Proxmark3 community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

Announcement

Time changes and with it the technology
Proxmark3 @ discord

Users of this forum, please be aware that information stored on this site is not private.

#1 2015-07-07 15:11:19

Go_tus
Contributor
Registered: 2015-06-03
Posts: 81

please help with this tag !!!

proxmark3> lf search u
#db# Sampling config:
#db#   [q] divisor:           95
#db#    bps:               8
#db#   [d] decimation:        1
#db#   [a] averaging:         1
#db#   [t] trigger threshold: 0
#db# Done, saved 40000 out of 40000 seen samples at 8 bits/sample
#db# buffer samples: 1e 13 1a 31 27 3e 33 38 ...
Reading 20000 bytes from device memory

Data fetched
Samples @ 8 bits/smpl, decimation 1:1
NOTE: some demods output possible binary
  if it finds something that looks like a tag
False Positives ARE possible


Checking for known tags:


No Known Tags Found!


Checking for Unknown tags:

Possible Auto Correlation of 4096 repeating samples

Unknown ASK Modulated and Manchester encoded Tag Found!

if it does not look right it could instead be ASK/Biphase - try 'data rawdemod ab'
0000000000000000
0000111001101110
1100110111111001
0000000000000000
0000000000000000
0000111001101110
1100110111111001
0000000000000000
0000000000000000
0000111001101110
1100110111111001
0000000000000000
0000000000000000
0000111001101110
1100110111111001
0000000000000000
0000000000000000
0000111001101110
1100110111111001
0000000000000000
0000000000000000
0000111001101110
1100110111111001
0000000000000000
0000000000000000
0000111001101110
1100110111111001
0000000000000000
0000000000000000
0000111001101110
1100110111111001
0000000000000000

proxmark3> data rawdemod am

Using Clock: 32 - Invert: 0 - Bits Found: 512
ASK/Manchester decoded bitstream:
0000000000000000
0000111001101110
1100110111111001
0000000000000000
0000000000000000
0000111001101110
1100110111111001
0000000000000000
0000000000000000
0000111001101110
1100110111111001
0000000000000000
0000000000000000
0000111001101110
1100110111111001
0000000000000000
0000000000000000
0000111001101110
1100110111111001
0000000000000000
0000000000000000
0000111001101110
1100110111111001
0000000000000000
0000000000000000
0000111001101110
1100110111111001
0000000000000000
0000000000000000
0000111001101110
1100110111111001
0000000000000000

Offline

#2 2015-07-07 15:20:05

Go_tus
Contributor
Registered: 2015-06-03
Posts: 81

Re: please help with this tag !!!

the data file can download https://www.sendspace.com/file/5sngp2

Offline

#3 2015-07-07 15:31:06

marshmellow
Contributor
From: US
Registered: 2013-06-10
Posts: 2,302

Re: please help with this tag !!!

Offline

#4 2015-07-07 16:30:47

Go_tus
Contributor
Registered: 2015-06-03
Posts: 81

Re: please help with this tag !!!

It should work

[== C++ ==]
write 1 00001CDD
write 2 9BF20000
and then using Em4100 config for block 0

but the clock is now 64, would like make the different ?

Using Clock: 64 - Invert: 0 - Bits Found: 512
ASK/Manchester decoded bitstream:
0000000000000000
0000111001101110
1100110111111001
0000000000000000
0000000000000000
0000111001101110
1100110111111001
0000000000000000
0000000000000000
0000111001101110
1100110111111001
0000000000000000
0000000000000000
0000111001101110
1100110111111001
0000000000000000
0000000000000000

or might just write block 0 with 88040 to make it clock 32 smile thank you so much marshmellow

Last edited by Go_tus (2015-07-07 16:55:32)

Offline

#5 2015-07-07 17:56:30

ntk
Contributor
Registered: 2015-05-24
Posts: 701

Re: please help with this tag !!!

the binary data for ASK/bi-phase look also reasonable. Could you pls guide me again why we decide for ASK/Man and drop ASK/Biphase?

@Go-Tus
It is not always 88040 for block 0

if you look at http://www.proxmark.org/forum/viewtopic.php?id=1767, the block 0 data will be different between data bit rate R/32 or R/64.

You need to change those bits 12-14, also consider Max block bit 25-27 should indicate only 2 blocks of datas,  Finish that you then convert all 32bits of the configuration mapping to Hex then you have what you write into block 0.

Last edited by ntk (2015-07-07 18:03:47)

Offline

#6 2015-07-09 16:08:31

Go_tus
Contributor
Registered: 2015-06-03
Posts: 81

Re: please help with this tag !!!

I tried and it works, uh.. there is a card number on the demod data, I want to add this tag to proxmark, who do I send to the code to

Offline

#7 2015-07-09 19:26:32

ntk
Contributor
Registered: 2015-05-24
Posts: 701

Re: please help with this tag !!!

@Go_tus
Is the number DD9 or 7E7 on the card or something else?

Last edited by ntk (2015-07-09 19:32:32)

Offline

#8 2015-07-09 19:43:18

marshmellow
Contributor
From: US
Registered: 2013-06-10
Posts: 2,302

Re: please help with this tag !!!

@ntk see the related thread

Offline

#9 2015-07-09 20:09:28

ntk
Contributor
Registered: 2015-05-24
Posts: 701

Re: please help with this tag !!!

printed ID: 000066c0?

or 00001CDD?

Last edited by ntk (2015-07-09 20:22:14)

Offline

#10 2015-07-10 10:34:20

Go_tus
Contributor
Registered: 2015-06-03
Posts: 81

Re: please help with this tag !!!

it's 00001CDD

Offline

#11 2015-07-10 14:12:58

ntk
Contributor
Registered: 2015-05-24
Posts: 701

Re: please help with this tag !!!

thank you. Could you pls tell what is your configuration for block 0 you use at the moment.
In my opinion if you write these 2 data blocks it should work too, for this tag 1CDD
00000E6E
CDF90000
Would you pls test for me.

Offline

#12 2015-07-10 20:19:32

Go_tus
Contributor
Registered: 2015-06-03
Posts: 81

Re: please help with this tag !!!

[== Undefined ==]
0] 0x00088040  00000000000010001000000001000000          
[1] 0x00001CDD  00000000000000000001110011011101          
[2] 0x9BF20000  10011011111100100000000000000000

have a nice day  smile

Offline

Board footer

Powered by FluxBB