Proxmark3 developers community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

#1 2015-12-10 07:25:56

kaladorm
Member
Registered: 2015-08-27
Posts: 5

Read problems (Tag-it HF-I Plus Inlay)

Hopefully this will help in improving the module - the Read Block command can be a little flaky, trying to read a block from a Tag-it HF-I Plus Inlay (Texas Instruments). Note that the block data is 09 5F 9D B2, below are outputs from attempts to read the block without and with debug mode on respectively:

[== Undefined ==]
proxmark3> hf 15 cmd read -2 u 1
CRC failed          
proxmark3> 
proxmark3> hf 15 cmd read -2 u 1
no answer          
proxmark3> 
proxmark3> hf 15 cmd read -2 u 1
no answer          
proxmark3> 
proxmark3> hf 15 cmd read -2 u 1
no answer          
proxmark3> 
proxmark3> hf 15 cmd read -2 u 1
CRC failed          
proxmark3> 
proxmark3> hf 15 cmd read -2 u 1
CRC failed          
proxmark3> 
proxmark3> hf 15 cmd read -2 u 1
CRC failed          
proxmark3> 
proxmark3> hf 15 cmd read -2 u 1
CRC failed          
proxmark3> 
proxmark3> hf 15 cmd read -2 u 1
no answer          
proxmark3> 
proxmark3> hf 15 cmd read -2 u 1
no answer          
proxmark3> 
proxmark3> hf 15 cmd read -2 u 1
CRC failed          
proxmark3> 
proxmark3> hf 15 cmd read -2 u 1
09 5F 9D B2    ._..          
[== Undefined ==]
proxmark3> #db# Iso15693 Debug is now on                 
proxmark3> hf 15 cmd read -2 u 1
#db# SEND                 
#db# . ..A    02 20 01 ce 41                 
#db# RECV                 
no answer          
proxmark3> 
proxmark3> hf 15 cmd read -2 u 1
#db# SEND                 
#db# . ..A    02 20 01 ce 41                 
#db# RECV                 
no answer          
proxmark3> 
proxmark3> hf 15 cmd read -2 u 1
#db# SEND                 
#db# . ..A    02 20 01 ce 41                 
#db# error, uneven octet! (extra bits!) mask=04                 
#db# RECV                 
no answer          
proxmark3> 
proxmark3> hf 15 cmd read -2 u 1
#db# SEND                 
#db# . ..A    02 20 01 ce 41                 
#db# RECV                 
no answer          
proxmark3> 
proxmark3> hf 15 cmd read -2 u 1
#db# SEND                 
#db# . ..A    02 20 01 ce 41                 
#db# error, uneven octet! (extra bits!) mask=10                 
#db# RECV                 
#db# .        00                 
no answer          
proxmark3> 
proxmark3> hf 15 cmd read -2 u 1
#db# SEND                 
#db# . ..A    02 20 01 ce 41                 
#db# RECV                 
#db# .        00                 
no answer          
proxmark3> 
proxmark3> hf 15 cmd read -2 u 1
#db# SEND                 
#db# . ..A    02 20 01 ce 41                 
#db# error, uneven octet! (extra bits!) mask=04                 
#db# RECV                 
no answer          
proxmark3> 
proxmark3> hf 15 cmd read -2 u 1
#db# SEND                 
#db# . ..A    02 20 01 ce 41                 
#db# error, uneven octet! (extra bits!) mask=02                 
#db# RECV                 
CRC failed          
proxmark3> 
proxmark3> hf 15 cmd read -2 u 1
#db# SEND                 
#db# . ..A    02 20 01 ce 41                 
#db# RECV                 
no answer          
proxmark3> 
proxmark3> hf 15 cmd read -2 u 1
#db# SEND                 
#db# . ..A    02 20 01 ce 41                 
#db# error, uneven octet! (extra bits!) mask=04                 
#db# RECV                 
no answer          
proxmark3> 
proxmark3> hf 15 cmd read -2 u 1
#db# SEND                 
#db# . ..A    02 20 01 ce 41                 
#db# error, uneven octet! (extra bits!) mask=02                 
#db# RECV                 
#db# NoErr CrcFail!                 
#db# .._...   00 09 5f 9d b2 8c                 
CRC failed          
proxmark3> 
proxmark3> hf 15 cmd read -2 u 1
#db# SEND                 
#db# . ..A    02 20 01 ce 41                 
#db# ran off end!                 
#db# error, uneven octet! (extra bits!) mask=02                 
#db# RECV                 
#db# NoErr CrcFail!                 
#db# .._..... 00 09 5f 9d b2 8c c0 00                 
#db# ........ 00 00 00 00 00 00 00 00                 
#db# ...... . 00 00 00 00 cc fc 20 00                 
#db# ........ 00 f4 ff ff 00 f4 ff ff                 
#db# ........ 01 00 00 00 00 01 00 00                 
CRC failed          
proxmark3> 
proxmark3> #db# W*..|= . 57 2a 10 00 7c 3d 20 00                 
proxmark3> #db# ........ 05 00 00 00 88 0a 00 00                 
proxmark3> #db# ..       0a 00              

Offline

#2 2015-12-10 10:41:57

iceman
Administrator
Registered: 2013-04-25
Posts: 6,692
Website

Re: Read problems (Tag-it HF-I Plus Inlay)

try the "hf 15 cmd sysinfo"?   are you sure its a iso15693 tag?   
and finally,  how is your antenna output (hw tune) ?


If you feel the love,  https://www.patreon.com/iceman1001

modhex(hkhehghthbhudcfcdchkigiehgduiehg)

Online

#3 2015-12-13 05:43:38

kaladorm
Member
Registered: 2015-08-27
Posts: 5

Re: Read problems (Tag-it HF-I Plus Inlay)

Antenna is working normally (I always run a tune before doing any tests as it can be a bit flaky):

[== Undefined ==]
Measuring antenna characteristics, please wait...#db# DownloadFPGA(len: 42096)                 
....#db# DownloadFPGA(len: 42096)                 
# LF antenna:  0.00 V @   125.00 kHz          
# LF antenna:  0.00 V @   134.00 kHz          
# LF optimal:  0.41 V @   169.01 kHz          
# HF antenna: 13.90 V @    13.56 MHz          
# Your LF antenna is unusable. 

The card reads fine on a Galaxy S6 using the NFC TagInfo app. Writing to the tag using the Proxmark worked when setting the OPTIONS flag, however the feedback was still that the card didn't respond but data may have been written anyway (writing was actually fairly reliable).

Tag info below:

[== Undefined ==]
  <Tag rfTechnology="Type V (ISO/IEC 15693 / Vicinity)">
    <GeneralInformation>
      <Value name="uid" description="UID">e0070XXXX4049a1c</Value>
      <Value name="rfTechnology" description="RF technology">Type V (ISO/IEC 15693 / Vicinity)</Value>
      <Value name="tagType" description="Tag type">Tag-it HF-I Plus Inlay</Value>
      <Value name="manufacturer" description="Manufacturer">Texas Instruments (France)</Value>
      <Value name="afiString" description="Application family identifier (AFI)">all families and sub-families</Value>
      <Value name="afi" description="AFI (numeric)">00</Value>
      <Value name="dsfid" description="DSF Id">00</Value>
      <Value name="responseFlags" description="Response flags">00</Value>
      <Value name="icRef" description="IC reference">03</Value>
      <Value name="targetTechClasses" description="Target technology classes (Android)">android.nfc.tech.NfcV,
android.nfc.tech.NdefFormatable</Value>
    </GeneralInformation>

Offline

#4 2015-12-13 17:16:17

iceman
Administrator
Registered: 2013-04-25
Posts: 6,692
Website

Re: Read problems (Tag-it HF-I Plus Inlay)

I don't know the status on the "hf 15" commands,  there were issues (ref: https://github.com/Proxmark/proxmark3/issues/20) on github ealier.


If you feel the love,  https://www.patreon.com/iceman1001

modhex(hkhehghthbhudcfcdchkigiehgduiehg)

Online

Board footer

Powered by FluxBB