Proxmark3 community
Research, development and trades concerning the powerful Proxmark3 device.
Remember; sharing is caring. Bring something back to the community.
"Learn the tools of the trade the hard way." +Fravia
You are not logged in.
Announcement
Time changes and with it the technology
Proxmark3 @ discord
Users of this forum, please be aware that information stored on this site is not private.
Pages: 1
#1 2015-09-06 09:18:16
- nik_po
- Contributor
- Registered: 2015-09-06
- Posts: 13
Need help to identify tag
Please help me identify one tag. I am newbie in this forum and my proxmark3 experience only one week. I can identify few tags that i found at home. This tag not reply on any commands of PM3. HF antennap voltage drops with this tag. Tag in full working condition.
[== Undefined ==]
C:\pm3-bin-2.2.0\win32 (client+GUI)>proxmark3 COM14
Prox/RFID mark3 RFID instrument
bootrom: /-suspect 2015-08-16 18:49:55
os: /-suspect 2015-08-16 18:50:03
LF FPGA image built for 2s30vq100 on 2015/03/06 at 07:38:04
HF FPGA image built for 2s30vq100 on 2015/06/22 at 21:47:54
uC: AT91SAM7S512 Rev B
Embedded Processor: ARM7TDMI
Nonvolatile Program Memory Size: 512K bytes. Used: 166521 bytes (32%). Free: 357767 bytes (68%).
Second Nonvolatile Program Memory Size: None
Internal SRAM Size: 64K bytes
Architecture Identifier: AT91SAM7Sxx Series
Nonvolatile Program Memory Type: Embedded Flash Memoryno tag
[== Undefined ==]
proxmark3> hw tune
Measuring antenna characteristics, please wait...#db# DownloadFPGA(len: 42096)
......#db# DownloadFPGA(len: 42096)
.
# LF antenna: 28.88 V @ 125.00 kHz
# LF antenna: 31.76 V @ 134.00 kHz
# LF optimal: 36.16 V @ 130.43 kHz
# HF antenna: 28.54 V @ 13.56 MHz
Displaying LF tuning graph. Divisor 89 is 134khz, 95 is 125khz.Tag on LF
[== Undefined ==]
proxmark3> hw tune
Measuring antenna characteristics, please wait...#db# DownloadFPGA(len: 42096)
......#db# DownloadFPGA(len: 42096)
.
# LF antenna: 28.88 V @ 125.00 kHz
# LF antenna: 31.76 V @ 134.00 kHz
# LF optimal: 36.30 V @ 130.43 kHz
# HF antenna: 28.57 V @ 13.56 MHz
Displaying LF tuning graph. Divisor 89 is 134khz, 95 is 125khz.Tag on HF
[== Undefined ==]
proxmark3> hw tune
Measuring antenna characteristics, please wait...#db# DownloadFPGA(len: 42096)
......#db# DownloadFPGA(len: 42096)
.
# LF antenna: 29.15 V @ 125.00 kHz
# LF antenna: 32.17 V @ 134.00 kHz
# LF optimal: 36.02 V @ 130.43 kHz
# HF antenna: 25.49 V @ 13.56 MHz
Displaying LF tuning graph. Divisor 89 is 134khz, 95 is 125khz.
Offline
#2 2015-09-06 09:22:49
- iceman
- Administrator
- Registered: 2013-04-25
- Posts: 9,538
- Website
Re: Need help to identify tag
Seems to be a HF tag, since you got a drop in the voltage.
Try reading the wiki for more information about how to use your PM3 device.
Happy rfiding!
Offline
#3 2015-09-06 09:31:38
- nik_po
- Contributor
- Registered: 2015-09-06
- Posts: 13
Re: Need help to identify tag
I have read all wiki and a lot of forums, but have no results.
A can determine only this voltage drop.
Offline
#4 2015-09-06 13:29:26
- iceman
- Administrator
- Registered: 2013-04-25
- Posts: 9,538
- Website
Re: Need help to identify tag
If you read it all then it is good, since then you know it all. Have you tried running some commands against your unknown tag?
Offline
#5 2015-09-06 14:52:06
- nik_po
- Contributor
- Registered: 2015-09-06
- Posts: 13
Re: Need help to identify tag
Thank you very much for your answer.
It is output of PM3 on some commands.
[== Undefined ==]
proxmark3> [b]hf 14a reader[/b]
iso14443a card select failed
proxmark3> [b]hf 14b reader[/b]
no 14443B tag found
proxmark3> [b]hf 14b sri512read[/b]
#db# No response from tag
proxmark3> [b]hf 14b srix4kread[/b]
#db# No response from tag
proxmark3> [b]hf 15 demod[/b]
proxmark3> [b]hf 15 read[/b]
proxmark3> [b]hf 15 reader[/b]
#db# 0 octets read from IDENTIFY request:
#db# 0 octets read from SELECT request:
#db# 0 octets read from XXX request:
proxmark3> [b]hf 15 findafi[/b]
#db# AFI Bruteforcing done.
proxmark3> [b]hf legic reader[/b]
#db# setting up legic card
#db# Unknown card format: 26
proxmark3> [b]hf iclass reader[/b]
Waiting for a response from the proxmark...
Don't forget to cancel its operation first by pressing on the button
Command execute timeout
Waiting for a response from the proxmark...
Don't forget to cancel its operation first by pressing on the button
Readstatus:00
Quitting...
proxmark3> [b]hf mf rdbl 0 a ffffffffffff[/b]
--block no:0, key type:A, key:ff ff ff ff ff ff
#db# Can't select card
#db# READ BLOCK FINISHED
isOk:00Offline
#6 2015-09-06 14:55:00
- nik_po
- Contributor
- Registered: 2015-09-06
- Posts: 13
Re: Need help to identify tag
i am sorry there is no button for edit my messages.
Offline
#7 2015-09-07 14:49:03
- nik_po
- Contributor
- Registered: 2015-09-06
- Posts: 13
Re: Need help to identify tag
this tag from absolutely new and not used gas balloon refill.
Then i plug this tag in the device for which it is intended, leds on the device indicates full gas bank (even without gas balloon, only tag).
But i can't read any information from this tag. But i have a few HF tags that my PM3 reads.
Inside this equipment i found title "13,56M RFID" and antenna.
May be this tag is absolutely clear and after first use of equipment it will be uploaded?
Can anyone give me advise how i can extract any output from this tag.
Offline
#8 2015-09-07 22:16:10
- meter
- Contributor
- Registered: 2015-07-13
- Posts: 78
Re: Need help to identify tag
You can try to snoop comunication between device and tag.
Maybe you should give more informations where you take this tag.
Offline
#9 2015-09-08 10:26:53
- nik_po
- Contributor
- Registered: 2015-09-06
- Posts: 13
Re: Need help to identify tag
this tag from gas ballon for nail gun
every shot will be counted in this chip and when 500 shots wil be played i must to replace ballon on new one.
Does it Mean that it is iclass tag, if i can receive hf iclass snoop output?
And why a can not read tag throug pm3, may be i need another design of HF antenna?
in Gun i found this board and ant.
this is my HF ant for PM3
snoop
[==PM3==]
proxmark3> hf iclass snoop
proxmark3> hf list iclass
Waiting for a response from the proxmark...
Don't forget to cancel its operation first by pressing on the button
#db# cancelled_a
#db# a 0 1
#db# 20 59f0 f0
Recorded Activity (TraceLen = 23024 bytes)
Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer
iso14443a - All times are in carrier periods (1/13.56Mhz)
iClass - Timings are not as accurate
Start | End | Src | Data (! denotes parity error) | CRC | Annotation
-----------|-----------|-----|-----------------------------------------------------------------|-----|-------------------
0 | 0 | Rdr | 0a | | ACTALL
0 | 0 | Rdr | 0a | | ACTALL
0 | 0 | Rdr | 0a | | ACTALL
264 | 7264 | Tag | bb 33 bb 00 00 00 [02 bb] | ok |
7264 | 7264 | Rdr | 0c | | IDENTIFY
7552 | 7552 | Tag | bb 33 bb 01 0f 08 [04 bb] | ok |
7552 | 7552 | Rdr | 0a | | ACTALL
12864 | 12864 | Rdr | <empty trace - possible error> | | HALToutputs of PM3 with tag and without tag are same
[== Undefined ==]
proxmark3> hf iclass reader
Waiting for a response from the proxmark...
Don't forget to cancel its operation first by pressing on the button
Command execute timeout
Readstatus:00
Quitting...
proxmark3> hf list iclass
Recorded Activity (TraceLen = 1330 bytes)
Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer
iso14443a - All times are in carrier periods (1/13.56Mhz)
iClass - Timings are not as accurate
Start | End | Src | Data (! denotes parity error) | CRC | Annotation |
-----------|-----------|-----|-----------------------------------------------------------------|-----|--------------------|
0 | 0 | Rdr | 0a | | ACTALL
0 | 0 | Rdr | 0a | | ACTALL
0 | 0 | Rdr | 0a | | ACTALL
0 | 0 | Rdr | 0a | | ACTALL
0 | 0 | Rdr | 0a | | ACTALL
0 | 0 | Rdr | 0a | | ACTALLLast edited by nik_po (2015-09-12 05:43:11)
Offline
#10 2015-09-08 11:17:15
- meter
- Contributor
- Registered: 2015-07-13
- Posts: 78
Re: Need help to identify tag
you can try to snoop wih 14443-a or try to send raw command with
hf 14a raw -p 0A
should give you something in response
Offline
#11 2015-09-08 12:13:55
- nik_po
- Contributor
- Registered: 2015-09-06
- Posts: 13
Re: Need help to identify tag
Thank you very much, but there is nothing 
proxmark3> hf 14a raw -p 0A
received 0 octets
yesterday i try to listen gun's antenna:
[== Undefined ==]
proxmark3> hf iclass read
Waiting for a response from the proxmark...
Don't forget to cancel its operation first by pressing on the button
Command execute timeout
Readstatus:00
Quitting...
proxmark3> hf list iclass
Recorded Activity (TraceLen = 31988 bytes)
Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer
iso14443a - All times are in carrier periods (1/13.56Mhz)
iClass - Timings are not as accurate
Start | End | Src | Data (! denotes parity error) | CRC | Annotation
-----------|-----------|-----|-----------------------------------------------------------------|-----|------------
0 | 0 | Rdr | 0a | | ACTALL
0 | 0 | Rdr | 0a | | ACTALL
0 | 0 | Rdr | 0a | | ACTALL
0 | 0 | Rdr | 0a | | ACTALL
0 | 0 | Rdr | 0a | | ACTALL
0 | 0 | Rdr | 0a | | ACTALL
0 | 0 | Rdr | 0a | | ACTALL
0 | 0 | Rdr | 0a | | ACTALL
0 | 0 | Rdr | 0a | | ACTALL
7264 | 7264 | Tag | bb 33 bb 00 00 00 [02 bb] | ok |
7264 | 7264 | Rdr | 0c | | IDENTIFY
7552 | 7552 | Tag | bb 33 bb 01 0f 08 [04 bb] | ok |
7552 | 7552 | Rdr | 0a | | ACTALL
12864 | 12864 | Tag | bb 33 bb 00 00 00 [08 bb] | ok |
12864 | 12864 | Rdr | 0c | | IDENTIFY
13008 | 13008 | Tag | bb d4 bb 01 0b 0a [04 bb] | ok |
13008 | 13008 | Rdr | 0a | | ACTALL
13088 | 13088 | Tag | bb d4 bb 0d 02 00 [02 bb] | ok |
13088 | 13088 | Rdr | 0c | | IDENTIFY
13520 | 13520 | Tag | bb 33 bb 00 00 00 [04 bb] | ok |
13520 | 13520 | Rdr | 0a | | ACTALL
13712 | 13712 | Tag | bb d4 bb 08 0b 0b [01 bb] | ok |
13712 | 13712 | Rdr | 0c | | IDENTIFY
13792 | 13792 | Tag | bb 33 bb 08 00 09 [02 bb] | ok |
13792 | 13792 | Rdr | 0a | | ACTALL
14704 | 14704 | Tag | bb d4 bb 06 00 00 [02 bb] | ok |
14704 | 14704 | Rdr | 0c | | IDENTIFY
14928 | 14928 | Tag | bb 33 bb 01 00 0b [04 bb] | ok |
14928 | 14928 | Rdr | 0a | | ACTALL
15248 | 15248 | Tag | bb 33 bb 00 00 02 [04 bb] | ok |
15248 | 15248 | Rdr | 0c | | IDENTIFY
15552 | 15552 | Tag | bb 33 bb 04 01 01 [02 bb] | ok |
15552 | 15552 | Rdr | 0a | | ACTALL
16000 | 16000 | Tag | <empty trace - possible error> | |
16000 | 16000 | Rdr | 0a | | ACTALLOffline
#12 2015-09-08 15:16:54
- meter
- Contributor
- Registered: 2015-07-13
- Posts: 78
Re: Need help to identify tag
try to increase response timeout, now I can't launch a client with pm3 for see the help but should be -t
if you launch only
hf 14a raw
should give you all parameters for raw command
I don't know iclass, should use 14443a and 15693
Offline
#13 2015-09-08 15:56:55
- marshmellow
- Contributor
- From: US
- Registered: 2013-06-10
- Posts: 2,302
Re: Need help to identify tag
iclass uses 14443B and 15693.
try 14b snoop.
Offline
#14 2015-09-08 20:13:19
- nik_po
- Contributor
- Registered: 2015-09-06
- Posts: 13
Re: Need help to identify tag
marshmellow wrote:
iclass uses 14443B and 15693.
try 14b snoop.
[== Undefined ==]
proxmark3> hf 14b snoop
#db# Snooping buffers initialized:
#db# Trace: 39232 bytes
#db# Reader -> tag: 256 bytes
#db# tag -> Reader: 256 bytes
#db# DMA: 256 bytes
proxmark3> hf list 14b
Waiting for a response from the proxmark...
Don't forget to cancel its operation first by pressing on the button
#db# cancelled
#db# Snoop statistics:
#db# Max behind by: 3
#db# Uart State: 0
#db# Uart ByteCnt: 0
#db# Uart ByteCntMax: 256
#db# Trace length: 0
Recorded Activity (TraceLen = 0 bytes)
Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer
iso14443a - All times are in carrier periods (1/13.56Mhz)
iClass - Timings are not as accurate
Start | End | Src | Data (! denotes parity error) | CRC | Annotation |
-----------|-----------|-----|-----------------------------------------------------------------|-----|--------------------|Offline
#15 2015-09-09 08:11:59
- nik_po
- Contributor
- Registered: 2015-09-06
- Posts: 13
Re: Need help to identify tag
Answers on raw requests received only when tag situated on Gun's antenna.
When i send one command twice - i receive answer only on first request.
i tryed all from 30 00 to 30 29 range.
[== Undefined ==]
proxmark3> hf 14a raw -c -s 30 29
received 0 octets
received 1 octets
01
proxmark3>
proxmark3> hf list 14a
Recorded Activity (TraceLen = 33 bytes)
Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer
iso14443a - All times are in carrier periods (1/13.56Mhz)
iClass - Timings are not as accurate
Start | End | Src | Data (! denotes parity error) | CRC | Annotation |
-----------|-----------|-----|-----------------------------------------------------------------|-----|--------------------|
0 | 992 | Rdr | 52 | | WUPA
159616 | 164320 | Rdr | 30 29 c1 14 | | READBLOCK(41)
274708 | 274900 | Tag | 01 | |
_________________________________________________________________________________________
proxmark3> hf 14a raw -c -s 30 20
received 0 octets
received 1 octets
00
proxmark3>
proxmark3> hf list 14a
Recorded Activity (TraceLen = 33 bytes)
Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer
iso14443a - All times are in carrier periods (1/13.56Mhz)
iClass - Timings are not as accurate
Start | End | Src | Data (! denotes parity error) | CRC | Annotation |
-----------|-----------|-----|-----------------------------------------------------------------|-----|--------------------|
0 | 992 | Rdr | 52 | | WUPA
168320 | 173088 | Rdr | 30 20 00 89 | | READBLOCK(32)
202276 | 202532 | Tag | 00! | |
_________________________________________________________________________________________
proxmark3> hf 14a raw -c -s 30 01
received 0 octets
received 1 octets
00
proxmark3>
proxmark3> hf list 14a
Recorded Activity (TraceLen = 33 bytes)
Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer
iso14443a - All times are in carrier periods (1/13.56Mhz)
iClass - Timings are not as accurate
Start | End | Src | Data (! denotes parity error) | CRC | Annotation |
-----------|-----------|-----|-----------------------------------------------------------------|-----|--------------------|
0 | 992 | Rdr | 52 | | WUPA
167168 | 171936 | Rdr | 30 01 8b b9 | | READBLOCK(1)
302388 | 302644 | Tag | 00! | |
proxmark3>
_________________________________________________________________________________________
proxmark3> hf 14a raw -c -s 30 11
received 4 octets
01 00 00 00
received 0 octets
proxmark3>
proxmark3> hf list 14a
Recorded Activity (TraceLen = 83 bytes)
Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer
iso14443a - All times are in carrier periods (1/13.56Mhz)
iClass - Timings are not as accurate
Start | End | Src | Data (! denotes parity error) | CRC | Annotation |
-----------|-----------|-----|-----------------------------------------------------------------|-----|--------------------|
0 | 992 | Rdr | 52 | | WUPA
61412 | 61604 | Tag | 01 | |
62848 | 65312 | Rdr | 93 20 | | ANTICOLL
70516 | 70708 | Tag | 01 | |
72960 | 83424 | Rdr | 93 70 01 00 00 00 01 51 c3 | | SELECT_UID
171028 | 171412 | Tag | 01 | |
203520 | 208224 | Rdr | 30 11 0a a9 | | READBLOCK(17)
proxmark3> hf 14a raw -c -s 30 21
received 0 octets
received 1 octets
01
proxmark3>
proxmark3> hf list 14a
Recorded Activity (TraceLen = 33 bytes)
Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer
iso14443a - All times are in carrier periods (1/13.56Mhz)
iClass - Timings are not as accurate
Start | End | Src | Data (! denotes parity error) | CRC | Annotation |
-----------|-----------|-----|-----------------------------------------------------------------|-----|--------------------|
0 | 992 | Rdr | 52 | | WUPA
168192 | 172960 | Rdr | 30 21 89 98 | | READBLOCK(33)
175108 | 175300 | Tag | 01 | | Offline
#16 2015-09-09 16:21:46
- nik_po
- Contributor
- Registered: 2015-09-06
- Posts: 13
Re: Need help to identify tag
Does it mean that i need buy or build another antenna? No one command doesn't work with pm3. May be anyone can help me for a money?
Offline
#17 2015-09-09 22:02:56
- meter
- Contributor
- Registered: 2015-07-13
- Posts: 78
Re: Need help to identify tag
maybe your antenna is too big for your little tag (2 cm right?). You should build a little antenna. In this thread someone has your similar problem. Read this wiki for build a little antenna.
However you can try to send also raw command with protocol 15693 so you've tried all protocols. Sure is not 14B, maybe is 14A where there are some responses.
Offline
#18 2015-09-10 15:44:32
- nik_po
- Contributor
- Registered: 2015-09-06
- Posts: 13
Re: Need help to identify tag
Handmaded HF Antenna. 2,5 cm diameter and 6 turns
no tag
[== Undefined ==]
proxmark3> hw tune
Measuring antenna characteristics, please wait...#db# DownloadFPGA(len: 42096)
......#db# DownloadFPGA(len: 42096)
.
# LF antenna: 0.14 V @ 125.00 kHz
# LF antenna: 0.00 V @ 134.00 kHz
# LF optimal: 0.00 V @ 12000.00 kHz
# HF antenna: 18.79 V @ 13.56 MHz
# Your LF antenna is unusable. with tag
[== Undefined ==]
proxmark3> hw tune
Measuring antenna characteristics, please wait...#db# DownloadFPGA(len: 42096)
......#db# DownloadFPGA(len: 42096)
.
# LF antenna: 0.00 V @ 125.00 kHz
# LF antenna: 0.00 V @ 134.00 kHz
# LF optimal: 0.00 V @ 12000.00 kHz
# HF antenna: 8.90 V @ 13.56 MHz
# Your LF antenna is unusable.
proxmark3>
proxmark3> hf search
no known/supported 13.56 MHz tags foundAlso no any readings from tag (14a, 14b, iclass, raw and others)
Can anyone help me with advice?
Last edited by nik_po (2015-09-10 16:45:31)
Offline
#19 2015-09-10 18:41:16
- asper
- Contributor
- Registered: 2008-08-24
- Posts: 1,409
Re: Need help to identify tag
Your antenna is great.
Try to snoop again when you approach the tag to the circuit.
Offline
#20 2015-09-10 21:01:02
- nik_po
- Contributor
- Registered: 2015-09-06
- Posts: 13
Re: Need help to identify tag
Thank you very much my dear friends.
snooping with 14a 14b without results
Snooping without tag
[== Undefined ==]
proxmark3> hf iclass snoop
proxmark3>
proxmark3> #db# cancelled_a
proxmark3> #db# 1 0 1
proxmark3> #db# 20 f0 f0
proxmark3> hf list iclass
Recorded Activity (TraceLen = 240 bytes)
Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer
iso14443a - All times are in carrier periods (1/13.56Mhz)
iClass - Timings are not as accurate
Start | End | Src | Data (! denotes parity error) | CRC | Annotation |
-----------|-----------|-----|-----------------------------------------------------------------|-----|--------------------|
proxmark3> Snooping with tag (i see only "Rdr" but what about "tag"? Why there is no "tag" in output? )
[== Undefined ==]
proxmark3> hf iclass snoop
proxmark3>
proxmark3> #db# cancelled_a
proxmark3> #db# a 0 1
proxmark3> #db# 20 22f0 f0
proxmark3> hf list iclass
Recorded Activity (TraceLen = 8944 bytes)
Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer
iso14443a - All times are in carrier periods (1/13.56Mhz)
iClass - Timings are not as accurate
Start | End | Src | Data (! denotes parity error) | CRC | Annotation |
-----------|-----------|-----|-----------------------------------------------------------------|-----|--------------------|
0 | 257 | Rdr | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 00 00 80 64 00 00 03 80 | |
| | | 00 78 f0 e0 00 00 10 60 00 00 0c 80 00 00 ff 32 | | ?
0 | 257 | Rdr | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 00 00 20 | |
| | | b4 00 00 03 80 00 78 f0 e0 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | | ?
0 | 257 | Rdr | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 00 00 f0 6f 00 00 0b 80 00 d1 08 0b | |
| | | 0d 0e e4 8d b9 a5 08 c3 40 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | | ?
0 | 257 | Rdr | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 00 00 00 27 00 00 | |
| | | 08 80 bb d4 bb 00 03 0e 02 bb f9 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | | ?
0 | 257 | Rdr | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 00 | |
| | | 00 f0 40 00 00 08 80 bb 33 bb 00 00 00 01 bb fd | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | | ?
0 | 257 | Rdr | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 00 00 50 3a 00 00 13 80 00 92 eb | |
| | | 89 da 2b d8 eb c6 f0 9e 6a ae 2a 91 c5 9a 40 db | |
| | | a7 d1 a0 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | | ?
-8449537 | -8418693 | Rdr | 76 48 37 63 4a 96 f4 30 92 68 f5 ba 21 00 a2 a9 | |
| | | 60 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 04 22 01 08 | |
| | | 80 42 60 10 80 00 00 00 00 00 00 00 00 2a 04 4a | |
| | | 81 12 a0 44 a8 11 2a 04 4a 81 12 a0 00 00 e0 1b | |
| | | 00 00 13 80 00 92 00 00 10 34 00 00 03 80 00 78 | | ?
-16843009 | -16843009 | Rdr | <empty trace - possible error> | | HALT
-16843009 | -16843009 | Rdr | <empty trace - possible error> | | HALT
proxmark3>
proxmark3> hf iclass snoop
proxmark3>
proxmark3> #db# cancelled_a
proxmark3> #db# 8 0 1
proxmark3> #db# 20 cf0 f0
proxmark3> hf list iclass
Recorded Activity (TraceLen = 3312 bytes)
Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer
iso14443a - All times are in carrier periods (1/13.56Mhz)
iClass - Timings are not as accurate
Start | End | Src | Data (! denotes parity error) | CRC | Annotation |
-----------|-----------|-----|-----------------------------------------------------------------|-----|--------------------|
0 | 257 | Rdr | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 00 00 50 45 00 00 0c 80 | |
| | | 00 00 ff 32 02 16 01 24 16 e0 80 ad e1 00 ff 32 | | ?
0 | 257 | Rdr | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 00 00 | |
| | | 00 20 f9 00 00 0c 80 00 00 ff 32 02 16 01 24 16 | |
| | | e0 80 ad e1 00 00 78 f0 e0 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | | ?
0 | 257 | Rdr | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 00 00 20 c2 00 00 0c 80 00 00 ff 32 | |
| | | 02 16 01 24 16 e0 80 ad e1 00 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | | ?
0 | 257 | Rdr | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 00 00 00 27 00 00 | |
| | | 00 a0 8f 00 00 03 80 00 78 f0 e0 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | | ?
0 | 257 | Rdr | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 00 00 a0 52 00 00 0c 80 00 00 ff 32 02 16 01 24 | |
| | | 16 e0 80 0d e1 00 00 00 30 8b 00 00 08 80 bb 33 | |
| | | bb 00 00 00 01 bb fd 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | | ?
0 | 257 | Rdr | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 00 00 50 54 00 00 0c 80 00 00 | |
| | | ff 32 02 16 01 24 16 e0 80 ad e1 00 80 00 92 eb | |
| | | 89 da 2b d8 eb c6 f0 9e 6a ae 2a 91 c5 9a 40 db | |
| | | a7 d1 a0 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | | ?
-33620097 | -33619535 | Rdr | 24 16 e0 80 ad e1 00 30 92 68 f5 ba 21 00 a2 a9 | |
| | | 60 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 04 22 01 08 | |
| | | 80 42 60 10 80 00 00 00 00 00 00 00 00 2a 04 4a | |
| | | 81 12 a0 44 a8 11 2a 04 4a 81 12 a0 00 00 e0 1b | |
| | | 00 00 13 80 00 92 00 00 10 55 00 00 03 80 00 78 | | ?
-15794369 | -15777981 | Rdr | 30 | | ?
-16843009 | -16793849 | Rdr | 00 00 80 00 20 00 08 00 02 00 00 80 00 20 00 08 | |
| | | 00 02 00 00 80 00 20 00 08 00 30 00 00 00 00 00 | |
| | | 08 c0 40 04 60 01 18 00 46 00 11 80 04 60 01 18 | |
| | | 00 46 00 11 80 04 60 01 18 00 46 00 11 80 30 00 | |
| | | 00 00 00 00 10 01 40 02 60 00 98 00 26 00 09 80 | |
| | | 02 60 00 98 00 26 00 09 80 02 60 00 98 00 26 00 | |
| | | 09 82 00 00 00 00 00 00 40 45 42 04 30 81 0c 20 | |
| | | 43 08 10 c2 04 30 81 0c 20 43 08 10 c2 04 30 81 | |
| | | 0c 20 43 08 10 80 00 00 00 00 00 00 00 00 08 04 | |
| | | 22 01 08 80 42 20 10 88 04 22 01 08 80 42 20 10 | |
| | | 88 00 00 50 49 00 00 0c 80 00 00 ff 32 02 16 01 | |
| | | 24 16 e0 80 ad e1 00 80 00 7c 78 73 07 76 48 37 | |
| | | 63 4a 96 f4 30 92 68 f5 ba 21 00 a2 a9 60 00 00 | |
| | | 00 00 00 00 08 c0 0c 00 53 00 14 c0 05 30 01 4c | |
| | | 00 53 00 14 c0 05 30 01 4c 00 53 00 14 c0 05 30 | |
| | | 01 40 10 00 00 00 00 00 00 c0 00 00 40 00 10 00 | | HALT
proxmark3>
proxmark3> hf iclass snoop
proxmark3>
proxmark3> #db# cancelled_a
proxmark3> #db# a 0 1
proxmark3> #db# 20 19f0 f0
proxmark3> hf list iclass
Recorded Activity (TraceLen = 6640 bytes)
Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer
iso14443a - All times are in carrier periods (1/13.56Mhz)
iClass - Timings are not as accurate
Start | End | Src | Data (! denotes parity error) | CRC | Annotation |
-----------|-----------|-----|-----------------------------------------------------------------|-----|--------------------|
0 | 257 | Rdr | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 00 00 80 af 00 00 0c 80 | |
| | | 00 00 ff 32 02 16 01 24 16 e0 80 ad e1 00 ff 32 | | ?
0 | 257 | Rdr | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 00 00 | |
| | | 00 20 f9 00 00 80 e8 00 00 03 80 00 78 f0 e0 16 | |
| | | e0 80 ad e1 00 00 78 f0 e0 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | | ?
0 | 257 | Rdr | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 00 00 60 75 00 00 13 80 00 d1 08 0b | |
| | | 0d 0e e4 8d b9 a5 f8 a3 92 7e 61 7e 78 65 28 c3 | |
| | | 55 e0 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | | ?
0 | 257 | Rdr | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 00 00 00 27 00 00 | |
| | | 00 a0 8f 00 00 00 a0 67 00 00 13 80 00 92 eb 89 | |
| | | da 2b d8 eb c6 f0 9e 6a ae 2a 91 c5 9a 40 db a7 | |
| | | d1 a0 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | | ?
0 | 257 | Rdr | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 00 00 50 68 00 00 13 80 00 7c 78 73 07 76 48 37 | |
| | | 63 4a 96 f4 30 92 68 f5 ba 21 00 a2 a9 60 bb 33 | |
| | | bb 00 00 00 01 bb fd 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | | ?
0 | 257 | Rdr | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 00 00 50 54 00 00 00 40 38 00 | |
| | | 00 03 80 00 c4 6e 80 e0 80 ad e1 00 80 00 92 eb | |
| | | 89 da 2b d8 eb c6 f0 9e 6a ae 2a 91 c5 9a 40 db | |
| | | a7 d1 a0 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | |
| | | 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | | ?
proxmark3> Last edited by nik_po (2015-09-10 21:02:02)
Offline
#21 2015-09-11 09:03:27
- asper
- Contributor
- Registered: 2008-08-24
- Posts: 1,409
Re: Need help to identify tag
It seems to get some iso15693 but those 01 01... do not correspond to any iso15693 commands; my suggestion: start to snoop without the tag and VERY QUICKLY put it over the circuit. Try to do that again with 14a and 14b.
Offline
#22 2015-09-11 18:20:36
- nik_po
- Contributor
- Registered: 2015-09-06
- Posts: 13
Re: Need help to identify tag
thank you asper for your help
results:
[== Undefined ==]
proxmark3> hf 14a snoop
proxmark3>
proxmark3> #db# cancelled by button
proxmark3> #db# COMMAND FINISHED
proxmark3> #db# maxDataLen=2, Uart.state=0, Uart.len=0
proxmark3> #db# traceLen=70, Uart.output[0]=000000ff
proxmark3> hf list 14a
Recorded Activity (TraceLen = 70 bytes)
Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer
iso14443a - All times are in carrier periods (1/13.56Mhz)
iClass - Timings are not as accurate
Start | End | Src | Data (! denotes parity error) | CRC | Annotation |
-----------|-----------|-----|-----------------------------------------------------------------|-----|--------------------|
0 | 448 | Tag | 06! | |
442240 | 442944 | Tag | 1e! | |
107665312 | 107665760 | Tag | 06! | |
242304176 | 242304496 | Tag | 02 | |
242328224 | 242328800 | Tag | 0e | |
336459808 | 336460128 | Tag | 02 | |
444108560 | 444108880 | Tag | 02 | |
proxmark3>
proxmark3> hf list 14b
Recorded Activity (TraceLen = 122 bytes)
Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer
iso14443a - All times are in carrier periods (1/13.56Mhz)
iClass - Timings are not as accurate
Start | End | Src | Data (! denotes parity error) | CRC | Annotation |
-----------|-----------|-----|-----------------------------------------------------------------|-----|--------------------|
0 | 0 | Tag | <empty trace - possible error> | |
9249126 | 9249126 | Tag | <empty trace - possible error> | |
9252070 | 9252070 | Tag | e0 | |
48862952 | 48862952 | Tag | c0 | |
104508326 | 104508326 | Tag | <empty trace - possible error> | |
104544756 | 104544756 | Tag | <empty trace - possible error> | |
194368040 | 194368040 | Tag | <empty trace - possible error> | |
217063244 | 217063244 | Tag | a1 | |
234411506 | 234411506 | Tag | 20 | |
265807556 | 265807556 | Tag | a2 | |
277696524 | 277696524 | Tag | <empty trace - possible error> | |
299927234 | 299927234 | Tag | <empty trace - possible error> | |
310021094 | 310021094 | Tag | <empty trace - possible error> | |
proxmark3> Last edited by nik_po (2015-09-11 19:30:05)
Offline
#23 2015-09-12 13:32:02
- asper
- Contributor
- Registered: 2008-08-24
- Posts: 1,409
Re: Need help to identify tag
There seems to be communcation errors; try to use different antenna positioning/distances while sniffing communication between tag and circuit. When you will obtain a more constant data flow (for example always same bytes) this will be a good positioning.
Offline
Pages: 1