Proxmark developers community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

#1 2015-08-11 18:41:57

dutzen
Member
Registered: 2015-08-11
Posts: 3

Simulate and Sniff Legic Prime

Hi Everyone,
we have to investigate our university system, which used the Legic Prime chip and is now changing to legic advant. So for our seminar we have to attack the old system which we succeed by writing valid values to the card. The next step would be to emulate "own" cards with the proxmark3 and it would be nice to sniff to the traces.

So first: Emulating: Proxmark has already a function: "hf legic sim" [phase drift [frame drift [req/resp drift]]] Start tag simulator (use after load or read)

Which we used after reading a valid card but it didn't worked. Maybe someone can help us with that.

Second: Sniff traffic: We'd like to sniff the traffic between card and reader. But proxmark has no function to sniff legic traffic. We can only sniff 14a traffic without annotations but that didn't worked neither. I hope someone can help us with that, cause deadline is september wink

Best regards Dominik

Offline

#2 2015-08-11 18:54:04

iceman
Administrator
Registered: 2013-04-25
Posts: 4,070
Website

Re: Simulate and Sniff Legic Prime

Sadly enough, I don't have access to a legic/legic advant.  If I have that, I might be able to help out.


modhex(hkhehghthbhudcfcdchkigiehgduiehg)

Offline

#3 2015-08-17 00:45:03

dutzen
Member
Registered: 2015-08-11
Posts: 3

Re: Simulate and Sniff Legic Prime

That is sad sad
But maybe you have already done something with the proxmark and a legic card in the past?
If you cant help us specificly maybe some hints or tricks? smile

Offline

#4 2015-08-17 09:46:26

iceman
Administrator
Registered: 2013-04-25
Posts: 4,070
Website

Re: Simulate and Sniff Legic Prime

Sorry, I havn't.  Good luck with your thesis.


modhex(hkhehghthbhudcfcdchkigiehgduiehg)

Offline

#5 2015-08-25 01:46:27

siffon
Member
Registered: 2015-08-25
Posts: 1

Re: Simulate and Sniff Legic Prime

i had some success with legic prime reader. but simulating the card didnt succed. maybe bad timing... if you have 2 dumps from the original card while you change the writable segment values you can alter the bytes or hex values on the card with the write command successful. but simulating is still an issue.

this goes well for prime cards, the advant card i tested wasnt even recognised. not even with my selfbuild antennas.

if anyone wants to help please update the code to dump the card into a hexfile and not as ascii when using decode, which could then be analysed by normal hexdump toolset.

btw i have a valid prime dump but been aware of publishing it. pm me if you need it.

Offline

#6 2016-01-20 11:42:17

mosci
Contributor
Registered: 2016-01-09
Posts: 83
Website

Re: Simulate and Sniff Legic Prime

I can ( at least) provide some decoded tag-data ('hf legic decode' output) or samples
if that helps anyone


modhex(hkheiehvhtfchihtijduhfhg)

Offline

#7 2016-01-20 11:50:59

mosci
Contributor
Registered: 2016-01-09
Posts: 83
Website

Re: Simulate and Sniff Legic Prime

^^ roll legic prime  - not legic advant


modhex(hkheiehvhtfchihtijduhfhg)

Offline

#8 2016-01-20 11:54:16

iceman
Administrator
Registered: 2013-04-25
Posts: 4,070
Website

Re: Simulate and Sniff Legic Prime

Sure, that data is always good to have.

The legic sourcecode has some issues with overflows, so remake and testing would be nice.


modhex(hkhehghthbhudcfcdchkigiehgduiehg)

Offline

#9 2016-01-20 11:59:49

mosci
Contributor
Registered: 2016-01-09
Posts: 83
Website

Re: Simulate and Sniff Legic Prime

unfortunately I can not finf the possibility to PM you  big_smile


modhex(hkheiehvhtfchihtijduhfhg)

Offline

#10 2016-01-20 12:04:16

iceman
Administrator
Registered: 2013-04-25
Posts: 4,070
Website

Re: Simulate and Sniff Legic Prime

you find my email all over this forum.


modhex(hkhehghthbhudcfcdchkigiehgduiehg)

Offline

#11 2016-01-20 13:39:05

mosci
Contributor
Registered: 2016-01-09
Posts: 83
Website

Re: Simulate and Sniff Legic Prime

ok, I have used you github-email


modhex(hkheiehvhtfchihtijduhfhg)

Offline

Board footer

Powered by FluxBB