joshperry said:The most general way to deal with the region code is to use the login operation. It doesn't require the region code and its response contains the appropriate region for the provided credentials.
https://gdcportalgw.its-mo.com/orchestration_1111/gdc/UserLoginRequest.php?UserId=user%40domain.com&Password=hunter2
{
"status": -2010,
"message": "HTTP ERROR",
"CustomerInfo": {
"VehicleInfo": {
"NAVIID": "123456789012"
}
}
}
flagrantfowl said:joshperry said:The most general way to deal with the region code is to use the login operation. It doesn't require the region code and its response contains the appropriate region for the provided credentials.
This doesn't work for me. If I call the login operation (UserLoginRequest.php) with only UserID and Password query string parameters, I consistently get an error response.
For clarity, I tried this:
Code:https://gdcportalgw.its-mo.com/orchestration_1111/gdc/UserLoginRequest.php?UserId=user%40domain.com&Password=hunter2
It gives me this response:
Code:{ "status": -2010, "message": "HTTP ERROR", "CustomerInfo": { "VehicleInfo": { "NAVIID": "123456789012" } } }
Are you doing something different that lets you log in without the region code?
DNAinaGoodWay said:Here's an article on to hack into anyone's Leaf:
Lousy Nissan LEAF security leaves cars open to online exploitation - Graham Cluley Security News
https://apple.news/AwIENJlb-OTyF6HpAD74VvA
That is because the DCMID is not really needed in the requests.. you just need the VIN and region codesirfergy said:The are no details, I'm curious how they did it with just a VIN.
joshperry said:flagrantfowl said:joshperry said:The most general way to deal with the region code is to use the login operation. It doesn't require the region code and its response contains the appropriate region for the provided credentials.
This doesn't work for me. If I call the login operation (UserLoginRequest.php) with only UserID and Password query string parameters, I consistently get an error response.
For clarity, I tried this:
Code:https://gdcportalgw.its-mo.com/orchestration_1111/gdc/UserLoginRequest.php?UserId=user%40domain.com&Password=hunter2
It gives me this response:
Code:{ "status": -2010, "message": "HTTP ERROR", "CustomerInfo": { "VehicleInfo": { "NAVIID": "123456789012" } } }
Are you doing something different that lets you log in without the region code?
You're right! I had everything else removed but the region. Hmm, I'll have to set my proxy back up and see how the app discovers that value at registration time.
gyathaar said:Seems that sometimes during the last week (didn't work that way last weekend) they added a feature where you (at least I can) log in to the Japan region (NML) no matter from where..
Since the login response returns your real region,. (and a valid sessionid and vin, etc).. you can then use that returned region for further requests for updates and such (only the login request works toward japan region)
Enter your email address to join: