Proxmark3 community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

Announcement

Time changes and with it the technology
Proxmark3 @ discord

Users of this forum, please be aware that information stored on this site is not private.

#1 2013-08-30 15:14:50

elpic
Member
Registered: 2013-08-30
Posts: 3

Decoding HID Corporate 1000 card

I am trying to decode an HID Corporate 1000 card (1386, format C10106), but I am not able to figure what kind of modulation it is. I was thinking that this was FSK, but when I scan the card with the ProxMark3 (fw.756), I got the following result:
http://imageshack.com/a/img689/2162/05a4.png
http://imageshack.com/a/img62/9774/xyze.png

That doesn’t seem to be FSK modulation. The waves seem also to be clipped. If I place the card farter from the antenna, I got the following result:
http://imageshack.com/scaled/large/690/l4fu.png

With the autocorr command, I found that the card send 2048/32 = 64bits.
http://imageshack.com/a/img96/9962/v6kz.png

When I use the fskdemod command, I get this result:
http://imageshack.com/a/img39/186/l7gn.png

When I use the askdemod command, I get this:
http://imageshack.com/a/img21/9982/8s03.png

The result seems better, but I don’t think the card use ASK.
Am I missing something?

Thanks for your help.

Offline

#2 2013-08-30 17:58:29

midnitesnake
Contributor
Registered: 2012-05-11
Posts: 151

Re: Decoding HID Corporate 1000 card

do you want to share a trace, so others can play around?

Offline

#3 2013-08-30 18:09:15

midnitesnake
Contributor
Registered: 2012-05-11
Posts: 151

Re: Decoding HID Corporate 1000 card

https://www.hidglobal.com/sites/hidglobal.com/files/resource_files/hid-corporate1000-service-ds-en.pdf

suggests its a 35bit weigand card

Offline

#4 2013-08-30 23:01:24

0xFFFF
Administrator
From: Vic - Australia
Registered: 2011-05-31
Posts: 632

Re: Decoding HID Corporate 1000 card

Did you search the forum?
I think what you are looking for is here.

Offline

#5 2013-09-03 14:16:57

elpic
Member
Registered: 2013-08-30
Posts: 3

Re: Decoding HID Corporate 1000 card

Thanks for your response.
I had already saw this thread, but my problem is that I'm not sure which kind of modulation this is. I've tried a ProxCard II and I got a nice FSK modulation (like on this document: http://www.proxclone.com/pdfs/AWID_FSK_Format.pdf). But when I try with the other card (which I believe is an ISOProx II), I get this: http://imageshack.com/scaled/large/690/l4fu.png.

Also, the "lf hid fskdemod" work perfectly with the ProxCard II, but I get nothing with the other card.

Did someone tried to read an ISOProx II with the ProxMark3?

Offline

#6 2013-09-03 22:47:44

0xFFFF
Administrator
From: Vic - Australia
Registered: 2011-05-31
Posts: 632

Re: Decoding HID Corporate 1000 card

Oh. Sorry. I only posted 1/2 an answer.
C10106 is 125kHz ISOPROX II which I think is Manchester + FSK.
This card is from a Casi Rusco system right?

Offline

#7 2013-09-04 20:44:10

elpic
Member
Registered: 2013-08-30
Posts: 3

Re: Decoding HID Corporate 1000 card

I don't think this is from a Casi Rusco system.
Is there different ways to read a card with an FSK modulation with the proxmark3? I don't understand why I got good results with the ProxCardII and those weird datas with the ISOProxII if it's the same modulation.

Thanks for your help.

Offline

#8 2013-10-11 15:01:21

marshmellow
Contributor
From: US
Registered: 2013-06-10
Posts: 2,302

Re: Decoding HID Corporate 1000 card

C10106 is a 40 bit CASI format not an HID's to my knowledge.  Corporate 1000 usually has a format # like H5xxxx.  lf hid fskdemod only works with a 26 bit HID format H10301.  if it is corp 1000 you can lf read - then - data samples 16000 - then - data fskdemod  -  to get the raw binary of the card.  if it is a C10106 you could try the lf read - data samples 16000 - data mandemod.  If you load up a trace we could try to help further.   BTW isoproxII is just the card type with chip - it could have one of multiple types of programming formats on it.

Offline

Board footer

Powered by FluxBB