Proxmark3 community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

Announcement

Time changes and with it the technology
Proxmark3 @ discord

Users of this forum, please be aware that information stored on this site is not private.

#1 2020-10-08 09:53:15

Arlen
Contributor
Registered: 2020-10-01
Posts: 4

How to clone after wipe the T55x7 tag?

This is my first time praticing cloning. I am using a T55x7 tag to clone a EM410x tag.
Here are the infos of my new T55x7 tag.

[usb] pm3 --> lf t55xx detect
[=]      Chip Type      : T55x7
[=]      Modulation     : ASK
[=]      Bit Rate       : 2 - RF/32
[=]      Inverted       : No
[=]      Offset         : 32
[=]      Seq. Term.     : Yes
[=]      Block0         : 0x000880E8
[=]      Downlink Mode  : default/fixed bit length
[=]      Password Set   : No

[usb] pm3 --> lf t55xx info

--- T55x7 Configuration & Information ---------
-------------------------------------------------------------
 Safer key                 : 0
 reserved                  : 0
 Data bit rate             : 2 - RF/32
 eXtended mode             : No
 Modulation                : 8 - Manchester
 PSK clock frequency       : 0 - RF/2
 AOR - Answer on Request   : No
 OTP - One Time Pad        : No
 Max block                 : 7
 Password mode             : No
 Sequence Terminator       : Yes
 Fast Write                : No
 Inverse data              : No
 POR-Delay                 : No
-------------------------------------------------------------
 Raw Data - Page 0,  block 0
    0x000880E8 00000000000010001000000011101000

[+] Config block match        : T55x7 Default

-------------------------------------------------------------

and then I input

 lf t55xx wipe 

, now its info becomes as follows.

[usb] pm3 --> lf t55xx info

--- T55x7 Configuration & Information ---------
-------------------------------------------------------------
 Safer key                 : 0
 reserved                  : 0
 Data bit rate             : 2 - RF/32
 eXtended mode             : No
 Modulation                : 8 - Manchester
 PSK clock frequency       : 0 - RF/2
 AOR - Answer on Request   : No
 OTP - One Time Pad        : No
 Max block                 : 7
 Password mode             : No
 Sequence Terminator       : No
 Fast Write                : No
 Inverse data              : No
 POR-Delay                 : No
-------------------------------------------------------------
 Raw Data - Page 0,  block 0
    0x000880E0 00000000000010001000000011100000

[+] Config block match        : T55x7 Raw

-------------------------------------------------------------

then I use command

 lf em 410x_clone 08003A4D81 1 

to clone. But it seems my T55x7 tag becomes invalid.

[usb] pm3 --> lf t55xx info

--- T55x7 Configuration & Information ---------
-------------------------------------------------------------
 Safer key                 : 15
 reserved                  : 15
 Data bit rate             : 63 - RF/128
 eXtended mode             : Yes - Warning
 Modulation                : 0x1F (Unknown)
 PSK clock frequency       : 3 - (Unknown)
 AOR - Answer on Request   : Yes
 OTP - One Time Pad        : Yes - Warning
 Max block                 : 7
 Password mode             : Yes
 Sequence Start Marker     : Yes
 Fast Write                : Yes
 Inverse data              : Yes
 POR-Delay                 : Yes
-------------------------------------------------------------
 Raw Data - Page 0,  block 0
    0xFFFFFFFF 11111111111111111111111111111111
-------------------------------------------------------------

I tried to wipe it again or write to it, but whatever I do can't recovery it. It seems invalid permanently.
So, I have a question about the differences between T55x7 Raw mode and T55x7 default mode. Why can I use

 lf em 410x_clone 08003A4D81 1 

and clone successfully when its on default mode but not raw mode? And what is the difference between

 lf t55xx wipe 

and

 lf t55xx dangerraw 

? Is my T55x7 tag truely broken permanently and can't be recovered?

Offline

#2 2020-10-08 10:19:15

Arlen
Contributor
Registered: 2020-10-01
Posts: 4

Re: How to clone after wipe the T55x7 tag?

Sorry, I just found that the low frequency antenna is on the upper part of rdv4,I always put the T55x7 tag on the high frequency antenna before.

Offline

#3 2020-10-08 10:21:22

Arlen
Contributor
Registered: 2020-10-01
Posts: 4

Re: How to clone after wipe the T55x7 tag?

How to delete or close this thread? roll

Last edited by Arlen (2020-10-08 10:21:55)

Offline

#4 2020-10-08 17:57:51

iceman
Administrator
Registered: 2013-04-25
Posts: 9,537
Website

Re: How to clone after wipe the T55x7 tag?

Good that your issue is resolved.  Let me suggest you edit your first post and add "[solved]" prefix to your title.
We just keep threads in order for other who might come along and find it useful.

Offline

Board footer

Powered by FluxBB