CyberChef VS TeslaMate

Then we take the encrypted text and use CyberChef to decrypt it.

A parameter was changed from '2AMBCgIQBg' to 'CgIIAdgDAQ%3D%3D' which is just the correct base64 encoding they should have been using the entire time.

I don't think this was a hostile action by Google, I think someone just added better input validation for security reasons and it accidently broke the bad requests they were sending.

https://gchq.github.io/CyberChef/#recipe=URL_Decode()From_Ba...

It uses a combination of magic bytes (like the `file` command), entropy analysis and character frequency detection to determine whether an output is likely to be of interest to the user.

The file type mechanism is written here[0]. There's a list of all signatures we detect here[1].

[0] https://github.com/gchq/CyberChef/blob/master/src/core/lib/F...

When we did cargo run "/etc/passwd" on the file we got an image with code injected into it. When we upload it to the server and download the "shrunken" version of it we can run identify -verbose {image} to get the outputting hex values of our input. Inputting it to something like CyberChef and converting it from hex to ascii we get this output:

Interesting, that would work. I didn't know teslafi can CONTROL the car. I'm using teslaMate, which is basically read-only.

TeslaMate

I use this https://github.com/adriankumpf/teslamate

Does anyone have experience with a self-hosted solution? Something like TeslaMate or TeslaLogger?

So Tesla drivers have TeslaMate which is a self-hosted data logger for their car's trip data. Anyone aware of anyone building a version of this for our EV6s? The Kia Connect infrastructure claims to have an API. Would be cool to develop something like this for us.

I've made a pull request on #TeslaMate git repository. Still waiting they merge it. I guess Adrian is very busy, but in the mean time you can use them in your installation. Check it out!

They are probably using Teslamate and using its MQTT publishing to bring the Tesla info into HomeAssistant. I run this and it works pretty well.

TeslaMate is self hosted, it’s good although you can’t send commands to the car, only read. Connects to home assistant and doesn’t drain Tesla’s battery.

The easiest way to explore most of what the API could offer is though tesalmate. It's nice because you host the server and own the data yourself rather than trusting some 3rd party to do it. The API is well documented here, although the authentication is a bit convoluted, but there are helpful apps that simplify its retrieval.