Research, development and trades concerning the powerful Proxmark3 device.
Remember; sharing is caring. Bring something back to the community.
"Learn the tools of the trade the hard way." +Fravia
You are not logged in.
Time changes and with it the technology
Proxmark3 @ discord
Users of this forum, please be aware that information stored on this site is not private.
Pages: 1
I have a MIM 22 and are trying to read it out, but I have problems.
It seems that a MIM 22 has a different startup procedure.
Also, how many bits I have to send for the address of the data? 5? Or 8?
And what value do I need for response_obfuscation?
Thanks for your help.
Last edited by andy999 (2010-02-02 19:13:02)
Offline
Yeah, I didn't include MIM22 in the released code since I newer actually saw one and only figured out the values by trial and error. A MIM-22 card will return 0xd in the second frame in the setup phase (where MIM-256 and MIM-1024 return 0x1d and 0x3d, respectively) and, strangely enough, expect a different response in the third frame in the setup phase, compared to MIM-256/1024: You need to flip bit 5 (e.g. ^0x20). The command length in the main phase is 6 (1 bit command, 5 bit address). I don't have the response_obfuscation handy, but that shouldn't be a problem since you can easily figure it out by setting it to 0 and then comparing the read data to the known UID of the tag (or some other known byte).
Offline
Thanks for the very fast and helpful answer, but I can't get my MIM 22 to answer to the initial 0x55.
The card is ok, because it is working on normal legic readers.
Also the antenna should be good enough (12181 mV without and 4769 mV with card).
I also tried to send any other values instead of 0x55 for the initial setup, but I never get any response from the card.
Do you have changed the timing or something else for read your MIM 22?
Offline
Now I have got a second MIM22 card but still having the same problem:
The card is not responding to the initial 0x55.
Maybe the antenna is not good enough for old MIM22 cards...
Or any other suggestions?
Thanks
Andreas
Offline
Hmm, strange. The card must respond to the same first frame as any other card, since at this point the reader doesn't know yet which card it is and can't customize the frames. Yes, antenna issues might be the cause, though you'll need an oscilloscope to be sure. (E.g. I'm reasonably sure that the proxmark can power the card, if you've got the same 12V antenna as everybody else, but maybe the responses are not strong enough to be picked up by the simple hysteresis.)
Offline
Yes, maybe the antenna is the problem, but I'm not able to get more than 12.0X Volts
We also tried some other external antennas from Legic or Mifare readers, but they all have active components
and are not working with the proxmark reader.
Unfortunatelly I don't have a oscilloscope by hand...
Offline
Pages: 1