SlideShare a Scribd company logo
Latch Mycar Installation and User
Manual
Diego Alejandro Gamboa Peña
Bogota-Colombia.
Installation
Summary
This hack is intended to control the start of a vehicle from latch. It is divided into two parts; The first is
a web application that is responsible for storing in a database the serial of the vehicle (It is understood
by serial of the vehicle to the code associated with the raspberry pi) associated with the accountid of
the user latch, The second consists of a script designed in Python that controls the boot circuit from the
constraints determined by latch for the vehicle serial corresponding to the larch user's accountid.
Web Application
To facilitate the use of the plugin was implemented an application that will provide the pairing service
between the device and latch. The application is built in PHP (from template) and allows the registration
of users and through a serial associated with the raspberry pi, it performs the synchronization between
the device and latch storing the user's accountId.
The built application is in the GitHub CarSec repository, it consists of a registration form, an entry form,
and a restAPI used by the client application to obtain the data needed to connect with latch.
Description.
- CarSec: Is a web application in php that allows the pairing of the raspberry with latch and
provides the services and information necessary for the status queries of latch services. At this
time the application of tests can be seen at http://107.170.113.246/carsec/
- Mycar: Plugin in python for consumption of latch services and state checking.
- Latch: Service of elevenpaths described with amplitude in latch.elevenpaths.com
In the following flow diagram we see the basic sequence to perform the pairing of our mycar System with
latch.
Illustration 1 Pairing Sequence Diagram
1. User registration in the application: in this step the user account is created in CarSec, application
that will be in charge of orchestrating the services between latch and the vehicle. In screen 1
we can see the data needed to register.
Image 1
1. Login: using a simple login screen the user will be able to access the application.
Image 2
2. Initial screen: after login in the application we will see image 3. This screen shows the list of
vehicles we have with MyCar devices
Image 3
3. In the Subscribe Vehicle option is where we will do the pairing of devices, three fields must be
completed:
Vehicle: Name you want to give the vehicle in the application.
Device Serial Number: Serial number enrolled in raspberry PI.
Latch Pair Code: Pairing code generated in the latch application.
If the process is successful we will see our vehicle registered in the home page.
Image 4
In case you want to install the CarSec application on our own server the installation process will be very
simple:
Prerequisite software:
1. Linux distribution (Tested on Ubuntu 16.04).
2. Apache web server
3. MySQL
4. php
Installation:
1. Download the source code from GITHUB:
https://github.com/skyg4mb/LatchMyCar/tree/master/carsec
2. Placing it in the path that was determined as Apache web server, is regularly /var/www/html
3. Modify the following files with the connection data of your database.
a. dbconnect.php
b. include/config.php
c. server_response.php
4. Create database:
a. The database must contain for the minimum operation.
i. Usuarios table:
ii. Vehicles table:
Client
For the installation of the plugin is necessary both hardware and software, the hardware listing is as
follows:
- RaspBerry Pi 3 model B
- 1 Resistence 1.1 kohms
- 1 Resistence 330 ohms
- 1 Rele array for Raspberry
Prerequisite software:
- Raspbian https://www.raspberrypi.org/downloads/raspbian/
- Latch mycar https://github.com/skyg4mb/LatchMyCar/tree/master/mycar
Software installation:
The software does not need additional installation to be downloaded inside the raspberry pi, it is advised
to store in the path / opt / LatchMyCar
The following files must be modified:
- Detect.py
o In the method called latchService ()
 AppId: App ID given by latch
 SecretId: Secret code of application, granted by latch
 url: Serial number of the raspberry-pi, for now it can be any numeric code but
must match the one registered in the web page.
Hardware Installation.
In this case the installation test was carried out on a Ford EcoSport 2106, the ignition method of this
vehicle is explained in illustration 2.
Illustration 2 Ignition Ford EcoSport Original
To implement the Latch Mycar system the circuit will be modified by the one shown in figure 3, the
description of each compose is next:
Emergency: This switch serves to disable latch mycar in case of emergency.
R1: 1K
R2: 330
RLY1: A specific ras arrangement is recommended for raspberry pi.
RBPI: Raspberry pi 3 model B
R3: 330
R4: 1k
P4-P22: GPIO ports.
Illustration 3 Ignition circuit modified with LatchMyCar
Here is the sequence diagram used by the client application, in case the service is not blocked:
Figure 4 Sequence diagram in case of service available
Use case diagram in case of service blocked:
Figure 5 Sequence diagram in case of service blocked

More Related Content

PDF
Pandora FMS: Outlook Anywhere Plugin
PDF
Armitage – The Ultimate Attack Platform for Metasploit
PDF
Advanced Search with Solr - User Guide
PDF
case study1 web defacement answer.pdf
PPTX
Security Function
TXT
Install
PDF
Manual de integración de Latch en Mosquito MQTT Broker
PDF
DEF CON 27 - JMAXXZ - your car is my car
Pandora FMS: Outlook Anywhere Plugin
Armitage – The Ultimate Attack Platform for Metasploit
Advanced Search with Solr - User Guide
case study1 web defacement answer.pdf
Security Function
Install
Manual de integración de Latch en Mosquito MQTT Broker
DEF CON 27 - JMAXXZ - your car is my car

Similar to Latch MyCar: Documentation (15)

PPTX
الاردوينو uno التصمييم ب استخدام -1.pptx
PPTX
Bruno Audoux - Connected Cars to the Net, IoTs on the Roads
PDF
Tesla Hacking to FreedomEV
PDF
The Java Carputer
PPTX
We will charge you. How to [b]reach vendor’s network using EV charging station.
PDF
Litmus Automation_Connected Car Solution
PDF
Tesla hacking presentation fri3d
PDF
1024-bit Encrypted, Cloud-Based Garage
PDF
Hacking My Garage With A Raspberry Pi-SainSmart 2-Channel Relay
PDF
SCALE 2012: Automotive: new frontier for mobile Linux
PDF
Gattacking Bluetooth Smart devices - introducing new BLE MITM proxy tool
PDF
Keyless Door Entry via Bluetooth Technology
PDF
Tesla hacking presentation
PDF
IRJET- Smart Parking System using IoT
PDF
Tesla hacking presentation 'jaarbeurs World of Technology and Science' Octobe...
الاردوينو uno التصمييم ب استخدام -1.pptx
Bruno Audoux - Connected Cars to the Net, IoTs on the Roads
Tesla Hacking to FreedomEV
The Java Carputer
We will charge you. How to [b]reach vendor’s network using EV charging station.
Litmus Automation_Connected Car Solution
Tesla hacking presentation fri3d
1024-bit Encrypted, Cloud-Based Garage
Hacking My Garage With A Raspberry Pi-SainSmart 2-Channel Relay
SCALE 2012: Automotive: new frontier for mobile Linux
Gattacking Bluetooth Smart devices - introducing new BLE MITM proxy tool
Keyless Door Entry via Bluetooth Technology
Tesla hacking presentation
IRJET- Smart Parking System using IoT
Tesla hacking presentation 'jaarbeurs World of Technology and Science' Octobe...
Ad

More from Chema Alonso (20)

PDF
Índice del libro "Cuentos para Minihackers II: Un verano alucinante"
PDF
Índice del libro "Hacking & Pentesting con Inteligencia Artificial" de 0xWord
PDF
Informe de Análisis Forense hecho por VerifAI
PDF
Índice del libro: "Cuentos para minihackers I: Iniciando Sesión"
PDF
Índice del libro "Arquitectura de Seguridad y Patrones de Diseño Seguro" de 0...
PDF
BlackHat Europe 2024 Arsenal: level_up! & Web3 Security WarGames
PDF
Índice del Libro "Hacking Home Devices I: PoCs & Hacks Just for Fun!" de 0xWord
PDF
Índice del libro "The Art of Pentesting" de 0xWord
PDF
Índice del libro "Metaverso y mundos virtuales: Tecnologías, Retos y Oportuni...
PDF
Índice del libro "Big Data: Tecnologías para arquitecturas Data-Centric" de 0...
PDF
Índice de libro "Historias Cortas sobre Fondo Azul" de Willy en 0xWord
PDF
Índice del libro: Máxima Seguridad en Windows: Secretos Técnicos. 6ª Edición ...
PDF
Índice del libro "Hacking Web3: Challenge Acepted!" de 0xWord
PDF
Índice del libro "Amazon Web Services: Hardening de Infraestructuras Cloud Co...
PDF
Índice del Libro "Ciberestafas: La historia de nunca acabar" (2ª Edición) de ...
PDF
Índice del Libro "Storytelling para Emprendedores"
PPTX
Digital Latches for Hacker & Developer
PDF
Índice del libro "Hardening de servidores GNU / Linux 5ª Edición (Gold Edition)"
PDF
WhatsApp INT: OSINT en WhatsApp
PDF
Índice del libro "De la Caverna al Metaverso" de 0xWord.com
Índice del libro "Cuentos para Minihackers II: Un verano alucinante"
Índice del libro "Hacking & Pentesting con Inteligencia Artificial" de 0xWord
Informe de Análisis Forense hecho por VerifAI
Índice del libro: "Cuentos para minihackers I: Iniciando Sesión"
Índice del libro "Arquitectura de Seguridad y Patrones de Diseño Seguro" de 0...
BlackHat Europe 2024 Arsenal: level_up! & Web3 Security WarGames
Índice del Libro "Hacking Home Devices I: PoCs & Hacks Just for Fun!" de 0xWord
Índice del libro "The Art of Pentesting" de 0xWord
Índice del libro "Metaverso y mundos virtuales: Tecnologías, Retos y Oportuni...
Índice del libro "Big Data: Tecnologías para arquitecturas Data-Centric" de 0...
Índice de libro "Historias Cortas sobre Fondo Azul" de Willy en 0xWord
Índice del libro: Máxima Seguridad en Windows: Secretos Técnicos. 6ª Edición ...
Índice del libro "Hacking Web3: Challenge Acepted!" de 0xWord
Índice del libro "Amazon Web Services: Hardening de Infraestructuras Cloud Co...
Índice del Libro "Ciberestafas: La historia de nunca acabar" (2ª Edición) de ...
Índice del Libro "Storytelling para Emprendedores"
Digital Latches for Hacker & Developer
Índice del libro "Hardening de servidores GNU / Linux 5ª Edición (Gold Edition)"
WhatsApp INT: OSINT en WhatsApp
Índice del libro "De la Caverna al Metaverso" de 0xWord.com
Ad

Recently uploaded (20)

PDF
MIND Revenue Release Quarter 2 2025 Press Release
PDF
Blue Purple Modern Animated Computer Science Presentation.pdf.pdf
PDF
gpt5_lecture_notes_comprehensive_20250812015547.pdf
PDF
Empathic Computing: Creating Shared Understanding
PPTX
A Presentation on Artificial Intelligence
PPT
“AI and Expert System Decision Support & Business Intelligence Systems”
PDF
Video forgery: An extensive analysis of inter-and intra-frame manipulation al...
PDF
Mobile App Security Testing_ A Comprehensive Guide.pdf
PDF
Dropbox Q2 2025 Financial Results & Investor Presentation
PDF
Unlocking AI with Model Context Protocol (MCP)
PDF
Advanced methodologies resolving dimensionality complications for autism neur...
PDF
The Rise and Fall of 3GPP – Time for a Sabbatical?
PPTX
KOM of Painting work and Equipment Insulation REV00 update 25-dec.pptx
PDF
Getting Started with Data Integration: FME Form 101
PPTX
20250228 LYD VKU AI Blended-Learning.pptx
PDF
Profit Center Accounting in SAP S/4HANA, S4F28 Col11
PPTX
Machine Learning_overview_presentation.pptx
PPT
Teaching material agriculture food technology
PDF
TokAI - TikTok AI Agent : The First AI Application That Analyzes 10,000+ Vira...
PDF
Accuracy of neural networks in brain wave diagnosis of schizophrenia
MIND Revenue Release Quarter 2 2025 Press Release
Blue Purple Modern Animated Computer Science Presentation.pdf.pdf
gpt5_lecture_notes_comprehensive_20250812015547.pdf
Empathic Computing: Creating Shared Understanding
A Presentation on Artificial Intelligence
“AI and Expert System Decision Support & Business Intelligence Systems”
Video forgery: An extensive analysis of inter-and intra-frame manipulation al...
Mobile App Security Testing_ A Comprehensive Guide.pdf
Dropbox Q2 2025 Financial Results & Investor Presentation
Unlocking AI with Model Context Protocol (MCP)
Advanced methodologies resolving dimensionality complications for autism neur...
The Rise and Fall of 3GPP – Time for a Sabbatical?
KOM of Painting work and Equipment Insulation REV00 update 25-dec.pptx
Getting Started with Data Integration: FME Form 101
20250228 LYD VKU AI Blended-Learning.pptx
Profit Center Accounting in SAP S/4HANA, S4F28 Col11
Machine Learning_overview_presentation.pptx
Teaching material agriculture food technology
TokAI - TikTok AI Agent : The First AI Application That Analyzes 10,000+ Vira...
Accuracy of neural networks in brain wave diagnosis of schizophrenia

Latch MyCar: Documentation

  • 1. Latch Mycar Installation and User Manual Diego Alejandro Gamboa Peña Bogota-Colombia. Installation Summary This hack is intended to control the start of a vehicle from latch. It is divided into two parts; The first is a web application that is responsible for storing in a database the serial of the vehicle (It is understood by serial of the vehicle to the code associated with the raspberry pi) associated with the accountid of the user latch, The second consists of a script designed in Python that controls the boot circuit from the constraints determined by latch for the vehicle serial corresponding to the larch user's accountid. Web Application To facilitate the use of the plugin was implemented an application that will provide the pairing service between the device and latch. The application is built in PHP (from template) and allows the registration of users and through a serial associated with the raspberry pi, it performs the synchronization between the device and latch storing the user's accountId. The built application is in the GitHub CarSec repository, it consists of a registration form, an entry form, and a restAPI used by the client application to obtain the data needed to connect with latch. Description. - CarSec: Is a web application in php that allows the pairing of the raspberry with latch and provides the services and information necessary for the status queries of latch services. At this time the application of tests can be seen at http://107.170.113.246/carsec/ - Mycar: Plugin in python for consumption of latch services and state checking. - Latch: Service of elevenpaths described with amplitude in latch.elevenpaths.com
  • 2. In the following flow diagram we see the basic sequence to perform the pairing of our mycar System with latch. Illustration 1 Pairing Sequence Diagram 1. User registration in the application: in this step the user account is created in CarSec, application that will be in charge of orchestrating the services between latch and the vehicle. In screen 1 we can see the data needed to register.
  • 3. Image 1 1. Login: using a simple login screen the user will be able to access the application. Image 2
  • 4. 2. Initial screen: after login in the application we will see image 3. This screen shows the list of vehicles we have with MyCar devices Image 3 3. In the Subscribe Vehicle option is where we will do the pairing of devices, three fields must be completed: Vehicle: Name you want to give the vehicle in the application. Device Serial Number: Serial number enrolled in raspberry PI. Latch Pair Code: Pairing code generated in the latch application. If the process is successful we will see our vehicle registered in the home page.
  • 5. Image 4 In case you want to install the CarSec application on our own server the installation process will be very simple: Prerequisite software: 1. Linux distribution (Tested on Ubuntu 16.04). 2. Apache web server 3. MySQL 4. php Installation: 1. Download the source code from GITHUB: https://github.com/skyg4mb/LatchMyCar/tree/master/carsec 2. Placing it in the path that was determined as Apache web server, is regularly /var/www/html 3. Modify the following files with the connection data of your database. a. dbconnect.php b. include/config.php c. server_response.php 4. Create database: a. The database must contain for the minimum operation. i. Usuarios table: ii. Vehicles table: Client
  • 6. For the installation of the plugin is necessary both hardware and software, the hardware listing is as follows: - RaspBerry Pi 3 model B - 1 Resistence 1.1 kohms - 1 Resistence 330 ohms - 1 Rele array for Raspberry Prerequisite software: - Raspbian https://www.raspberrypi.org/downloads/raspbian/ - Latch mycar https://github.com/skyg4mb/LatchMyCar/tree/master/mycar Software installation: The software does not need additional installation to be downloaded inside the raspberry pi, it is advised to store in the path / opt / LatchMyCar The following files must be modified: - Detect.py o In the method called latchService ()  AppId: App ID given by latch  SecretId: Secret code of application, granted by latch  url: Serial number of the raspberry-pi, for now it can be any numeric code but must match the one registered in the web page. Hardware Installation.
  • 7. In this case the installation test was carried out on a Ford EcoSport 2106, the ignition method of this vehicle is explained in illustration 2. Illustration 2 Ignition Ford EcoSport Original To implement the Latch Mycar system the circuit will be modified by the one shown in figure 3, the description of each compose is next: Emergency: This switch serves to disable latch mycar in case of emergency. R1: 1K R2: 330 RLY1: A specific ras arrangement is recommended for raspberry pi. RBPI: Raspberry pi 3 model B R3: 330 R4: 1k P4-P22: GPIO ports.
  • 8. Illustration 3 Ignition circuit modified with LatchMyCar
  • 9. Here is the sequence diagram used by the client application, in case the service is not blocked: Figure 4 Sequence diagram in case of service available Use case diagram in case of service blocked: Figure 5 Sequence diagram in case of service blocked