Proxmark developers community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

#1 2018-07-11 10:04:56

trazodone
Contributor
Registered: 2015-11-25
Posts: 38

Help to identify tag from gallagher.co

Hello,

I have tag that cannot found using command both "lf search" and "hf search"
This tag was issued by gallagher.co you can see pictures below

FluxBB bbcode test

FluxBB bbcode test

Does anyone familiar with this kind of tag?

Thanks

Offline

#2 2018-07-11 12:53:48

marshmellow
Moderator
From: US
Registered: 2013-06-10
Posts: 2,205

Re: Help to identify tag from gallagher.co

You can use the hw tune cmd to see which antenna the tag draws power from. (Narrow down which frequency)

And we can go from there

Offline

#3 2018-07-11 17:31:58

trazodone
Contributor
Registered: 2015-11-25
Posts: 38

Re: Help to identify tag from gallagher.co

Thanks for replied. Below picture captured from hw tune command

FluxBB bbcode test


And here is the reader of this tag


FluxBB bbcode test


I use Chinese handheld machine reading tag and found it is 125kHz

Offline

#4 2018-07-11 17:35:40

marshmellow
Moderator
From: US
Registered: 2013-06-10
Posts: 2,205

Re: Help to identify tag from gallagher.co

You did not use hw tune properly to test the frequency.

Did you try 'lf search u'

Offline

#5 2018-07-11 17:41:09

trazodone
Contributor
Registered: 2015-11-25
Posts: 38

Re: Help to identify tag from gallagher.co

lf search u

==============
pm3 --> lf search u
NOTE: some demods output possible binary
  if it finds something that looks like a tag

False Positives ARE possible

Checking for known tags:

Signal looks just like noise. Looking for Hitag signal now.
#db# Starting Hitag reader family
#db# Error, unknown function: 26
Waiting for a response from the proxmark...
You can cancel this operation by pressing the pm3 button
timeout while waiting for reply.
#db# unknown command:: 0x0225
Waiting for a response from the proxmark...
You can cancel this operation by pressing the pm3 button
command execution time out
pm3 -->
==============

I put tag on PM3 antenna then run command hw tune. Is is not correct?

Offline

#6 2018-07-11 17:44:03

marshmellow
Moderator
From: US
Registered: 2013-06-10
Posts: 2,205

Re: Help to identify tag from gallagher.co

I see you are using icemans build.  I suggest testing the official repo's latest firmware.

Offline

#7 2018-07-11 18:13:35

trazodone
Contributor
Registered: 2015-11-25
Posts: 38

Re: Help to identify tag from gallagher.co

One moment

Last edited by trazodone (2018-07-11 18:32:05)

Offline

#8 2018-07-11 18:25:41

trazodone
Contributor
Registered: 2015-11-25
Posts: 38

Re: Help to identify tag from gallagher.co

Prox/RFID mark3 RFID instrument
bootrom: master/v3.0.1-378-g577b1c2-suspect 2018-07-09 08:02:01
os: master/v3.0.1-378-g577b1c2-suspect 2018-07-09 08:02:05
LF FPGA image built for 2s30vq100 on 2015/03/06 at 07:38:04
HF FPGA image built for 2s30vq100 on 2017/10/27 at 08:30:59

uC: AT91SAM7S512 Rev B
Embedded Processor: ARM7TDMI
Nonvolatile Program Memory Size: 512K bytes. Used: 199763 bytes (38%). Free: 324525 bytes (62%).
Second Nonvolatile Program Memory Size: None
Internal SRAM Size: 64K bytes
Architecture Identifier: AT91SAM7Sxx Series
Nonvolatile Program Memory Type: Embedded Flash Memory
proxmark3> ls search u
NOTE: some demods output possible binary
  if it finds something that looks like a tag
False Positives ARE possible


Checking for known tags:


No Known Tags Found!


Checking for Unknown tags:

Possible Auto Correlation of 1 repeating samples

Using Clock:32, Invert:0, Bits Found:937
ASK/Manchester - Clock: 32 - Decoded bitstream:
0000011111111110
1010101000110000
1110101001110010
1001100110100011
0100000010101000
1100011100010010
0000011111111110
1010101000110000
1110101001110010
1001100110100011
0100000010101000
1100011100010010
0000011111111110
1010101000110000
1110101001110010
1001100110100011
0100000010101000
1100011100010010
0000011111111110
1010101000110000
1110101001110010
1001100110100011
0100000010101000
1100011100010010
0000011111111110
1010101000110000
1110101001110010
1001100110100011
0100000010101000
1100011100010010
0000011111111110
1010101000110000


Unknown ASK Modulated and Manchester encoded Tag Found!

if it does not look right it could instead be ASK/Biphase - try 'data rawdemod ab'
proxmark3>

===========================

Look better smile

Offline

#9 2018-07-12 07:04:03

trazodone
Contributor
Registered: 2015-11-25
Posts: 38

Re: Help to identify tag from gallagher.co

Someone please help to suggest what should I do next because I have to return this card by tomorrow.
Thanks in advance.

Offline

#10 2018-07-12 08:03:47

Sentinel
Contributor
Registered: 2012-11-26
Posts: 153

Re: Help to identify tag from gallagher.co

hi trazodone!

00000111 11111110 10101010 00110000 11101010 01110010 10011001 10100011 01000000 10101000 11000111 00010010

Try this
0x00088060
0x07FEAA30       
0xEA7299A3   
0x40A8C712

Offline

#11 2018-07-12 08:30:46

trazodone
Contributor
Registered: 2015-11-25
Posts: 38

Re: Help to identify tag from gallagher.co

Sentinel wrote:

hi trazodone!

00000111 11111110 10101010 00110000 11101010 01110010 10011001 10100011 01000000 10101000 11000111 00010010

Try this
0x00088060
0x07FEAA30       
0xEA7299A3   
0x40A8C712

@Sentinel Sorry I don't understand how to try what you mentioned. Will you please suggest?
Thanks

Offline

#12 2018-07-12 11:14:21

trazodone
Contributor
Registered: 2015-11-25
Posts: 38

Re: Help to identify tag from gallagher.co

At least I need to dump raw data from this card So once card returned I can go on for further analysis.
Thanks

Offline

#13 2018-07-12 14:03:26

trazodone
Contributor
Registered: 2015-11-25
Posts: 38

Re: Help to identify tag from gallagher.co

seems it is T55XX

proxmark3> lf t5 dump
Reading Page 0:
blk | hex data | binary
----+----------+---------------------------------
  1 | 7FEAA30E | 01111111111010101010001100001110
  2 | A7299BB4 | 10100111001010011001101070110100
  4 | FFFFFFFF | 11111111111111111111111111111111
  5 | FFFFFFFF | 11111111111111111111111111111111
  6 | FFFFFFFF | 11111111111111111111111111111111
  7 | FFFFFFFF | 11111111111111111111111111111111
Reading Page 1:
blk | hex data | binary
----+----------+---------------------------------
proxmark3> lf t5 config
Chip Type  : T5555(Q5)
Modulation : ASK
Bit Rate   : 2 - RF/32
Inverted   : No
Offset     : 31
Seq. Term. : No
Block0     : 0x9000F006

Offline

#14 2018-07-12 14:27:27

trazodone
Contributor
Registered: 2015-11-25
Posts: 38

Re: Help to identify tag from gallagher.co

I tried to write block 1 data (0x7FEAA30E) to blank T5577 card but block 1 data did not changed. What should I do?

proxmark3> lf t5 write b 1 d 7FEAA30E p 00000000
Writing page 0  block: 01  data: 0x7FEAA30E pwd: 0x00000000
proxmark3> lf t5 read b 1
Reading Page 0:
blk | hex data | binary
----+----------+---------------------------------
  1 | 00050004 | 00000000000001010000000000000100
proxmark3>

Offline

Board footer

Powered by FluxBB