Proxmark3 community

atrox

Contributor

Registered: 2010-01-08

Posts: 35

iso15693 sniffer

I'd like to sniff into some communication between a iso15693 reader and tag. therefor i build a RecordRawAdcSamplesIso15693() function. since i could not find a documentation of the FPGA-interface I had to guess the right initialization sequence - below is what I have so far, but it does not seem to work - causing reboots of the proxmarkIII.

int c = 0;
uint8_t *dest = (uint8_t *)BigBuf;

FpgaSetupSsc();
FpgaWriteConfWord(FPGA_MAJOR_MODE_OFF);
SpinDelay(200);
SetAdcMuxFor(GPIO_MUXSEL_HIPKD);
SpinDelay(100);
FpgaWriteConfWord(FPGA_MAJOR_MODE_HF_READER_RX_XCORR);

      for(;;) {
                if(AT91C_BASE_SSC->SSC_SR & (AT91C_SSC_TXRDY)) {
                        AT91C_BASE_SSC->SSC_THR = 0x43;
                }
                if(AT91C_BASE_SSC->SSC_SR & (AT91C_SSC_RXRDY)) {
                        int8_t b;
                        b = (int8_t)AT91C_BASE_SSC->SSC_RHR;
                        // ....
                       // b now holds a sample
                       // ....
                       dest[c++] = b;

                       if(c >= 7000) {
                                       break;
                       }

                 }
                WDT_HIT();
       }

is there a reason, why most of the other code only reads every second byte using the getNext-toggle-variable ?

Last edited by atrox (2010-04-23 19:45:30)

rule

Member

Registered: 2008-05-21

Posts: 417

Re: iso15693 sniffer

You could try to use the iclass snoop function in the recent proxmark firmware.
It uses the same modulation and encoding, although the protocol/crc is different, in principle it should be possible to capture (raw) frames.

asper

Contributor

Registered: 2008-08-24

Posts: 1,409

Re: iso15693 sniffer

It works with I-CODE and and:
hf iclass snoop
command !

Thank you roel !!!

asper

Contributor

Registered: 2008-08-24

Posts: 1,409

Re: iso15693 sniffer

No iso15693 emulation is possible with pm3.

You can snoop iso15693 supported communication with "hf iclass snoop" command no more things to explain; try to test/read forum/documentation before posting.