HID 1346 Proxkey II....

ntk · 2016-06-19 03:21:24

I could not find any link to it, although it exists quite a while already ...

http://www.ebay.co.uk/itm/HID-1346NSSNN-ProxKey-III-/112030665489?hash=item1a158c4b11:g:IygAAOSwvg9XZBtS

Is it possible that PM3 still can not understand this format?

rfidboi · 2017-02-08 06:43:24

I'm also curious to know if the PM3 can clone Proxkey II's or Proxkey III's . I don't think it can handle the III's, more curious about the II's in the topic title. It looks like HID has perhaps retired the Proxkey II's which don't even show up on their main HID Prox site and they have the same base part number of 1346...

Onisan · 2017-02-08 10:44:51

There is no reason why the Proxkey 11 can't be read, I clone them on another machine which is nowhere near as good as the Proxmark.

I am sure Marshmellow or Iceman will respond in a while with specifics.

iceman · 2017-02-08 11:46:01

Marshmellow mentioned to me that HID Prox uses in earlier tag t55x7 chipsets and in newer EM4305 chipsets.
As of right now, the EM4305 is not supported in PM3. well, not more than defaultreadmode. Maybe it will be supported later on.

marshmellow · 2017-02-09 14:06:52

All hid prox in all forms can easily be cloned to t55xx chips. The chip carrier or form factor doesn't matter.

If you want to write TO hid prox cards/fobs you will need HID's chip info which iceman has started to mention.

marshmellow · 2017-02-11 15:24:05

I cleared up my earlier post.

rfidboi · 2017-02-16 06:56:46

marshmellow wrote:

All hid prox in all forms can easily be cloned to t55xx chips. The chip carrier or form factor doesn't matter.
If you want to write TO hid prox cards/fobs you will need HID's chip info which iceman has started to mention.

Thanks marshmellow. I had thought cloning Proxkey IIIs wasn't supported (I hadn't read your post), but I gave it a try anyway. I tried to do it using the instructions for cloning a Proxcard II over at ryscc.com

I simply placed the Proxkey III I wanted to clone over the LF antenna of my PM3 and ran

lf hid fsk 1

I then copied the TAG ID from the output of the fsk command, placed a T5577 over the LF antenna and ran

lf hid clone [TAG_ID_FROM_ABOVE]

Finally, to verify the T5577 had the exact information as the original Proxkey III, I ran

lf hid fsk 1

and confirmed that I got the same exact output as I got from the Proxkey.

Does this sound right / like I successfully cloned the Proxkey? I don't have a real world RFID system to test it on. The reason I think I was successful is that the lf hid fsk 1 command now gives me the same exact output for the Proxkey and the T5577.

I remember reading about the BLEKey presented at Black Hat and was under the impression that Proxkey III's were very hard to clone (without a BLEKey), perhaps due to encryption. Is the PM3 somehow cracking its encryption? And, do you know of any other cheap devices to clone Proxkey II/III's? The PM3 is not exactly cheap.

Writing to Proxkeys sounds fascinating! How far are we from that / is there any code I can look at? Thanks.

Last edited by rfidboi (2017-02-16 06:58:09)

marshmellow · 2017-02-16 07:11:04

there is nothing special about the proxkey III. it is just a normal hid prox chip. (granted with a stronger antenna than was in the proxkey II (which was it's downfall))...

it looks like you cloned it just fine...

now some other keyfobs in that form, that may look very similar to the proxkey III, can contain other chips including iclass. those are not so easy to clone...

writing to prox cards is possible with the right know how and key.

rfidboi · 2017-02-16 07:21:52

marshmellow wrote:

there is nothing special about the proxkey III. it is just a normal hid prox chip. (granted with a stronger antenna than was in the proxkey II (which was it's downfall))...
it looks like you cloned it just fine...
now some other keyfobs in that form, that may look very similar to the proxkey III, can contain other chips including iclass. those are not so easy to clone...
writing to prox cards is possible with the right know how and key.

Mmm, interesting. In regards to the keyfobs in that form that look very similar to the Proxkey III but have other chips inside - how could I know I'm in possession of one of those and not a regular Proxkey III? Could I have had one such fob in my possession, ran the commands above successfully, basically just cloning part of the fob, without knowing that I'm missing something? So I could think I successfully clone the whole fob, but if I tried to use it in an access system it would fail?

marshmellow · 2017-02-16 07:24:49

Not likely. I'm not aware of any duel technology tags in that form factor. If you read a prox id off it it most likely is just a prox tag.

rfidboi · 2017-02-16 07:28:17

marshmellow wrote:

Not likely. I'm not aware of any duel technology tags in that form factor. If you read a prox id off it it most likely is just a prox tag.

Got it. I had misunderstood your previous comment. I thought you were alluding to a dual-tech fob that looked like a regular Proxkey III, but in fact you were referring to iClass fobs. I've seen some with the same shape as the ProxKey III's but a different color.

ntk · 2017-03-16 12:08:11

Sorry that I have not been back here for a long time. Now I found it again, thank you for the information you have given here. I have read with big interest (like many other things on this forum)... but shame that I can not verify the fact myself I have none of those chip

Based on the information you have given, should I change the header "Working with HID1346 ProxkeyII/ ProxkeyIII" as solved?.

PS if I had one of this chip, doing a LF search I should see the type of chip ProxKey II or III and ProxID in the current main SW, is it?

Last edited by ntk (2017-03-16 12:11:48)

Proxmark3 community

Announcement

#1 2016-06-19 03:21:24

HID 1346 Proxkey II....

#2 2017-02-08 06:43:24

Re: HID 1346 Proxkey II....

#3 2017-02-08 10:44:51

Re: HID 1346 Proxkey II....

#4 2017-02-08 11:46:01

Re: HID 1346 Proxkey II....

#5 2017-02-09 14:06:52

Re: HID 1346 Proxkey II....

#6 2017-02-11 15:24:05

Re: HID 1346 Proxkey II....

#7 2017-02-16 06:56:46

Re: HID 1346 Proxkey II....

#8 2017-02-16 07:11:04

Re: HID 1346 Proxkey II....

#9 2017-02-16 07:21:52

Re: HID 1346 Proxkey II....

#10 2017-02-16 07:24:49

Re: HID 1346 Proxkey II....

#11 2017-02-16 07:28:17

Re: HID 1346 Proxkey II....

#12 2017-03-16 12:08:11

Re: HID 1346 Proxkey II....

Board footer