Proxmark3 community
Research, development and trades concerning the powerful Proxmark3 device.
Remember; sharing is caring. Bring something back to the community.
"Learn the tools of the trade the hard way." +Fravia
- Logged in as ikarus
- Last visit: Today 11:22:42
- Topics: Posted | New | Active | Unanswered
Announcement
Time changes and with it the technology
Proxmark3 @ discord
Users of this forum, please be aware that information stored on this site is not private.
#1 2020-10-08 09:53:15
- Arlen
- Contributor
- Registered: 2020-10-01
- Posts: 4
How to clone after wipe the T55x7 tag?
This is my first time praticing cloning. I am using a T55x7 tag to clone a EM410x tag.
Here are the infos of my new T55x7 tag.
[usb] pm3 --> lf t55xx detect
[=] Chip Type : T55x7
[=] Modulation : ASK
[=] Bit Rate : 2 - RF/32
[=] Inverted : No
[=] Offset : 32
[=] Seq. Term. : Yes
[=] Block0 : 0x000880E8
[=] Downlink Mode : default/fixed bit length
[=] Password Set : No
[usb] pm3 --> lf t55xx info
--- T55x7 Configuration & Information ---------
-------------------------------------------------------------
Safer key : 0
reserved : 0
Data bit rate : 2 - RF/32
eXtended mode : No
Modulation : 8 - Manchester
PSK clock frequency : 0 - RF/2
AOR - Answer on Request : No
OTP - One Time Pad : No
Max block : 7
Password mode : No
Sequence Terminator : Yes
Fast Write : No
Inverse data : No
POR-Delay : No
-------------------------------------------------------------
Raw Data - Page 0, block 0
0x000880E8 00000000000010001000000011101000
[+] Config block match : T55x7 Default
-------------------------------------------------------------and then I input
lf t55xx wipe , now its info becomes as follows.
[usb] pm3 --> lf t55xx info
--- T55x7 Configuration & Information ---------
-------------------------------------------------------------
Safer key : 0
reserved : 0
Data bit rate : 2 - RF/32
eXtended mode : No
Modulation : 8 - Manchester
PSK clock frequency : 0 - RF/2
AOR - Answer on Request : No
OTP - One Time Pad : No
Max block : 7
Password mode : No
Sequence Terminator : No
Fast Write : No
Inverse data : No
POR-Delay : No
-------------------------------------------------------------
Raw Data - Page 0, block 0
0x000880E0 00000000000010001000000011100000
[+] Config block match : T55x7 Raw
-------------------------------------------------------------then I use command
lf em 410x_clone 08003A4D81 1 to clone. But it seems my T55x7 tag becomes invalid.
[usb] pm3 --> lf t55xx info
--- T55x7 Configuration & Information ---------
-------------------------------------------------------------
Safer key : 15
reserved : 15
Data bit rate : 63 - RF/128
eXtended mode : Yes - Warning
Modulation : 0x1F (Unknown)
PSK clock frequency : 3 - (Unknown)
AOR - Answer on Request : Yes
OTP - One Time Pad : Yes - Warning
Max block : 7
Password mode : Yes
Sequence Start Marker : Yes
Fast Write : Yes
Inverse data : Yes
POR-Delay : Yes
-------------------------------------------------------------
Raw Data - Page 0, block 0
0xFFFFFFFF 11111111111111111111111111111111
-------------------------------------------------------------I tried to wipe it again or write to it, but whatever I do can't recovery it. It seems invalid permanently.
So, I have a question about the differences between T55x7 Raw mode and T55x7 default mode. Why can I use
lf em 410x_clone 08003A4D81 1 and clone successfully when its on default mode but not raw mode? And what is the difference between
lf t55xx wipe and
lf t55xx dangerraw ? Is my T55x7 tag truely broken permanently and can't be recovered?
#4 2020-10-08 17:57:51
Re: How to clone after wipe the T55x7 tag?
Good that your issue is resolved. Let me suggest you edit your first post and add "[solved]" prefix to your title.
We just keep threads in order for other who might come along and find it useful.