Magic Motorsport Korhex is an EMFI (electromagnetic fault injection) add-on for Flex ECU Programmer. It gives you read and write access to locked ECUs — such as Mercedes MD1CP001 and MD1CS003 — without soldering or removing any components. Here is how it works and what to expect.
What’s in the Box
The kit comes in a blow-molded case and includes a set of adapters called masks.
Each mask sits directly on top of the processor and shows exactly where the antenna tip must make contact.
If you need a mask for a processor that is not included, you can 3D print your own.
The main connector is marked Unit G, and the antenna sits at the end of the unit.
How to Use It: Step by Step
1. Connect Korhex to FLEX setup and open the software. In this example, the ECU is a Mercedes MD1CP001. Click Connect.
2. The unit powers on and the LED flashes red while it identifies the ECU and establishes communication.
3. Once an ID is received, place the antenna onto the processor using the mask as a guide. Glitching normally takes about 10 seconds.
4. While glitching, the main LED turns blue and the two lights at the end of the unit come on.
This is the only stage where the unit is actually sending EM pulses.
5. When access is gained, the LED turns green and the unit deactivates.
From this point, Korhex is no longer needed — you can disconnect it.
What You Can Do After Access
Once the processor has been glitched and has released its passwords, you can enter them and perform a full backup, then read and write the ECU as needed.
Korhex Boot Glitch Tool itself is only an access tool, and all reading and writing are done through FLEX software.
ECU-Specific Notes
- MD1CP001 (Mercedes): There is currently no unlock An unlock option existed at launch but did not work, so Magic Motorsport removed it. It is expected to return in a future update. Until then, every read or write requires a new glitch.
- MD1CS003: This ECU can be unlocked. After glitching, simply click Unlock in the software. You can then refit the ECU to the car and flash it through the diagnostic port — no need to open the case again.
Korhex Boot Glitch and MCU Access Tool is a practical solution for ECU access without soldering. It is a new product and still has some teething problems, but Magic Motorsport is resolving issues quickly.
Read also: