Proxmark3 community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

Announcement

Time changes and with it the technology
Proxmark3 @ discord

Users of this forum, please be aware that information stored on this site is not private.

#1 2019-11-04 20:59:41

Martinorak
Contributor
Registered: 2019-10-16
Posts: 11

Modulation : DIRECT/NRZ

Hi,

I try it command lf t55xx detect
Chip Type  : T55x7
Modulation : DIRECT/NRZ
Bit Rate   : 1 - RF/16
Inverted   : No
Offset     : 47
Seq. Term. : No
Block0     : 0x00040000

because lf search u not working.

I also try it lf t55xx dump
Reading Page 0:
blk | hex data | binary
----+----------+---------------------------------
  0 | 00040000 | 00000000000001000000000000000000
  1 | 00100000 | 00000000000100000000000000000000
  2 | 00000000 | 00000000000000000000000000000000
  3 | 00400000 | 00000000010000000000000000000000
  4 | 00100000 | 00000000000100000000000000000000
  5 | 00400000 | 00000000010000000000000000000000
  6 | 00400000 | 00000000010000000000000000000000
  7 | 01000000 | 00000001000000000000000000000000
Reading Page 1:
blk | hex data | binary
----+----------+---------------------------------
  0 | FFFFFFFF | 11111111111111111111111111111111
  1 | FFFFFFFF | 11111111111111111111111111111111
  2 | 00000000 | 00000000000000000000000000000000
  3 | 01000000 | 00000001000000000000000000000000


How can I get command for clone ? Or How can I decrypt it ?

Thank you so much !! smile

Offline

#2 2019-11-04 23:55:18

mwalker
Moderator
Registered: 2019-05-11
Posts: 318

Re: Modulation : DIRECT/NRZ

while it says NRZ, then config looks very blank for a t55xx.

Maybe perform and

lf read
data save filename.pm3 

and share via a file sharing service and post a link to it.

edit: as per icemans request.

Last edited by mwalker (2019-11-05 00:25:58)

Offline

#3 2019-11-05 00:12:16

iceman
Administrator
Registered: 2013-04-25
Posts: 9,497
Website

Re: Modulation : DIRECT/NRZ

..maybe incurage ppl to use filesharing services ?

Offline

#4 2019-11-05 11:18:56

Martinorak
Contributor
Registered: 2019-10-16
Posts: 11

Re: Modulation : DIRECT/NRZ

Hi, very thanks for your time. Maybe see as blank but I think it´s one of first chip here on the system. Maybe have easy to remember code.

File is here https://we.tl/t-z5SgP72yQl

I hope I used the right service you wanted.

Thanks
Martin

Offline

#5 2019-11-06 14:41:09

Martinorak
Contributor
Registered: 2019-10-16
Posts: 11

Re: Modulation : DIRECT/NRZ

Do you have any idea how to clone this chip?

Thanks for your time

Offline

#6 2019-11-07 08:53:33

mwalker
Moderator
Registered: 2019-05-11
Posts: 318

Re: Modulation : DIRECT/NRZ

The data in the file is very week.  I would like to see a much stronger signal.

Offline

#7 2019-11-11 09:24:09

Martinorak
Contributor
Registered: 2019-10-16
Posts: 11

Re: Modulation : DIRECT/NRZ

Here is new data. Please try it or tell me how can I get it better data (signal).

https://wetransfer.com/downloads/cf188318cec615f5a0863cb4d3cb315220191111082132/d2f20562363f7e8d289f12e0f45b0c4920191111082132/380a81

Thanks
Martin

Offline

#8 2019-11-11 12:28:05

mwalker
Moderator
Registered: 2019-05-11
Posts: 318

Re: Modulation : DIRECT/NRZ

based on the data in the file(s) i am not sure its an lf/125 khz card.
It seems to be not much more then just noise (with no card on the reader)
Can post the results of the following with no card on the reader, then repeat but with the card on the reader.

hw tune

Offline

#9 2019-11-13 11:30:27

Martinorak
Contributor
Registered: 2019-10-16
Posts: 11

Re: Modulation : DIRECT/NRZ

Here is new data:

1. without card LF
2. with card LF
3. without card HF
4. with card HF

https://wetransfer.com/downloads/32b816aa9df6edcd867292284e0c8bb920191113102748/b31df3d752ed6767215f0b4d3d10eba420191113102748/7cd355

And here is image from HW TUNE with LF antenna
https://imgur.com/a/5plBLbE

Offline

#10 2019-11-13 23:42:29

mwalker
Moderator
Registered: 2019-05-11
Posts: 318

Re: Modulation : DIRECT/NRZ

I will let the hardware guys comment more on this, but to me the hw tune voltages look low.  And the HF looks like its antenna is not there.

hw tune with no tag (copied from the image so others can quickly see)

# LF antenna: 19.25 V @ 125.00 kHz
# LF antenna:  9.76 V @ 134.00 kHz
# LF optimal: 19.25 V @ 125.00 khz
# HF antenna:  0.81 V @  13.56 Mhz

with tag

# LF antenna:  8.94 V @ 125.00 kHz
# LF antenna:  9.07 V @ 134.00 kHz
# LF optimal:  9.76 V @ 110.09 khz
# HF antenna:  0.85 V @  13.56 Mhz

Is the device you are trying to read a full size card or a fob/tag ?

Offline

#11 2019-11-14 08:44:56

iceman
Administrator
Registered: 2013-04-25
Posts: 9,497
Website

Re: Modulation : DIRECT/NRZ

Looks like a decent antenna 19v,  is this a RDV2 device?   And the voltage drop indicates a good coupling.  You shouldn't have any issues with it.   The HF looks like its been disconnected, which is possible on a RDV2 with its individual cables.

Offline

#12 2019-11-14 10:18:29

mwalker
Moderator
Registered: 2019-05-11
Posts: 318

Re: Modulation : DIRECT/NRZ

thanks iceman, i guess I have gotten used to the RDV4 voltages, even my easy is 35V

The data files have very low readings, the first one was -2 to 2 (i.e. looked like nothing was on the antenna).  the second one was a little better, but still very low.  So I'm running out of ideas.

Offline

#13 2019-11-26 11:30:52

Martinorak
Contributor
Registered: 2019-10-16
Posts: 11

Re: Modulation : DIRECT/NRZ

Thanks guys for your patient with me. So sorry for longer response.

So I have this device : https://imgur.com/a/FcPRo6B
From rysc corp, bought here: https://store.ryscc.com/products/new-proxmark3-kit

The device what I trying to read is fob tag, here is photo: https://imgur.com/a/NmKVvcf
On the door or toll-bar works fine.

Maybe there are problem with low energy my proxmark ?
Would it be better to buy a 35V device? (RDV4)

I am able to all solutions what do you suggest. Including the purchase of new equipment.

PS: You mean RDV4 this product? https://lab401.com/products/proxmark-3- … 8437911663

Offline

#14 2019-11-26 14:27:33

iceman
Administrator
Registered: 2013-04-25
Posts: 9,497
Website

Re: Modulation : DIRECT/NRZ

That looks like an old Motorola FlexPass tag.  I recently added support for it over at the RRG/Iceman repo.  I am very curious if the implementation can read it. 

Your device is good enough. No need to spend 300 USD more. 

Anyway,  the tag explains the strange readings.

Offline

Board footer

Powered by FluxBB