Proxmark3 community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

Announcement

Time changes and with it the technology
Proxmark3 @ discord

Users of this forum, please be aware that information stored on this site is not private.

Pages: 1

#1 2018-05-28 22:36:46

Shashadow
Contributor
Registered: 2018-03-13
Posts: 58

unable to read/write thincard iclass card (only)

Hello,

just a little message about iclass hid card, I have some trouble for playing with this kind of card, when I want to make some basic operation (read write dump or search), most of the time I can not because PM3 isn't able to read the card.

I have often a timeout with 'hf search', and I tried with 2 kind of card (IClass GH (x5) and IClass GL)

8 times on 10 I have a error

pm3 --> hf search
[!] timeout while waiting for reply.

[-] no known/supported 13.56 MHz tags found

and just some rare case I have a good read

pm3 --> hf search
[!] timeout while waiting for reply.
CSN: AD 10 9C 01 F7 FF 12 E0
    CC: FF FF FF FF 8A FE FF FF
        Mode: Application [Locked]
        Coding: ISO 14443-2 B/ISO 15693
        Crypt: Secured page, keys not locked
        RA: Read access not enabled
  Mem: 16 KBits/16 App Areas (255 * 8 bytes) [1F]
        AA1: blocks 06-12
        AA2: blocks 13-FF
        OTP: 0xFFFF

KeyAccess:
        Read A - Kd or Kc
        Read B - Kd or Kc
        Write A - Kc
        Write B - Kc
        Debit  - Kd or Kc
        Credit - Kc
 App IA: FF FF FF FF FF FF FF FF
      : Possible iClass (legacy tag)

[+] Valid iClass Tag (or PicoPass Tag) Found

anyway, I Always have "[!] timeout while waiting for reply.", even when I just read block.
however read of ultralight or mifare classic work very well.

someone know if there are a way to increase delay before timeout ?

is it a hardware problem with my PM3 ? (I Don't think because mf is OK)

PS : I tried with many different position for the card, near, far, middle, everything but it's the same output whatever I do.
PS2 : I found this post but I'm not sure it's the same issue
PM3 can't read iclass 2000 DL card


last release iceman and firmware ok, voltage seems good too

pm3 --> hw version
[[[ Cached information ]]]


Proxmark3 RFID instrument

 [ ARM ]
 bootrom: iceman// 2018-05-28 22:59:04
      os: iceman// 2018-05-28 22:59:17
 [ FPGA ]
 LF image built for 2s30vq100 on 2017/10/25 at 19:50:50
 HF image built for 2s30vq100 on 2017/11/10 at 19:24:16

 [ Hardware ]
  --= uC: AT91SAM7S512 Rev B
  --= Embedded Processor: ARM7TDMI
  --= Nonvolatile Program Memory Size: 512K bytes, Used: 235673 bytes (45%) Free: 288615 bytes (55%)
  --= Second Nonvolatile Program Memory Size: None
  --= Internal SRAM Size: 64K bytes
  --= Architecture Identifier: AT91SAM7Sxx Series
  --= Nonvolatile Program Memory Type: Embedded Flash Memory



pm3 -->
pm3 -->
pm3 -->
pm3 --> hw tune

[=] measuring antenna characteristics, please wait...

...

[+] LF antenna: 29.88 V - 125.00 kHz
[+] LF antenna: 21.95 V - 134.00 kHz
[+] LF optimal: 29.60 V - 123.71 kHz
[+] LF antenna is OK

[+] HF antenna: 19.46 V - 13.56 MHz
[+] HF antenna is OK


[+]  Displaying LF tuning graph. Divisor 89 is 134khz, 95 is 125khz.
pm3 -->

Thank you

Last edited by Shashadow (2018-06-01 07:51:28)

Offline

#2 2018-05-29 06:28:10

iceman
Administrator
Registered: 2013-04-25
Posts: 9,538
Website

Re: unable to read/write thincard iclass card (only)

..have you tried the latest source from official pm3 repo?

Offline

#3 2018-05-29 21:42:19

Shashadow
Contributor
Registered: 2018-03-13
Posts: 58

Re: unable to read/write thincard iclass card (only)

hello,
I tried with last official pm3 repo … but it's the same than iceman repo, half of the time and even more, tag wasn't recognized :-(


HOWEVER … because I'm a fool and little crazy too, I don't know why but I would like to try with … the pre-compiled Windows version.
Compiled Windows Client - Download

and trust me or not, IClass 13.56 work perfectly with OS and Firmware version from pre-compiled Windows software (I found binary for 2.5 version)
Each command respond very well and I didn't have for even one time a error.

a example output, impossible to make with repo iceman or official.
very Strange no ?...

I conclude that my PM3 don't have any hardware problem, but the mystery remains …

C:\ProxSpace-master\pm3-bin-2.5.0\win32 (client+GUI)>proxmark3.exe com7
Prox/RFID mark3 RFID instrument
bootrom: /-suspect 2015-11-19 10:08:02
os: /-suspect 2015-11-19 10:08:09
LF FPGA image built for 2s30vq100 on 2015/03/06 at 07:38:04
HF FPGA image built for 2s30vq100 on 2015/11/ 2 at  9: 8: 8

uC: AT91SAM7S512 Rev B
Embedded Processor: ARM7TDMI
Nonvolatile Program Memory Size: 512K bytes. Used: 169916 bytes (32%). Free: 354372 bytes (68%).
Second Nonvolatile Program Memory Size: None
Internal SRAM Size: 64K bytes
Architecture Identifier: AT91SAM7Sxx Series
Nonvolatile Program Memory Type: Embedded Flash Memory
proxmark3>
proxmark3>
proxmark3>
proxmark3> hw tun

Measuring antenna characteristics, please wait...#db# DownloadFPGA(len: 42096)
....#db# DownloadFPGA(len: 42096)
.
# LF antenna: 29.29 V @   125.00 kHz
# LF antenna: 21.31 V @   134.00 kHz
# LF optimal: 29.29 V @   125.00 kHz
# HF antenna: 18.93 V @    13.56 MHz
Displaying LF tuning graph. Divisor 89 is 134khz, 95 is 125khz.



proxmark3>
proxmark3> hf search

CSN: 37 b8 15 00 fb ff 12 e0
CC: 94 ed ff ff ff ff ff ff
        Mode: Application [Locked]
        Coding: ISO 14443-2 B/ISO 15693
        Crypt: Secured page, keys not locked
        RA: Read access not enabled
  Mem: 16 KBits/2 App Areas (255 * 8 bytes) [9F]
        AA1: blocks 06-12
        AA2: blocks 13-FF

Valid iClass Tag (or PicoPass Tag) Found - Quiting Search

proxmark3> hf search

CSN: 37 b8 15 00 fb ff 12 e0
CC: 94 ed ff ff ff ff ff ff
        Mode: Application [Locked]
        Coding: ISO 14443-2 B/ISO 15693
        Crypt: Secured page, keys not locked
        RA: Read access not enabled
  Mem: 16 KBits/2 App Areas (255 * 8 bytes) [9F]
        AA1: blocks 06-12
        AA2: blocks 13-FF

Valid iClass Tag (or PicoPass Tag) Found - Quiting Search


! ... I do it 10 times without error ... !

Shall I re-test with iceman repo again ?

Last edited by Shashadow (2018-05-29 21:51:28)

Offline

#4 2018-05-29 21:50:54

Shashadow
Contributor
Registered: 2018-03-13
Posts: 58

Re: unable to read/write thincard iclass card (only)

maybe a clue …
with pre-compiled Windows software, "B" led stay Always on when I make "hf search" with iclass card
and switch off if a use another card as mifare

it's not the case with official or iceman repo (led always off)

Last edited by Shashadow (2018-05-29 21:52:24)

Offline

#5 2018-05-29 22:03:26

iceman
Administrator
Registered: 2013-04-25
Posts: 9,538
Website

Re: unable to read/write thincard iclass card (only)

hm..  v2.5.0 precompiled is Aspers old bin-distro.  Dunno which commit its based upon.

If you have time, you can take a look at the releases from offical repo and see which works well with iClass?

https://github.com/Proxmark/proxmark3/releases

Offline

#6 2018-05-29 22:53:46

Shashadow
Contributor
Registered: 2018-03-13
Posts: 58

Re: unable to read/write thincard iclass card (only)

just version 3.0.x are available, so I tried with both 3.0.0 and 3.0.1.

and …
… contrary to 2.5 version, with 3.0.x, hf search work ... most of time ... but NOT Always (but more than last release iceman/official repo from today)

diff between 2.5 and 3.0.0, only HF FPGA change (I didn't see any diff between 3.0.0 and 3.0.1)
(2.5)
LF FPGA image built for 2s30vq100 on 2015/03/06 at 07:38:04
HF FPGA image built for 2s30vq100 on 2015/11/ 2 at  9: 8: 8

(3.0.x)
LF FPGA image built for 2s30vq100 on 2015/03/06 at 07:38:04
HF FPGA image built for 2s30vq100 on 2017/05/17 at 17:48:26

output example 3.0.0

13 times
9 good
4 bad

pm3 ~/client$ proxmark3.exe com3
Prox/RFID mark3 RFID instrument
bootrom: /-suspect 2018-05-29 21:15:38
os: /-suspect 2018-05-29 21:15:46
LF FPGA image built for 2s30vq100 on 2015/03/06 at 07:38:04
HF FPGA image built for 2s30vq100 on 2017/05/17 at 17:48:26

uC: AT91SAM7S512 Rev B
Embedded Processor: ARM7TDMI
Nonvolatile Program Memory Size: 512K bytes. Used: 189895 bytes (36%). Free: 334393 bytes (64%).
Second Nonvolatile Program Memory Size: None
Internal SRAM Size: 64K bytes
Architecture Identifier: AT91SAM7Sxx Series
Nonvolatile Program Memory Type: Embedded Flash Memory
proxmark3>
proxmark3> hf search

CSN: 37 b8 15 00 fb ff 12 e0
CC: 94 ed ff ff ff ff ff ff
        Mode: Application [Locked]
        Coding: ISO 14443-2 B/ISO 15693
        Crypt: Secured page, keys not locked
        RA: Read access not enabled
  Mem: 16 KBits/2 App Areas (255 * 8 bytes) [9F]
        AA1: blocks 06-12
        AA2: blocks 13-FF

Valid iClass Tag (or PicoPass Tag) Found - Quiting Search

proxmark3> hf search


14443-3b tag found:
Unknown tag type answered to a 0x0C command ans:
06 b7 02 60 ff 5f 02 fc 31 53

Valid ISO14443B Tag Found - Quiting Search

proxmark3> hf search

CSN: 37 b8 15 00 fb ff 12 e0
CC: 94 ed ff ff ff ff ff ff
        Mode: Application [Locked]
        Coding: ISO 14443-2 B/ISO 15693
        Crypt: Secured page, keys not locked
        RA: Read access not enabled
  Mem: 16 KBits/2 App Areas (255 * 8 bytes) [9F]
        AA1: blocks 06-12
        AA2: blocks 13-FF

Valid iClass Tag (or PicoPass Tag) Found - Quiting Search

proxmark3> hf search

CSN: 37 b8 15 00 fb ff 12 e0
CC: 94 ed ff ff ff ff ff ff
        Mode: Application [Locked]
        Coding: ISO 14443-2 B/ISO 15693
        Crypt: Secured page, keys not locked
        RA: Read access not enabled
  Mem: 16 KBits/2 App Areas (255 * 8 bytes) [9F]
        AA1: blocks 06-12
        AA2: blocks 13-FF

Valid iClass Tag (or PicoPass Tag) Found - Quiting Search

proxmark3> hf search


14443-3b tag found:
Unknown tag type answered to a 0x0C command ans:
06 b7 02 60 ff 5f 02 fc 31 53

Valid ISO14443B Tag Found - Quiting Search

proxmark3> hf search

CSN: 37 b8 15 00 fb ff 12 e0
        Mode: Application [Locked]
        Coding: ISO 14443-2 B/ISO 15693
        Crypt: Secured page, keys not locked
        RA: Read access not enabled
  Mem: 16 KBits/2 App Areas (255 * 8 bytes) [9F]
        AA1: blocks 06-12
        AA2: blocks 13-FF

Valid iClass Tag (or PicoPass Tag) Found - Quiting Search

proxmark3> hf search

CSN: 37 b8 15 00 fb ff 12 e0
CC: 94 ed ff ff ff ff ff ff
        Mode: Application [Locked]
        Coding: ISO 14443-2 B/ISO 15693
        Crypt: Secured page, keys not locked
        RA: Read access not enabled
  Mem: 16 KBits/2 App Areas (255 * 8 bytes) [9F]
        AA1: blocks 06-12
        AA2: blocks 13-FF

Valid iClass Tag (or PicoPass Tag) Found - Quiting Search

proxmark3> hf search


14443-3b tag found:
Unknown tag type answered to a 0x0C command ans:
06 b7 02 60 ff 5f 02 fc 31 53

Valid ISO14443B Tag Found - Quiting Search

proxmark3> hf search

CSN: 37 b8 15 00 fb ff 12 e0
        Mode: Application [Locked]
        Coding: ISO 14443-2 B/ISO 15693
        Crypt: Secured page, keys not locked
        RA: Read access not enabled
  Mem: 16 KBits/2 App Areas (255 * 8 bytes) [9F]
        AA1: blocks 06-12
        AA2: blocks 13-FF

Valid iClass Tag (or PicoPass Tag) Found - Quiting Search

proxmark3> hf search

CSN: 37 b8 15 00 fb ff 12 e0
CC: 94 ed ff ff ff ff ff ff
        Mode: Application [Locked]
        Coding: ISO 14443-2 B/ISO 15693
        Crypt: Secured page, keys not locked
        RA: Read access not enabled
  Mem: 16 KBits/2 App Areas (255 * 8 bytes) [9F]
        AA1: blocks 06-12
        AA2: blocks 13-FF

Valid iClass Tag (or PicoPass Tag) Found - Quiting Search

proxmark3> hf search

CSN: 37 b8 15 00 fb ff 12 e0
CC: 94 ed ff ff ff ff ff ff
        Mode: Application [Locked]
        Coding: ISO 14443-2 B/ISO 15693
        Crypt: Secured page, keys not locked
        RA: Read access not enabled
  Mem: 16 KBits/2 App Areas (255 * 8 bytes) [9F]
        AA1: blocks 06-12
        AA2: blocks 13-FF

Valid iClass Tag (or PicoPass Tag) Found - Quiting Search

proxmark3> hf search


14443-3b tag found:
Unknown tag type answered to a 0x0C command ans:
06 b7 02 60 ff 5f 02 fc 31 53

Valid ISO14443B Tag Found - Quiting Search

proxmark3> hf search

CSN: 37 b8 15 00 fb ff 12 e0
        Mode: Application [Locked]
        Coding: ISO 14443-2 B/ISO 15693
        Crypt: Secured page, keys not locked
        RA: Read access not enabled
  Mem: 16 KBits/2 App Areas (255 * 8 bytes) [9F]
        AA1: blocks 06-12
        AA2: blocks 13-FF

Valid iClass Tag (or PicoPass Tag) Found - Quiting Search

proxmark3>



and output version 3.0.1

12 times
7 good
5 bad

pm3 ~/client$ proxmark3.exe com3
Prox/RFID mark3 RFID instrument
bootrom: /-suspect 2018-05-29 21:36:30
os: /-suspect 2018-05-29 21:36:37
LF FPGA image built for 2s30vq100 on 2015/03/06 at 07:38:04
HF FPGA image built for 2s30vq100 on 2017/05/17 at 17:48:26

uC: AT91SAM7S512 Rev B
Embedded Processor: ARM7TDMI
Nonvolatile Program Memory Size: 512K bytes. Used: 189895 bytes (36%). Free: 334393 bytes (64%).
Second Nonvolatile Program Memory Size: None
Internal SRAM Size: 64K bytes
Architecture Identifier: AT91SAM7Sxx Series
Nonvolatile Program Memory Type: Embedded Flash Memory
proxmark3> hf search

#db# DownloadFPGA(len: 42096)
CSN: 37 b8 15 00 fb ff 12 e0
CC: 94 ed ff ff ff ff ff ff
        Mode: Application [Locked]
        Coding: ISO 14443-2 B/ISO 15693
        Crypt: Secured page, keys not locked
        RA: Read access not enabled
  Mem: 16 KBits/2 App Areas (255 * 8 bytes) [9F]
        AA1: blocks 06-12
        AA2: blocks 13-FF

Valid iClass Tag (or PicoPass Tag) Found - Quiting Search

proxmark3> hf search

CSN: 37 b8 15 00 fb ff 12 e0
CC: 94 ed ff ff ff ff ff ff
        Mode: Application [Locked]
        Coding: ISO 14443-2 B/ISO 15693
        Crypt: Secured page, keys not locked
        RA: Read access not enabled
  Mem: 16 KBits/2 App Areas (255 * 8 bytes) [9F]
        AA1: blocks 06-12
        AA2: blocks 13-FF

Valid iClass Tag (or PicoPass Tag) Found - Quiting Search

proxmark3> hf search

CSN: 37 b8 15 00 fb ff 12 e0
        Mode: Application [Locked]
        Coding: ISO 14443-2 B/ISO 15693
        Crypt: Secured page, keys not locked
        RA: Read access not enabled
  Mem: 16 KBits/2 App Areas (255 * 8 bytes) [9F]
        AA1: blocks 06-12
        AA2: blocks 13-FF

Valid iClass Tag (or PicoPass Tag) Found - Quiting Search

proxmark3> hf search

CSN: 37 b8 15 00 fb ff 12 e0
        Mode: Application [Locked]
        Coding: ISO 14443-2 B/ISO 15693
        Crypt: Secured page, keys not locked
        RA: Read access not enabled
  Mem: 16 KBits/2 App Areas (255 * 8 bytes) [9F]
        AA1: blocks 06-12
        AA2: blocks 13-FF

Valid iClass Tag (or PicoPass Tag) Found - Quiting Search

proxmark3> hf search

#db# Failed to dump config block
CSN: 37 b8 15 00 fb ff 12 e0
CC: fe ff ff ff ff ff ff ff

Valid iClass Tag (or PicoPass Tag) Found - Quiting Search

proxmark3> hf search


14443-3b tag found:
Unknown tag type answered to a 0x0C command ans:
06 b7 02 60 ff 5f 02 fc 31 53

Valid ISO14443B Tag Found - Quiting Search

proxmark3> hf search

CSN: 37 b8 15 00 fb ff 12 e0
        Mode: Application [Locked]
        Coding: ISO 14443-2 B/ISO 15693
        Crypt: Secured page, keys not locked
        RA: Read access not enabled
  Mem: 16 KBits/2 App Areas (255 * 8 bytes) [9F]
        AA1: blocks 06-12
        AA2: blocks 13-FF

Valid iClass Tag (or PicoPass Tag) Found - Quiting Search

proxmark3> hf search

CSN: 37 b8 15 00 fb ff 12 e0
CC: 94 ed ff ff ff ff ff ff
        Mode: Application [Locked]
        Coding: ISO 14443-2 B/ISO 15693
        Crypt: Secured page, keys not locked
        RA: Read access not enabled
  Mem: 16 KBits/2 App Areas (255 * 8 bytes) [9F]
        AA1: blocks 06-12
        AA2: blocks 13-FF

Valid iClass Tag (or PicoPass Tag) Found - Quiting Search

proxmark3> hf search


14443-3b tag found:
Unknown tag type answered to a 0x0C command ans:
06 b7 02 60 ff 5f 02 fc 31 53

Valid ISO14443B Tag Found - Quiting Search

proxmark3> hf search


14443-3b tag found:
Unknown tag type answered to a 0x0C command ans:
06 b7 02 60 ff 5f 02 fc 31 53

Valid ISO14443B Tag Found - Quiting Search

proxmark3> hf search

CSN: 37 b8 15 00 fb ff 12 e0
        Mode: Application [Locked]
        Coding: ISO 14443-2 B/ISO 15693
        Crypt: Secured page, keys not locked
        RA: Read access not enabled
  Mem: 16 KBits/2 App Areas (255 * 8 bytes) [9F]
        AA1: blocks 06-12
        AA2: blocks 13-FF

Valid iClass Tag (or PicoPass Tag) Found - Quiting Search

proxmark3> hf search

#db# Failed to dump config block
CSN: 37 b8 15 00 fb ff 12 e0
CC: fe ff ff ff ff ff ff ff

Valid iClass Tag (or PicoPass Tag) Found - Quiting Search

proxmark3>

the only version witch make a perfect is 2.5.
and this seem related with HF FPGA image built for 2s30vq100 (2015 for 2.5 and 2017 for 3.0.x)

Do I am the only one to have this issue ?

Last edited by Shashadow (2018-05-29 22:59:16)

Offline

#7 2018-05-29 23:41:07

Shashadow
Contributor
Registered: 2018-03-13
Posts: 58

Re: unable to read/write thincard iclass card (only)

Hmmm, maybe i'm not the only one...
http://www.proxmark.org/forum/viewtopic.php?id=5450

He said sometime it just not working, and just in rare chance he have a good output.

Offline

#8 2018-05-31 01:56:09

brantz
Contributor
Registered: 2014-03-19
Posts: 50

Re: unable to read/write thincard iclass card (only)

you are not alone, and this issue seems only happen on thin card, clamshell and fob never had this issue.

Offline

#9 2018-05-31 08:23:19

Shashadow
Contributor
Registered: 2018-03-13
Posts: 58

Re: unable to read/write thincard iclass card (only)

… too bad sad I only have thin card for play and learn iclass
anyway this issue doesn't exist with release 2.5 software from Asper.

working :
HF FPGA image built for 2s30vq100 on 2015/11/ 2 at  9: 8: 8

not working :
HF FPGA image built for 2s30vq100 on 2017/05/17 at 17:48:26
HF image built for 2s30vq100 on 2017/11/10 at 19:24:16
…

this mean something horrible is happen after build HF from 2015 mad

Last edited by Shashadow (2018-05-31 13:15:08)

Offline

Pages: 1

Board footer

Powered by FluxBB