Proxmark3 community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

Announcement

Time changes and with it the technology
Proxmark3 @ discord

Users of this forum, please be aware that information stored on this site is not private.

#1 2015-03-28 10:57:33

joe
Contributor
Registered: 2013-08-15
Posts: 126

Is this FSK demod correct ?

This is a unknown tag, only fsk cmd can access it. is the demod data right ? anyone know ? Thanks.

proxmark3> lf search
#db# buffer samples: 78 7e 7b 7d 7f 7c 7f 79 ...                 
Reading 20000 samples from device memory
NOTE: some demods output possible binary
  if it finds something that looks like a tag         
Checking for known tags:
No Known Tags Found!
proxmark3>
proxmark3> data fskrawdemod 50 0 10 8
Args invert: 0 - Clock:50 - fchigh:10 - fclow: 8         
FSK decoded bitstream:         
0101010101010101         
0101101010101010         
1010101010101010         
1011010101010101         
0101010101010101         
0101010101010101         
0101010101010101         
0101010101010101         
0101010101010101         
0101010101010101         
0101010101010101         
0101010101101101         
0101010101010101         
0101011010101010         
1010101010101011         
0101010101010101         
proxmark3>
proxmark3> data fskdemod
actual data bits start at sample 1653         
length 50/50         
bits: '110101011111000011011100010101111110110010000'         
hex: 00001abe 1b8afd90         
proxmark3>

Offline

#2 2015-03-28 11:28:07

joe
Contributor
Registered: 2013-08-15
Posts: 126

Re: Is this FSK demod correct ?

1427538463_qq20150328173629.jpg

Offline

#3 2015-03-28 11:51:54

app_o1
Contributor
Registered: 2013-06-22
Posts: 247

Re: Is this FSK demod correct ?

Do the same without any tag near your antenna.
Do you see any difference?

Offline

#4 2015-03-28 12:04:06

joe
Contributor
Registered: 2013-08-15
Posts: 126

Re: Is this FSK demod correct ?

is a LF tag..

proxmark3> hw tune
Measuring antenna characteristics, please wait.......         
# LF antenna:  5.24 V @   125.00 kHz         
# LF antenna:  3.89 V @   134.00 kHz         
# LF optimal:  9.00 V @   107.14 kHz         
# HF antenna:  0.45 V @    13.56 MHz         
# Your LF antenna is marginal.         
# Your HF antenna is unusable.         
Done! Divisor 89 is 134khz, 95 is 125khz.
proxmark3>
proxmark3> hw tune
Measuring antenna characteristics, please wait.......         
# LF antenna: 15.71 V @   125.00 kHz         
# LF antenna: 13.02 V @   134.00 kHz         
# LF optimal: 18.80 V @   127.66 kHz         
# HF antenna:  0.45 V @    13.56 MHz         
# Your HF antenna is unusable.         
Done! Divisor 89 is 134khz, 95 is 125khz.
proxmark3>

Offline

#5 2015-03-28 12:07:52

joe
Contributor
Registered: 2013-08-15
Posts: 126

Re: Is this FSK demod correct ?

this without tag

1427540827_qq20150328181909.jpg

Offline

#6 2015-03-28 12:15:37

joe
Contributor
Registered: 2013-08-15
Posts: 126

Re: Is this FSK demod correct ?

when I test with HF antenna, it drop 2 volts, strange  ??

Offline

#7 2015-03-28 12:20:00

joe
Contributor
Registered: 2013-08-15
Posts: 126

Re: Is this FSK demod correct ?

do you have any idea to read this tag ? thanks

Offline

#8 2015-03-28 12:37:39

app_o1
Contributor
Registered: 2013-06-22
Posts: 247

Re: Is this FSK demod correct ?

try

lf read h
data samples 16000
data plot

and also send us a picture of the tag. that could help

What you get so far does not look like anything...

Last edited by app_o1 (2015-03-28 12:47:39)

Offline

#9 2015-03-28 12:50:39

joe
Contributor
Registered: 2013-08-15
Posts: 126

Re: Is this FSK demod correct ?

same result

1427543369_153.jpg

Offline

#10 2015-03-28 12:58:47

app_o1
Contributor
Registered: 2013-06-22
Posts: 247

Re: Is this FSK demod correct ?

This is not any better... You see just noise.
Post a picture of your tag. That might be helpful.

Offline

#11 2015-03-28 13:07:16

app_o1
Contributor
Registered: 2013-06-22
Posts: 247

Re: Is this FSK demod correct ?

Also check what is inside the \traces folder.
There are a lot of traces to play with and that will certainly help you understand what you are doing.

Offline

#12 2015-03-28 13:12:25

joe
Contributor
Registered: 2013-08-15
Posts: 126

Re: Is this FSK demod correct ?

Just a thin card, no brand no name. Printed no 395A

Offline

#13 2015-03-28 13:40:41

marshmellow
Contributor
From: US
Registered: 2013-06-10
Posts: 2,302

Re: Is this FSK demod correct ?

Try the hitag reader function.(probably won't work)  it looks like you're card is waiting to send it's data until it receives a valid wakeup call.

Offline

#14 2015-03-28 14:36:04

joe
Contributor
Registered: 2013-08-15
Posts: 126

Re: Is this FSK demod correct ?

that's the output

proxmark3> lf hitag reader 25re
#db# Starting Hitag reader family                 
#db# Testing 343 authentication attempts                 
#db# Configured for hitag2 reader                 
Waiting for a response from the proxmark...         
Don't forget to cancel its operation first by pressing on the button         
#db# frame received: 5233                 
#db# All done                 
proxmark3>
proxmark3>
proxmark3> data save investigated.txt
saved to 'investigated.txt'         
proxmark3>
proxmark3> lf hitag reader 21
#db# Starting Hitag reader family                 
#db# List identifier in password mode                 
#db# Configured for hitag2 reader                 
Waiting for a response from the proxmark...         
Don't forget to cancel its operation first by pressing on the button         
#db# frame received: 5013                 
#db# All done                 
proxmark3>

Offline

#15 2015-03-28 14:50:37

joe
Contributor
Registered: 2013-08-15
Posts: 126

Re: Is this FSK demod correct ?

my 1st time play with hitag, no sure how it works.

proxmark3> lf hitag sim
proxmark3>
proxmark3> #db# Starting Hitag2 simulation                 s
proxmark3> #db# | 0 | 024e0220 |                 
proxmark3> #db# | 1 | 4d494b52 |                 
proxmark3> #db# | 2 | 20f04f4e |                 
proxmark3> #db# | 3 | 0eaa4854 |                 
proxmark3> #db# | 4 | 465f4f4b |                 
proxmark3> #db# | 5 | 55555555 |                 
proxmark3> #db# | 6 | aaaaaaaa |                 
proxmark3> #db# | 7 | 55555555 |                 
proxmark3> #db# | 8 | 00000000 |                 
proxmark3> #db# | 9 | 00000000 |                 
proxmark3> #db# | 10 | 00000000 |                 
proxmark3> #db# | 11 | 00000000 |

Offline

#16 2015-03-28 17:59:11

iceman
Administrator
Registered: 2013-04-25
Posts: 9,506
Website

Re: Is this FSK demod correct ?

Are you using the latest sourcecode from Github?!?

Offline

Board footer

Powered by FluxBB