Hackaday · Creativity & design

E-scooter Firmware Hacked and Rewritten in Rust

A hacker has reverse-engineered the firmware of an Egret GT E-scooter to address a security vulnerability and gain deeper access to the vehicle's data.

The original firmware allowed accidental entry into an operational mode without a security PIN, prompting the hacker to rewrite the firmware in Rust. Analysis of the scooter's Bluetooth communication revealed hidden data and telemetry sent to a central server, further motivating the firmware replacement.

Using an oscilloscope and a custom CAN decoder, the hacker discovered that the scooter's CAN bus is accessible via the USB-C port's data pins, despite the port officially being for charging only. The process involved reverse-engineering the firmware update mechanism for the display, input panel, and main controller to install the new firmware.

AI-samenvatting op basis van de bron.