Proxmark developers community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

#1 2019-06-09 19:09:09

onebyte
Contributor
Registered: 2017-09-28
Posts: 19

new HID blank fob

I got new blank HID fob, they said rewritable. With lf search, it is ffffffffffff and 36 bits, but used one has 27 bits, like 20090a0b0c
Tried with lf hid clone 20090a0b0c to new blank, not changed ID.

From iceman fork, no suitable commands for lf hid, is there any format or program needed for new hid blank fob?

Thanks.

Offline

#2 2019-06-11 05:21:40

marshmellow
Moderator
From: US
Registered: 2013-06-10
Posts: 2,281

Re: new HID blank fob

what is the full output of lf search?

Offline

#3 2019-06-12 18:01:14

onebyte
Contributor
Registered: 2017-09-28
Posts: 19

Re: new HID blank fob

Hi marshmellow, result below:

HID Prox TAG ID: fffffffffff
Invalid or unsupported tag length.

Valid HID Prox ID Found!

(with official)

HID Prox TAG ID: fffffffffff (65535) Format Len: 36bit - OEM: 003 - FC: 65535 - Card: 65535

[+] Valid HID Prox ID Found!

(with iceman)

They said it ir writable and blank one, but when I try to write with

hf HID clone xxxxxx

tag ID is same smile not writable, maybe with only HID device?

Thanks.

Offline

#4 2019-06-12 19:41:48

marshmellow
Moderator
From: US
Registered: 2013-06-10
Posts: 2,281

Re: new HID blank fob

i was looking for the chip detection output,  it looks like either you omitted it or your antenna to tag coupling isn't good enough to get it.  (which is common for fobs..)

without your pm3 able to detect the internal chip type there is little you will be able to do with it.
but even with that you would likely still need HID's password to modify the chip memory

if it is a genuine HID (branded) tag then it is intended only to be written by HID's device and software.

however, with the password and a properly coupling antenna the pm3 can write these...

Last edited by marshmellow (2019-06-12 19:44:00)

Offline

#5 2019-06-13 06:46:33

onebyte
Contributor
Registered: 2017-09-28
Posts: 19

Re: new HID blank fob

Thanks for checking it marshmellow
This is genuine blank fob wholesaler supplied, so I do not know the password, how can I get it? Is it common password or all different? Or I never heard hid device, one day I asked if they supply any cloner or writer for iclass or any thng, they said no... not sure of it. smile

Offline

Board footer

Powered by FluxBB