Research, development and trades concerning the powerful Proxmark3 device.
Remember; sharing is caring. Bring something back to the community.
"Learn the tools of the trade the hard way." +Fravia
You are not logged in.
Time changes and with it the technology
Proxmark3 @ discord
Users of this forum, please be aware that information stored on this site is not private.
Pages: 1
Hello Guys
I'm having some hard time with an unknown tag and may need your help...
proxmark3> lf config q 95
#db# LF Sampling config:
#db# [q] divisor: 95
#db# [b] bps: 8
#db# [d] decimation: 1
#db# [a] averaging: 1
#db# [t] trigger threshold: 0
proxmark3> lf read
#db# LF Sampling config:
#db# [q] divisor: 95
#db# [b] bps: 8
#db# [d] decimation: 1
#db# [a] averaging: 1
#db# [t] trigger threshold: 0
#db# Done, saved 40000 out of 40000 seen samples at 8 bits/sample
#db# buffer samples: 73 73 73 73 73 73 73 73 ...
Reading 39999 bytes from device memory
Data fetched
Samples @ 8 bits/smpl, decimation 1:1
proxmark3> lf read
#db# LF Sampling config:
#db# [q] divisor: 95
#db# [b] bps: 8
#db# [d] decimation: 1
#db# [a] averaging: 1
#db# [t] trigger threshold: 0
#db# Done, saved 40000 out of 40000 seen samples at 8 bits/sample
#db# buffer samples: e3 e0 d9 d1 c7 bf b7 b0 ...
Reading 39999 bytes from device memory
Data fetched
Samples @ 8 bits/smpl, decimation 1:1
proxmark3> data samples
Reading 39999 bytes from device memory
Data fetched
Samples @ 8 bits/smpl, decimation 1:1
proxmark3> data save eb.pm3
saved to 'eb.pm3'
proxmark3>
proxmark3> lf search u
NOTE: some demods output possible binary
if it finds something that looks like a tag
False Positives ARE possible
Checking for known tags:
No Known Tags Found!
Checking for Unknown tags:
Possible Auto Correlation of 3569 repeating samples
no data found, clk: 0, invert: 0, numbits: 39999, errCnt: -1
No Data Found!
proxmark3>
I've uploaded screenshots and eb.pm3 at sendspace:
https://www.sendspace.com/filegroup/IU0 … 2FIh5DfuT6
Thanks for your help !
Last edited by superjedi (2017-04-30 12:17:15)
Offline
Could be one of the EM4X50 tags that requires a password,in-order to correctly read the tag?
Offline
Could be one of the EM4X50 tags that requires a password, in-order to correctly read the tag?
No clue... I broke it apart to take a picture of the chip itself and here it is:
NOTE: my tag comes from some sort of prepaid token, not a transit card, it responds to LF unlike transit cards which are mostly HF
I googled for it and it looks like this one which title says "RFID chip from a SmarTrip card", see below
RFID chip from a SmarTrip card by Katie
back of RFID chip from a SmarTrip card by Katie
Last edited by superjedi (2017-04-30 13:12:11)
Offline
What you're looking at is a standard package type. There is no way of identifying the IC by looking at the (very nice) photos you've provided.
PLLMC (plastic leadless module carrier). Most likely SOT500 series if we're talking about NXP packages.
In order to identify what IC is in your hand you have two options:
Destructive - Remove the epoxy encapsulating the IC and visually inspect it under a microscope.
Non-destructive (recommended) - reattach a coil and continue your investigation.
Offline
Pages: 1