Proxmark developers community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

#1 2018-04-29 20:55:46

seanedu
Contributor
From: Toronto,Canada
Registered: 2017-04-12
Posts: 81

Please help me to clone another ict tag(Finally solved)

Hi,I am struggling again to clone ict tag,I listed output binary below,I've read about last ict forum all again,I could not understand quite well when it comes to "signals in inverted""inverted:0" are these mean all output binaries should be inverted or just partial binaries,I like to know step by step how to invert the binaries...

Checking for Unknown tags:

Possible Auto Correlation of 22400 repeating samples

Using Clock:50, invert:0, fchigh:10, fclow:8
FSK2 decoded bitstream:
1101001101001011
0101001011001011
0010111111111111
1111111111111111
1111111111111111
1111111111111111
1111111110000101
0101010011001100
1100110101010011
0101010101010101
0101010101010101
0011010011010101
0011010100110100
1101010101010100
1101001101001011
0101001011001011
0010111111111111
1111111111111111
1111111111111111
1111111111111111
1111111110000101
0101010011001100
1100110101010011
0101010101010101
0101010101010101
0011010011010101
0011010100110100
1101010101010100
1101001101001011
0101001011001011
0010111111111111
1111111111111111


Unknown FSK Modulated Tag Found!

Valid T55xx Chip Found
Try lf t55xx ... commands

Chip Type  : T55x7
Modulation : FSK2a
Bit Rate   : 4 - RF/50
Inverted   : Yes
Offset     : 32
Seq. Term. : No
Block0     : 0x101070E0

Reading Page 0:
blk | hex data | binary
----+----------+---------------------------------
  0 | 101070E0 | 00010000000100000111000011100000
  1 | EAACCCCB | 11101010101011001100110011001011
  2 | 59555555 | 01011001010101010101010101010101
  3 | 55965595 | 01010101100101100101010110010101
  4 | 96555659 | 10010110010101010101011001011001
  5 | 695A69A0 | 01101001010110100110100110100000
  6 | 00000000 | 00000000000000000000000000000000
  7 | 00000000 | 00000000000000000000000000000000
Reading Page 1:
blk | hex data | binary
----+----------+---------------------------------
  0 | 101070E0 | 00010000000100000111000011100000
  1 | C02A2419 | 11000000001010100010010000011001
  2 | 5D611ADD | 01011101011000010001101011011101
  3 | 00000000 | 00000000000000000000000000000000

Last edited by seanedu (2018-05-25 20:16:34)

Offline

#2 2018-04-30 14:21:47

seanedu
Contributor
From: Toronto,Canada
Registered: 2017-04-12
Posts: 81

Re: Please help me to clone another ict tag(Finally solved)

I tried to clone with three different block 0,like 0:101070e0,1:eaaccccb,2:59555555,3:55965595,4:96555659,5:695a69a0,6:00000000,7:00000000
0:001070e0,1:eaaccccb,.....
0:001050e0,....

but no luck block 3 or 4 and 5's values are always changed,I've been using latest firmware from iceman's repo,any help will be appreciated..

Writing page 0  block: 00  data: 0x101070E0
#db# DownloadFPGA(len: 42096)
Writing page 0  block: 01  data: 0xEAACCCCB
Writing page 0  block: 02  data: 0x59555555
Writing page 0  block: 03  data: 0x55965595
Writing page 0  block: 04  data: 0x96555659
Writing page 0  block: 05  data: 0x695A69A0
Writing page 0  block: 06  data: 0x00000000
Writing page 0  block: 07  data: 0x00000000
NOTE: some demods output possible binary
  if it finds something that looks like a tag
False Positives ARE possible


Checking for known tags:


No Known Tags Found!


Checking for Unknown tags:

Possible Auto Correlation of 11200 repeating samples

Using Clock:50, invert:0, fchigh:10, fclow:8
FSK2 decoded bitstream:
1101001101001011
0101001011001011
0010111111111111
1111111111111111
1111111111111111
1111111111111111
1111111110001010
1010100110011001
1001101001010011
0101010101010101
0101010101010101
0011010011010101
0011010100110100
1101010101010100
1101001101001011
0101001011001011
0010111111111111
1111111111111111
1111111111111111
1111111111111111
1111111110001010
1010100110011001
1001101001010011
0101010101010101
0101010101010101
0011010011010101
0011010100110100
1101010101010100
1101001101001011
0101001011001011
0010111111111111
1111111111111111


Unknown FSK Modulated Tag Found!
Chip Type  : T55x7
Modulation : FSK2a
Bit Rate   : 4 - RF/50
Inverted   : Yes
Offset     : 31
Seq. Term. : No
Block0     : 0x101070E0

Reading Page 0:
blk | hex data | binary
----+----------+---------------------------------
  0 | 101070E0 | 00010000000100000111000011100000
  1 | EAACCCCB | 11101010101011001100110011001011
  2 | ACAAAAAA | 10101100101010101010101010101010
  3 | AACB2ACA | 10101010110010110010101011001010
  4 | CB2AAB2C | 11001011001010101010101100101100
  5 | 34AD34D0 | 00110100101011010011010011010000
  6 | 00000000 | 00000000000000000000000000000000
  7 | 00000000 | 00000000000000000000000000000000
Reading Page 1:
blk | hex data | binary
----+----------+---------------------------------
  0 | 101070E0 | 00010000000100000111000011100000
  1 | 701C8068 | 01110000000111001000000001101000
  2 | DBB9A710 | 11011011101110011010011100010000
  3 | 80500001 | 10000000010100000000000000000001
Writing page 0  block: 07  data: 0x00000000
Writing page 0  block: 06  data: 0x00000000
Writing page 0  block: 05  data: 0x695A69A0
Writing page 0  block: 04  data: 0x96555659
Writing page 0  block: 03  data: 0x55965595
Writing page 0  block: 02  data: 0x59555555
Writing page 0  block: 01  data: 0xEAACCCCB
Writing page 0  block: 00  data: 0x001050E0
NOTE: some demods output possible binary
  if it finds something that looks like a tag
False Positives ARE possible


Checking for known tags:


No Known Tags Found!


Checking for Unknown tags:

Possible Auto Correlation of 11200 repeating samples

Using Clock:50, invert:0, fchigh:10, fclow:8
FSK2 decoded bitstream:
0010110010110100
1010110100110100
1101000000000000
0000000000000000
0000000000000000
0000000000000000
0000000001110101
0101011001100110
0110010110101100
1010101010101010
1010101010101010
1100101100101010
1100101011001011
0010101010101011
0010110010110100
1010110100110100
1101000000000000
0000000000000000
0000000000000000
0000000000000000
0000000001110101
0101011001100110
0110010110101100
1010101010101010
1010101010101010
1100101100101010
1100101011001011
0010101010101011
0010110010110100
1010110100110100
1101000000000000
0000000000000000


Unknown FSK Modulated Tag Found!
Chip Type  : T55x7
Modulation : FSK2
Bit Rate   : 4 - RF/50
Inverted   : No
Offset     : 32
Seq. Term. : No
Block0     : 0x001050E0

Writing page 0  block: 00  data: 0x001070E0
Writing page 0  block: 01  data: 0xEAACCCCB
Writing page 0  block: 02  data: 0x59555555
Writing page 0  block: 03  data: 0x55965595
Writing page 0  block: 04  data: 0x96555659
Writing page 0  block: 05  data: 0x695A69A0
Writing page 0  block: 06  data: 0x00000000
Writing page 0  block: 07  data: 0x00000000
NOTE: some demods output possible binary
  if it finds something that looks like a tag
False Positives ARE possible


Checking for known tags:


No Known Tags Found!


Checking for Unknown tags:

Possible Auto Correlation of 11200 repeating samples

Using Clock:50, invert:0, fchigh:10, fclow:8
FSK2 decoded bitstream:
1101001101001011
0101001011001011
0010111111111111
1111111111111111
1111111111111111
1111111111111111
1111111110001010
1010100110011001
1001101001010011
0101010101010101
0101010101010101
0011010011010101
0011010100110100
1101010101010100
1101001101001011
0101001011001011
0010111111111111
1111111111111111
1111111111111111
1111111111111111
1111111110001010
1010100110011001
1001101001010011
0101010101010101
0101010101010101
0011010011010101
0011010100110100
1101010101010100
1101001101001011
0101001011001011
0010111111111111
1111111111111111


Unknown FSK Modulated Tag Found!
Chip Type  : T55x7
Modulation : FSK2a
Bit Rate   : 4 - RF/50
Inverted   : Yes
Offset     : 31
Seq. Term. : No
Block0     : 0x001070E0

Reading Page 0:
blk | hex data | binary
----+----------+---------------------------------
  0 | 001070E0 | 00000000000100000111000011100000
  1 | EAACCCCB | 11101010101011001100110011001011
  2 | ACAAAAAA | 10101100101010101010101010101010
  3 | AACB2ACA | 10101010110010110010101011001010
  4 | CB2AAB2C | 11001011001010101010101100101100
  5 | 34AD34D0 | 00110100101011010011010011010000
  6 | 00000000 | 00000000000000000000000000000000
  7 | 00000000 | 00000000000000000000000000000000
Reading Page 1:
blk | hex data | binary
----+----------+---------------------------------
  0 | 001070E0 | 00000000000100000111000011100000
  1 | 701C8068 | 01110000000111001000000001101000
  2 | DBB9A710 | 11011011101110011010011100010000
  3 | 80500001 | 10000000010100000000000000000001

-- T55x7 Configuration & Tag Information --------------------
-------------------------------------------------------------
Safer key                 : 0
reserved                  : 0
Data bit rate             : 4 - RF/50
eXtended mode             : No
Modulation                : 7 - FSK 2a RF/10  RF/8
PSK clock frequency       : 0
AOR - Answer on Request   : No
OTP - One Time Pad        : No
Max block                 : 7
Password mode             : No
Sequence Start Terminator : No
Fast Write                : No
Inverse data              : No
POR-Delay                 : No
-------------------------------------------------------------
Raw Data - Page 0
     Block 0  : 0x001070E0  00000000000100000111000011100000
-------------------------------------------------------------

Offline

#3 2018-05-01 18:42:14

seanedu
Contributor
From: Toronto,Canada
Registered: 2017-04-12
Posts: 81

Re: Please help me to clone another ict tag(Finally solved)

I,ve got another ict tag,I cloned with repeated 7 bls,their values are all changed,except for block 0,any one have an idea...

Possible Auto Correlation of 22400 repeating samples May1/2018

Using Clock:50, invert:0, fchigh:10, fclow:8
FSK2 decoded bitstream:
0101001011010100
1100101101001011
0011010100110101
0011001010101101
0101010101111111
1111111111111111
1111111110000100
1011010100101010
1011010011001101
0011001010110011
0100110100110011
0010110010101011
0100110100101101
0100110100101011
0101001011010100
1100101101001011
0011010100110101
0011001010101101
0101010101111111
1111111111111111
1111111110000100
1011010100101010
1011010011001101
0011001010110011
0100110100110011
0010110010101011
0100110100101101
0100110100101011
0101001011010100
1100101101001011
0011010100110101
0011001010101101


Unknown FSK Modulated Tag Found!

Valid T55xx Chip Found
Try lf t55xx ... commands

DemodBuffer: 52D4CB4B353532AD557FFFFFFF84B52AB4CD32B34D332CAB4D2D4D2B52D4CB4B353532AD557FFFFFFF84B52AB4CD32B34D332CAB4D2D4D2B52D4CB4B353532AD
Chip Type  : T55x7
Modulation : FSK2a
Bit Rate   : 4 - RF/50
Inverted   : Yes
Offset     : 32
Seq. Term. : No
Block0     : 0x101070E0

Reading Page 0:
blk | hex data | binary
----+----------+---------------------------------
  0 | 101070E0 | 00010000000100000111000011100000
  1 | ED2B552D | 11101101001010110101010100101101
  2 | 659A9965 | 01100101100110101001100101100101
  3 | 99A6A965 | 10011001101001101010100101100101
  4 | A565A95A | 10100101011001011010100101011010
  5 | 56696995 | 01010110011010010110100110010101
  6 | 959AA555 | 10010101100110101010010101010101
  7 | 00000000 | 00000000000000000000000000000000
Reading Page 1:
blk | hex data | binary
----+----------+---------------------------------
  0 | 101070E0 | 00010000000100000111000011100000
  1 | C02A14C9 | 11000000001010100001010011001001
  2 | 5754672C | 01010111010101000110011100101100
  3 | 00000000 | 00000000000000000000000000000000

-- T55x7 Configuration & Tag Information --------------------
-------------------------------------------------------------
Safer key                 : 1
reserved                  : 0
Data bit rate             : 4 - RF/50
eXtended mode             : No
Modulation                : 7 - FSK 2a RF/10  RF/8
PSK clock frequency       : 0
AOR - Answer on Request   : No
OTP - One Time Pad        : No
Max block                 : 7
Password mode             : No
Sequence Start Terminator : No
Fast Write                : No
Inverse data              : No
POR-Delay                 : No
-------------------------------------------------------------
Raw Data - Page 0
     Block 0  : 0x101070E0  00010000000100000111000011100000
-------------------------------------------------------------

Offline

#4 2018-05-01 18:52:03

seanedu
Contributor
From: Toronto,Canada
Registered: 2017-04-12
Posts: 81

Re: Please help me to clone another ict tag(Finally solved)

These are the result I get when I cloned with repeated 7 blocks...
Possible Auto Correlation of 22400 repeating samples

Using Clock:50, invert:0, fchigh:10, fclow:8
FSK2 decoded bitstream:
0110101010100101
1001100101100110
1010011001011001
0110011001101001
1010101001011001
0110100101011001
0110101001010110
1001010110011010
0101101001100101
0110010101010110
0110101010000000
0000000000000000
0000000000000000
0011110110100101
0110101010100101
1001100101100110
1010011001011001
0110011001101001
1010101001011001
0110100101011001
0110101001010110
1001010110011010
0101101001100101
0110010101010110
0110101010000000
0000000000000000
0000000000000000
0011110110100101
0110101010100101
1001100101100110
1010011001011001
0110011001101001


Unknown FSK Modulated Tag Found!
Chip Type  : T55x7
Modulation : FSK2a
Bit Rate   : 4 - RF/50
Inverted   : Yes
Offset     : 31
Seq. Term. : No
Block0     : 0x101070E0

Reading Page 0:
blk | hex data | binary
----+----------+---------------------------------
  0 | 101070E0 | 00010000000100000111000011100000
  1 | A96A65A5 | 10101001011010100110010110100101
  2 | 3535532A | 00110101001101010101001100101010
  3 | FFFFFFFF | 11111111111111111111111111111111
  4 | FF84B52A | 11111111100001001011010100101010
  5 | DA669959 | 11011010011001101001100101011001
  6 | A6999655 | 10100110100110011001011001010101
  7 | A696A695 | 10100110100101101010011010010101
Reading Page 1:
blk | hex data | binary
----+----------+---------------------------------
  0 | 101070E0 | 00010000000100000111000011100000
  1 | E03900D0 | 11100000001110010000000011010000
  2 | DBB9C9FD | 11011011101110011100100111111101
  3 | 80500001 | 10000000010100000000000000000001

-- T55x7 Configuration & Tag Information --------------------
-------------------------------------------------------------
Safer key                 : 1
reserved                  : 0
Data bit rate             : 4 - RF/50
eXtended mode             : No
Modulation                : 7 - FSK 2a RF/10  RF/8
PSK clock frequency       : 0
AOR - Answer on Request   : No
OTP - One Time Pad        : No
Max block                 : 7
Password mode             : No
Sequence Start Terminator : No
Fast Write                : No
Inverse data              : No
POR-Delay                 : No
-------------------------------------------------------------
Raw Data - Page 0
     Block 0  : 0x101070E0  00010000000100000111000011100000
-------------------------------------------------------------

Offline

#5 2018-05-17 13:52:57

seanedu
Contributor
From: Toronto,Canada
Registered: 2017-04-12
Posts: 81

Re: Please help me to clone another ict tag(Finally solved)

Hello experts,@Iceman and Marshmellow,I faced many ict tags recently,I've been trying to clone,I've searched almost all the forums any related topic with ict clone,but still can't quite figure that out, think I found out almost half way to complete,unfortunately I don't have any reader for ict tag,but if any of you point me how to decode binaries,I will follow again,I will list below again new ict tag I got,please help to clone ict again,I really appreciated your help....


Checking for Unknown tags:

Possible Auto Correlation of 22400 repeating samples

Using Clock:50, invert:0, fchigh:10, fclow:8
FSK2 decoded bitstream:
0101001011001101
0010101010101101
0011001101010100
1100110100101100
1101010101111111
1111111111111111
1111111110000100
1011001101010011
0100101100110011
0101010011010011
0100110101010100
1100101100110010
1010110101010101
0100110010101101
0101001011001101
0010101010101101
0011001101010100
1100110100101100
1101010101111111
1111111111111111
1111111110000100
1011001101010011
0100101100110011
0101010011010011
0100110101010100
1100101100110010
1010110101010101
0100110010101101
0101001011001101
0010101010101101
0011001101010100
1100110100101100


Unknown FSK Modulated Tag Found!

Valid T55xx Chip Found
Try lf t55xx ... commands

DemodBuffer: 52CD2AAD3354CD2CD57FFFFFFF84B3534B3354D34D54CB32AD554CAD52CD2AAD3354CD2CD57FFFFFFF84B3534B3354D34D54CB32AD554CAD52CD2AAD3354CD2C
Chip Type  : T55x7
Modulation : FSK2a
Bit Rate   : 4 - RF/50
Inverted   : Yes
Offset     : 32
Seq. Term. : No
Block0     : 0x101070E0

Reading Page 0:
blk | hex data | binary
----+----------+---------------------------------
  0 | 101070E0 | 00010000000100000111000011100000
  1 | ED32B2D3 | 11101101001100101011001011010011
  2 | 99565965 | 10011001010101100101100101100101
  3 | 56699AA5 | 01010110011010011001101010100101
  4 | 5566A55A | 01010101011001101010010101011010
  5 | 65AAA599 | 01100101101010101010010110011001
  6 | 5665A655 | 01010110011001011010011001010101
  7 | 00000000 | 00000000000000000000000000000000
Reading Page 1:
blk | hex data | binary
----+----------+---------------------------------
  0 | 101070E0 | 00010000000100000111000011100000
  1 | E0150A58 | 11100000000101010000101001011000
  2 | 94F19FBE | 10010100111100011001111110111110
  3 | 00000000 | 00000000000000000000000000000000

-- T55x7 Configuration & Tag Information --------------------
-------------------------------------------------------------
Safer key                 : 1
reserved                  : 0
Data bit rate             : 4 - RF/50
eXtended mode             : No
Modulation                : 7 - FSK 2a RF/10  RF/8
PSK clock frequency       : 0
AOR - Answer on Request   : No
OTP - One Time Pad        : No
Max block                 : 7
Password mode             : No
Sequence Start Terminator : No
Fast Write                : No
Inverse data              : No
POR-Delay                 : No
-------------------------------------------------------------
Raw Data - Page 0
     Block 0  : 0x101070E0  00010000000100000111000011100000

Last edited by seanedu (2018-05-17 13:53:37)

Offline

#6 2018-05-25 20:19:10

seanedu
Contributor
From: Toronto,Canada
Registered: 2017-04-12
Posts: 81

Re: Please help me to clone another ict tag(Finally solved)

I finally wrote all 7 repeating blocks accordingly...good thing I did not give up....

Offline

Board footer

Powered by FluxBB