Proxmark3 community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

Announcement

Time changes and with it the technology
Proxmark3 @ discord

Users of this forum, please be aware that information stored on this site is not private.

#1 2019-02-01 08:32:17

steph
Contributor
Registered: 2019-01-31
Posts: 3

Cloning 15693 card

Hi,

trying to clone a 15693 card.

With the RRG repo, i can dump the card and change the uid with magic card, big thanks to iceman smile

For info, When i dumped after the 28 blocks, i had an error
"[-] Tag returned Error 15: Unknown error."
But the original and the copy have the same data.

The original :

Detected UID E0 04 01 50 84 DC .. ..
  UID  : E0 04 01 50 84 DC .. ..
  TYPE : NXP(Philips); IC SL2 ICS20/ICS21(SLI) ICS2002/ICS2102(SLIX)
  SYSINFO : 00 0F .. .. DC 84 50 01 04 E0 00 00 1B 03 01
     - DSFID supported        [0x01]
     - AFI   supported        [0x00]
     - IC reference supported [0x01]
     - Tag provides info on memory layout (vendor dependent)
           4 (or 3) bytes/blocks x 28 blocks

The copy :

Detected UID E0 04 01 50 84 DC .. ..
  UID  : E0 04 01 50 84 DC .. ..
  TYPE : NXP(Philips); IC SL2 ICS20/ICS21(SLI) ICS2002/ICS2102(SLIX)
  SYSINFO : 00 0F .. .. DC 84 50 01 04 E0 00 00 1B 03 01
     - DSFID supported        [0x00]
     - AFI   supported        [0x00]
     - IC reference supported [0x01]
     - Tag provides info on memory layout (vendor dependent)
           4 (or 3) bytes/blocks x 28 blocks


So there is a difference in DSFID, do you think it's important ?
Is it possible to change this with pm3 ?

thanks for all

Offline

#2 2019-02-01 10:43:52

iceman
Administrator
Registered: 2013-04-25
Posts: 9,497
Website

Re: Cloning 15693 card

The dump error comes from the implementation of reading blocks,   but basically we don't exactly know the amount of blocks before so it tries to read as long as it gets a positive block read back.    The magic15 tags has 28blocks.

And when it fails,  the dump data loop stops.    Not the best implementation nor the most informativ message either.

Offline

#3 2019-02-01 10:57:16

iceman
Administrator
Registered: 2013-04-25
Posts: 9,497
Website

Re: Cloning 15693 card

Looks like DSFID prints the response from systeminfo, so compare your systeminfo bytes

// DSFID
if (recv[1] & 0x01) 
	PrintAndLogEx(NORMAL, "     - DSFID supported        [0x%02X]", recv[10]);
else 
	PrintAndLogEx(NORMAL, "     - DSFID not supported");
endif

Offline

Board footer

Powered by FluxBB