Research, development and trades concerning the powerful Proxmark3 device.
Remember; sharing is caring. Bring something back to the community.
"Learn the tools of the trade the hard way." +Fravia
You are not logged in.
Time changes and with it the technology
Proxmark3 @ discord
Users of this forum, please be aware that information stored on this site is not private.
I am trying to sniff the communication between CardMan 5321 and Infineon SLJ52GDx card. The hf 14b/a snoop seems to be not recording anything since the hf 14b/a list is empty.
-----The type of antenna i am using is this: https://store.ryscc.com/products/high-frequency-pcb-antenna
-----The PM3 is this one: https://store.ryscc.com/products/enclosed-proxmark3
This is what i did:
--- Firmware loaded is:
Prox/RFID mark3 RFID instrument
bootrom: iceman/master/v1.1.0-1773-g3acac88 2017-01-12 16:36:37
os: iceman/master/v1.1.0-1773-g3acac88 2017-01-12 16:36:42
LF FPGA image built for 2s30vq100 on 2015/03/06 at 07:38:04
HF FPGA image built for 2s30vq100 on 2015/11/ 2 at 9: 8: 8
uC: AT91SAM7S512 Rev B
Embedded Processor: ARM7TDMI
Nonvolatile Program Memory Size: 512K bytes. Used: 216170 bytes (41). Free: 308118 bytes (59).
Second Nonvolatile Program Memory Size: None
Internal SRAM Size: 64K bytes
Architecture Identifier: AT91SAM7Sxx Series
Nonvolatile Program Memory Type: Embedded Flash Memory
1. hw tune command, gives 8.44V @ 13.56MHz without card present on the antenna
pm3 --> hw tune
Measuring antenna characteristics, please wait.......
# HF antenna: 8.44 V @ 13.56 MHz
# Your LF antenna is unusable.
2. hf search command, list the card type as an iso14443-b
pm3 --> hf search
UID : 69 67 14 98
ATQB : 00 00 00 00 77 83 B3
CHIPID : 00
App Data: 00 00 00 00
Protocol: 77 83 B3
Bit Rate: 212 kbit/s PICC -> PCD supported
Bit Rate: 424 kbit/s PICC -> PCD supported
Bit Rate: 847 kbit/s PICC -> PCD supported
Bit Rate: 212 kbit/s PICC <- PCD supported
Bit Rate: 424 kbit/s PICC <- PCD supported
Bit Rate: 847 kbit/s PICC <- PCD supported
Max Frame Size: 256 bytes
Protocol Type: Protocol is compliant with ISO/IEC 14443-4
Frame Wait Integer: 11 - 65536 ETUs | 618496 us
App Data Code: Application is Proprietary
Frame Options: NAD is supported
Frame Options: CID is supported
Tag :
Max Buf Length: 0 (MBLI) chained frames not supported
CDI : 0
Valid ISO14443-B Tag Found - Quiting Search
3. hw tune command gives 6.88V @ 13.56MHz with card present on the antenna
pm3 --> hw tune
Measuring antenna characteristics, please wait......
# HF antenna: 6.88 V @ 13.56 MHz
# Your LF antenna is unusable.
# Your HF antenna is marginal.
4. hf 14b snoop
pm3 --> hf 14b snoop
#db# Snooping buffers initialized:
#db# Trace: 39488 bytes
#db# Reader -> tag: 256 bytes
#db# tag -> Reader: 256 bytes
#db# DMA: 256 bytes
#db# cancelled
#db# Snoop statistics:
#db# Uart State: 0 ByteCount: 0 ByteCountMax: 256
#db# Trace length: 0
---I played with the distance from 0cm to 3cm and different orientations without any luck
5. hf 14b list
pm3 --> hf 14b list
Recorded Activity (TraceLen = 0 bytes)
Start = Start of Start Bit, End = End of last modulation. Src = Source of Transf
er
Start | End | Src | Data (! denotes parity error)
| CRC | Annotation |
------------|------------|-----|------------------------------------------------
-----------------|-----|--------------------|
please advise on what can be wrong?
Last edited by CoolLink (2017-01-15 18:48:39)
Offline
local image link will not work.
Offline
I think there is a bug in my 14b sniff/snoop. Try PM3 master instead (dont forget to flash)
Offline
@ iceman, ooh thanks was struggling to include the cmd window on the forum discussion. but just pasted directly.
please advise on the above problem, can't seem to be getting anything even with iso14443a tag/cards
Offline
@iceman, PM3 master you mean the github source i suppose. will try it
Offline
yes, that is correct
Offline
@iceman, i am still learning the compiling environment since it requires several softwares.
From your PM3 git repo, i gather that i need the following softwares and source files:
1. QT with MinGw 32 bit
2. MYSYS
3. Readline
4. LibUSB
5. DevKitPro
6. Strawberry Perl
7. and Git for windows
Once i manage to compile the source code, i will post the feedback.
Offline
read the readme on my github, it has a detailed windows explaination. https://github.com/iceman1001/proxmark3
And there is others who has made a updated mingw installation guide. @gator9600 etc..
Once you get things running, its not that hard.
Offline
There are already compiled versions of the PM3 master. http://proxmark.org/forum/viewtopic.php?id=3975
Offline
@gator96100, i have tried most of the compiled versions from:
-- official (20161103 and 20161219)
--iceman (20170112 and 20170116)
--and pm3-bin-v2_3 from https://store.ryscc.com/blogs/news/upgrading-your-proxmark3-to-v2-3-over-usb
all gives the same output for hf 14a/b snoop and hf 14a/b list.
if i understood iceman, he suggested that i compile the source and see if i get the same results.
but today i am trying to test mifare cards with most of the builds mentioned above to see if my board works fine (so far no success, but im busy trying).
Then when i get positive results with mifare cards, then i will surely know that the problem lies with the firmware source code and start investigating the problem with confidence.
Offline
Your HF antenna is quite weak (8v) that could also be the cause of your 14b snooping problems.
reading 14a is not the same as snooping a transaction between card and reader.
Offline