Proxmark developers community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

#1 2017-07-24 15:04:13

speedlimits
Contributor
Registered: 2017-06-28
Posts: 25

unknown tag (TML)

Unknown tag ...

The only way Proxmark is reacting is when I do a "mf tune"

then you see the antenna reacting when i approach the tag .

proxmark3> hf tune
#db# Measuring HF
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25913 mV
#db# 25913 mV
#db# 25913 mV
#db# 25913 mV
#db# 25913 mV
#db# 25913 mV
#db# 25913 mV
#db# 25913 mV
#db# 25913 mV
#db# 25913 mV
#db# 25913 mV
#db# 25913 mV
#db# 25913 mV
#db# 25913 mV
#db# 25913 mV
#db# 25913 mV
#db# 25913 mV
#db# 25913 mV
#db# 25913 mV
#db# 25913 mV
#db# 25913 mV
#db# 25913 mV
#db# 25913 mV
#db# 25913 mV
#db# 25913 mV
#db# 25913 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25913 mV
#db# 25913 mV
#db# 25913 mV
#db# 25877 mV
#db# 25877 mV
#db# 25877 mV
#db# 25877 mV
#db# 25877 mV
#db# 25877 mV
#db# 25877 mV
#db# 25877 mV
#db# 25877 mV
#db# 25877 mV
#db# 25877 mV
#db# 25877 mV
#db# 25877 mV
#db# 25877 mV
#db# 25877 mV
#db# 25877 mV
#db# 25877 mV
#db# 25877 mV
#db# 25877 mV
#db# 25877 mV
#db# 25877 mV
#db# 25877 mV
#db# 25913 mV
#db# 25913 mV
#db# 25913 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25948 mV
#db# 25913 mV
#db# 25913 mV
#db# 25913 mV
#db# 25913 mV
#db# 25913 mV
#db# 25913 mV
#db# 25877 mV
#db# 25877 mV
#db# 25877 mV
#db# 25842 mV
#db# 25842 mV
#db# 25842 mV
#db# 25842 mV

hf seach is not reacting to the tag

any ideas ?


4c6561726e696e6720627920646f696e6720

Offline

#2 2017-07-24 15:09:29

iceman
Administrator
Registered: 2013-04-25
Posts: 3,964
Website

Re: unknown tag (TML)

your output doesn't show any significant differences,  I doubt it is a HF tag. try LF instead.   Or your tag needs a wakeup command.


modhex(hkhehghthbhudcfcdchkigiehgduiehg)

Offline

#3 2017-07-24 15:18:50

speedlimits
Contributor
Registered: 2017-06-28
Posts: 25

Re: unknown tag (TML)

H Ice,

No luck with LF

proxmark3> lf search
NOTE: some demods output possible binary
  if it finds something that looks like a tag
False Positives ARE possible


Checking for known tags:

Waiting for a response from the proxmark...
Don't forget to cancel its operation first by pressing on the button
Command timed out
proxmark3> lf search u
NOTE: some demods output possible binary
  if it finds something that looks like a tag
False Positives ARE possible


Checking for known tags:

Waiting for a response from the proxmark...
Don't forget to cancel its operation first by pressing on the button
no tag not found
Waiting for a response from the proxmark...
Don't forget to cancel its operation first by pressing on the button

they only thing i fount out it is a "intellitix rfid wristbands"


edit :

Chips available include an ISO 15693-3-compliant NXP Semiconductors ICode SLIX, as well as ISO 14443A-compliant NXP Mifare 1K and Ultralight chips.

Last edited by speedlimits (2017-07-24 15:44:37)


4c6561726e696e6720627920646f696e6720

Offline

#4 2017-07-24 15:58:06

speedlimits
Contributor
Registered: 2017-06-28
Posts: 25

Re: unknown tag (TML)

speedlimits wrote:

H Ice,

No luck with LF

proxmark3> lf search
NOTE: some demods output possible binary
  if it finds something that looks like a tag
False Positives ARE possible


Checking for known tags:

Waiting for a response from the proxmark...
Don't forget to cancel its operation first by pressing on the button
Command timed out
proxmark3> lf search u
NOTE: some demods output possible binary
  if it finds something that looks like a tag
False Positives ARE possible


Checking for known tags:

Waiting for a response from the proxmark...
Don't forget to cancel its operation first by pressing on the button
no tag not found
Waiting for a response from the proxmark...
Don't forget to cancel its operation first by pressing on the button

they only thing i fount out it is a "intellitix rfid wristbands"

edit :
Chips available include an ISO 15693-3-compliant NXP Semiconductors ICode SLIX, as well as ISO 14443A-compliant NXP Mifare 1K and Ultralight chips.


4c6561726e696e6720627920646f696e6720

Offline

#5 2017-07-24 17:58:36

iceman
Administrator
Registered: 2013-04-25
Posts: 3,964
Website

Re: unknown tag (TML)

the position between tag/antenna is more critical for 14b and 15 tags.  Try different pos/distances.  It should be a HF tag


modhex(hkhehghthbhudcfcdchkigiehgduiehg)

Offline

#6 2017-07-25 12:43:00

speedlimits
Contributor
Registered: 2017-06-28
Posts: 25

Re: unknown tag (TML)

Hi Ice, did several attempts with different positions  but nu reaction from the tag ...

proxmark3> hf 14b info
no 14443B tag found
proxmark3> hf 14b info
no 14443B tag found
proxmark3> hf 14b info
no 14443B tag found
proxmark3> hf 14b info
no 14443B tag found
proxmark3> hf 14b info
no 14443B tag found
proxmark3> hf 14b info
no 14443B tag found
proxmark3> hf 14b info
no 14443B tag found
proxmark3> hf 14b info
no 14443B tag found

proxmark3> hf 15 demod
proxmark3> hf 15 read
proxmark3> hf 15 read
proxmark3> hf 15 read
proxmark3> hf 15 read
proxmark3> hf 15 read
proxmark3> hf 15 read
proxmark3> hf 15 read
proxmark3> hf 15 read
proxmark3> hf 15 read
proxmark3> hf 15 read
proxmark3> hf 15 read
proxmark3> hf 15 read
proxmark3> hf 15 read
proxmark3> hf 15 read
proxmark3> hf 15 read
proxmark3> hf 15 read
proxmark3> hf 15 read
proxmark3> hf 15 read
proxmark3> hf 15 read
 

proxmark3> hf 15 cmd inquiry
Response to short, just 0 bytes. No tag?

proxmark3> hf 15 cmd inquiry
Response to short, just 0 bytes. No tag?

proxmark3> hf 15 cmd inquiry
Response to short, just 0 bytes. No tag?

proxmark3> hf 15 cmd inquiry
Response to short, just 0 bytes. No tag?

proxmark3> hf 15 cmd inquiry
Response to short, just 0 bytes. No tag?

proxmark3> hf 15 cmd inquiry
Response to short, just 0 bytes. No tag?

proxmark3> hf 15 cmd inquiry
Response to short, just 0 bytes. No tag?

proxmark3> hf 15 cmd inquiry
Response to short, just 0 bytes. No tag?

proxmark3> hf 15 cmd inquiry
Response to short, just 0 bytes. No tag?

proxmark3> hf 15 cmd inquiry
Response to short, just 0 bytes. No tag?

proxmark3> hf 15 cmd inquiry
Response to short, just 0 bytes. No tag?

proxmark3> hf 15 cmd inquiry
Response to short, just 0 bytes. No tag?

proxmark3> hf 15 cmd inquiry
Response to short, just 0 bytes. No tag?

proxmark3> hf 15 cmd inquiry
Response to short, just 0 bytes. No tag?


proxmark3> hf 15 cmd sysinfo uid
timeout: no answer
proxmark3> hf 15 cmd sysinfo uid
timeout: no answer
proxmark3> hf 15 cmd sysinfo uid
timeout: no answer
proxmark3> hf 15 cmd sysinfo uid
timeout: no answer
proxmark3> hf 15 cmd sysinfo uid
timeout: no answer
proxmark3> hf 15 cmd sysinfo uid
timeout: no answer
proxmark3> hf 15 cmd sysinfo uid
timeout: no answer
proxmark3> hf 15 cmd sysinfo uid
timeout: no answer
proxmark3>
proxmark3> hf 15 cmd sysinfo uid
timeout: no answer
proxmark3> hf 15 cmd sysinfo uid
timeout: no answer
proxmark3> hf 15 cmd sysinfo uid
timeout: no answer
proxmark3> hf 15 cmd sysinfo uid
timeout: no answer
proxmark3> hf 15 cmd sysinfo uid
timeout: no answer
proxmark3> hf 15 cmd sysinfo uid
timeout: no answer
proxmark3> hf 15 cmd sysinfo uid
timeout: no answer
proxmark3> hf 15 cmd sysinfo uid
timeout: no answer
proxmark3>
proxmark3> hf 15 cmd sysinfo uid
timeout: no answer
proxmark3> hf 15 cmd sysinfo uid
timeout: no answer
proxmark3> hf 15 cmd sysinfo uid
timeout: no answer
proxmark3> hf 15 cmd sysinfo uid
timeout: no answer
proxmark3> hf 15 cmd sysinfo uid
timeout: no answer

proxmark3> hf 14a reader
iso14443a card select failed
proxmark3> hf 14a reader
iso14443a card select failed
proxmark3> hf 14a reader
iso14443a card select failed
proxmark3> hf 14a reader
iso14443a card select failed
proxmark3> hf 14a reader
iso14443a card select failed
proxmark3>

4c6561726e696e6720627920646f696e6720

Offline

#7 2017-07-25 12:48:29

iceman
Administrator
Registered: 2013-04-25
Posts: 3,964
Website

Re: unknown tag (TML)

Which firmware are you running?


modhex(hkhehghthbhudcfcdchkigiehgduiehg)

Offline

#8 2017-07-28 21:50:27

speedlimits
Contributor
Registered: 2017-06-28
Posts: 25

Re: unknown tag (TML)

Prox/RFID mark3 RFID instrument
bootrom: master/v2.2.0-528-g2a7861e-suspect 2017-06-27 09:17:15
os: master/v2.2.0-528-g2a7861e-suspect 2017-06-27 09:17:19
LF FPGA image built for 2s30vq100 on 2015/03/06 at 07:38:04
HF FPGA image built for 2s30vq100 on 2017/05/17 at 17:48:26

uC: AT91SAM7S256 Rev B
Embedded Processor: ARM7TDMI
Nonvolatile Program Memory Size: 256K bytes. Used: 192561 bytes (73%). Free: 69583 bytes (27%).
Second Nonvolatile Program Memory Size: None
Internal SRAM Size: 64K bytes
Architecture Identifier: AT91SAM7Sxx Series
Nonvolatile Program Memory Type: Embedded Flash Memory

sorry for the delay ..


4c6561726e696e6720627920646f696e6720

Offline

#9 2017-07-28 22:51:03

iceman
Administrator
Registered: 2013-04-25
Posts: 3,964
Website

Re: unknown tag (TML)

What kind of tag is it?   Keyfob? Card?


modhex(hkhehghthbhudcfcdchkigiehgduiehg)

Offline

#10 2017-07-31 04:36:58

Dot.Com
Contributor
From: Hong Kong
Registered: 2016-10-05
Posts: 149
Website

Re: unknown tag (TML)

Send a photo through or any brand names. Anything promising to lead to something.


You live, you learn.
You give, you take.
You win, you lose.

Offline

#11 2017-08-01 16:41:39

speedlimits
Contributor
Registered: 2017-06-28
Posts: 25

Re: unknown tag (TML)

they only thing i fount out it is a "intellitix rfid wristbands"


and google told me this :
Chips available include an ISO 15693-3-compliant NXP Semiconductors ICode SLIX, as well as ISO 14443A-compliant NXP Mifare 1K and Ultralight chips.


4c6561726e696e6720627920646f696e6720

Offline

#12 2017-08-01 16:59:38

speedlimits
Contributor
Registered: 2017-06-28
Posts: 25

Re: unknown tag (TML)

Its the Tomorrowland Wristband :-)


4c6561726e696e6720627920646f696e6720

Offline

#13 2017-08-02 08:29:56

Dot.Com
Contributor
From: Hong Kong
Registered: 2016-10-05
Posts: 149
Website

Re: unknown tag (TML)

Could be one of which or combined ?

No Icode SLIX Magic Chip.

Mifare 1k or Ultralight Chip Magic are readily available.


You live, you learn.
You give, you take.
You win, you lose.

Offline

#14 2017-08-03 09:12:12

speedlimits
Contributor
Registered: 2017-06-28
Posts: 25

Re: unknown tag (TML)

Don't know . The wristband is not reacting when i preset the badge .

The only way Proxmark is reacting is when I do a "mf tune"
then you see the antenna reacting when i approach the tag .


4c6561726e696e6720627920646f696e6720

Offline

#15 2017-08-04 14:18:29

iceman
Administrator
Registered: 2013-04-25
Posts: 3,964
Website

Re: unknown tag (TML)

The 14a / mifare version is very stable so it should have already been detected if your wristbands used it.

Try the offical pm3 master (latest source)  compile/flash and go for the 15 /14b commands.  Use different antennas,  and positions.


modhex(hkhehghthbhudcfcdchkigiehgduiehg)

Offline

Board footer

Powered by FluxBB