Proxmark3 community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

Announcement

Time changes and with it the technology
Proxmark3 @ discord

Users of this forum, please be aware that information stored on this site is not private.

#1 2016-06-19 03:21:24

ntk
Contributor
Registered: 2015-05-24
Posts: 701

HID 1346 Proxkey II....

I could not find any link to it, although it exists quite a while already ...

http://www.ebay.co.uk/itm/HID-1346NSSNN-ProxKey-III-/112030665489?hash=item1a158c4b11:g:IygAAOSwvg9XZBtS

Is it possible that PM3 still can not understand this format?

Offline

#2 2017-02-08 06:43:24

rfidboi
Contributor
Registered: 2017-01-31
Posts: 17

Re: HID 1346 Proxkey II....

I'm also curious to know if the PM3 can clone Proxkey II's or Proxkey III's . I don't think it can handle the III's, more curious about the II's in the topic title. It looks like HID has perhaps retired the Proxkey II's which don't even show up on their main HID Prox site and they have the same base part number of 1346...

Offline

#3 2017-02-08 10:44:51

Onisan
Contributor
From: London
Registered: 2016-07-18
Posts: 88

Re: HID 1346 Proxkey II....

There is no reason why the Proxkey 11 can't be read, I clone them on another machine which is nowhere near as good as the Proxmark.

I am sure Marshmellow or Iceman will respond in a while with specifics.

Offline

#4 2017-02-08 11:46:01

iceman
Administrator
Registered: 2013-04-25
Posts: 9,495
Website

Re: HID 1346 Proxkey II....

Marshmellow mentioned to me that HID Prox uses in earlier tag t55x7 chipsets and in newer EM4305 chipsets.
As of right now, the EM4305 is not supported in PM3. well, not more than defaultreadmode.   Maybe it will be supported later on.

Offline

#5 2017-02-09 14:06:52

marshmellow
Contributor
From: US
Registered: 2013-06-10
Posts: 2,302

Re: HID 1346 Proxkey II....

All hid prox in all forms can easily be cloned to t55xx chips.  The chip carrier or form factor doesn't matter. 

If you want to write TO hid prox cards/fobs you will need HID's chip info which iceman has started to mention.

Offline

#6 2017-02-11 15:24:05

marshmellow
Contributor
From: US
Registered: 2013-06-10
Posts: 2,302

Re: HID 1346 Proxkey II....

I cleared up my earlier post.

Offline

#7 2017-02-16 06:56:46

rfidboi
Contributor
Registered: 2017-01-31
Posts: 17

Re: HID 1346 Proxkey II....

marshmellow wrote:

All hid prox in all forms can easily be cloned to t55xx chips.  The chip carrier or form factor doesn't matter. 

If you want to write TO hid prox cards/fobs you will need HID's chip info which iceman has started to mention.

Thanks marshmellow. I had thought cloning Proxkey IIIs wasn't supported (I hadn't read your post), but I gave it a try anyway. I tried to do it using the instructions for cloning a Proxcard II over at ryscc.com

I simply placed the Proxkey III I wanted to clone over the LF antenna of my PM3 and ran

lf hid fsk 1

I then copied the TAG ID from the output of the fsk command, placed a T5577 over the LF antenna  and ran

lf hid clone [TAG_ID_FROM_ABOVE]

Finally, to verify the T5577 had the exact information as the original Proxkey III, I ran

lf hid fsk 1

and confirmed that I got the same exact output as I got from the Proxkey.

Does this sound right / like I successfully cloned the Proxkey? I don't have a real world RFID system to test it on. The reason I think I was successful is that the lf hid fsk 1 command now gives me the same exact output for the Proxkey and the T5577.

I remember reading about the BLEKey presented at Black Hat and was under the impression that Proxkey III's were very hard to clone (without a BLEKey), perhaps due to encryption. Is the PM3 somehow cracking its encryption? And, do you know of any other cheap devices to clone Proxkey II/III's? The PM3 is not exactly cheap.


Writing to Proxkeys sounds fascinating! How far are we from that / is there any code I can look at? Thanks.

Last edited by rfidboi (2017-02-16 06:58:09)

Offline

#8 2017-02-16 07:11:04

marshmellow
Contributor
From: US
Registered: 2013-06-10
Posts: 2,302

Re: HID 1346 Proxkey II....

there is nothing special about the proxkey III.  it is just a normal hid prox chip.  (granted with a stronger antenna than was in the proxkey II (which was it's downfall))...

it looks like you cloned it just fine...

now some other keyfobs in that form, that may look very similar to the proxkey III, can contain other chips including iclass.  those are not so easy to clone...

writing to prox cards is possible with the right know how and key.

Offline

#9 2017-02-16 07:21:52

rfidboi
Contributor
Registered: 2017-01-31
Posts: 17

Re: HID 1346 Proxkey II....

marshmellow wrote:

there is nothing special about the proxkey III.  it is just a normal hid prox chip.  (granted with a stronger antenna than was in the proxkey II (which was it's downfall))...

it looks like you cloned it just fine...

now some other keyfobs in that form, that may look very similar to the proxkey III, can contain other chips including iclass.  those are not so easy to clone...

writing to prox cards is possible with the right know how and key.

Mmm, interesting. In regards to the keyfobs in that form that look very similar to the Proxkey III but have other chips inside - how could I know I'm in possession of one of those and not a regular Proxkey III? Could I have had one such fob in my possession, ran the commands above successfully, basically just cloning part of the fob, without knowing that I'm missing something? So I could think I successfully clone the whole fob, but if I tried to use it in an access system it would fail?

Offline

#10 2017-02-16 07:24:49

marshmellow
Contributor
From: US
Registered: 2013-06-10
Posts: 2,302

Re: HID 1346 Proxkey II....

Not likely.  I'm not aware of any duel technology tags in that form factor.  If you read a prox id off it it most likely is just a prox tag.

Offline

#11 2017-02-16 07:28:17

rfidboi
Contributor
Registered: 2017-01-31
Posts: 17

Re: HID 1346 Proxkey II....

marshmellow wrote:

Not likely.  I'm not aware of any duel technology tags in that form factor.  If you read a prox id off it it most likely is just a prox tag.

Got it. I had misunderstood your previous comment. I thought you were alluding to a dual-tech fob that looked like a regular Proxkey III, but in fact you were referring to iClass fobs. I've seen some with the same shape as the ProxKey III's but a different color.

Offline

#12 2017-03-16 12:08:11

ntk
Contributor
Registered: 2015-05-24
Posts: 701

Re: HID 1346 Proxkey II....

Sorry that I have not been back here for a long time. Now I found it again, thank you for the information you have given here. I have read with big interest (like many other things on this forum)... but shame that I can not verify the fact myself I have none of those chip

Based on the information you have given, should I change the header "Working with HID1346 ProxkeyII/ ProxkeyIII" as solved?.

PS if I had one of this chip, doing a LF search I should see the type of chip ProxKey II or III and ProxID in the current main SW, is it?

Last edited by ntk (2017-03-16 12:11:48)

Offline

Board footer

Powered by FluxBB