Proxmark3 developers community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

#1 2018-01-01 20:25:48

iceman
Administrator
Registered: 2013-04-25
Posts: 6,173
Website

Fronius tag (134kHz active)

Company:  Fronius.com

Cardsized, 

Get a lower voltage on LF  (from 40v -> 7v)
Get a lower voltage on HF  (from 26v -> 20v)

Could be a dual card,  looking at company site they state ISO-14443a however no PM3 commands works on it.

Not on LF nor HF,  feels like it is expecting a wakeup-command.


[edit]  134 kHz,    active tag


If you feel the love,  https://www.patreon.com/iceman1001

modhex(hkhehghthbhudcfcdchkigiehgduiehg)

Offline

#2 2018-03-01 13:11:56

iceman
Administrator
Registered: 2013-04-25
Posts: 6,173
Website

Re: Fronius tag (134kHz active)

so how do we talk with a active tag... hm...


[edit]
I will need to sniff the communications between a valid reader / tag since we don't have any kind of bruteforce method to find a wakeup/start command.

loop thru 'lf cmdread'  with different bitpatterns maybe?


If you feel the love,  https://www.patreon.com/iceman1001

modhex(hkhehghthbhudcfcdchkigiehgduiehg)

Offline

Board footer

Powered by FluxBB