I've made a huge mistake. flashed r517 bootrom while having latest OS

trevor_s · 2017-05-07 15:48:22

proxbrute wasn't working properly so i tried downgrading the firmware to r517 so i could flash proxbrute on to it.

used this https://github.com/exploitagency/github-proxmark3-standalone-lf-emulator to flash the r517 bootrom. Immediately after, I lost my proxmark on COM3 and it went into a reboot loop. If I hold down the button and reboot VMware asks me where I want to attach the J westhues proxmark 3 device. when I attach it back to windows 10 it is recognized as an HID compliant vender defined device.

I have a feeling I should either try to flash the more recent bootrom to it, or flash the OS that goes with the r517 bootrom. If I'm screwed here I need to order the JTAG device ASAP as this is a very pressing issue. I'm feeling very dumb right now for just flashing my bootrom like that without fully understanding the repercussions. . tried running the old bootloader but it just searches for device on USB forever and never finds it. Any help is greatly appreciated guys, I definitely need it.

trevor_s · 2017-05-07 16:09:21

when the button is pressed i also see this in kali when i do an 'lsusb'

Bus 001 Device 006: ID 9ac4:4b8f J. Westhues ProxMark-3 RFID Instrument

trevor_s · 2017-05-07 16:25:43

and dmesg shows me this

13572.809878] usb 1-2.2: New USB device found, idVendor=9ac4, idProduct=4b8f
[13572.809881] usb 1-2.2: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[13572.809883] usb 1-2.2: Product: ProxMark-3 RFID Instrument
[13572.811047] usb 1-2.2: can't set config #1, error -71
[13572.813239] usb 1-2.2: USB disconnect, device number 5
[13613.371318] usb 1-2.2: new full-speed USB device number 6 using uhci_hcd
[13618.489832] usb 1-2.2: New USB device found, idVendor=9ac4, idProduct=4b8f
[13618.489834] usb 1-2.2: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[13618.489835] usb 1-2.2: Product: ProxMark-3 RFID Instrument
[13618.489836] usb 1-2.2: SerialNumber: ChangeMe
[13618.500626] hid-generic 0003:9AC4:4B8F.0002: hiddev0,hidraw1: USB HID v1.00 Device [ProxMark-3 RFID Instrument] on usb-0000:02:00.0-2.2/input0
[13751.298938] usb 1-2.2: USB disconnect, device number 6

I went ahead and ordered the bus pirate for next day air. too bad they don't ship on weekends

trevor_s · 2017-05-07 20:08:13

OK ladies and gentlemen.... I didn't brick it. I set up the environment in Ubuntu and used HID flasher to flash back my current bootrom. Now I am at this point

Qt: Untested Windows version 6.2 detected!
Prox/RFID mark3 RFID instrument
bootrom: master/v2.2.0-474-ga5eb782-suspect 2017-05-07 18:19:17
os: master/v2.3 2016-09-19 20:28:38
LF FPGA image built for 2s30vq100 on 2015/03/06 at 07:38:04
HF FPGA image built for 2s30vq100 on 2015/11/ 2 at 9: 8: 8

uC: AT91SAM7S512 Rev B
Embedded Processor: ARM7TDMI
Nonvolatile Program Memory Size: 512K bytes. Used: 183707 bytes (35%). Free: 340581 bytes (65%).
Second Nonvolatile Program Memory Size: None
Internal SRAM Size: 64K bytes
Architecture Identifier: AT91SAM7Sxx Series
Nonvolatile Program Memory Type: Embedded Flash Memory

trevor_s · 2017-05-07 21:18:58

Here's where i'm at now... I can't seem to flash the bootloader or the arm. here are the results

Prox/RFID mark3 RFID instrument
bootrom: master/v2.2.0-474-ga5eb782-suspect 2017-05-07 18:19:17
os: master/v2.3 2016-09-19 20:28:38
LF FPGA image built for 2s30vq100 on 2015/03/06 at 07:38:04
HF FPGA image built for 2s30vq100 on 2015/11/ 2 at 9: 8: 8

uC: AT91SAM7S512 Rev B
Embedded Processor: ARM7TDMI
Nonvolatile Program Memory Size: 512K bytes. Used: 183707 bytes (35%). Free: 340581 bytes (65%).
Second Nonvolatile Program Memory Size: None
Internal SRAM Size: 64K bytes
Architecture Identifier: AT91SAM7Sxx Series
Nonvolatile Program Memory Type: Embedded Flash Memory

proxmark3> exit
owner@ponbuntu:~/proxmark3/client$ sudo ./flasher /dev/ttyACM0 ../armsrc/obj//fullimage.elf
Loading ELF file '../armsrc/obj//fullimage.elf'...
Loading usable ELF segments:
0: V 0x00102000 P 0x00102000 (0x0002b980->0x0002b980) [R X] @0x94
1: V 0x00200000 P 0x0012d980 (0x0000196c->0x0000196c) [RW ] @0x2ba14
Note: Extending previous segment from 0x2b980 to 0x2d2ec bytes

Waiting for Proxmark to appear on /dev/ttyACM0. Found.
Entering bootloader...
(Press and release the button only to abort)
Waiting for Proxmark to reappear on /dev/ttyACM0................................ Found.
Note: Your bootloader does not understand the new START_FLASH command
It is recommended that you update your bootloader

Flashing...
Writing segments for file: ../armsrc/obj//fullimage.elf
0x00102000..0x0012f2eb [0x2d2ec / 362 blocks]

and then it halts

trevor_s · 2017-05-07 21:50:46

OK found this one in the forum. its modem manager. I added a rule to ignore the proxmark in rules.d but apparently it didn't work. yikes

trevor_s · 2017-05-07 22:08:30

OK, I needed to press down the button and install the newer bootrom that matches my OS.

proxmark3> hw ver
Prox/RFID mark3 RFID instrument
bootrom: master/v2.2.0-474-ga5eb782-suspect 2017-05-07 18:19:17
os: master/v2.2.0-474-ga5eb782-suspect 2017-05-07 18:19:18
LF FPGA image built for 2s30vq100 on 2015/03/06 at 07:38:04
HF FPGA image built for 2s30vq100 on 2015/11/ 2 at 9: 8: 8

uC: AT91SAM7S512 Rev B
Embedded Processor: ARM7TDMI
Nonvolatile Program Memory Size: 512K bytes. Used: 193257 bytes (37%). Free: 331031 bytes (63%).
Second Nonvolatile Program Memory Size: None
Internal SRAM Size: 64K bytes
Architecture Identifier: AT91SAM7Sxx Series
Nonvolatile Program Memory Type: Embedded Flash Memory

trevor_s · 2017-05-07 22:17:09

we iceman now

Proxmark3 RFID instrument
bootrom: iceman/master/v1.1.0-2033-gd6285fc 2017-05-07 16:45:20
os: iceman/master/v1.1.0-2033-gd6285fc 2017-05-07 16:45:21
LF FPGA image built for 2s30vq100 on 2015/03/06 at 07:38:04
HF FPGA image built for 2s30vq100 on 2015/11/ 2 at 9: 8: 8

uC: AT91SAM7S512 Rev B
Embedded Processor: ARM7TDMI
Nonvolatile Program Memory Size: 512K bytes. Used: 218263 bytes (42%). Free: 306025 bytes (58%).
Second Nonvolatile Program Memory Size: None
Internal SRAM Size: 64K bytes
Architecture Identifier: AT91SAM7Sxx Series
Nonvolatile Program Memory Type: Embedded Flash Memory

Proxmark3 community

Announcement

#1 2017-05-07 15:48:22

I've made a huge mistake. flashed r517 bootrom while having latest OS

#2 2017-05-07 16:09:21

Re: I've made a huge mistake. flashed r517 bootrom while having latest OS

#3 2017-05-07 16:25:43

Re: I've made a huge mistake. flashed r517 bootrom while having latest OS

#4 2017-05-07 20:08:13

Re: I've made a huge mistake. flashed r517 bootrom while having latest OS

#5 2017-05-07 21:18:58

Re: I've made a huge mistake. flashed r517 bootrom while having latest OS

#6 2017-05-07 21:50:46

Re: I've made a huge mistake. flashed r517 bootrom while having latest OS

#7 2017-05-07 22:08:30

Re: I've made a huge mistake. flashed r517 bootrom while having latest OS

#8 2017-05-07 22:17:09

Re: I've made a huge mistake. flashed r517 bootrom while having latest OS

Board footer