Research, development and trades concerning the powerful Proxmark3 device.
Remember; sharing is caring. Bring something back to the community.
"Learn the tools of the trade the hard way." +Fravia
Time changes and with it the technology
Proxmark3 @ discord
Users of this forum, please be aware that information stored on this site is not private.
Hi,
Is it possible to write page 1 blocks in t5577? I am writing with this command
lf t55xx write b 2 d 8847A5AD 1
Writing page 1 block: 02 data: 0x8847A5AD
but when I read the tag, it keep the old data.
Whad am I doing wrong?
It is likely your tag has that block permalocked. Only way around it is if you're tag doesn't have testmode disabled so you can reset it. (Careful with testmode it wipes everything)
Out of curiosity why would you want to write that on block 2 of page 1? (You realize that is a special config block right?)
you know tag password is 1
nope... password would require a p in front.
He did the correct cmd for a page 1 write
I was testing some tags chinese and wonder that I can't write these blocks and in other tags i can.
Also in these tags it is really difficult that "lf t55 detect" work properly, I think it is so bad quality chinese tag or some special kind of tag
I know it is a special config block, but in some tags it is possible to change this. So I am just testing this.
For example if i put a t5577 tag i can read it
proxmark3> lf t55 de
Chip Type : T55x7
Modulation : ASK
Bit Rate : 5 - RF/64
Inverted : No
Offset : 32
Seq. Term. : No
Block0 : 0x00148040
In this chinese tag is made a clon of the former tag.. it also works in the reader access control
but if i try to make the lf t55 de
i get this
proxmark3> lf t55 de
Could not detect modulation automatically. Try setting it manually with 'lf t55xx config'
Looks like some chinese tags are wrong tunned. I got to read few of them with the config option
lf config L q 95
Are these small keyfob type or cards? Post a trace after a failed lf t5 detect?
they are small keyfobs and after test on access controls I confirm they are wrong tunned or the antenna coil is too small. I need to put the keyfob touching the access control to make it works. When the original T5577 works 5 cms away.
I will post later a trace.
on most ata5577's block 1 and 2 of page 1 are locked at the factory. block 3 page 1 is not typically locked. but careful you can mess up your tag with this block.