Proxmark3 community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

  • Logged in as ikarus
  • Last visit: Today 11:22:42

Announcement

Time changes and with it the technology
Proxmark3 @ discord

Users of this forum, please be aware that information stored on this site is not private.

#1 2020-10-26 17:14:54

Goblin
Contributor
Registered: 2020-10-24
Posts: 4

unknown Multifunction Ring / one Tag

Hi,

i got this multifunctional ring:

https://www.newtechstore.eu/product/eej … le-phones/

NFC works
M1-Tag works
ID-Tag doesn't work (can't read what kind of it is).
Description on above url says a 125khz T55xx

but Proxmark3 easy can't read anything from the id-chip

status:

Prox/RFID mark3 RFID instrument
bootrom: master/v3.1.0-200-ge6158a4-suspect 2020-08-04 21:33:33
os: master/v3.1.0-200-ge6158a4-suspect 2020-08-04 21:33:37
fpga_lf.bit built for 2s30vq100 on 2019/11/21 at 09:02:37
fpga_hf.bit built for 2s30vq100 on 2020/03/05 at 19:09:39
SmartCard Slot: not available

uC: AT91SAM7S512 Rev B
Embedded Processor: ARM7TDMI
Nonvolatile Program Memory Size: 512K bytes. Used: 208298 bytes (40%). Free: 315990 bytes (60%).
Second Nonvolatile Program Memory Size: None
Internal SRAM Size: 64K bytes
Architecture Identifier: AT91SAM7Sxx Series
Nonvolatile Program Memory Type: Embedded Flash Memory

Antenna:

Measuring antenna characteristics, please wait.........
# LF antenna: 45.51 V @   125.00 kHz
# LF antenna: 40.29 V @   134.00 kHz
# LF optimal: 48.95 V @   127.66 kHz
# HF antenna: 32.76 V @    13.56 MHz
Displaying LF tuning graph. Divisor 89 is 134khz, 95 is 125khz.

M1-read:

 UID : e4 90 f3 4e
ATQA : 00 04
 SAK : 08 [2]
TYPE : NXP MIFARE CLASSIC 1k | Plus 2k SL1
proprietary non iso14443-4 card found, RATS not supported
No chinese magic backdoor command detected
Prng detection: WEAK

Valid ISO14443A Tag Found - Quiting Search

ID-read (lf):

proxmark3> lf search
NOTE: some demods output possible binary
  if it finds something that looks like a tag
False Positives ARE possible

Checking for known tags:

No Data Found! - maybe not an LF tag?

maybe some1 has the same and can help me..

My goal is to clone my fob into this ring

fob:

EM410x pattern found:

EM TAG ID      : 0105069777

Possible de-scramble patterns
Unique TAG ID  : 80A060E9EE
HoneyWell IdentKey {
DEZ 8          : 00431991
DEZ 10         : 0084318071
DEZ 5.5        : 01286.38775
DEZ 3.5A       : 001.38775
DEZ 3.5B       : 005.38775
DEZ 3.5C       : 006.38775
DEZ 14/IK2     : 00004379285367
DEZ 15/IK3     : 000552446519790
DEZ 20/ZK      : 08001000060014091414
}
Other          : 38775_006_00431991
Pattern Paxton : 18535799 [0x11AD577]
Pattern 1      : 617406 [0x96BBE]
Pattern Sebury : 38775 6 431991  [0x9777 0x6 0x69777]

Valid EM410x ID Found!

possible??

Offline

#2 2020-10-26 18:59:30

iceman
Administrator
Registered: 2013-04-25
Posts: 9,468
Website

Re: unknown Multifunction Ring / one Tag

use the `lf t55xx` commands,  you need to read up on them,  and you should be able to program it,  with  ´lf em 410x_write´

Offline

#3 2020-10-26 19:50:12

Goblin
Contributor
Registered: 2020-10-24
Posts: 4

Re: unknown Multifunction Ring / one Tag

i tried 'lf t55xx detect' but nothing..

Offline

#4 2020-10-26 19:55:46

iceman
Administrator
Registered: 2013-04-25
Posts: 9,468
Website

Re: unknown Multifunction Ring / one Tag

try wiping it and then detect,   but you are on a pm3 easy clone,  I dunno if you have a low Q antenna which is needed to program t55x7

Offline

#5 2020-10-26 20:41:27

Goblin
Contributor
Registered: 2020-10-24
Posts: 4

Re: unknown Multifunction Ring / one Tag

wiping was the key.. thx..

Offline

Quick reply

Write your message and submit

Board footer

Powered by FluxBB