Proxmark3 community

Apt-Get

Contributor

Registered: 2015-12-23

Posts: 111

How to Clone a Pyramid tag

With Many thanks to Iceman and Marshmellow I managed to finally get a pyramid clone for my garage! lol

Read your tag:
Proxmark3> Lf search
Pyramid ID Found - BitLength: 26, FC: 9, Card: 33278 - Wiegand: 21303fd, Raw: 000101010101010101010161980efb6e         
Checksum 6e passed

Write to clean t5577:
       
Proxmark3> lf t55xx write b 0 d 00107080  <<<<  maxblock 4, pyramid config block.. Default block 0 for PYRAMID
Proxmark3> lf t55xx write b 1 d 00010101  <<< Blocks 1-4 are taken from the raw data
Proxmark3> lf t55xx write b 2 d 01010101
Proxmark3> lf t55xx write b 3 d 01010161
Proxmark3> lf t55xx write b 4 d 980efb6e

Last edited by Apt-Get (2016-01-27 01:21:18)

iceman

Administrator

Registered: 2013-04-25

Posts: 9,537

Website

Re: How to Clone a Pyramid tag

I just added to my fork some easy cloning of pyramid 26bits.  Next step a sim.

pm3 --> lf pyramid clone
clone a Farpointe/Pyramid tag to a T55x7 tag.
Per pyramid format, the facility-code is 8-bit and the card number is 16-bit.  Larger values are truncated.

Usage: lf pyramid clone <Facility-Code> <Card-Number>
Options :
  <Facility-Code> :  8-bit value facility code
  <Card Number>   : 16-bit value card number

Sample  : lf pyramid clone 123 11223

Last edited by iceman (2016-02-27 09:35:26)

Apt-Get

Contributor

Registered: 2015-12-23

Posts: 111

Re: How to Clone a Pyramid tag

BOOM! nice Ice.

Apt-Get

Contributor

Registered: 2015-12-23

Posts: 111

Re: How to Clone a Pyramid tag

Bugs.. oops..  OSX
Clone worked but the client crashed.

Checking for known tags:
         
Pyramid ID Found - BitLength: 26, FC: 9, Card: 33278 - Wiegand: 21303fd, Raw: 000101010101010101010161980efb6e         
Checksum 6e passed         

Valid Pyramid ID Found!         
pm3 --> lf py cl 9 33278
Preparing to clone Farepointe/Pyramid to T55x7 with Facility Code: 9, Card Number: 33278         
Blk | Data           
----+------------         
0 | 00107080         
1 | 00010101         
2 | 01010101         
3 | 01010161         
4 | 980efb6e         
/Users/macbook/Desktop/PM3.command: line 1: 38438 Abort trap: 6           ./proxmark3/client/proxmark3 /dev/cu.usbmodem1451
logout

[Process completed]

Last edited by Apt-Get (2016-02-26 23:40:11)

iceman

Administrator

Registered: 2013-04-25

Posts: 9,537

Website

Re: How to Clone a Pyramid tag

I'll have a look at it, might be some array cpoying that is causing it

iceman

Administrator

Registered: 2013-04-25

Posts: 9,537

Website

Re: How to Clone a Pyramid tag

I had this crash in the beginning on my mingw client aswell,  but not anymore.
I pushed some fixes, maybe they work,   

Would you mind testing the new "Lf pyramid sim" command aswell?

pm3 --> lf pyramid sim h
Enables simulation of Farpointe/Pyramid card with specified card number.
Simulation runs until the button is pressed or another USB command is issued.
Per pyramid format, the facility-code is 8-bit and the card number is 16-bit.  Larger values are truncated.

Usage:  lf pyramid sim <Card-Number>
Options :
  <Facility-Code> :  8-bit value facility code
  <Card Number>   : 16-bit value card number

Sample  : lf pyramid sim 123 11223

Last edited by iceman (2016-02-27 09:41:08)

Apt-Get

Contributor

Registered: 2015-12-23

Posts: 111

Re: How to Clone a Pyramid tag

Clone and Sim confirmed working in Icemans Fork. Nice job Buddy!

ericlam2728

Contributor

Registered: 2015-09-26

Posts: 34

Website

Re: How to Clone a Pyramid tag

I have already used the buck up method but it didnt work with me, is their a different method that I can use?

have you tried to write the blocks one at a time.

can you run:

1. lf t55xx detect
2. Lf search

and post what you have?

PostHumanist

Contributor

Registered: 2017-05-26

Posts: 2

Re: How to Clone a Pyramid tag

I hate to bring back a necro thread but this information is very insightful.  I've been able to successfully write blocks 0 through 4 using the data from my Pyramid PSK3 fob to a blank t55xx card, however I'm unable to find the answer as to how to change the modulation from ASK to FSK using the lf t55xx config commands.

I've downloaded Iceman's fork but I'm a little slow on the uptake as to how to run the fork.

Any help would be appreciated.

iceman

Administrator

Registered: 2013-04-25

Posts: 9,537

Website

Re: How to Clone a Pyramid tag

Dont hijack threads.

Start a new thread regarding t55x7 configuration.  The normal answer is read the atmel t5577 manual.
Regarding running a fork,  the readme, install, wiki and the forum is full of such information, didn't you read post #1125 as instructed?
Among others slightly outdated guides: https://github.com/Proxmark/proxmark3/tree/master/doc