Proxmark3 community

rfidsecgeek

Contributor

Registered: 2019-12-17

Posts: 2

Trouble cloning 34-bit tag

Hello friends,

I am just getting into RFID cloning and cannot see to understand my current problem. We have a known card:

Reading 30000 bytes from device memory

Data fetched
Samples @ 8 bits/smpl, decimation 1:1 
NOTE: some demods output possible binary
  if it finds something that looks like a tag
False Positives ARE possible


Checking for known tags:

HID Prox TAG ID: 2668007b4a (15781) - Format Len: 34bit - FC: 13312 - Card: 15781

Valid HID Prox ID Found!

-- T55xx Configuration & Tag Information --------------------
-------------------------------------------------------------
 Safer key                 : 6 - passwd
 reserved                  : 0
 Data bit rate             : 4 - RF/50
 eXtended mode             : No
 Modulation                : 7 - FSK 2a RF/10  RF/8
 PSK clock frequency       : 3
 AOR - Answer on Request   : No
 OTP - One Time Pad        : No
 Max block                 : 3
 Password mode             : No
 Sequence Start Terminator : No
 Fast Write                : No
 Inverse data              : No
 POR-Delay                 : No
-------------------------------------------------------------
 Raw Data - Page 0
     Block 0  : 0x60107C60  01100000000100000111110001100000
-------------------------------------------------------------

Modulation : FSK2a
Bit Rate   : 4 - RF/50
Inverted   : Yes
Offset     : 0
Block0     : 0x60107C60

[0] 0x60107C60  01100000000100000111110001100000
[1] 0x1D555969  00011101010101010101100101101001
[2] 0x69955555  01101001100101010101010101010101
[3] 0x6A9A6599  01101010100110100110010110011001
[4] 0x00000000  00000000000000000000000000000000
[5] 0x00000000  00000000000000000000000000000000
[6] 0x00000000  00000000000000000000000000000000
[7] 0x00000000  00000000000000000000000000000000

I can clone this card fine by if I write the blocks manually. However, we don't have this other physical card (uses same system) but we have this information on the card:

34 bit card: 2597ff747a, FC = 52223, CC = 47677, BIN: 00000010010110010111111111110111010001111010

I believe the blocks to be:

Block 0	01100000000100000111110001100000	60107C60
Block 1	00011101010101010101100101100110	1D555966
Block 2	10010110011010101010101010101010	966AAAAA
Block 3	01101010011001010110101010011001	6A656A99

Writing the blocks is successful but the card doesn't work and lf t55 fskdemod gives this message:

#db# TAG ID: 2597ff747a (47677) - Format Len: 51bit - FC: 0 - Card: 0 

Here is my version information:

ProxmarkPro RFID instrument
bootrom: pmpro-1.1 2019-09-26 15:33:31
os: pmpro-1.1 2019-09-26 15:33:31
FPGA image built for 3s250evq100 on 2018/11/09 at 16:40:49

uC: AT91SAM7S512 Rev B
Embedded Processor: ARM7TDMI
Nonvolatile Program Memory Size: 512K bytes. Used: 180840 bytes (34). Free: 343448 bytes (66).
Second Nonvolatile Program Memory Size: None
Internal SRAM Size: 64K bytes
Architecture Identifier: AT91SAM7Sxx Series
Nonvolatile Program Memory Type: Embedded Flash Memory

I am new at this and would appreciate any help.

iceman

Administrator

Registered: 2013-04-25

Posts: 9,537

Website

Re: Trouble cloning 34-bit tag

Hard to tell whats going on with your device since it uses the firmware/client from RyscCorp.   You better direct your question to them directly.