Proxmark3 community

BrianB

Contributor

Registered: 2017-09-06

Posts: 3

Hi, I'm a pentester, but new to RF, help I've bricked my pm3

Hi,  recently acquired a couple of older Proxmark3 devices.  I mostly do pentesting for web/host, but diving into RF recently

I think I have to jtag recover one of my pm3's as I was trying to get it to work for MacOS and updating from hid to cdc, but now it just resets in a cycle, so I may need to try and recover via jtag.  Hoping I can fix it using a TIAO jtag adapter ( http://www.diygadget.com/tiao-usb-multi-protocol-adapter-jtag-spi-i2c-serial.html )

Bailed on MacOS and now using Kali (under virtualbox on a mac).

I can read the second pm3 in Kali (under virtual box), but looking at the Kali wiki, under dmesg, I see no mention of 'ohci-pci', so not sure if this is HID or a CDC device.

As the pm3 is fairly old, I need to know which bootloader and firmware to update it to (including steps)

thanks in advance for the assistance.

- - - dmesg output - - -
[  245.890531] usb 2-2: new full-speed USB device number 3 using ohci-pci
[  246.259765] usb 2-2: New USB device found, idVendor=2d2d, idProduct=504d
[  246.259767] usb 2-2: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[  246.259768] usb 2-2: Manufacturer: proxmark.org
[  246.338519] cdc_acm 2-2:1.0: ttyACM0: USB ACM device
[  246.343046] usbcore: registered new interface driver cdc_acm
[  246.343047] cdc_acm: USB Abstract Control Model driver for USB modems and ISDN adapters
[  304.755812] usb 2-2: USB disconnect, device number 3

- - - hw version and status output - - -
proxmark3> hw version
         
Prox/RFID mark3 RFID instrument         
bootrom: master/v2.2.0-57-g9dd0ac5-suspect 2015-09-15 19:46:33
os: master/v2.2.0-57-g9dd0ac5-suspect 2015-09-15 19:46:33
LF FPGA image built for 2s30vq100 on 2015/03/06 at 07:38:04
HF FPGA image built for 2s30vq100 on 2015/06/22 at 21:47:54
         
uC: AT91SAM7S256 Rev B         
Embedded Processor: ARM7TDMI         
Nonvolatile Program Memory Size: 256K bytes. Used: 168030 bytes (64%). Free: 94114 bytes (36%).         
Second Nonvolatile Program Memory Size: None         
Internal SRAM Size: 64K bytes         
Architecture Identifier: AT91SAM7Sxx Series         
Nonvolatile Program Memory Type: Embedded Flash Memory         
         
proxmark3> hw status
#db# Memory         
#db#   BIGBUF_SIZE.............40000         
#db#   BigBuf_hi  .............40000         
#db# Tracing         
#db#   tracing ................1         
#db#   traceLen ...............0         
#db# Fgpa         
#db#   mode.............HF         
#db# LF Sampling config:           
#db#   [q] divisor:           95           
#db#   bps:               8           
#db#   [d] decimation:        1           
#db#   [a] averaging:         1           
#db#   [t] trigger threshold: 0           
#db# USB Speed:         
#db#   Sending USB packets to client...         
#db#   Time elapsed:      1504ms         
#db#   Bytes transferred: 71168         
#db#   USB Transfer Speed PM3 -> Client = 47319 Bytes/s         
#db# Various         
#db#   MF_DBGLEVEL......2         
#db#   ToSendMax........-939551852         
#db#   ToSendBit........0

iceman

Administrator

Registered: 2013-04-25

Posts: 9,505

Website

Re: Hi, I'm a pentester, but new to RF, help I've bricked my pm3

Welcome and I suggest you read http://www.proxmark.org/forum/viewtopic.php?id=1125

This is the introduction section where you introduce yourself,  not ask questions. You have now access to the rest of the forum.

BrianB

Contributor

Registered: 2017-09-06

Posts: 3

Re: Hi, I'm a pentester, but new to RF, help I've bricked my pm3

Thanks for the pointer.

I was able to unbrick the pm3 and update the firmware via jtag to latest, which ironically seemed easier than trying to update otherwise.

Landed on using Ubuntu in VirtualBox instead of MacOS (which usb seems to be trickier).