Proxmark3 community

noreg0

Contributor

Registered: 2019-07-23

Posts: 5

Car PKE snooping NCF2951

Hi all,

I'm new to RF and Proxmark but some experience with SDR.

Context:
Honda odyssey 2018 with smart entry. I assume it's using some form of LF to detect the key proximity and most likely it's using this chip:
https://www.nxp.com/docs/en/brochure/75017275.pdf
When the key detects the wake-up signal (once you touch/pull the door handle) the signal gets send to the key. Once the key recognizes the signal it will respond over UHF (433Mhz) and the door opens.

Using some googling the key https://fccid.io/KR5V2X but no mention of the LF part (which makes sense as it would be in the car and not the key ?) and it mentions NCF2951 as chip.

I'm trying to basically see what is the wake-up signal that the car sends. I tried a couple of options with the proxmark client but I've had 0 success

I tried:
setting up for LF and HF (lf config b 8 L t 8 and lf config H...)

I tried reading with lf read, I tried snooping with lf snoop but nothing worked. Anything I'm missing ?

Thanks !

iceman

Administrator

Registered: 2013-04-25

Posts: 9,538

Website

Re: Car PKE snooping NCF2951

Welcome and I suggest you read http://www.proxmark.org/forum/viewtopic.php?id=1125 as an introduction.

Your access rights has been updated.