Proxmark3 community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

Announcement

Time changes and with it the technology
Proxmark3 @ discord

Users of this forum, please be aware that information stored on this site is not private.

#1 2018-06-02 23:24:40

Sammie
Contributor
Registered: 2018-06-01
Posts: 3

T55XX emulating EM4305 Card

I have a LF parking card that I'm trying to make a backup copy.

When I do the search, detect, info....it says valid Indala ID found, em4305 chip.

I've dumped the card.

I've tried writing to blank T55xx cards, but am having trouble with Block 0.

It's my understanding that the T55xx cards can emulate a wide range of LF tags...including EM4305.  And that block 0 is the data that tells the T55 which one to emulate.  I've read the data sheets.  My block 0 from the dump is "00040072" which is exactly what the data sheets specify for an EM4305 tag.

I can write all other blocks, but when I try to write block 0, then do LF detect and dump...I get nothing.  I can do a "wipe".  I can write block 0 to other valid tag types, but not this one.

Any help?  I'll happily post screenshots of all the original tag and T55xx cards search, detect, info, dump, etc... but thought it would be overkill if there's a simple answer like "it can't be done".

Offline

#2 2018-06-03 12:48:20

marshmellow
Contributor
From: US
Registered: 2013-06-10
Posts: 2,302

Re: T55XX emulating EM4305 Card

The em4305 is a configurable chip like the t55x7 chips.  The configuration blocks are quite different from each other however.
Don't  use an em4305 configuration setting on a t55x7..

If you're strictly interested in a clone Focus your attention more on the first part of the lf search.

And if you'd like  to share with the community  then by all means share your tag info.

Offline

#3 2018-06-03 16:51:36

Sammie
Contributor
Registered: 2018-06-01
Posts: 3

Re: T55XX emulating EM4305 Card

LF search of original tag
tag:IMG_0939_zps3kogjc3e.jpg

EM 4x05info of original tag
IMG_0941_zps9rvlz5fr.jpg

EM 4x05dump of original tag
IMG_0940_zpsnpia6umf.jpg

T55XX dump of blank card
IMG_0943_zpsyx4ozb9u.jpg

T55xx info of blank card
IMG_0942_zps238qdcgo.jpg

Attempt at writing b 0 on T55xx card...I know this example doesn't show me writing "00040072" but I was trying different values and it gave me the same result after writing.  And I also did "detect" after writing and before dump.  I have been able to successfully write all other blocks, except block 2 .
IMG_0945_zpscb4ynuj6.jpg

Offline

Board footer

Powered by FluxBB