Proxmark3 community
Research, development and trades concerning the powerful Proxmark3 device.
Remember; sharing is caring. Bring something back to the community.
"Learn the tools of the trade the hard way." +Fravia
You are not logged in.
Announcement
Time changes and with it the technology
Proxmark3 @ discord
Users of this forum, please be aware that information stored on this site is not private.
#1 2020-12-07 12:44:38
- timspb
- Contributor
- Registered: 2020-06-16
- Posts: 2
Chinese multifrequency cloner password
My multifrequency cloner set password on the t5577 which depends on the trace information.
My tests seem to show that the "customer id" did not change the password. Just the trace data (block 1 and 2 of page 1). Block 1 page 1 must necessarily begin with the value E0, otherwise the cloner reports a write error.
Some examples:
PW Block 1 1 Block 2 1
93129963 E0000000 00000000
93129863 E0000001 00000000
93129B63 E0000002 00000000
93139963 E0000000 00000001
93109963 E0000000 00000002
93139863 E0000001 00000001
82129963 E0111111 11111111
6C129963 E0FFFFFF FFFFFFFF
B95B9F7E E0152403 2A39055C
Last edited by timspb (2020-12-07 13:38:59)
Offline