Research, development and trades concerning the powerful Proxmark3 device.
Remember; sharing is caring. Bring something back to the community.
"Learn the tools of the trade the hard way." +Fravia
Time changes and with it the technology
Proxmark3 @ discord
Users of this forum, please be aware that information stored on this site is not private.
This is my first time praticing cloning. I am using a T55x7 tag to clone a EM410x tag.
Here are the infos of my new T55x7 tag.
[usb] pm3 --> lf t55xx detect
[=] Chip Type : T55x7
[=] Modulation : ASK
[=] Bit Rate : 2 - RF/32
[=] Inverted : No
[=] Offset : 32
[=] Seq. Term. : Yes
[=] Block0 : 0x000880E8
[=] Downlink Mode : default/fixed bit length
[=] Password Set : No
[usb] pm3 --> lf t55xx info
--- T55x7 Configuration & Information ---------
-------------------------------------------------------------
Safer key : 0
reserved : 0
Data bit rate : 2 - RF/32
eXtended mode : No
Modulation : 8 - Manchester
PSK clock frequency : 0 - RF/2
AOR - Answer on Request : No
OTP - One Time Pad : No
Max block : 7
Password mode : No
Sequence Terminator : Yes
Fast Write : No
Inverse data : No
POR-Delay : No
-------------------------------------------------------------
Raw Data - Page 0, block 0
0x000880E8 00000000000010001000000011101000
[+] Config block match : T55x7 Default
-------------------------------------------------------------
and then I input
lf t55xx wipe
, now its info becomes as follows.
[usb] pm3 --> lf t55xx info
--- T55x7 Configuration & Information ---------
-------------------------------------------------------------
Safer key : 0
reserved : 0
Data bit rate : 2 - RF/32
eXtended mode : No
Modulation : 8 - Manchester
PSK clock frequency : 0 - RF/2
AOR - Answer on Request : No
OTP - One Time Pad : No
Max block : 7
Password mode : No
Sequence Terminator : No
Fast Write : No
Inverse data : No
POR-Delay : No
-------------------------------------------------------------
Raw Data - Page 0, block 0
0x000880E0 00000000000010001000000011100000
[+] Config block match : T55x7 Raw
-------------------------------------------------------------
then I use command
lf em 410x_clone 08003A4D81 1
to clone. But it seems my T55x7 tag becomes invalid.
[usb] pm3 --> lf t55xx info
--- T55x7 Configuration & Information ---------
-------------------------------------------------------------
Safer key : 15
reserved : 15
Data bit rate : 63 - RF/128
eXtended mode : Yes - Warning
Modulation : 0x1F (Unknown)
PSK clock frequency : 3 - (Unknown)
AOR - Answer on Request : Yes
OTP - One Time Pad : Yes - Warning
Max block : 7
Password mode : Yes
Sequence Start Marker : Yes
Fast Write : Yes
Inverse data : Yes
POR-Delay : Yes
-------------------------------------------------------------
Raw Data - Page 0, block 0
0xFFFFFFFF 11111111111111111111111111111111
-------------------------------------------------------------
I tried to wipe it again or write to it, but whatever I do can't recovery it. It seems invalid permanently.
So, I have a question about the differences between T55x7 Raw mode and T55x7 default mode. Why can I use
lf em 410x_clone 08003A4D81 1
and clone successfully when its on default mode but not raw mode? And what is the difference between
lf t55xx wipe
and
lf t55xx dangerraw
? Is my T55x7 tag truely broken permanently and can't be recovered?
Good that your issue is resolved. Let me suggest you edit your first post and add "[solved]" prefix to your title.
We just keep threads in order for other who might come along and find it useful.