Thank me later... (engineering menu)

[korhancosanergun]

It's not 200519 - just tried it. ?

PS - mine was showing 0.8GB used of 3.79GB ... I guess some of the RAM is reserved. (Or it is 4GB in terms of 4,000,000,000 Bytes rather than 1024 x 1024 x 1024 = 4,294,967,296 Bytes)

Did you find out what the password is? I have reopened the topic after a long time but I need information.

 

[haloweenhamster]

Did you find out what the password is? I have reopened the topic after a long time but I need information.

Depending on software versions this might help

MG4 Secret Menu Mode...

When you have your phone connected to the car (e.g. to use Google maps) and you've selected the Android Auto button (if AA hasn't come up automatically), press and hold the Voice button (top left on the steering wheel) and wait for the "bidly-bing" sound from AA and a visual prompt at the bottom...

www.mgevs.com

 

[siteguru]

As per above the SE (Standard/Comfort) access code is now well known, and is accessed via the phone screen.

#*#4479*#*

 

[korhancosanergun]

Yukarıda belirtildiği gibi SE (Standart/Konfor) erişim kodu artık iyi biliniyor ve telefon ekranı üzerinden erişilebiliyor.

[kod]##4479#*[/kod]

I already know how to access that. I was asking about entering advanced engineering mode through the password screen that pops up when you tap the bottom right corner 5 times. Thanks

Depending on software versions this might help

MG4 Secret Menu Mode...

When you have your phone connected to the car (e.g. to use Google maps) and you've selected the Android Auto button (if AA hasn't come up automatically), press and hold the Voice button (top left on the steering wheel) and wait for the "bidly-bing" sound from AA and a visual prompt at the bottom...

www.mgevs.com

I'm checking it out. Thanks!

 

[siteguru]

Nobody has found the code to access that menu yet (as far as I know) ... if you do work it out please let us know.

 

[haloweenhamster]

Nobody has found the code to access that menu yet (as far as I know) ... if you do work it out please let us know.

On the other thread it says the password can be seen in the logs on older R** versions but hidden on R33, it's thought to be linked to the VIN & date

 

[siteguru]

So the algorithm is not yet known ... if someone works it out then that would be great.

AFAIK the 200519 code on the Trophy only gets you to a similar set of menus as the current SE "phone" code?

 

[haloweenhamster]

This was the post with the actual description

MG4 Secret Menu Mode...

Ok, so progress. The engineering second level password is a number. (In my case, 8 digits) The problem is it appears to be calculated from your cars serial number, so it's different for everybody. I haven't sat down to figure out how they convert the serial number into the code yet. The way...

www.mgevs.com

To be able to crack it you'd either need to reverse engineer the correct APK in the update or get at least 2 or 3 people to get the password daily for a month or so
Several people on the same day will give the vin influence, daily will give date influence but sporadic makes it harder

 

[leonkernan]

I'm one of the people who can get the password and get in there.
Trouble is ADB either doesn't work or isn't an option on my version. I haven't been able to get anything to connect, using several different laptops and trying both the USB-A or USB-C ports.

 

[korhancosanergun]

I'm working on it. I'll share updates here as I gather more information.

 

[DaevM]

OMG! I need this! I'll actually pay good money to permanently turn off LKA and the speed sign recognition. They're absolutely shit and make me hate driving the otherwise lovely car.

Put it in tow mode to deactivate LKA. Doesn't need to be reentered everytime you get back in.
Does deactivate a couple of other things like reversing sensors.
Speed sign recognition and sleepy mode I switch off every time.
(Invoice in the post but you only have to pay 50% ??)

 

[leonkernan]

For anyone wanting to get their own access to the engineering menu in an SE, I'll just leave this here.

Entered_Serial_Number is your cars serial number.

    public static String getPassword(String Entered_Serial_Number) {
         BigInteger bigInteger = new BigInteger(HMacMD5.getHmacMd5Str(Entered_Serial_number, new SimpleDateFormat("yyMMdd").format(new Date())).substring(0, 8), 16);
        return SHA256Util.getSHA256Str((bigInteger.longValue() + "").substring(0, 8));
    }

edit: edited down to the basic function and removed all the extra checks and trims.

 

[siteguru]

Where do you see/find the serial number? In the menu that you can access via the phone code?

 

[haloweenhamster]

Is it not the vin?

 

[leonkernan]

It's in the Android logs that you can export to a USB stick.

I'm not in the car at the moment but I think it's in the screen that gives all the infotainment version numbers.

 

[siteguru]

In the other thread @leonkernan said:

The SN is 15 or 16 characters, if it's 15 they add a 0 to the end.
They check it's letters and numbers only.

My VIN is 17 characters.

Edit: cross-posted.

 

[tommasov]

For anyone wanting to get their own access to the engineering menu in an SE, I'll just leave this here.

Entered_Serial_Number is your cars serial number.

    public static String getPassword(String Entered_Serial_Number) {
         BigInteger bigInteger = new BigInteger(HMacMD5.getHmacMd5Str(Entered_Serial_number, new SimpleDateFormat("yyMMdd").format(new Date())).substring(0, 8), 16);
        return SHA256Util.getSHA256Str((bigInteger.longValue() + "").substring(0, 8));
    }

edit: edited down to the basic function and removed all the extra checks and trims.

I tried to implement this in Javascript.

MG4 2022/2023 - SE - Password Generator

ws2.tommasovietina.it

 

[leonkernan]

Turns out we don't need to do the SHA256 bit.
They do that because they also SHA256 the text typed in the password box and compare hashes.

I also couldn't get it to work with that HmacMD5 function and found another one online that
worked.

Here's a java file that will do the job.

 

[haloweenhamster]

Have those with an SE tried either of the password generators?
Do both generators work identically?

 

[tommasov]

Turns out we don't need to do the SHA256 bit.
They do that because they also SHA256 the text typed in the password box and compare hashes.

I also couldn't get it to work with that HmacMD5 function and found another one online that
worked.

Here's a java file that will do the job.

Yes, SHA256 is not needed.

I updated the code and also added:
if (serialNumber.length === 15) {
serialNumber += "0"; //Add 0 if lenght is 15
}

Now it should work as intended:

MG4 2022/2023 - SE - Password Generator

ws2.tommasovietina.it