Research, development and trades concerning the powerful Proxmark3 device.
Remember; sharing is caring. Bring something back to the community.
"Learn the tools of the trade the hard way." +Fravia
Time changes and with it the technology
Proxmark3 @ discord
Users of this forum, please be aware that information stored on this site is not private.
I'm playing with a new prototype of pm3.
Tests with latest source for Official PM3 from Github. its the commit number (809) after v.2.2.0 that tells that information.
Prox/RFID mark3 RFID instrument
bootrom: /-suspect 2018-01-29 04:34:19
os: master/v2.2.0-809-g2ef3a5e-dirty-suspect 2018-02-09 13:34:11
LF FPGA image built for 2s30vq100 on 2015/03/06 at 07:38:04
HF FPGA image built for 2s30vq100 on 2017/10/27 at 08:30:59
uC: AT91SAM7S512 Rev B
Embedded Processor: ARM7TDMI
Nonvolatile Program Memory Size: 512K bytes. Used: 199412 bytes (38%). Free: 324876 bytes (62%).
Second Nonvolatile Program Memory Size: None
Internal SRAM Size: 64K bytes
Architecture Identifier: AT91SAM7Sxx Series
Nonvolatile Program Memory Type: Embedded Flash Memory
Antenna 1 (LF/HF)
Measuring antenna characteristics, please wait.........
# LF antenna: 58.71 V @ 125.00 kHz
# LF antenna: 56.51 V @ 134.00 kHz
# LF optimal: 74.66 V @ 129.03 kHz
# HF antenna: 36.26 V @ 13.56 MHz
Displaying LF tuning graph. Divisor 89 is 134khz, 95 is 125khz.
antenna 2 (HF)
Measuring antenna characteristics, please wait.........
# LF antenna: 0.14 V @ 125.00 kHz
# LF antenna: 0.14 V @ 134.00 kHz
# LF optimal: 0.00 V @ 12000.00 kHz
# HF antenna: 36.26 V @ 13.56 MHz
# Your LF antenna is unusable.
with this antenna an old 14b SRi tag that I couldn't read with rdv2.0 came to life.
proxmark3> hf 14b info
14443-3b ST tag found:
UID: d0 02 19 54 20 c4 8e a3
MFG: 02, ST Microelectronics SA France
Chip: 06, SRI512
Chip Write Protection Bits:
raw: 1111110001100001
00: not locked
01: locked
02: locked
03: locked
04: locked
05: not locked
06: not locked
07: locked
08: locked
09: locked
10: not locked
11: not locked
12: not locked
13: not locked
14: not locked
15: not locked
Also a CALYPSO tag came alive !!
proxmark3> hf search
14443-3b tag found:
UID: 26 18 ad c4
App Data: 00 00 00 00
Protocol: 00 71 81
Bit Rate: 106 kbit/s only PICC <-> PCD
Max Frame Size: 128
Protocol Type: Protocol is compliant with ISO/IEC 14443-4
Frame Wait Int: 8
App Data Code: Application is Proprietary
Frame Options: NAD is not supported
Frame Options: CID is supported
Max Buf Length: 0 (MBLI) not supported
Valid ISO14443B Tag Found - Quiting Search
ISO15693 tags shows up:
proxmark3> hf 15 cmd sysinfo u
0F E8 81 C0 0A 66 24 16 E0 02 00 33 03 02
UID = E01624660AC081E8
EM-Marin SA (Skidata); EM4233 [IC id = 09] 23,5pF CustomerID-102
DSFID supported, set to 02
AFI supported, set to 000
Tag provides info on memory layout (vendor dependent)
4 (or 3) bytes/page x 52 pages
IC reference given: 02
proxmark3>
However the HF voltages are wrong to start with. Together with the 3% error built in the readings algo, makes all voltages show too low here.
Running on latest iceman fork from github,
Proxmark3 RFID instrument
[ ARM ]
bootrom: /-suspect 2018-01-29 04:34:19
os: iceman/master/ice_v3.1.0-536-gff598db8-dirty-unclean 2018-02-09 11:58:01
[ FPGA ]
LF image built for 2s30vq100 on 2017/10/25 at 19:50:50
HF image built for 2s30vq100 on 2017/11/10 at 19:24:16
[ Hardware ]
--= uC: AT91SAM7S512 Rev B
--= Embedded Processor: ARM7TDMI
--= Nonvolatile Program Memory Size: 512K bytes, Used: 237094 bytes (45%) Free: 287194 bytes (55%)
--= Second Nonvolatile Program Memory Size: None
--= Internal SRAM Size: 64K bytes
--= Architecture Identifier: AT91SAM7Sxx Series
--= Nonvolatile Program Memory Type: Embedded Flash Memory
The corrections to measuring has been applied.
Antenna 1 (LF/HF)
[+] measuring antenna characteristics, please wait......
[+] LF antenna: 60.47 V - 125.00 kHz
[+] LF antenna: 58.21 V - 134.00 kHz
[+] LF optimal: 77.04 V - 129.03 kHz
[+] LF antenna is OK
Antenna 2 (HF)
[+] measuring antenna characteristics, please wait......
[!] LF antenna is UNUSABLE
[+] HF antenna: 36.64 V - 13.56 MHz
[+] HF antenna is OK
[-] Not showing LF tuning graph since all values is zero.
[edit] wrong, its ghost values on ADC7 for the prototype I'm testing. So its 36V on ADC5 showing.
+1 looking forward to this, let me know if I can help.