Proxmark3 developers community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

#1 2013-10-08 21:49:37

waltaugust
Contributor
Registered: 2012-03-12
Posts: 15

Indala read block 0

I am having trouble with the syntax for indala card reads

Specifically I have been able to clone one to a t55xx card no problem.  When I try and read the t55xx card with the Atmel RFID developers kit reader it can't seem to read it yet my indala reader recognizes it no problem just not the developers kit.  It appears to get the developers kit to read it I need to know block 0 (card config)... 

Does anyone know what encoding it uses? PSK, Manchester, FSKa etc?  I thought I could take my clone and just t55xx readblock 0 but it doesn't appear that simple.

When I do lf t55xx readblock 0 I get #db# DONE!

so I tried lf indalademod and get Recovered 63 raw bits.... nothing to wait for

so I tried

lf t55xx readblock 0
data samples 4000
lf indalademod

I then get the correct UID.  But what I really want to know is the block 0 on the t55xx to make it act like indala which is the config.  Not the UID.

Here is the info the Atmel kit is asking for, let me know if you know any of the settings for Indala on a t55xx

Modulation (choices Direct,PSK1,PSK2,PSK3,FSK1,FSK2,FSK1a,FSK2a,Manchester,Bi-phase)
Master Key (a number)
Max Block (a number)
X-Mode (yes/no)
Use Password (yes/no)
Answer on Request (yes/no)
Sequence Terminator(yes/no)
Init Delay(yes/no)
Data bit rate (16kbitRF/8,8kbitRF/16,4kbitRF/32,3kbitRF/40,2.5kbitRF/50,2kbitRF/64,1.2kbitRF/100,1kbitRF/128)
PSK carrier frequency (RF/2,RF/4,RF/8)



Anyone got any info?  Thanks in advance.

Offline

#2 2013-10-09 09:47:54

en4rab
Contributor
Registered: 2013-04-22
Posts: 36

Re: Indala read block 0

For a T5555 I use a block 0 config of 6000F094

Modulation PSK1
Max block 2 (this is for normal indala not indala 224)
Inverse data output yes (but as far as i can tell setting this to no makes no difference)
Use password No
PSK carrier freq RF/2
use Password No
Answer on reset No
Data bit rate RF/32
Fast write No

For a T5557 you can work out the block 0 based on the above settings as the config block is a bit different to the T5555.
The cards UID is then written to blocks 1 and 2, block 1 will probably look something like 0000000x with just one non zero digit

Offline

#3 2013-10-09 18:15:00

waltaugust
Contributor
Registered: 2012-03-12
Posts: 15

Re: Indala read block 0

Thank you for the info.

I haven't been able to locate a spec sheet for the t5555 to see the difference in block 0.  I have ata5577's.  I tried similar settings but can't seem to write them to block 0.  Block 0 appears unchanged.

It seems to me for whatever reason the lf indalaclone function works on a blank card out of the box but once you configure it to say HID prox indalaclone and writeblock does nothing to it.

Offline

Board footer

Powered by FluxBB