Proxmark3 community

Martinorak

Contributor

Registered: 2019-10-16

Posts: 11

Modulation : DIRECT/NRZ

Hi,

I try it command lf t55xx detect
Chip Type  : T55x7
Modulation : DIRECT/NRZ
Bit Rate   : 1 - RF/16
Inverted   : No
Offset     : 47
Seq. Term. : No
Block0     : 0x00040000

because lf search u not working.

I also try it lf t55xx dump
Reading Page 0:
blk | hex data | binary
----+----------+---------------------------------
  0 | 00040000 | 00000000000001000000000000000000
  1 | 00100000 | 00000000000100000000000000000000
  2 | 00000000 | 00000000000000000000000000000000
  3 | 00400000 | 00000000010000000000000000000000
  4 | 00100000 | 00000000000100000000000000000000
  5 | 00400000 | 00000000010000000000000000000000
  6 | 00400000 | 00000000010000000000000000000000
  7 | 01000000 | 00000001000000000000000000000000
Reading Page 1:
blk | hex data | binary
----+----------+---------------------------------
  0 | FFFFFFFF | 11111111111111111111111111111111
  1 | FFFFFFFF | 11111111111111111111111111111111
  2 | 00000000 | 00000000000000000000000000000000
  3 | 01000000 | 00000001000000000000000000000000

How can I get command for clone ? Or How can I decrypt it ?

Thank you so much !!

mwalker

Moderator

Registered: 2019-05-11

Posts: 318

Re: Modulation : DIRECT/NRZ

while it says NRZ, then config looks very blank for a t55xx.

Maybe perform and

lf read
data save filename.pm3 

and share via a file sharing service and post a link to it.

edit: as per icemans request.

Last edited by mwalker (2019-11-05 00:25:58)

iceman

Administrator

Registered: 2013-04-25

Posts: 9,537

Website

Re: Modulation : DIRECT/NRZ

..maybe incurage ppl to use filesharing services ?

Martinorak

Contributor

Registered: 2019-10-16

Posts: 11

Re: Modulation : DIRECT/NRZ

Hi, very thanks for your time. Maybe see as blank but I think it´s one of first chip here on the system. Maybe have easy to remember code.

File is here https://we.tl/t-z5SgP72yQl

I hope I used the right service you wanted.

Thanks
Martin

Martinorak

Contributor

Registered: 2019-10-16

Posts: 11

Re: Modulation : DIRECT/NRZ

Do you have any idea how to clone this chip?

Thanks for your time

mwalker

Moderator

Registered: 2019-05-11

Posts: 318

Re: Modulation : DIRECT/NRZ

The data in the file is very week.  I would like to see a much stronger signal.

Martinorak

Contributor

Registered: 2019-10-16

Posts: 11

Re: Modulation : DIRECT/NRZ

Here is new data. Please try it or tell me how can I get it better data (signal).

https://wetransfer.com/downloads/cf188318cec615f5a0863cb4d3cb315220191111082132/d2f20562363f7e8d289f12e0f45b0c4920191111082132/380a81

Thanks
Martin

mwalker

Moderator

Registered: 2019-05-11

Posts: 318

Re: Modulation : DIRECT/NRZ

based on the data in the file(s) i am not sure its an lf/125 khz card.
It seems to be not much more then just noise (with no card on the reader)
Can post the results of the following with no card on the reader, then repeat but with the card on the reader.

hw tune

Martinorak

Contributor

Registered: 2019-10-16

Posts: 11

Re: Modulation : DIRECT/NRZ

Here is new data:

1. without card LF
2. with card LF
3. without card HF
4. with card HF

https://wetransfer.com/downloads/32b816aa9df6edcd867292284e0c8bb920191113102748/b31df3d752ed6767215f0b4d3d10eba420191113102748/7cd355

And here is image from HW TUNE with LF antenna
https://imgur.com/a/5plBLbE

mwalker

Moderator

Registered: 2019-05-11

Posts: 318

Re: Modulation : DIRECT/NRZ

I will let the hardware guys comment more on this, but to me the hw tune voltages look low.  And the HF looks like its antenna is not there.

hw tune with no tag (copied from the image so others can quickly see)

# LF antenna: 19.25 V @ 125.00 kHz
# LF antenna:  9.76 V @ 134.00 kHz
# LF optimal: 19.25 V @ 125.00 khz
# HF antenna:  0.81 V @  13.56 Mhz

with tag

# LF antenna:  8.94 V @ 125.00 kHz
# LF antenna:  9.07 V @ 134.00 kHz
# LF optimal:  9.76 V @ 110.09 khz
# HF antenna:  0.85 V @  13.56 Mhz

Is the device you are trying to read a full size card or a fob/tag ?

iceman

Administrator

Registered: 2013-04-25

Posts: 9,537

Website

Re: Modulation : DIRECT/NRZ

Looks like a decent antenna 19v,  is this a RDV2 device?   And the voltage drop indicates a good coupling.  You shouldn't have any issues with it.   The HF looks like its been disconnected, which is possible on a RDV2 with its individual cables.

mwalker

Moderator

Registered: 2019-05-11

Posts: 318

Re: Modulation : DIRECT/NRZ

thanks iceman, i guess I have gotten used to the RDV4 voltages, even my easy is 35V

The data files have very low readings, the first one was -2 to 2 (i.e. looked like nothing was on the antenna).  the second one was a little better, but still very low.  So I'm running out of ideas.

Martinorak

Contributor

Registered: 2019-10-16

Posts: 11

Re: Modulation : DIRECT/NRZ

Thanks guys for your patient with me. So sorry for longer response.

So I have this device : https://imgur.com/a/FcPRo6B
From rysc corp, bought here: https://store.ryscc.com/products/new-proxmark3-kit

The device what I trying to read is fob tag, here is photo: https://imgur.com/a/NmKVvcf
On the door or toll-bar works fine.

Maybe there are problem with low energy my proxmark ?
Would it be better to buy a 35V device? (RDV4)

I am able to all solutions what do you suggest. Including the purchase of new equipment.

PS: You mean RDV4 this product? https://lab401.com/products/proxmark-3- … 8437911663

iceman

Administrator

Registered: 2013-04-25

Posts: 9,537

Website

Re: Modulation : DIRECT/NRZ

That looks like an old Motorola FlexPass tag.  I recently added support for it over at the RRG/Iceman repo.  I am very curious if the implementation can read it. 

Your device is good enough. No need to spend 300 USD more. 

Anyway,  the tag explains the strange readings.