Proxmark3 community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

Announcement

Time changes and with it the technology
Proxmark3 @ discord

Users of this forum, please be aware that information stored on this site is not private.

#1 2017-07-03 11:57:35

drakospart
Contributor
Registered: 2016-02-11
Posts: 67

Writing blocks of page 1 in T55XX

Hi,

Is it possible to write page 1 blocks in t5577? I am writing with this command
lf t55xx write b 2 d 8847A5AD 1
Writing page 1  block: 02  data: 0x8847A5AD

but when I read the tag, it keep the old data.

Whad am I doing wrong?

Offline

#2 2017-07-03 13:04:10

marshmellow
Contributor
From: US
Registered: 2013-06-10
Posts: 2,302

Re: Writing blocks of page 1 in T55XX

It is likely your tag has that block permalocked.  Only way around it is if you're tag doesn't have testmode disabled so you can reset it.  (Careful with testmode it wipes everything)

Offline

#3 2017-07-03 13:04:57

marshmellow
Contributor
From: US
Registered: 2013-06-10
Posts: 2,302

Re: Writing blocks of page 1 in T55XX

Out of curiosity why would you want to write that on block 2 of page 1?  (You realize that is a special config block right?)

Offline

#4 2017-07-03 13:37:34

ntk
Contributor
Registered: 2015-05-24
Posts: 701

Re: Writing blocks of page 1 in T55XX

you know tag password is 1

Offline

#5 2017-07-03 13:41:04

marshmellow
Contributor
From: US
Registered: 2013-06-10
Posts: 2,302

Re: Writing blocks of page 1 in T55XX

ntk wrote:

you know tag password is 1

nope... password would require a p in front.
He did the correct cmd for a page 1 write

Offline

#6 2017-07-04 10:39:22

drakospart
Contributor
Registered: 2016-02-11
Posts: 67

Re: Writing blocks of page 1 in T55XX

I was testing some tags chinese and wonder that I can't write these blocks and in other tags i can.

Also in these tags it is really difficult that "lf t55 detect"   work properly, I think it is so bad quality chinese tag or some special kind of tag

Offline

#7 2017-07-04 10:42:23

drakospart
Contributor
Registered: 2016-02-11
Posts: 67

Re: Writing blocks of page 1 in T55XX

I know it is a special config block, but in some tags it is possible to change this. So I am just testing this.
For example if i put a t5577 tag i can read it
proxmark3> lf t55 de
Chip Type  : T55x7
Modulation : ASK
Bit Rate   : 5 - RF/64
Inverted   : No
Offset     : 32
Seq. Term. : No
Block0     : 0x00148040

In this chinese tag is made a clon of the former tag.. it also works in the reader access control
but if i try to make the lf t55 de 
i get this

proxmark3> lf t55 de
Could not detect modulation automatically. Try setting it manually with 'lf t55xx config'

Offline

#8 2017-07-04 12:43:17

drakospart
Contributor
Registered: 2016-02-11
Posts: 67

Re: Writing blocks of page 1 in T55XX

Looks like some chinese tags are wrong tunned. I got to read few of them with the config option

lf config L q 95

Offline

#9 2017-07-04 14:09:42

marshmellow
Contributor
From: US
Registered: 2013-06-10
Posts: 2,302

Re: Writing blocks of page 1 in T55XX

Are these small keyfob type or cards?  Post a trace after a failed lf t5 detect?

Offline

#10 2017-07-04 16:23:26

drakospart
Contributor
Registered: 2016-02-11
Posts: 67

Re: Writing blocks of page 1 in T55XX

they are small keyfobs and after test on access controls  I confirm they are wrong tunned or the antenna coil is too small. I need to put the keyfob touching the access control to make it works. When the original T5577 works 5 cms away.
I will post later a trace.

Offline

#11 2017-07-05 19:25:20

marshmellow
Contributor
From: US
Registered: 2013-06-10
Posts: 2,302

Re: Writing blocks of page 1 in T55XX

on most ata5577's block 1 and 2 of page 1 are locked at the factory.  block 3 page 1 is not typically locked.  but careful you can mess up your tag with this block.

Offline

Board footer

Powered by FluxBB