01
Reverse engineering
Disassembly of TriCore, C166, and SH-2A firmware. Memory mapping, calibration extraction, and security bypass.
Embedded software & reverse engineering for VW, Audi & Porsche performance
Expert TriCore, C166 & SH-2A reverse engineering and bespoke ECU/TCU development for tuning professionals — plus self-service ECU tools you can use right now.
MED17.5 Flash Tool
[INFO] Connecting to ECU...
[INFO] Interface: CAN0 @ 500kbit/s
[SEND] 0x10 0x03 [DiagnosticSessionControl - Extended Diagnostic]
[RECV] 0x50 0x03 [Positive Response]
[SEND] 0x3E 0x00 [TesterPresent]
[RECV] 0x7E 0x00 [Positive Response]
[SEND] 0x27 0x01 [SecurityAccess - RequestSeed]
[RECV] 0x67 0x01 0x12 0x34 0xAB 0xCD [Seed: 1234ABCD]
[INFO] Calculating key from seed...
[SEND] 0x27 0x02 0x56 0x78 0xEF 0x90 [SecurityAccess - SendKey]
[RECV] 0x67 0x02 [Access Granted]
[SEND] 0x10 0x02 [DiagnosticSessionControl - Programming Session]
[RECV] 0x50 0x02 [Positive Response]
[SEND] 0x22 0xF1 0x90 [ReadDataByIdentifier - VIN]
[RECV] 0x62 0xF1 0x90 WVWZZZ3C... [VIN Data]
[SEND] 0x34 0x00 0x44 0x80 0x00 0x00 0x00... [RequestDownload - Address: 0x80000000]
Services
What we do
Specialist embedded software and reverse engineering for the automotive performance industry.
02
ECU & TCU custom code
Multi-map switching, launch control, anti-lag, TCU torque management, and drive mode integration — running on OEM hardware.
03
Bespoke software
Diagnostic tools, flashing software, bootloaders, and web/mobile platforms built for tuning businesses.
Tools
Self-service ECU tools
Professional-grade tools and file archives available right now. Upload, process, download — no waiting for manual turnaround.
MG1/MD1 Checksum Correction
Automatic checksum correction for Bosch MG1 & MD1 ECU binaries
5 credits
· from £3.00
MED17/EDC17 Checksum Correction
Automatic checksum correction for Bosch MED17 & EDC17 ECU binaries
3 credits
· from £1.80
VAG Flash Files
Download ECU flash data files from the VAG Flash Files archive
2 credits / file
· from £1.20
DSG Files
Download DSG transmission flash files with rich metadata
5 credits / file
· from £3.00
Porsche Flash Files
Download original Porsche PIWIS ECU flash files (PDX/ODX)
8 credits / file
· from £4.80
ODX / FRF to BIN Converter
Convert FRF, ODX, PDX, SGO, SGM & SOX flash containers into a flat, ready-to-tune .bin
5 credits
· from £3.00
Platforms
Our platforms
SaaS products and platforms we've built for the tuning industry.
Live
BoostPortal
Powerful tuning file service platform enabling tuners to efficiently serve both tuning companies and end customers.
- Multi-tenant architecture for tuning businesses
- Automated file processing and delivery
- Customer portal with real-time updates
Live
Tuning Widget
Embeddable vehicle tuning lookup widget for your website. Your customers check their vehicle's tuning potential — you capture the leads.
- Over 14,000 vehicles from 165+ manufacturers
- UK number plate (VRM) instant lookup
- Fully customisable colours, labels & branding
Case studies
Proven results
Real-world projects showcasing our technical expertise and problem-solving approach.
Multi-Map Switching for VAG 2.0 TFSI
Major UK Tuning House
TriCore TC1797
UDS
CAN
Client needed seamless map switching for their high-performance builds without requiring additional hardware or compromising reliability.
Reversible TipTronic Lever for DQ250
DSG Flash
TriCore
Custom Code
State Machines
Some customers wanted to pull back the lever for upshifts and push forward for downshifts, which is standard for BMWs but not VAG.
Switchable RWD-Only Mode for MSS (Audi R8, Lamborghini Huracan)
Haldex.Flash
C166
Custom Code
CAN
The only available options for making these vehicles RWD were either to remove the propshaft and coupling, or to use an expensive aftermarket controller.
Switchable Burnout/FWD Mode for MQB (Audi S3, VW Golf R etc.)
Haldex.Flash
C166
Custom Code
CAN
The only available options for making these vehicles FWD were to pull the fuse, or to use an expensive aftermarket controller.
Open source
Open source
Tools and resources we've shared with the automotive reverse engineering community.
-
medc17-checksum-tool
Checksum analyzer and corrector for Bosch MED17/EDC17 ECU firmware binaries.
Python (opens in a new tab) -
automotive-re-scripts
Ghidra & IDA Pro scripts to accelerate automotive firmware reverse engineering.
Python (opens in a new tab) -
vag-uds-ids
Comprehensive database of UDS diagnostic identifiers for VAG control units.
Documentation (opens in a new tab)
Contact
Let's talk
Ready to discuss your project? Get in touch and we'll respond within 24 hours.
Need help with a tool, download or your account? No project budget required — sign in to the customer portal or message us on WhatsApp.
Typical Timeline
2-4 weeks
Project Budget
Starting from £5,000
For custom reverse engineering and application development. Simpler projects may qualify for lower rates.
What to Expect
- › Response within 24 hours
- › Initial consultation call (30 min)
- › Detailed proposal within 3-5 days
- › NDA available upon request
- › Honest assessment — if we can't deliver, we'll tell you upfront