Proxmark3 community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

Announcement

Time changes and with it the technology
Proxmark3 @ discord

Users of this forum, please be aware that information stored on this site is not private.

#1 2010-02-02 18:34:39

andy999
Contributor
Registered: 2010-01-25
Posts: 9

Read MIM 22

I have a MIM 22 and are trying to read it out, but I have problems.
It seems that a MIM 22 has a different startup procedure.
Also, how many bits I have to send for the address of the data? 5? Or 8?
And what value do I need for response_obfuscation?

Thanks for your help.

Last edited by andy999 (2010-02-02 19:13:02)

Offline

#2 2010-02-02 19:28:51

henryk
Contributor
Registered: 2009-07-27
Posts: 99

Re: Read MIM 22

Yeah, I didn't include MIM22 in the released code since I newer actually saw one and only figured out the values by trial and error. A MIM-22 card will return 0xd in the second frame in the setup phase (where MIM-256 and MIM-1024 return 0x1d and 0x3d, respectively) and, strangely enough, expect a different response in the third frame in the setup phase, compared to MIM-256/1024: You need to flip bit 5 (e.g. ^0x20). The command length in the main phase is 6 (1 bit command, 5 bit address). I don't have the response_obfuscation handy, but that shouldn't be a problem since you can easily figure it out by setting it to 0 and then comparing the read data to the known UID of the tag (or some other known byte).

Offline

#3 2010-02-03 20:32:48

andy999
Contributor
Registered: 2010-01-25
Posts: 9

Re: Read MIM 22

Thanks for the very fast and helpful answer, but I can't get my MIM 22 to answer to the initial 0x55.
The card is ok, because it is working on normal legic readers.
Also the antenna should be good enough (12181 mV without and 4769 mV with card).
I also tried to send any other values instead of 0x55 for the initial setup, but I never get any response from the card.

Do you have changed the timing or something else for read your MIM 22?

Offline

#4 2010-02-08 16:34:03

andy999
Contributor
Registered: 2010-01-25
Posts: 9

Re: Read MIM 22

Now I have got a second MIM22 card but still having the same problem:
The card is not responding to the initial 0x55.
Maybe the antenna is not good enough for old MIM22 cards...
Or any other suggestions?

Thanks
Andreas

Offline

#5 2010-02-08 18:18:54

henryk
Contributor
Registered: 2009-07-27
Posts: 99

Re: Read MIM 22

Hmm, strange. The card must respond to the same first frame as any other card, since at this point the reader doesn't know yet which card it is and can't customize the frames. Yes, antenna issues might be the cause, though you'll need an oscilloscope to be sure. (E.g. I'm reasonably sure that the proxmark can power the card, if you've got the same 12V antenna as everybody else, but maybe the responses are not strong enough to be picked up by the simple hysteresis.)

Offline

#6 2010-02-08 20:38:22

andy999
Contributor
Registered: 2010-01-25
Posts: 9

Re: Read MIM 22

Yes, maybe the antenna is the problem, but I'm not able to get more than 12.0X Volts
We also tried some other external antennas from Legic or Mifare readers, but they all have active components
and are not working with the proxmark reader.
Unfortunatelly I don't have a oscilloscope by hand...

Offline

Board footer

Powered by FluxBB