Proxmark3 community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

Announcement

Time changes and with it the technology
Proxmark3 @ discord

Users of this forum, please be aware that information stored on this site is not private.

Pages: 1

#1 2020-07-23 17:04:30

austinchoo2
Contributor
Registered: 2020-07-22
Posts: 4

Unable to Flash on ttyACM0 (PM3 from Gezhi Eletronic)

Hi guys,

I'm having an issue flashing my PM3 from Gezhi Eletronic co. on VirtualBox Linux kali 5.4.0-kali4-amd64 #1 SMP Debian 5.4.19-1kali1 (2020-02-17) x86_64 GNU/Linux. I followed the extract steps from github installation guide below but faced issues.

https://github.com/RfidResearchGroup/pr … uctions.md produces Linux-Installation-Instructions.

I have search around forums and try many solution but still unable to do so I am posting this and hope someone can help me.

Kali linux USB detected Proxmark

lsusb 

Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 002 Device 003: ID 80ee:0021 VirtualBox USB Tablet
Bus 002 Device 016: ID 2d2d:504d proxmark.org 
Bus 002 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub

Check connection

sudo dmesg | grep -i usb

[  591.239195] usb 2-1: USB disconnect, device number 15
[  598.011718] usb 2-1: new full-speed USB device number 16 using ohci-pci
[  598.515826] usb 2-1: New USB device found, idVendor=2d2d, idProduct=504d, bcdDevice= 0.01
[  598.515831] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[  598.515835] usb 2-1: Manufacturer: proxmark.org
[  598.549175] cdc_acm 2-1:1.0: ttyACM0: USB ACM device
Bus 002 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub

The important part remove ModemManager

apt remove modemmanager

Reading package lists... Done
Building dependency tree       
Reading state information... Done
Package 'modemmanager' is not installed, so not removed

Get permissions to use /dev/ttyACM0

[ -r /dev/ttyACM0 ] && [ -w /dev/ttyACM0 ] && echo ok
ok

Flash the BOOTROM & FULLIMAGE  (tried pm3-flash-bootrom, pm3-flash-fullimage)

pm3-flash-all
[=] Session log /root/.proxmark3/logs/log_20200723.txt
[+] loaded from JSON file /root/.proxmark3/preferences.json
[+] About to use the following files:
[+]    /usr/local/bin/../share/proxmark3/firmware/bootrom.elf
[+]    /usr/local/bin/../share/proxmark3/firmware/fullimage.elf
[+] Waiting for Proxmark3 to appear on /dev/ttyACM0
 ?  59 found
[+] Entering bootloader...
[+] (Press and release the button only to abort)
[+] Waiting for Proxmark3 to appear on /dev/ttyACM0
 ?  59 found
[=] You can cancel this operation by pressing the pm3 button

[!] ⚠️  Communicating with Proxmark3 device failed
proxmark3 /dev/ttyACM0 --flash --unlock-bootloader --image bootrom.elf --image fullimage.elf
[=] Session log /root/.proxmark3/logs/log_20200723.txt
[+] loaded from JSON file /root/.proxmark3/preferences.json
[+] About to use the following files:
[+]    /usr/local/bin/../share/proxmark3/firmware/bootrom.elf
[+]    /usr/local/bin/../share/proxmark3/firmware/fullimage.elf
[+] Waiting for Proxmark3 to appear on /dev/ttyACM0
 ?  59 found
[+] Entering bootloader...
[+] (Press and release the button only to abort)
[+] Waiting for Proxmark3 to appear on /dev/ttyACM0
 ?  59 found
[=] You can cancel this operation by pressing the pm3 button

[!] ⚠️  Communicating with Proxmark3 device failed
proxmark3 /dev/ttyACM0
[=] Session log /root/.proxmark3/logs/log_20200723.txt
[+] loaded from JSON file /root/.proxmark3/preferences.json
[=] Using UART port /dev/ttyACM0
unknown command:: 0x61334d50[!!] ? ERROR: cannot communicate with the Proxmark

Flash the BOOTROM & FULLIMAGE (Press and hold the PM3 button)

pm3-flash-all
[=] Session log /root/.proxmark3/logs/log_20200723.txt
[+] loaded from JSON file /root/.proxmark3/preferences.json
[+] About to use the following files:
[+]    /usr/local/bin/../share/proxmark3/firmware/bootrom.elf
[+]    /usr/local/bin/../share/proxmark3/firmware/fullimage.elf
[+] Waiting for Proxmark3 to appear on /dev/ttyACM0
 ?  59 found
[!!] ? Error: Unknown Proxmark3 mode
UART:: write time-out
UART:: write time-out
[+] All done

Have a nice day!

Press and hold the PM3 button then plug in PM3 and run

proxmark3 /dev/ttyACM0 --flash --unlock-bootloader --image bootrom.elf --image fullimage.elf
[=] Session log /root/.proxmark3/logs/log_20200723.txt
[+] loaded from JSON file /root/.proxmark3/preferences.json
[+] About to use the following files:
[+]    /usr/local/bin/../share/proxmark3/firmware/bootrom.elf
[+]    /usr/local/bin/../share/proxmark3/firmware/fullimage.elf
[+] Waiting for Proxmark3 to appear on /dev/ttyACM0
 ?  59 found
[!!] ? ====================== OBS ! ===========================================
[!!] ? Note: Your bootloader does not understand the new CMD_BL_VERSION command
[!!] ? It is recommended that you first update your bootloader alone,
[!!] ? reboot the Proxmark3 then only update the main firmware

[=] Available memory on this board: UNKNOWN

[!!] ? ====================== OBS ! ======================================
[!!] ? Note: Your bootloader does not understand the new CHIP_INFO command
[!!] ? It is recommended that you first update your bootloader alone,
[!!] ? reboot the Proxmark3 then only update the main firmware

[=] Permitted flash range: 0x00100000-0x00140000
[+] Loading ELF file /usr/local/bin/../share/proxmark3/firmware/bootrom.elf
[+] Loading usable ELF segments:
[+]    0: V 0x00100000 P 0x00100000 (0x00000200->0x00000200) [R X] @0x94
[+]    1: V 0x00200000 P 0x00100200 (0x00000d28->0x00000d28) [R X] @0x298

[+] Loading ELF file /usr/local/bin/../share/proxmark3/firmware/fullimage.elf
[+] Loading usable ELF segments:
[+]    0: V 0x00102000 P 0x00102000 (0x0003d4c0->0x0003d4c0) [R X] @0x94
[+]    1: V 0x00200000 P 0x0013f4c0 (0x0000197c->0x0000197c) [RW ] @0x3d554
[!!] ? Error: PHDR is not contained in Flash
[+] All done

Have a nice day!

Look like proxmark tool unable detect ttyACM0 However, in "sudo dmesg | grep -i usb" shown it was there.

Any one can help with this. I will really appreciate it.

Offline

#2 2020-07-23 17:28:57

fazer
Contributor
Registered: 2019-03-02
Posts: 156

Re: Unable to Flash on ttyACM0 (PM3 from Gezhi Eletronic)

Good evening, tried with it,
cd proxmark3
: ~ / proxmark3 $ ./pm3-flash-all # there is no need to press the button, it switches to flash mode by itself.
Good evening

Offline

#3 2020-07-24 04:15:09

austinchoo2
Contributor
Registered: 2020-07-22
Posts: 4

Re: Unable to Flash on ttyACM0 (PM3 from Gezhi Eletronic)

Hi Fazer,

I have tried with or without press the button as the result shown above. I am still unable to flash it. I am not really sure what is the issue that I really facing to.

Offline

#4 2020-07-24 07:27:56

iceman
Administrator
Registered: 2013-04-25
Posts: 9,538
Website

Re: Unable to Flash on ttyACM0 (PM3 from Gezhi Eletronic)

Your flash failed, 
Did you compile the repo for non-rdv4 / aka generic pm3?   

https://github.com/RfidResearchGroup/pr … ameters.md

Offline

#5 2020-07-25 08:28:39

austinchoo2
Contributor
Registered: 2020-07-22
Posts: 4

Re: Unable to Flash on ttyACM0 (PM3 from Gezhi Eletronic)

Yes, it worked after I tried following steps to compile with non-rdv4.

Created the following Makefile.platform

cat Makefile.platform
# If you want to use it, copy this file as Makefile.platform and adjust it to your needs
# Run 'make PLATFORM=' to get an exhaustive list of possible parameters for this file.

#PLATFORM=PM3RDV4
PLATFORM=PM3OTHER
# If you want more than one PLATFORM_EXTRAS option, separate them by spaces:
#PLATFORM_EXTRAS=BTADDON
STANDALONE=HF_MSDSAL
make clean && make all

===================================================================
Platform name:     Proxmark3 Generic target
PLATFORM:          PM3OTHER
Platform extras:   No extra selected
Included options:  LF HITAG EM4x50 ISO15693 LEGICRF ISO14443b ISO14443a ICLASS FELICA NFCBARCODE HFSNIFF HFPLOT
Standalone mode:   HF_MSDSAL
===================================================================
[*] MAKE client/clean
===================================================================
Client platform:   Linux
GUI support:       QT5 found, enabled
native BT support: Bluez found, enabled
Jansson library:   system library not found, using local library
Lua library:       system library not found, using local library
Python3 library:   Python3 v3.8 found, enabled
Readline library:  enabled
Whereami library:  system library not found, using local library
compiler version:  gcc (Debian 9.3.0-10) 9.3.0
===================================================================
[*] MAKE bootrom/clean
[*] MAKE fpga_compress/clean
[*] MAKE armsrc/clean
[*] MAKE recovery/clean
[*] MAKE mfkey/clean
[*] MAKE nonce2key/clean
[*] MAKE mf_nonce_brute/clean

===================================================================
Platform name:     Proxmark3 Generic target
PLATFORM:          PM3OTHER
Platform extras:   No extra selected
Included options:  LF HITAG EM4x50 ISO15693 LEGICRF ISO14443b ISO14443a ICLASS FELICA NFCBARCODE HFSNIFF HFPLOT
Standalone mode:   HF_MSDSAL
===================================================================
[*] MAKE client/all
===================================================================
Client platform:   Linux
GUI support:       QT5 found, enabled
native BT support: Bluez found, enabled
Jansson library:   system library not found, using local library
Lua library:       system library not found, using local library
Python3 library:   Python3 v3.8 found, enabled
Readline library:  enabled
Whereami library:  system library not found, using local library
compiler version:  gcc (Debian 9.3.0-10) 9.3.0
===================================================================
[-] CC src/aidsearch.c
[-] CC src/cmdanalyse.c
[-] CC src/cmdcrc.c

-------------------------------------------------snip------------------------------------------------------------------

The flashing worked with some error message(I missed to copy it) but I able to access /dev/ttyACM0 and try Validating proxmark client functionality

./client/proxmark3 /dev/ttyACM0 
[=] Session log /root/.proxmark3/logs/log_20200725.txt
[+] loaded from JSON file /root/.proxmark3/preferences.json
[=] Using UART port /dev/ttyACM0
[=] Communicating with PM3 over USB-CDC


  ██████╗ ███╗   ███╗█████╗ 
  ██╔══██╗████╗ ████║╚═══██╗
  ██████╔╝██╔████╔██║ ████╔╝
  ██╔═══╝ ██║╚██╔╝██║ ╚══██╗
  ██║     ██║ ╚═╝ ██║█████╔╝     ❄️  iceman@icesql.net
  ╚═╝     ╚═╝     ╚═╝╚════╝    bleeding edge ☕

  https://github.com/rfidresearchgroup/proxmark3/


 [ Proxmark3 RFID instrument ]

 [ CLIENT ]
  client: RRG/Iceman/master/v4.9237-611-g551bc6c7 2020-07-24 23:16:51
  compiled with GCC 9.3.0 OS:Linux ARCH:x86_64

 [ PROXMARK3 ]

 [ ARM ]
  bootrom: RRG/Iceman/master/v4.9237-611-g551bc6c7 2020-07-24 23:17:21
       os: RRG/Iceman/master/v4.9237-611-g551bc6c7 2020-07-24 23:17:36
  compiled with GCC 8.3.1 20190703 (release) [gcc-8-branch revision 273027]

 [ FPGA ]
  LF image built for 2s30vq100 on 2020-02-22 at 12:51:14
  HF image built for 2s30vq100 on 2020-01-12 at 15:31:16

 [ Hardware ]
  --= uC: AT91SAM7S256 Rev A
  --= Embedded Processor: ARM7TDMI
  --= Nonvolatile Program Memory Size: 256K bytes, Used: 226512 bytes (86%) Free: 35632 bytes (14%)
  --= Second Nonvolatile Program Memory Size: None
  --= Internal SRAM Size: 256K bytes
  --= Architecture Identifier: AT91SAM7Sxx Series
  --= Nonvolatile Program Memory Type: Embedded Flash Memory

[usb] pm3 --> hw status
[#] Memory
[#]   BigBuf_size.............43924
[#]   Available memory........43924
[#] Tracing
[#]   tracing ................1
[#]   traceLen ...............30
[#] Current FPGA image
[#]   mode.................... HF image built for 2s30vq100 on 2020-01-12 at 15:31:16
[#] LF Sampling config
[#]   [q] divisor.............95 ( 125.00 kHz )
[#]   [b] bits per sample.....8
[#]   [d] decimation..........1
[#]   [a] averaging...........No
[#]   [t] trigger threshold...0
[#]   [s] samples to skip.....0 
[#] LF Sampling Stack
[#]   Max stack usage.........4104 / 8480 bytes
[#] LF T55XX config
[#]            [r]               [a]   [b]   [c]   [d]   [e]   [f]   [g]
[#]            mode            |start|write|write|write| read|write|write
[#]                            | gap | gap |  0  |  1  | gap |  2  |  3
[#] ---------------------------+-----+-----+-----+-----+-----+-----+------
[#] fixed bit length (default) |  29 |  17 |  15 |  47 |  15 | N/A | N/A | 
[#]     long leading reference |  29 |  17 |  15 |  47 |  15 | N/A | N/A | 
[#]               leading zero |  29 |  17 |  15 |  40 |  15 | N/A | N/A | 
[#]    1 of 4 coding reference |  29 |  17 |  15 |  31 |  15 |  47 |  63 | 
[#] 
[#] Transfer Speed
[#]   Sending packets to client...
[#]   Time elapsed............504ms
[#]   Bytes transferred.......50688
[#]   Transfer Speed PM3 -> Client = 100571 bytes/s
[#] Various
[#]   Max stack usage.........4104 / 8480 bytes
[#]   DBGLEVEL................1
[#]   ToSendMax...............-1
[#]   ToSendBit...............0
[#]   ToSend BUFFERSIZE.......2308
[#]   Slow clock..............29715 Hz
[#] Installed StandAlone Mode
[#]   HF - Reading Visa cards & Emulating a Visa MSD Transaction(ISO14443) - (Salvador Mendoza)
[usb] pm3 --> hw status
[#] Memory
[#]   BigBuf_size.............43924
[#]   Available memory........43924
[#] Tracing
[#]   tracing ................1
[#]   traceLen ...............30
[#] Current FPGA image
[#]   mode.................... HF image built for 2s30vq100 on 2020-01-12 at 15:31:16
[#] LF Sampling config
[#]   [q] divisor.............95 ( 125.00 kHz )
[#]   [b] bits per sample.....8
[#]   [d] decimation..........1
[#]   [a] averaging...........No
[#]   [t] trigger threshold...0
[#]   [s] samples to skip.....0 
[#] LF Sampling Stack
[#]   Max stack usage.........4104 / 8480 bytes
[#] LF T55XX config
[#]            [r]               [a]   [b]   [c]   [d]   [e]   [f]   [g]
[#]            mode            |start|write|write|write| read|write|write
[#]                            | gap | gap |  0  |  1  | gap |  2  |  3
[#] ---------------------------+-----+-----+-----+-----+-----+-----+------
[#] fixed bit length (default) |  29 |  17 |  15 |  47 |  15 | N/A | N/A | 
[#]     long leading reference |  29 |  17 |  15 |  47 |  15 | N/A | N/A | 
[#]               leading zero |  29 |  17 |  15 |  40 |  15 | N/A | N/A | 
[#]    1 of 4 coding reference |  29 |  17 |  15 |  31 |  15 |  47 |  63 | 
[#] 
[#] Transfer Speed
[#]   Sending packets to client...
[#]   Time elapsed............500ms
[#]   Bytes transferred.......51712
[#]   Transfer Speed PM3 -> Client = 103424 bytes/s
[#] Various
[#]   Max stack usage.........4104 / 8480 bytes
[#]   DBGLEVEL................1
[#]   ToSendMax...............-1
[#]   ToSendBit...............0
[#]   ToSend BUFFERSIZE.......2308
[#]   Slow clock..............29715 Hz
[#] Installed StandAlone Mode
[#]   HF - Reading Visa cards & Emulating a Visa MSD Transaction(ISO14443) - (Salvador Mendoza)
[usb] pm3 --> hw version

 [ Proxmark3 RFID instrument ]

 [ CLIENT ]
  client: RRG/Iceman/master/v4.9237-611-g551bc6c7 2020-07-24 23:16:51
  compiled with GCC 9.3.0 OS:Linux ARCH:x86_64

 [ PROXMARK3 ]

 [ ARM ]
  bootrom: RRG/Iceman/master/v4.9237-611-g551bc6c7 2020-07-24 23:17:21
       os: RRG/Iceman/master/v4.9237-611-g551bc6c7 2020-07-24 23:17:36
  compiled with GCC 8.3.1 20190703 (release) [gcc-8-branch revision 273027]

 [ FPGA ]
  LF image built for 2s30vq100 on 2020-02-22 at 12:51:14
  HF image built for 2s30vq100 on 2020-01-12 at 15:31:16

 [ Hardware ]
  --= uC: AT91SAM7S256 Rev A
  --= Embedded Processor: ARM7TDMI
  --= Nonvolatile Program Memory Size: 256K bytes, Used: 226512 bytes (86%) Free: 35632 bytes (14%)
  --= Second Nonvolatile Program Memory Size: None
  --= Internal SRAM Size: 256K bytes
  --= Architecture Identifier: AT91SAM7Sxx Series
  --= Nonvolatile Program Memory Type: Embedded Flash Memory


[usb] pm3 --> hw tune
[=] Measuring antenna characteristics, please wait...
 ?  10
[=] ---------- LF Antenna ----------
[+] LF optimal: 542862.64 V -   0.00 kHz
[+] LF antenna is OK
[=] ---------- HF Antenna ----------
[+] HF antenna: 14.66 V - 13.56 MHz
[+] HF antenna is OK

[-] ⛔ Not showing LF tuning graph since all values is zero.

However, I received several error when Validating proxmark client functionality and it could due to the LF antenna issue ? So I tried to re-run the flashing again but it happen the same thing like my first post. I am wondering is my initial successful flashing is not completely and make the tool unable to identify the access card.

Last edited by austinchoo2 (2020-07-25 09:11:24)

Offline

#6 2020-07-25 16:43:57

iceman
Administrator
Registered: 2013-04-25
Posts: 9,538
Website

Re: Unable to Flash on ttyACM0 (PM3 from Gezhi Eletronic)

your usb speed is very slow.   Check your cable and usb port.

Transfer Speed PM3 -> Client = 103424 bytes/s

Offline

#7 2021-05-13 19:00:09

mochenmat
Contributor
Registered: 2021-05-11
Posts: 6

Re: Unable to Flash on ttyACM0 (PM3 from Gezhi Eletronic)

Thank you for posting this....i was seriously pulling my hair out for the past week trying to figure this out....

Offline

Pages: 1

Board footer

Powered by FluxBB