Proxmark3 community
Research, development and trades concerning the powerful Proxmark3 device.
Remember; sharing is caring. Bring something back to the community.
"Learn the tools of the trade the hard way." +Fravia
You are not logged in.
Announcement
Time changes and with it the technology
Proxmark3 @ discord
Users of this forum, please be aware that information stored on this site is not private.
Pages: 1
#1 2016-02-16 20:08:45
- Apt-Get
- Contributor
- Registered: 2015-12-23
- Posts: 111
Manipulating HID card numbers.
Hi Guys. I remember there being some kind of HID bruteforce script around.
Can one of you point me to that script?
All i really want to play with is changing the number on a tag to see of the next few numbers in sequence also work.
HID Prox TAG ID: 3709cb6331 (45464) - Format Len: 36bit - FC: 0 - Card: 0
So i would like to try (45465) etc. (I assume they usually are in sequence? or are they random numbers, and I should not bother?)
I am not sure how to calculate these out, so any info would be great.
Thanks guys.
A
Last edited by Apt-Get (2016-02-16 20:09:06)
Offline
#2 2016-02-16 20:13:40
- iceman
- Administrator
- Registered: 2013-04-25
- Posts: 9,506
- Website
Re: Manipulating HID card numbers.
You find something like that in my fork,..
Offline
#3 2016-02-16 20:15:49
- Apt-Get
- Contributor
- Registered: 2015-12-23
- Posts: 111
Re: Manipulating HID card numbers.
You find something like that in my fork,..
Cheers Ice 
Offline
#4 2016-02-16 20:17:03
- marshmellow
- Contributor
- From: US
- Registered: 2013-06-10
- Posts: 2,302
Re: Manipulating HID card numbers.
does your tag have 45464 printed on it? the pm3 didn't fully recognize the format (thus the FC: 0 - Card: 0) so the 45464 may not be correct either.
I believe iceman and others had a bruteforce, but it was only the 26 bit format as I recall.
Offline
#5 2016-02-16 20:50:05
- Apt-Get
- Contributor
- Registered: 2015-12-23
- Posts: 111
Re: Manipulating HID card numbers.
does your tag have 45464 printed on it? the pm3 didn't fully recognize the format (thus the FC: 0 - Card: 0) so the 45464 may not be correct either.
I believe iceman and others had a bruteforce, but it was only the 26 bit format as I recall.
This is from a keyscan transmitter so no tag ids are printed on the fob.. I have noticed they always scan like that. but a clone works.
Last edited by Apt-Get (2016-02-16 20:52:49)
Offline
#6 2016-02-16 21:22:38
- marshmellow
- Contributor
- From: US
- Registered: 2013-06-10
- Posts: 2,302
Re: Manipulating HID card numbers.
What other purpose does the fob serve? (What do the buttons do?)
Offline
#7 2016-02-16 21:23:53
- iceman
- Administrator
- Registered: 2013-04-25
- Posts: 9,506
- Website
Re: Manipulating HID card numbers.
I'd forgotten to add the Bruteforce in the commandtable, but now its there in the fork. No script and untested.
I'm pretty sure you figure it out and can provide some feedback on it.
Offline
#8 2016-02-16 21:42:40
- Apt-Get
- Contributor
- Registered: 2015-12-23
- Posts: 111
Re: Manipulating HID card numbers.
What other purpose does the fob serve? (What do the buttons do?)
front doors for guests and there is a built in garage door transmitter.
Offline
#9 2016-02-19 11:03:36
- iceman
- Administrator
- Registered: 2013-04-25
- Posts: 9,506
- Website
Re: Manipulating HID card numbers.
Found another online wiegand calc, besides brivco
http://www.ccdesignworks.com/wiegand_calc.htm
Offline
Pages: 1