!
I have seen duct tape used to good effect, Red Green did some great work using this tape.
 
Reply
Old Feb 8, 2021 | 07:16 PM
  #159 (permalink)  
pizzaguy's Avatar
Administrator
Joined: Jun 2009
Posts: 13,959
Likes: 1,288
From: Fort Worth, Texas
Default Re: I hacked the Skreem, the Skreemulator

I wish I could buy the entire series of Red Green ... In fact, I bet I can!

He was Canada's best export next to Avril.


 
Reply
Old Feb 10, 2021 | 01:49 AM
  #160 (permalink)  
Viper-666's Avatar
Thread Starter
Joined: Aug 2017
Posts: 210
Likes: 41
From: Germany
Default Re: I hacked the Skreem, the Skreemulator

Originally Posted by nemiro
Love it! Tell me more about the button setup on your steering wheel. I was looking to do something like that to control my RealDash setup. Thanks!
Sorry, I have misted your post. I have this: https://de.aliexpress.com/item/40002...27424c4da6K162
It is connected to a Anduino Pro Mini wo is connected to the receiver box and makes keystrokes from the signal: https://bluewavestudio.io/community/...d.php?tid=1677
 
Reply



All times are GMT -4. The time now is 06:34 AM.