Proxmark3 community

felixhcat

Contributor

Registered: 2015-12-03

Posts: 4

Help identifying Erone Mini Series passive tag

I have the trace of an unusual tag here, an Erone Mini Series transmitter. This is the passive RFID portion, the specs of which do not seem to appear on the tech spec sheet that I was able to acquire. Here is the trace data:

http://pastebin.com/KFVYDkPw

None the less, I am attempting to clone the tag to a T55x7 type tag and what I seem to have here is the following:

Using Clock:64, Invert:0, Bits Found:468
ASK/Manchester - Clock: 64 - Decoded bitstream:
1101001111111110
0000000000000000
0000001101001000
1101111001011011
1101001111111110
0000000000000000
0000001101001000
1101111001011011
1101001111111110
0000000000000000
0000001101001000
1101111001011011
1101001111111110
0000000000000000
0000001101001000
1101111001011011
1101001111111110
0000000000000000
0000001101001000
1101111001011011
1101001111111110
0000000000000000
0000001101001000
1101111001011011
1101001111111110
0000000000000000
0000001101001000
1101111001011011
1101001111111110
0000
EM410x pattern found:

EM TAG ID      : 000014172B
Unique TAG ID  : 000028E8D4

Possible de-scramble patterns
HoneyWell IdentKey {
DEZ 8          : 01316651
DEZ 10         : 0001316651
DEZ 5.5        : 00020.05931
DEZ 3.5A       : 000.05931
DEZ 3.5B       : 000.05931
DEZ 3.5C       : 020.05931
DEZ 14/IK2     : 00000001316651
DEZ 15/IK3     : 000000002681044
DEZ 20/ZK      : 00000000020814081304
}
Other          : 05931_020_01316651
Pattern Paxton : 2643243 [0x28552B]
Pattern 1      : 4279974 [0x414EA6]
Pattern Sebury : 5931 20 1316651  [0x172B 0x14 0x14172B]

I tried using the em410x clone function to no avail(?), and so decided that the t55 block writing functions were more appropriate... "lf t55 detect" yielded no help. From the data, I seem to have found the following:

Encoding: ASK/Manchester
Clock: 64
Invert: No
Offset: 0

1111111110000000  FF80
0000000000000000  0000
1101001000110111  D237
1001011011110100  96F4

--

Block 0:  FF800000
Block 1:  D23796F4

Does this look correct? I need a second opinion since I'm not totally confident in my abilities concerning esoteric RFID tags.
If this isn't correct, could you show me where I went wrong and how I could avoid doing so in the future?

Thanks for the help!

iceman

Administrator

Registered: 2013-04-25

Posts: 9,537

Website

Re: Help identifying Erone Mini Series passive tag

So whats wrong with lf em em410xwrite ?

felixhcat

Contributor

Registered: 2015-12-03

Posts: 4

Re: Help identifying Erone Mini Series passive tag

Well, I'm not sure-- would I use the "EM TAG ID" as the UID param or the "UNIQUE Tag ID". Seems like a stupid question, but it is an honest one.

EM TAG ID      : 000014172B
Unique TAG ID  : 000028E8D4

What I heard back from the guy I gave it to when I used the EM TAG ID is that it "just doesn't work".

I suppose that's why I wanted someone to look at the trace data and see what's up..

Last edited by felixhcat (2017-02-22 02:28:30)

iceman

Administrator

Registered: 2013-04-25

Posts: 9,537

Website

Re: Help identifying Erone Mini Series passive tag

Did you make sure your clone worked on your pm3?  The write could have gone bad or maybe the clone has a pwd set.
The whole clone a lf tag is quite welldocumented, so search this forum or use your google foo.