Proxmark3 developers community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

#1 2019-02-01 08:32:17

steph
Contributor
Registered: 2019-01-31
Posts: 3

Cloning 15693 card

Hi,

trying to clone a 15693 card.

With the RRG repo, i can dump the card and change the uid with magic card, big thanks to iceman smile

For info, When i dumped after the 28 blocks, i had an error
"[-] Tag returned Error 15: Unknown error."
But the original and the copy have the same data.

The original :

Detected UID E0 04 01 50 84 DC .. ..
  UID  : E0 04 01 50 84 DC .. ..
  TYPE : NXP(Philips); IC SL2 ICS20/ICS21(SLI) ICS2002/ICS2102(SLIX)
  SYSINFO : 00 0F .. .. DC 84 50 01 04 E0 00 00 1B 03 01
     - DSFID supported        [0x01]
     - AFI   supported        [0x00]
     - IC reference supported [0x01]
     - Tag provides info on memory layout (vendor dependent)
           4 (or 3) bytes/blocks x 28 blocks

The copy :

Detected UID E0 04 01 50 84 DC .. ..
  UID  : E0 04 01 50 84 DC .. ..
  TYPE : NXP(Philips); IC SL2 ICS20/ICS21(SLI) ICS2002/ICS2102(SLIX)
  SYSINFO : 00 0F .. .. DC 84 50 01 04 E0 00 00 1B 03 01
     - DSFID supported        [0x00]
     - AFI   supported        [0x00]
     - IC reference supported [0x01]
     - Tag provides info on memory layout (vendor dependent)
           4 (or 3) bytes/blocks x 28 blocks


So there is a difference in DSFID, do you think it's important ?
Is it possible to change this with pm3 ?

thanks for all

Offline

#2 2019-02-01 10:43:52

iceman
Administrator
Registered: 2013-04-25
Posts: 6,173
Website

Re: Cloning 15693 card

The dump error comes from the implementation of reading blocks,   but basically we don't exactly know the amount of blocks before so it tries to read as long as it gets a positive block read back.    The magic15 tags has 28blocks.

And when it fails,  the dump data loop stops.    Not the best implementation nor the most informativ message either.


If you feel the love,  https://www.patreon.com/iceman1001

modhex(hkhehghthbhudcfcdchkigiehgduiehg)

Offline

#3 2019-02-01 10:57:16

iceman
Administrator
Registered: 2013-04-25
Posts: 6,173
Website

Re: Cloning 15693 card

Looks like DSFID prints the response from systeminfo, so compare your systeminfo bytes

// DSFID
if (recv[1] & 0x01) 
	PrintAndLogEx(NORMAL, "     - DSFID supported        [0x%02X]", recv[10]);
else 
	PrintAndLogEx(NORMAL, "     - DSFID not supported");
endif

If you feel the love,  https://www.patreon.com/iceman1001

modhex(hkhehghthbhudcfcdchkigiehgduiehg)

Offline

Board footer

Powered by FluxBB