Proxmark3 community

Pummarola

Contributor

Registered: 2015-10-19

Posts: 36

EM4100

Hi guys,
I got some of this fobs laying around my lab, and i just started playing with them for fun.

Got this data from one of them, before disassembling it.

proxmark3> lf search
Reading 30000 bytes from device memory

Data fetched
Samples @ 8 bits/smpl, decimation 1:1
NOTE: some demods output possible binary
  if it finds something that looks like a tag
False Positives ARE possible


Checking for known tags:

EM410x pattern found:

EM TAG ID      : 09002E5921
Unique TAG ID  : 9000749A84

Possible de-scramble patterns
HoneyWell IdentKey {
DEZ 8          : 03037473
DEZ 10         : 0003037473
DEZ 5.5        : 00046.22817
DEZ 3.5A       : 009.22817
DEZ 3.5B       : 000.22817
DEZ 3.5C       : 046.22817
DEZ 14/IK2     : 00038657743137
DEZ 15/IK3     : 000618482932356
DEZ 20/ZK      : 09000000070409100804
}
Other          : 22817_046_03037473
Pattern Paxton : 155359009 [0x9429721]
Pattern 1      : 1952322 [0x1DCA42]
Pattern Sebury : 22817 46 3037473  [0x5921 0x2E 0x2E5921]

Valid EM410x ID Found!

I just tried to write ID, but i think it's not writable, probably it's password-protected?
Do someone have ever had to deal with them and been able someway to reset them?

If i'm right the vendor told me they were writable. Probably with a dedicated reader??

Last edited by Pummarola (2015-12-18 00:38:26)

Danz

Contributor

From: Dubai

Registered: 2015-10-24

Posts: 98

Re: EM4100

Em4100 is read only , get some em4305 which can write and read the same tag ??

Pummarola

Contributor

Registered: 2015-10-19

Posts: 36

Re: EM4100

i think i will buy some t5577, are em4305 similar to t5577?

marshmellow

Contributor

From: US

Registered: 2013-06-10

Posts: 2,302

Email

Re: EM4100

similar, but i find t55x7's easier to work with/program

Danz

Contributor

From: Dubai

Registered: 2015-10-24

Posts: 98

Re: EM4100

Well I do agree with marshmellow, T55 will be bit more expensive than EM4305 but it is universal, highvolume+EM4100=EM4305 / lowvolume+EM4100=T55 as you can use it in another applications 

Danz

Contributor

From: Dubai

Registered: 2015-10-24

Posts: 98

Re: EM4100

and you should complain to the supplier, those you bought ain't writable !

Pummarola

Contributor

Registered: 2015-10-19

Posts: 36

Re: EM4100

you are right, i just did it, unfortunately it's not easy to deal with chinese sellers

iceman

Administrator

Registered: 2013-04-25

Posts: 9,468

Website

Re: EM4100

Easier to order some t55x7 and get on with it.   Not so much money to make the effort worth it.