Proxmark3 community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

Announcement

Time changes and with it the technology
Proxmark3 @ discord

Users of this forum, please be aware that information stored on this site is not private.

#1 2013-05-06 04:27:33

lastdinner
Contributor
From: China
Registered: 2013-05-03
Posts: 16

An unknown LF card , anybody helo me ?

The card is used to acess our office door , I don't know the chip.
The Back of the card I take a picture :
backend aaa first


I have tried some command , and I sure it's a LF card .
First I tried run "lf em4x em410xwatch" , sometimes there's no result , and sometimes( take a long time) give me different tagID ,and the clock rate sometime 8 , sometime 10.


I run the command
proxmark3> lf read
#db# Buffer cleared (40000 bytes)
#db# buffer samples: 9e da ff f0 90 46 0b 00 ...
proxmark3> data sample 9600
Reading 9600 samples
Done!
proxmark3> data autocorr 9600
performing 28800 correlations
and I got the graphic output :
output aaa first

I had think it's a hid card  , but when I run the command "lf hid fskdemod" , only get the "yellow led on , red led blink"
I had tried "data mandemod , askdemod , fskdemod ", and yet couldn't get any clue ,
May someone help me ?

Offline

#2 2013-05-06 04:31:15

lastdinner
Contributor
From: China
Registered: 2013-05-03
Posts: 16

Re: An unknown LF card , anybody helo me ?

The first picture
backend wenh picbackend

The Second picture
output wenh pic2output

Offline

#3 2013-05-06 05:32:48

o0o0o0o
Contributor
From: Germany
Registered: 2011-10-06
Posts: 64

Re: An unknown LF card , anybody helo me ?

The 2*4 dots looks like what there is on basic HID ISO cards.
What about this logo ? It looks like Pyramid. So it might actually be a Pyramid card
see http://www.farpointedata.com/images/stories/datasheets/PSI-4/PSI-4_datasheet.pdf

Although, it is not the official Pyramid logo...

If it is a Pyramid then it should be ASK Manchester 32 or 64 bit - Baud rates : RF/64 - 1 or 2 block(s)

Last edited by o0o0o0o (2013-05-06 08:43:41)

Offline

#4 2013-05-06 06:04:58

lastdinner
Contributor
From: China
Registered: 2013-05-03
Posts: 16

Re: An unknown LF card , anybody helo me ?

first , thx a lot to o0o0o0o

I have seen the document , but I still have no idea.
I'm newer to use proxmark. What puzzle me is that how can I get the tag_id  ,  "lf hid fskdemod" command seem no use for this card .
Can I using the exist command to get the TagID?

Offline

#5 2013-05-06 08:55:04

o0o0o0o
Contributor
From: Germany
Registered: 2011-10-06
Posts: 64

Re: An unknown LF card , anybody helo me ?

Try :

lf read
data sample 4000
data plot

You should see something like this - >
cc389fd02b548ed1c127716678bea.jpg

Do a :

data askdemod

And you should see something pretty like this :
edb3ec777f308f04084bbb2c79fe9.jpg

This is where you need to learn how to decode using your head... smile

Please post the result of "data askdemod" here

Offline

#6 2013-05-06 09:25:31

lastdinner
Contributor
From: China
Registered: 2013-05-03
Posts: 16

Re: An unknown LF card , anybody helo me ?

I tried it , It seem something strange ,
proxmark3> data buffclear
proxmark3> lf read
#db# Buffer cleared (40000 bytes)
#db# buffer samples: 58 42 4b 74 90 a6 a1 77 ...
proxmark3> data sample 9600
Reading 9600 samples
Done!
proxmark3>
The output like this :
img1 wenh wenhpic1 result step 1

and after run the command "data askdemod 1" ,get the result
img2 wenh wenhpic2result step 2

I think it 's not code by ASK Manchester  ?

Offline

#7 2013-05-07 02:19:46

lastdinner
Contributor
From: China
Registered: 2013-05-03
Posts: 16

Re: An unknown LF card , anybody helo me ?

I zoom out the data sample graphic output , clock rate sometimes 8  , sometimes 10 , 
So I think it must be something Frequency-shift keying 。

Data Sample
136788838339.png

I test the Fskdemod ,The result still strange to me , I had think it may output a sequence of "zero" and "one" .

Fskdemod
136788918525.png

and I test so many time , different samples  , and I get different result  . '
data sample 4800
proxmark3> data fskdemod
actual data bits start at sample 3447
length 50/50
bits: '101111001101111111011101110111011101110111011'
hex: 0000179b fbbbbbbb

data sample 9600
proxmark3> data fskdemod
actual data bits start at sample 4764
length 50/50
bits: '101011001011110011011111110111011101110111011'
hex: 00001597 9bfbbbbb

I' m so confused , I hope someone could help me .

Offline

#8 2013-05-07 15:05:35

lastdinner
Contributor
From: China
Registered: 2013-05-03
Posts: 16

Re: An unknown LF card , anybody helo me ?

I got it , I ought analyze the lastest pict use my head.......................

Offline

#9 2016-02-23 04:57:44

ntk
Contributor
Registered: 2015-05-24
Posts: 701

Re: An unknown LF card , anybody helo me ?

it is two years ago,  wonder you found a soluton. Could you pls post few traces of your card again. Thanks

Offline

Board footer

Powered by FluxBB