New kind of 125 khz card?

lohcm88 · 2019-10-22 03:11:19

Hi all.. recently i came across a new type of Low Frequency tag which I am unable to read with both pm3 or china cloner icopy.

Long story cut short... previous system was a 250 khz and i clone it using icopy with a 250 khz tag without any problem. Recently the apartment changes it security system and I think it should be a low frequency system as the voltage drop in pm3 when I use HW Tune.

The card is both side white with number 0000200460 003,03852 printed on it and it look like an ordinary EM type of ID card. Problem is both pm3 and cloner icopy were unable to read this card. I even program a 125 and 250 khz card with the same exact number (0000200460 003,03852) but without success.

Is this a new kind of chip where pm3 and cloners cannot detect? The Command lf sea u produces nothing as well.. thx for your time..

iceman · 2019-10-22 15:50:47

cool,
How about you save a trace and share so we can have a look at it?

data plot
lf read
data save lf_unk_200460_003_03852.pm3

lohcm88 · 2019-10-23 15:51:38

iceman wrote:

cool,
How about you save a trace and share so we can have a look at it?
data plot
lf read
data save lf_unk_200460_003_03852.pm3

Here is the trace from another card 200302 003,03694

https://drive.google.com/file/d/1QLGgJB … sp=sharing

Last edited by lohcm88 (2019-10-23 15:53:53)

iceman · 2019-10-28 08:25:57

Crappy signal. How sure are you its 125khz ? Looks like LF but a different frequency

lf conf f 134
lf read
data save lf_134_unk_200460_003_03852.pm3

lohcm88 · 2019-12-03 13:55:06

iceman wrote:

Crappy signal. How sure are you its 125khz ? Looks like LF but a different frequency
lf conf f 134
lf read
data save lf_134_unk_200460_003_03852.pm3

Ok i hv another try at another similar card (different card number) and the data look better when I read it about 2~3 cm away from proxmark.

https://drive.google.com/file/d/152Zj5I … sp=sharing

The card number of this card is 200079 003,03471

Any advise appreciated. Thank you.

iceman · 2019-12-03 16:56:47

...hm... your output from

hw status

lohcm88 · 2020-03-12 07:37:17

iceman wrote:

...hm... your output from
hw status

Hi Iceman, sorry for the delay.. as I only hv the chance to try the card when my contacts pass it to me.. the previous try most probably I did not set to 134... hence today i hv another try again but different card number 0000200142 003,03534

https://drive.google.com/file/d/19iwMFB … sp=sharing

Here are the commands i hv used

proxmark3> lf config H b 4 d 3
#db# LF Sampling config: 
#db#   [q] divisor:           88 
#db#   [b] bps:               4 
#db#   [d] decimation:        3 
#db#   [a] averaging:         1 
#db#   [t] trigger threshold: 0 
#db#   [s] samples to skip:   0 

proxmark3>lf read
#db# LF Sampling config: 
#db#   [q] divisor:           88 
#db#   [b] bps:               4 
#db#   [d] decimation:        3 
#db#   [a] averaging:         1 
#db#   [t] trigger threshold: 0 
#db#   [s] samples to skip:   0 
Waiting for a response from the proxmark...
You can cancel this operation by pressing the pm3 button
#db# Done, saved 79998 out of 239994 seen samples at 4 bits/sample
#db# buffer samples: 77 7f 7f 77 77 77 77 7f ...
Reading 39999 bytes from device memory

Data fetched
Samples @ 4 bits/smpl, decimation 1:3 
Unpacking...
Unpacked 39999 samples

proxmark3>data save lf_134_unk_200142_003_03534.pm3
saved to 'lf_134_unk_200142_003_03534.pm3'

proxmark3>hw status
#db# Memory
#db#   BIGBUF_SIZE.............40000
#db#   Available memory........40000
#db# Tracing
#db#   tracing ................1
#db#   traceLen ...............30
#db# Currently loaded FPGA image:
#db#   fpga_lf.bit built for 2s30vq100 on 2019/11/21 at 09:02:37
#db# Smart card module (ISO 7816)
#db#   version.................FAILED
#db# LF Sampling config: 
#db#   [q] divisor:           88 
#db#   [b] bps:               4 
#db#   [d] decimation:        3 
#db#   [a] averaging:         1 
#db#   [t] trigger threshold: 0 
#db#   [s] samples to skip:   0 
#db# USB Speed:
#db#   Sending USB packets to client...
#db#   Time elapsed:      1500ms
#db#   Bytes transferred: 756224
#db#   USB Transfer Speed PM3 -> Client = 504149 Bytes/s
#db# Various
#db#   MF_DBGLEVEL........2
#db#   ToSendMax..........39
#db#   ToSendBit..........8

Is this a 134 kHz card? Thank you!

iceman · 2020-03-12 08:30:28

Maybe not decimate the samples that much. The signal looks strange.

hw tune
lf config H b 8 d 1
lf read
data save lf_134_unk_200142_003_03534_p2.pm3

iceman · 2020-03-12 08:36:45

You get something out of the card.

[usb] pm3 --> data load lf_134_unk_200142_003_03534.pm3
[+] loaded 39999 samples
[usb] pm3 --> data raw ar
01101010101010101101101010101010
10110110101010101010110110101010
10101011011010101010101011011010
10101010101101101010101010101101
10101010101010110110101010101010
11011010101010101011011010101010
10101101101010101010101101101010
10101010110110101010101010110110
10101010101011011010101010101011
01101010101010101101101010101010
10110110101010101010110110101010
10101011011010101010101011011010
10101010101101101010101010101101
10101010101010110110101010101010
11011010101010101011011010101010
10101101101010101010101101101010
[usb] pm3 --> data print x i
[+] DemodBuffer: 95552555495552555495552555495552555495552555495552555495552555495

Proxmark3 community

Announcement

#1 2019-10-22 03:11:19

New kind of 125 khz card?

#2 2019-10-22 15:50:47

Re: New kind of 125 khz card?

#3 2019-10-23 15:51:38

Re: New kind of 125 khz card?

#4 2019-10-28 08:25:57

Re: New kind of 125 khz card?

#5 2019-12-03 13:55:06

Re: New kind of 125 khz card?

#6 2019-12-03 16:56:47

Re: New kind of 125 khz card?

#7 2020-03-12 07:37:17

Re: New kind of 125 khz card?

#8 2020-03-12 08:30:28

Re: New kind of 125 khz card?

#9 2020-03-12 08:36:45

Re: New kind of 125 khz card?

Board footer