Proxmark3 community

steph

Contributor

Registered: 2019-01-31

Posts: 3

Cloning 15693 card

Hi,

trying to clone a 15693 card.

With the RRG repo, i can dump the card and change the uid with magic card, big thanks to iceman

For info, When i dumped after the 28 blocks, i had an error
"[-] Tag returned Error 15: Unknown error."
But the original and the copy have the same data.

The original :

Detected UID E0 04 01 50 84 DC .. ..
  UID  : E0 04 01 50 84 DC .. ..
  TYPE : NXP(Philips); IC SL2 ICS20/ICS21(SLI) ICS2002/ICS2102(SLIX)
  SYSINFO : 00 0F .. .. DC 84 50 01 04 E0 00 00 1B 03 01
     - DSFID supported        [0x01]
     - AFI   supported        [0x00]
     - IC reference supported [0x01]
     - Tag provides info on memory layout (vendor dependent)
           4 (or 3) bytes/blocks x 28 blocks

The copy :

Detected UID E0 04 01 50 84 DC .. ..
  UID  : E0 04 01 50 84 DC .. ..
  TYPE : NXP(Philips); IC SL2 ICS20/ICS21(SLI) ICS2002/ICS2102(SLIX)
  SYSINFO : 00 0F .. .. DC 84 50 01 04 E0 00 00 1B 03 01
     - DSFID supported        [0x00]
     - AFI   supported        [0x00]
     - IC reference supported [0x01]
     - Tag provides info on memory layout (vendor dependent)
           4 (or 3) bytes/blocks x 28 blocks

So there is a difference in DSFID, do you think it's important ?
Is it possible to change this with pm3 ?

thanks for all

iceman

Administrator

Registered: 2013-04-25

Posts: 9,537

Website

Re: Cloning 15693 card

The dump error comes from the implementation of reading blocks,   but basically we don't exactly know the amount of blocks before so it tries to read as long as it gets a positive block read back.    The magic15 tags has 28blocks.

And when it fails,  the dump data loop stops.    Not the best implementation nor the most informativ message either.

iceman

Administrator

Registered: 2013-04-25

Posts: 9,537

Website

Re: Cloning 15693 card

Looks like DSFID prints the response from systeminfo, so compare your systeminfo bytes

// DSFID
if (recv[1] & 0x01) 
	PrintAndLogEx(NORMAL, "     - DSFID supported        [0x%02X]", recv[10]);
else 
	PrintAndLogEx(NORMAL, "     - DSFID not supported");
endif