Speed Hack (HEX Method) for Segway Ninebot Kickscooter Scooter

After finding a deal here and reading a lot of comments in a previous post, I pulled the trigger on this and thought I would share my success (IYKYK).

Speed Hack (HEX Method) for Ninebot KickScooter

  1. Use the Segway-Ninebot app to view serial number
  2. Disconnect bluetooth connection from the Segway-Ninebot app
  3. Android: download "BLE Scanner" https://play.google.com/store/apps/details?id=com.macdom.ble…
    Apple: download "Bluetooth Assistant" https://apps.apple.com/us/app/bluetoothassistant/id153657959…
  4. Open Bluetooth app and search for your scooter by serial number
  5. Click to expand the "Unknown Service"
  6. Find the editable Custom Characteristic (should say "Properties: Write,…")
  7. Android: click the "W"
    Apple: click the "upload arrow" symbol
  8. Copy a code instruction (any one of the following):
    F2/F2+/F2Pro Speed Hack = 55AB463253636F6F7465725F31
    F2/F2+/F2Pro Normal = 55AB463253636F6F7465725F30
    G2 MAX Speed Hack = 55AB4D41583253636F6F7465725F31
    G2 MAX Normal = 55AB4D41583253636F6F7465725F30
  9. Android: choose text and paste code instruction then click OK
    Apple: activate "HEX", paste code instruction and check "write no response" then click OK or Write
  10. Disconnect Bluetooth app from scooter
  11. Connect to scooter using the Segway-Ninebot app
  12. Review settings - maximum speed will not dislay
  13. Test top speed (safely outdoors or prop the rear wheel up)
    Dash will show top speeds of:
    F2/F2+ = 30 km/h
    F2 Pro = 32 km/h
    G2 MAX = 35 km/h

Original source: Google Docs

Comments

  • +3

    Nice, thanks for sharing. Some people charging $100 for this!

    • I read yours and many other helpful comments plus about someone on Gumtree charging for it. I couldn't get the Xiaodash app to work so I reset everything (serial and mode) then tried this Bluetooth way - pretty darn simple and no wonder "ChatGPT-4" said "Mr Gumtree" only took 5 minutes.

  • Ensure that once you cross the southern state border that you are faster than their mounted force!

  • Thx for the share. I tried this on a G2 MAX and it has not worked.

    Step 7: Apple: click the "upload arrow" symbol.
    There's no upload arrow on my app. I just paste the Hex code into the app and hit the WRITE button.
    The app displays that the hex code has been written.

    First attempt - I tried it I only wrote the hex code once.
    Second attempt - I wrote the hex code 3 times, because the google doc recommended trying this. But when I hit the road I am still chugging 25km.

    Note: I am using most recent iphone apps and the scooter has all most recent updates.

  • +2

    I reattempted this today and it has now worked.
    When writing the hex code I repeated the step 5 times.
    Thx.

    • Thanks for sharing your experience.

      I wonder why it took 5 times… Anyone else have this experience?

      • The google doc states that the Bluetooth app has intermittent connectivity. So when you write the hex code it may not actually write successfully.

  • Any option for the F20a?

  • Awesome, decided to google before committing to the $100 gumtree offer and came across this. It only worked for me the third time after sending the message about 50 times!

    • Just to clarify for anyone else, did you paste the code in 50 times then hit send? Or copy-paste-send 50 times? It seems that some sort of force / overload does the trick with any stubborn device…

      • Copy-paste-send lots of times…

  • Legit question, why would you do this instead of using SHU?

    • SHU didn't work for me, but the above instructions worked for me with a slight tweak. I did the process on Android phone but I needed to use the "byte array" option rather than "text" when posting the updated code using the BLE scanner app. Also it was listed under "Custom Service" rather than "Unknown Service"

      For info I bought my scooter from JB Hi-fi last week and it had the following firmware:
      master control 1.7.1
      battery 1.7.5.5
      Bluetooth 1.7.8

  • What's the difference with this and the speed unlock cable on the Max G2? I ordered mines and iscoot also sent the speed unlock cable.

  • Anyone tried the 1.7.8 firmware update yet?, curious if it breaks the speed hack

Login or Join to leave a comment