Proxmark3 community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

Announcement

Time changes and with it the technology
Proxmark3 @ discord

Users of this forum, please be aware that information stored on this site is not private.

#1 2017-04-29 12:59:38

superjedi
Contributor
Registered: 2017-04-29
Posts: 3

Unknown tag (another one)

Hello Guys

I'm having some hard time with an unknown tag and may need your help...

proxmark3> lf config q 95
#db# LF Sampling config:
#db#   [q] divisor:           95
#db#   [b] bps:               8
#db#   [d] decimation:        1
#db#   [a] averaging:         1
#db#   [t] trigger threshold: 0
proxmark3> lf read
#db# LF Sampling config:
#db#   [q] divisor:           95
#db#   [b] bps:               8
#db#   [d] decimation:        1
#db#   [a] averaging:         1
#db#   [t] trigger threshold: 0
#db# Done, saved 40000 out of 40000 seen samples at 8 bits/sample
#db# buffer samples: 73 73 73 73 73 73 73 73 ...
Reading 39999 bytes from device memory

Data fetched
Samples @ 8 bits/smpl, decimation 1:1
proxmark3> lf read
#db# LF Sampling config:
#db#   [q] divisor:           95
#db#   [b] bps:               8
#db#   [d] decimation:        1
#db#   [a] averaging:         1
#db#   [t] trigger threshold: 0
#db# Done, saved 40000 out of 40000 seen samples at 8 bits/sample
#db# buffer samples: e3 e0 d9 d1 c7 bf b7 b0 ...
Reading 39999 bytes from device memory

Data fetched
Samples @ 8 bits/smpl, decimation 1:1
proxmark3> data samples
Reading 39999 bytes from device memory

Data fetched
Samples @ 8 bits/smpl, decimation 1:1
proxmark3> data save eb.pm3
saved to 'eb.pm3'
proxmark3>
proxmark3> lf search u
NOTE: some demods output possible binary
  if it finds something that looks like a tag
False Positives ARE possible


Checking for known tags:


No Known Tags Found!


Checking for Unknown tags:

Possible Auto Correlation of 3569 repeating samples
no data found, clk: 0, invert: 0, numbits: 39999, errCnt: -1

No Data Found!

proxmark3>

4jdAMoV.png
vpMVM48.png

I've uploaded screenshots and eb.pm3 at sendspace:
https://www.sendspace.com/filegroup/IU0 … 2FIh5DfuT6

Thanks for your help !

Last edited by superjedi (2017-04-30 12:17:15)

Offline

#2 2017-04-30 09:52:25

wintersoldier
Contributor
Registered: 2016-04-17
Posts: 10

Re: Unknown tag (another one)

Could be one of the EM4X50 tags that requires a password,in-order to correctly read the tag?

Offline

#3 2017-04-30 12:14:59

superjedi
Contributor
Registered: 2017-04-29
Posts: 3

Re: Unknown tag (another one)

wintersoldier wrote:

Could be one of the EM4X50 tags that requires a password, in-order to correctly read the tag?

No clue... I broke it apart to take a picture of the chip itself and here it is:

NOTE: my tag comes from some sort of prepaid token, not a transit card, it responds to LF unlike transit cards which are mostly HF

FOWftCD.jpg
gmYRXcV.jpg

I googled for it and it looks like this one which title says "RFID chip from a SmarTrip card", see below

2555459063_d2ded9862b_b.jpgRFID chip from a SmarTrip card by Katie

2555459507_d097ed7367_b.jpgback of RFID chip from a SmarTrip card by Katie

Last edited by superjedi (2017-04-30 13:12:11)

Offline

#4 2017-04-30 23:44:57

0xFFFF
Administrator
From: Vic - Australia
Registered: 2011-05-31
Posts: 632

Re: Unknown tag (another one)

What you're looking at is a standard package type. There is no way of identifying the IC by looking at the (very nice) photos you've provided.
PLLMC (plastic leadless module carrier). Most likely SOT500 series if we're talking about NXP packages.

In order to identify what IC is in your hand you have two options:
Destructive - Remove the epoxy encapsulating the IC and visually inspect it under a microscope.
Non-destructive (recommended) - reattach a coil and continue your investigation.

Offline

Board footer

Powered by FluxBB