Proxmark3 community
Research, development and trades concerning the powerful Proxmark3 device.
Remember; sharing is caring. Bring something back to the community.
"Learn the tools of the trade the hard way." +Fravia
You are not logged in.
Announcement
Time changes and with it the technology
Proxmark3 @ discord
Users of this forum, please be aware that information stored on this site is not private.
#1 2016-06-10 06:32:34
- lasersword
- Contributor
- Registered: 2016-06-08
- Posts: 24
is there any possible to format an 'encrypted' t5577 card
I got an encrypted t5577 card however I forgot the write password so it is read-only now. Is there any way to "format" the card? Means disable the password and the data on it could be given up. I just wanna this card re-writeable otherwise it is locked to read only permenante. Or only way to crack the password ? This is very urgent to me and your useful help would be highly appreciated. Thanks
Offline
#2 2016-06-11 04:42:11
- lasersword
- Contributor
- Registered: 2016-06-08
- Posts: 24
Re: is there any possible to format an 'encrypted' t5577 card
no anyone know it?
Offline
#3 2016-06-11 14:27:02
- lasersword
- Contributor
- Registered: 2016-06-08
- Posts: 24
Re: is there any possible to format an 'encrypted' t5577 card
Yes, put it in the microwave for about 30~60 seconds.
Next is put in your head then di~ the magic happened right?
Offline
#4 2016-06-12 13:34:15
- ntk
- Contributor
- Registered: 2015-05-24
- Posts: 701
Re: is there any possible to format an 'encrypted' t5577 card
You know PW is 8char long + only HEX, use anything you related to like birthdates (your/wife/child/concubine), or just simple certain number 00000000, 11111111 etc or 01234567
you did trial so it can't be anything sophisticated or serious.
use iceman fork there is a BF inside for t55xx PW
Last edited by ntk (2016-06-12 13:35:50)
Offline
#5 2016-06-12 18:08:23
- iceman
- Administrator
- Registered: 2013-04-25
- Posts: 9,506
- Website
Re: is there any possible to format an 'encrypted' t5577 card
As @ntk mentioned, BF = Bruteforce , you could test it out but its a very slow one.
Use the default_pwd.dic dictionary attack first. You might get lucky
Offline
#6 2016-06-13 16:19:18
- lasersword
- Contributor
- Registered: 2016-06-08
- Posts: 24
Re: is there any possible to format an 'encrypted' t5577 card
As @ntk mentioned, BF = Bruteforce , you could test it out but its a very slow one.
Use the default_pwd.dic dictionary attack first. You might get lucky
Hi Iceman, thanks for your reply, which firmware for this bruteforce command integrated in? now I am using 2.5.0,see the following information, but looks like no 'bruteforce' there listed in T55xx tree nodes? how can I work it out? is there any guidance? also, where can I find the 'default_pwd.dic' file for the dictionary and how can I refer to this dictionary when running BF? what's the command format with option? thanks anyway.
Prox/RFID mark3 RFID instrument
bootrom: /-suspect 2015-04-02 15:12:04
os: /-suspect 2015-11-19 10:08:09
LF FPGA image built for 2s30vq100 on 2015/03/06 at 07:38:04
HF FPGA image built for 2s30vq100 on 2015/11/ 2 at 9: 8: 8
uC: AT91SAM7S256 Rev D
Embedded Processor: ARM7TDMI
Nonvolatile Program Memory Size: 256K bytes. Used: 169916 bytes (65%). Free: 92228 bytes (35%).
Second Nonvolatile Program Memory Size: None
Internal SRAM Size: 64K bytes
Architecture Identifier: AT91SAM7Sxx Series
Nonvolatile Program Memory Type: Embedded Flash Memory
Offline
#7 2016-06-13 17:46:24
- iceman
- Administrator
- Registered: 2013-04-25
- Posts: 9,506
- Website
Re: is there any possible to format an 'encrypted' t5577 card
It was mention that this function is in my fork.. Not PM3 master. There as "h" help option for it.
Offline