Proxmark3 community

tp

Contributor

Registered: 2019-04-05

Posts: 4

[SOLVED] [RDV4] LF HID Card Not able to clone to T55x7

I have used the original PM3 for awhile now ( clone's hid to my t55x7 fobs just great ) , and just decided to get the RDV4.0 since it would be easier to carry, without the external antennas.   But.... I can't seem to clone lf hid cards...  Just says Preparing to clone HID tag with ID.    I have tried latest rfidresearchgroup rvd4.0 codebase, proxmark 3.1.0 official, all with the same results.   Think this looks like something with the lf antenna.   So I am looking for some help to see if this is known issue, something I can do about it, etc.

Any help is appreciated.

tp

-----

[=] UART Setting serial baudrate 460800

[ Proxmark3 RFID instrument ]

[ CLIENT ]
  client: iceman build for RDV40 with flashmem; smartcard;

[ ARM ]
bootrom: iceman/master/ad97aa3d 2019-04-04 23:14:42
      os: iceman/master/ad97aa3d 2019-04-04 23:14:58

[ FPGA ]
LF image built for 2s30vq100 on 2018/ 9/ 8 at 13:57:51
HF image built for 2s30vq100 on 2018/ 9/ 3 at 21:40:23

[ Hardware ]
  --= uC: AT91SAM7S512 Rev A
  --= Embedded Processor: ARM7TDMI
  --= Nonvolatile Program Memory Size: 512K bytes, Used: 242592 bytes (46%) Free: 281696 bytes (54%)
  --= Second Nonvolatile Program Memory Size: None
  --= Internal SRAM Size: 64K bytes
  --= Architecture Identifier: AT91SAM7Sxx Series
  --= Nonvolatile Program Memory Type: Embedded Flash Memory

pm3 --> hw tune

[=] measuring antenna characteristics, please wait...

....

[+] LF antenna: 71.38 V - 125.00 kHz
[+] LF antenna: 40.65 V - 134.00 kHz
[+] LF optimal: 71.38 V - 125.00 kHz
[+] LF antenna is OK

[+] HF antenna: 50.14 V - 13.56 MHz
[+] HF antenna is OK

[+] Displaying LF tuning graph. Divisor 89 is 134khz, 95 is 125khz.

pm3 --> lf hid read 1
[+] HID Prox TAG ID: 1cca045443 (10953) - Format Len: 37bit - FC: 52384 - Card: 142025
pm3 --> lf hid clone 1cca045444
[=] Preparing to clone HID tag with ID 1cca045444

Last edited by tp (2019-04-05 21:05:48)

iceman

Administrator

Registered: 2013-04-25

Posts: 9,537

Website

Re: [SOLVED] [RDV4] LF HID Card Not able to clone to T55x7

Can't find any problems.  You don't get a response that the cloning is done.  And you need to have the t55x7 card above the lf antenna.

pm3 --> lf hid clone 1cca045444
[=] Preparing to clone HID tag with ID 1cca045444
pm3 --> lf sea
[=] NOTE: some demods output possible binary
[=] if it finds something that looks like a tag
[=] False Positives ARE possible
[=]
[=] Checking for known tags...

[+] HID Prox TAG ID: 1cca045444 (10786) - Format Len: 37bit - FC: 52384 - Card: 141858

[+] Valid HID Prox ID  found!
pm3 -->

tp

Contributor

Registered: 2019-04-05

Posts: 4

Re: [SOLVED] [RDV4] LF HID Card Not able to clone to T55x7

Hmm... It don't work with mine.  Wonder if I have a defective RDV4.0?  Tried various cards, tags, all with the same result.  My old original PM3 works everytime.  Didn't move the fob from read to, clone, to read....

Tim

pm3 --> lf hid read 1
[+] HID Prox TAG ID: 1cca045593 (10953) - Format Len: 37bit - FC: 52384 - Card: 142025

pm3 --> lf hid clone 1cca045555
[=] Preparing to clone HID tag with ID 1cca045555

pm3 --> lf sea
[=] NOTE: some demods output possible binary
[=] if it finds something that looks like a tag
[=] False Positives ARE possible
[=]
[=] Checking for known tags...

[+] HID Prox TAG ID: 1cca045593 (10953) - Format Len: 37bit - FC: 52384 - Card: 142025

[+] Valid HID Prox ID  found!

Last edited by tp (2019-04-05 20:26:33)

iceman

Administrator

Registered: 2013-04-25

Posts: 9,537

Website

Re: [SOLVED] [RDV4] LF HID Card Not able to clone to T55x7

Very doubtful since you have 70v and can read/write LF.

First you need to remember the LF antenna on the dual antenna is small and on the top half of the antenna.
Easy to misposition your tag above antenna.  ie. try different positions and distances between tag / antenna.

Your output doesn't match up however,  clone one id and read another.

tp

Contributor

Registered: 2019-04-05

Posts: 4

Re: [SOLVED] [RDV4] LF HID Card Not able to clone to T55x7

The output is showing I read an existing T55x7 card that I programmed on my original PM3, and could read it on the RDV4.0.  But I can not reprogram it.   I have moved it all over and had no success.

With what you mentioned, I had an idea to remove the case and place it directly on the antenna... and SUCCESS.  So the 1/8" gap seems to cause the failure to write.   

Can live with it, just a challenge I wasn't expecting.   The original PM had that giant LF antenna and I could read / write the same FOB at lease a couple inches away with no problem.

Thanks

iceman

Administrator

Registered: 2013-04-25

Posts: 9,537

Website

Re: [SOLVED] [RDV4] LF HID Card Not able to clone to T55x7

Glad to hear.  I suggest you edit your first post and add the prefix "solved" to your title.

and no worries,  there is a improved lf antenna on the way which will solve that particular problem of writing to t55xx tags.
However the antenna you have read (lf search) from a nice distance