Proxmark3 community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

Announcement

Time changes and with it the technology
Proxmark3 @ discord

Users of this forum, please be aware that information stored on this site is not private.

#1 2019-03-17 22:17:59

actionbias
Contributor
Registered: 2017-07-22
Posts: 26

ioprox 3-character hex versus 2-character hex

Folks!

I'm have 2 types of ioprox fobs:

First one ---> XSF(01)2B:58714
second one ---> XSF(02)7A:08055

The first one I can get the hex from the ioprox calculator and create a duplication.
The second one I'm struggling with the 3-character hex in front of the colon :


Any suggestions? Or point me to a link that can guide me?

Thanks!

Last edited by actionbias (2020-07-25 22:42:34)

Offline

#2 2019-03-18 12:45:29

marshmellow
Contributor
From: US
Registered: 2013-06-10
Posts: 2,302

Re: ioprox 3-character hex versus 2-character hex

Can you post a trace of the tag?

Offline

#3 2019-03-19 00:15:04

actionbias
Contributor
Registered: 2017-07-22
Posts: 26

Re: ioprox 3-character hex versus 2-character hex

Sorry I don't have the tags on me. I'm trying to duplicate with the serial number.

Offline

#4 2019-03-19 00:18:27

marshmellow
Contributor
From: US
Registered: 2013-06-10
Posts: 2,302

Re: ioprox 3-character hex versus 2-character hex

Then I would guess the serial number you have been given is invalid

Offline

#5 2019-11-18 06:13:49

Charlie
Contributor
Registered: 2017-01-27
Posts: 129

Re: ioprox 3-character hex versus 2-character hex

Beginning in 2019, Kantech is no longer manufacturing cards that look like this:  XSF (01) 78:6430.  They are still using XSF 26Bit Format but the new format is XSF 0258:14639.

Last edited by Charlie (2019-11-18 06:30:03)

Offline

#6 2019-11-18 16:21:37

iceman
Administrator
Registered: 2013-04-25
Posts: 9,497
Website

Re: ioprox 3-character hex versus 2-character hex

If you can get your hands on such tags then it would be good if you could share some trace files.  In order to look at the new decoding.

Offline

#7 2020-04-02 17:51:39

actionbias
Contributor
Registered: 2017-07-22
Posts: 26

Re: ioprox 3-character hex versus 2-character hex

From duplicating several ioProx by serial number I've recognize some patterns. Using the ioProx calculator it can only process XSF(01) and it will return a hex conversion.

Consistenly if you take that 9th digit and change that from a 3 to a 5 the conversion works.

The tricky part is the very last digit. I've seen 7, 3, F work.

For e.g.

XSF(02) 9C : 16684

The ioProx Calculator takes the XSF(01)9C:16684 conversion outputs 0078672034196417

Change the 9th digit from a 3 to a 5, this one consistently works.

XSF(01)9C : 16684 = lf io clone 0078672034196417
XSF(02)9C : 16684 = lf io clone 007867205419641 *7* <<< Where I'm struggling is the last digit. I've seen 7, 3, F work.

Any advice or direction on how to solve this riddle?

Offline

#8 2020-04-02 18:14:38

actionbias
Contributor
Registered: 2017-07-22
Posts: 26

Re: ioprox 3-character hex versus 2-character hex

Here's some further insight I produced 2 fobs using the following commands. I used the number 3 and 7 for the last digit.
In result, this outputed a different checksum value.

Which checksum is correct?

lf io clone 0078672054196413
lf io clone 0078672054196417


Last digit is #3:

00000000 0
11110000 1
10011100 1 facility
00000010 1 version
01000001 1 code1
00101100 1 code2
00000100 11 checksum
IO Prox XSF(02)9c:16684 (0078672054196413) [04 crc ok]

Last digit is #7

00000000 0
11110000 1
10011100 1 facility
00000010 1 version
01000001 1 code1
00101100 1 code2
00000101 11 checksum
IO Prox XSF(02)9c:16684 (0078672054196417) [05 !crc]

Last edited by actionbias (2020-04-03 20:35:55)

Offline

#9 2020-07-02 04:05:13

actionbias
Contributor
Registered: 2017-07-22
Posts: 26

Re: ioprox 3-character hex versus 2-character hex

Any tips or can you point me a to a calculator?

Offline

Board footer

Powered by FluxBB