Proxmark3 community
Research, development and trades concerning the powerful Proxmark3 device.
Remember; sharing is caring. Bring something back to the community.
"Learn the tools of the trade the hard way." +Fravia
You are not logged in.
Announcement
Time changes and with it the technology
Proxmark3 @ discord
Users of this forum, please be aware that information stored on this site is not private.
#1 2020-07-24 16:46:10
- jirvin
- Contributor
- Registered: 2020-07-23
- Posts: 7
Card doesn't support standard iso14443-3 anticollision ATQA: 00 00
Hi,
Using a proxmark3 Easy. I was trying to restore a card dump to a Chinese (Gen1a) magic tag which had some auth errors. Afterwards I tried hf search to see if anything was written to the card. I have dumped (hf mf dump) the same original card before and restored (hf mf restore) it to a different magic (Gen1a) tag with no problems.
Please see the screenshot for command output and details. The screenshot starts with the original output from hf mf search before trying to write anything to it. Following that is after I tried to write anything to the tag and some 'fixes' Ive tried with no avail.
Any suggestions are greatly appreciated. I'm happy to provide more info and output of any commands that may help. Have I bricked the tag??!
Thanks in advance!
(Sorry for the large screenshot!!)
Offline
#2 2020-07-26 03:10:14
- jirvin
- Contributor
- Registered: 2020-07-23
- Posts: 7
Re: Card doesn't support standard iso14443-3 anticollision ATQA: 00 00
I am running a PM3 Easy and have updated the client (Iceman fork), bootrom (Iceman) and OS (Iceman). Big thanks to Iceman!
[usb] pm3 --> hw ver
[ Proxmark3 RFID instrument ]
[ CLIENT ]
client: RRG/Iceman/master/v4.9237-618-g84a49bf0 2020-07-23 23:29:11
compiled with GCC 7.5.0 OS:Linux ARCH:x86_64
[ PROXMARK3 ]
[ ARM ]
bootrom: RRG/Iceman/master/v4.9237-618-g84a49bf0 2020-07-23 22:32:11
os: RRG/Iceman/master/v4.9237-618-g84a49bf0 2020-07-23 22:32:18
compiled with GCC 9.2.1 20191025 (release) [ARM/arm-9-branch revision 277599]
[ FPGA ]
LF image built for 2s30vq100 on 2020-02-22 at 12:51:14
HF image built for 2s30vq100 on 2020-01-12 at 15:31:16
[ Hardware ]
--= uC: AT91SAM7S512 Rev B
--= Embedded Processor: ARM7TDMI
--= Nonvolatile Program Memory Size: 512K bytes, Used: 227408 bytes (43%) Free: 296880 bytes (57%)
--= Second Nonvolatile Program Memory Size: None
--= Internal SRAM Size: 64K bytes
--= Architecture Identifier: AT91SAM7Sxx Series
--= Nonvolatile Program Memory Type: Embedded Flash MemoryI done some reading and looks like the tag is 'damaged' and needs repair. From what Ive read that should solve a bad block 0 on a magic tag is:
Rewriting UID, ATQA & SAK - hf mf csetuid
Running the scripts Remagic.lua & formatMifare.lua
I have tried the above and still have the same issue as before. Not sure if I have mistake the problem as something else thus these steps wouldnt work anyway.
Here are the output of the commands following a test (hf 14a read) to see if it has worked.
Rewriting UID, ATQA & SAK with csetuid:
usb] pm3 --> hf mf csetuid 01020304 0004 08 w
--wipe card:YES uid:01 02 03 04
[#] Assuming Magic Gen 1B tag. [wupC2 failed]
[#] wupC1 error
[-] ⛔ couldn't get old data. Will write over the last bytes of Block 0.
[+] new block 0: 01 02 03 04 04 08 04 00 00 00 00 00 00 00 00 00
[+] Old UID : 00 00 00 00
[+] New UID : 01 02 03 04
[usb] pm3 --> hf 14a read
[=] Card doesn't support standard iso14443-3 anticollision
[+] ATQA: 00 00Running some scripts that should help 'revive' a bad magic tag:
[usb] pm3 --> scr ru remagic.lua
[+] executing lua /usr/local/bin/../share/proxmark3/luascripts/remagic.lua
[+] args ''
hf 14a raw -p -a -b 7 40
received 1 bytes
0A
hf 14a raw -p -a 43
received 1 bytes
0A
hf 14a raw -c -p -a A000
received 1 bytes
0A
hf 14a raw -c -p -a 01020304049802000000000000001001
received 1 bytes
0A
hf 14a raw -c -a 5000
received 0 bytes
hf mf csetbl 3 FFFFFFFFFFFFFF078000FFFFFFFFFFFF
--block number: 3 data:FF FF FF FF FF FF FF 07 80 00 FF FF FF FF FF FF
hf mf csetbl 7 FFFFFFFFFFFFFF078000FFFFFFFFFFFF
--block number: 7 data:FF FF FF FF FF FF FF 07 80 00 FF FF FF FF FF FF
hf mf csetbl 11 FFFFFFFFFFFFFF078000FFFFFFFFFFFF
--block number:11 data:FF FF FF FF FF FF FF 07 80 00 FF FF FF FF FF FF
hf mf csetbl 15 FFFFFFFFFFFFFF078000FFFFFFFFFFFF
--block number:15 data:FF FF FF FF FF FF FF 07 80 00 FF FF FF FF FF FF
hf mf csetbl 19 FFFFFFFFFFFFFF078000FFFFFFFFFFFF
--block number:19 data:FF FF FF FF FF FF FF 07 80 00 FF FF FF FF FF FF
hf mf csetbl 23 FFFFFFFFFFFFFF078000FFFFFFFFFFFF
--block number:23 data:FF FF FF FF FF FF FF 07 80 00 FF FF FF FF FF FF
hf mf csetbl 27 FFFFFFFFFFFFFF078000FFFFFFFFFFFF
--block number:27 data:FF FF FF FF FF FF FF 07 80 00 FF FF FF FF FF FF
hf mf csetbl 31 FFFFFFFFFFFFFF078000FFFFFFFFFFFF
--block number:31 data:FF FF FF FF FF FF FF 07 80 00 FF FF FF FF FF FF
hf mf csetbl 35 FFFFFFFFFFFFFF078000FFFFFFFFFFFF
--block number:35 data:FF FF FF FF FF FF FF 07 80 00 FF FF FF FF FF FF
hf mf csetbl 39 FFFFFFFFFFFFFF078000FFFFFFFFFFFF
--block number:39 data:FF FF FF FF FF FF FF 07 80 00 FF FF FF FF FF FF
hf mf csetbl 43 FFFFFFFFFFFFFF078000FFFFFFFFFFFF
--block number:43 data:FF FF FF FF FF FF FF 07 80 00 FF FF FF FF FF FF
hf mf csetbl 47 FFFFFFFFFFFFFF078000FFFFFFFFFFFF
--block number:47 data:FF FF FF FF FF FF FF 07 80 00 FF FF FF FF FF FF
hf mf csetbl 51 FFFFFFFFFFFFFF078000FFFFFFFFFFFF
--block number:51 data:FF FF FF FF FF FF FF 07 80 00 FF FF FF FF FF FF
hf mf csetbl 55 FFFFFFFFFFFFFF078000FFFFFFFFFFFF
--block number:55 data:FF FF FF FF FF FF FF 07 80 00 FF FF FF FF FF FF
hf mf csetbl 59 FFFFFFFFFFFFFF078000FFFFFFFFFFFF
--block number:59 data:FF FF FF FF FF FF FF 07 80 00 FF FF FF FF FF FF
hf mf csetbl 63 FFFFFFFFFFFFFF078000FFFFFFFFFFFF
--block number:63 data:FF FF FF FF FF FF FF 07 80 00 FF FF FF FF FF FF
[+] finished remagic.lua
[usb] pm3 --> hf 14a re
[=] Card doesn't support standard iso14443-3 anticollision
[+] ATQA: 00 00If it helps anyone (seen it commonly asked for when troubleshooting) here is the output from hf 14a list:
[usb] pm3 --> hf 14a li
[=] downloading tracelog from device
[+] Recorded activity (trace len = 21 bytes)
[=] Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer
[=] ISO14443A - All times are in carrier periods (1/13.56MHz)
Start | End | Src | Data (! denotes parity error) | CRC | Annotation
------------+------------+-----+-------------------------------------------------------------------------+-----+--------------------
0 | 992 | Rdr |52 | | WUPA
2100 | 4468 | Tag |00 00 | |If anyone has any suggestions to what has happened or what to try, I'm all ears. Please make me aware if you believe this tag is bricked (not worth trying to revive) and please explain why you think this. I really want to learn more about this particular issue so happy for any advice. Thanks in advance.
Last edited by jirvin (2020-07-26 03:17:38)
Offline
#3 2020-07-26 09:10:17
- iceman
- Administrator
- Registered: 2013-04-25
- Posts: 9,538
- Website
Re: Card doesn't support standard iso14443-3 anticollision ATQA: 00 00
all those commands assumes you are using a magic Gen1a card. Are you sure?
and try add som space between tag and antenna 1-1.5cm when running those commands.
sometimes you can stack two gen 1a cards on top of each other and run the wipe, this solves the anticollision, with one working card and one bad card. both cards will become wiped.
Offline
#4 2020-07-26 15:07:17
- jirvin
- Contributor
- Registered: 2020-07-23
- Posts: 7
Re: Card doesn't support standard iso14443-3 anticollision ATQA: 00 00
Hi Iceman,
I am fairly sure its a magic Gen1a. The supplier advertised it as such plus my initial hf mf search before 'damaging' the tag said "Chinese magic backdoor commands (GEN 1a) detected". Is there anything I could do now as to verify that its a Gen1a?
I tried as suggested and put some space between the tag and antenna but still no difference. Is there hope for reviving the tag?
Thanks again Iceman!
Offline
#5 2020-07-26 17:13:28
- iceman
- Administrator
- Registered: 2013-04-25
- Posts: 9,538
- Website
Re: Card doesn't support standard iso14443-3 anticollision ATQA: 00 00
try two gen1a cards on top of each other...
Offline
#6 2020-07-26 21:16:32
- jirvin
- Contributor
- Registered: 2020-07-23
- Posts: 7
Re: Card doesn't support standard iso14443-3 anticollision ATQA: 00 00
Thanks for the suggestion Iceman!
This is a little difficult to do since the problematic Gen1a is an implant (Dangerous Things xM1) on my knives edge. I have tried what you suggested as well as I could despite the situation, it only results in the other stacked Gen1a tags being 'formated' and not the implant.
Any other thoughts?
Offline
#7 2020-07-26 22:29:30
- iceman
- Administrator
- Registered: 2013-04-25
- Posts: 9,538
- Website
Re: Card doesn't support standard iso14443-3 anticollision ATQA: 00 00
hm.. implant..
ok, since it uses a small coil it is very sensitive to antenna placement. You would need to find the best spot, use hf tune, to find it and try running commands again.
Offline
#8 2020-07-26 23:17:50
- jirvin
- Contributor
- Registered: 2020-07-23
- Posts: 7
Re: Card doesn't support standard iso14443-3 anticollision ATQA: 00 00
Thanks again Iceman!
Already tried and can get consistent reads now I know the 'sweet' spot. For transparency sake, here is the output of the commands you suggested:
Please note I am using a PM3 Easy and have disconnected my LF antenna, makes reading the implant easier as I can make it flat.
Without tag on antenna:
[usb] pm3 --> hw tune
[=] Measuring antenna characteristics, please wait...
? 10
[=] ---------- LF Antenna ----------
[+] LF optimal: 542862.64 V - 0.00 kHz
[+] LF antenna is OK
[=] ---------- HF Antenna ----------
[+] HF antenna: 31.89 V - 13.56 MHz
[+] HF antenna is OK
[-] ⛔ Not showing LF tuning graph since all values is zero.With tag on antenna:
[usb] pm3 --> hw tune
[=] Measuring antenna characteristics, please wait...
? 10
[=] ---------- LF Antenna ----------
[+] LF optimal: 542862.64 V - 0.00 kHz
[+] LF antenna is OK
[=] ---------- HF Antenna ----------
[+] HF antenna: 28.57 V - 13.56 MHz
[+] HF antenna is OK
[-] ⛔ Not showing LF tuning graph since all values is zero.Output running formatMifare.lua (with wipe) & remagic.lua then trying to verify using hf 14a read & hf 14a list:
Interesting to note when running formatMifare.lua it says "Found: NXP Mifare Ultralight | Ultralight C | NTAG"
[usb] pm3 --> scr run formatMifare.lua
[+] executing lua /usr/local/bin/../share/proxmark3/luascripts/formatMifare.lua
[+] args ''
----------------------------------------
----------------------------------------
Found: NXP MIFARE Ultralight | Ultralight C | NTAG
I don't know how many sectors there are on this type of card, defaulting to 16
Estimating number of blocks: 63
Old key: FFFFFFFFFFFF
New key: FFFFFFFFFFFF
New Access: FF0780
----------------------------------------
### New sector-trailer : FFFFFFFFFFFFFF078000FFFFFFFFFFFF
### New emptyblock: 00000000000000000000000000000000
###
Do you want to erase this card [y/n] ?y
----------------------------------------
hf mf wrbl 1 B FFFFFFFFFFFF 00000000000000000000000000000000
hf mf wrbl 2 B FFFFFFFFFFFF 00000000000000000000000000000000
hf mf wrbl 3 B FFFFFFFFFFFF FFFFFFFFFFFFFF078000FFFFFFFFFFFF
hf mf wrbl 4 B FFFFFFFFFFFF 00000000000000000000000000000000
hf mf wrbl 5 B FFFFFFFFFFFF 00000000000000000000000000000000
hf mf wrbl 6 B FFFFFFFFFFFF 00000000000000000000000000000000
hf mf wrbl 7 B FFFFFFFFFFFF FFFFFFFFFFFFFF078000FFFFFFFFFFFF
hf mf wrbl 8 B FFFFFFFFFFFF 00000000000000000000000000000000
hf mf wrbl 9 B FFFFFFFFFFFF 00000000000000000000000000000000
hf mf wrbl 10 B FFFFFFFFFFFF 00000000000000000000000000000000
hf mf wrbl 11 B FFFFFFFFFFFF FFFFFFFFFFFFFF078000FFFFFFFFFFFF
hf mf wrbl 12 B FFFFFFFFFFFF 00000000000000000000000000000000
hf mf wrbl 13 B FFFFFFFFFFFF 00000000000000000000000000000000
hf mf wrbl 14 B FFFFFFFFFFFF 00000000000000000000000000000000
hf mf wrbl 15 B FFFFFFFFFFFF FFFFFFFFFFFFFF078000FFFFFFFFFFFF
hf mf wrbl 16 B FFFFFFFFFFFF 00000000000000000000000000000000
hf mf wrbl 17 B FFFFFFFFFFFF 00000000000000000000000000000000
hf mf wrbl 18 B FFFFFFFFFFFF 00000000000000000000000000000000
hf mf wrbl 19 B FFFFFFFFFFFF FFFFFFFFFFFFFF078000FFFFFFFFFFFF
hf mf wrbl 20 B FFFFFFFFFFFF 00000000000000000000000000000000
hf mf wrbl 21 B FFFFFFFFFFFF 00000000000000000000000000000000
hf mf wrbl 22 B FFFFFFFFFFFF 00000000000000000000000000000000
hf mf wrbl 23 B FFFFFFFFFFFF FFFFFFFFFFFFFF078000FFFFFFFFFFFF
hf mf wrbl 24 B FFFFFFFFFFFF 00000000000000000000000000000000
hf mf wrbl 25 B FFFFFFFFFFFF 00000000000000000000000000000000
hf mf wrbl 26 B FFFFFFFFFFFF 00000000000000000000000000000000
hf mf wrbl 27 B FFFFFFFFFFFF FFFFFFFFFFFFFF078000FFFFFFFFFFFF
hf mf wrbl 28 B FFFFFFFFFFFF 00000000000000000000000000000000
hf mf wrbl 29 B FFFFFFFFFFFF 00000000000000000000000000000000
hf mf wrbl 30 B FFFFFFFFFFFF 00000000000000000000000000000000
hf mf wrbl 31 B FFFFFFFFFFFF FFFFFFFFFFFFFF078000FFFFFFFFFFFF
hf mf wrbl 32 B FFFFFFFFFFFF 00000000000000000000000000000000
hf mf wrbl 33 B FFFFFFFFFFFF 00000000000000000000000000000000
hf mf wrbl 34 B FFFFFFFFFFFF 00000000000000000000000000000000
hf mf wrbl 35 B FFFFFFFFFFFF FFFFFFFFFFFFFF078000FFFFFFFFFFFF
hf mf wrbl 36 B FFFFFFFFFFFF 00000000000000000000000000000000
hf mf wrbl 37 B FFFFFFFFFFFF 00000000000000000000000000000000
hf mf wrbl 38 B FFFFFFFFFFFF 00000000000000000000000000000000
hf mf wrbl 39 B FFFFFFFFFFFF FFFFFFFFFFFFFF078000FFFFFFFFFFFF
hf mf wrbl 40 B FFFFFFFFFFFF 00000000000000000000000000000000
hf mf wrbl 41 B FFFFFFFFFFFF 00000000000000000000000000000000
hf mf wrbl 42 B FFFFFFFFFFFF 00000000000000000000000000000000
hf mf wrbl 43 B FFFFFFFFFFFF FFFFFFFFFFFFFF078000FFFFFFFFFFFF
hf mf wrbl 44 B FFFFFFFFFFFF 00000000000000000000000000000000
hf mf wrbl 45 B FFFFFFFFFFFF 00000000000000000000000000000000
hf mf wrbl 46 B FFFFFFFFFFFF 00000000000000000000000000000000
hf mf wrbl 47 B FFFFFFFFFFFF FFFFFFFFFFFFFF078000FFFFFFFFFFFF
hf mf wrbl 48 B FFFFFFFFFFFF 00000000000000000000000000000000
hf mf wrbl 49 B FFFFFFFFFFFF 00000000000000000000000000000000
hf mf wrbl 50 B FFFFFFFFFFFF 00000000000000000000000000000000
hf mf wrbl 51 B FFFFFFFFFFFF FFFFFFFFFFFFFF078000FFFFFFFFFFFF
hf mf wrbl 52 B FFFFFFFFFFFF 00000000000000000000000000000000
hf mf wrbl 53 B FFFFFFFFFFFF 00000000000000000000000000000000
hf mf wrbl 54 B FFFFFFFFFFFF 00000000000000000000000000000000
hf mf wrbl 55 B FFFFFFFFFFFF FFFFFFFFFFFFFF078000FFFFFFFFFFFF
hf mf wrbl 56 B FFFFFFFFFFFF 00000000000000000000000000000000
hf mf wrbl 57 B FFFFFFFFFFFF 00000000000000000000000000000000
hf mf wrbl 58 B FFFFFFFFFFFF 00000000000000000000000000000000
hf mf wrbl 59 B FFFFFFFFFFFF FFFFFFFFFFFFFF078000FFFFFFFFFFFF
hf mf wrbl 60 B FFFFFFFFFFFF 00000000000000000000000000000000
hf mf wrbl 61 B FFFFFFFFFFFF 00000000000000000000000000000000
hf mf wrbl 62 B FFFFFFFFFFFF 00000000000000000000000000000000
hf mf wrbl 63 B FFFFFFFFFFFF FFFFFFFFFFFFFF078000FFFFFFFFFFFF
[+] finished formatMifare.lua
[usb] pm3 --> scr run remagic
[+] executing lua /usr/local/bin/../share/proxmark3/luascripts/remagic.lua
[+] args ''
hf 14a raw -p -a -b 7 40
received 1 bytes
0A
hf 14a raw -p -a 43
received 1 bytes
0A
hf 14a raw -c -p -a A000
received 1 bytes
0A
hf 14a raw -c -p -a 01020304049802000000000000001001
received 1 bytes
0A
hf 14a raw -c -a 5000
received 0 bytes
hf mf csetbl 3 FFFFFFFFFFFFFF078000FFFFFFFFFFFF
--block number: 3 data:FF FF FF FF FF FF FF 07 80 00 FF FF FF FF FF FF
[#] write block send command error
[!!] ? Can't write block. error=-1
hf mf csetbl 7 FFFFFFFFFFFFFF078000FFFFFFFFFFFF
--block number: 7 data:FF FF FF FF FF FF FF 07 80 00 FF FF FF FF FF FF
hf mf csetbl 11 FFFFFFFFFFFFFF078000FFFFFFFFFFFF
--block number:11 data:FF FF FF FF FF FF FF 07 80 00 FF FF FF FF FF FF
[#] write block send data error
[!!] ? Can't write block. error=-1
hf mf csetbl 15 FFFFFFFFFFFFFF078000FFFFFFFFFFFF
--block number:15 data:FF FF FF FF FF FF FF 07 80 00 FF FF FF FF FF FF
[#] wupC1 error
[!!] ? Can't write block. error=-1
hf mf csetbl 19 FFFFFFFFFFFFFF078000FFFFFFFFFFFF
--block number:19 data:FF FF FF FF FF FF FF 07 80 00 FF FF FF FF FF FF
hf mf csetbl 23 FFFFFFFFFFFFFF078000FFFFFFFFFFFF
--block number:23 data:FF FF FF FF FF FF FF 07 80 00 FF FF FF FF FF FF
hf mf csetbl 27 FFFFFFFFFFFFFF078000FFFFFFFFFFFF
--block number:27 data:FF FF FF FF FF FF FF 07 80 00 FF FF FF FF FF FF
hf mf csetbl 31 FFFFFFFFFFFFFF078000FFFFFFFFFFFF
--block number:31 data:FF FF FF FF FF FF FF 07 80 00 FF FF FF FF FF FF
[#] wupC1 error
[!!] ? Can't write block. error=-1
hf mf csetbl 35 FFFFFFFFFFFFFF078000FFFFFFFFFFFF
--block number:35 data:FF FF FF FF FF FF FF 07 80 00 FF FF FF FF FF FF
[#] write block send command error
[!!] ? Can't write block. error=-1
hf mf csetbl 39 FFFFFFFFFFFFFF078000FFFFFFFFFFFF
--block number:39 data:FF FF FF FF FF FF FF 07 80 00 FF FF FF FF FF FF
[#] write block send command error
[!!] ? Can't write block. error=-1
hf mf csetbl 43 FFFFFFFFFFFFFF078000FFFFFFFFFFFF
--block number:43 data:FF FF FF FF FF FF FF 07 80 00 FF FF FF FF FF FF
hf mf csetbl 47 FFFFFFFFFFFFFF078000FFFFFFFFFFFF
--block number:47 data:FF FF FF FF FF FF FF 07 80 00 FF FF FF FF FF FF
[#] wupC1 error
[!!] ? Can't write block. error=-1
hf mf csetbl 51 FFFFFFFFFFFFFF078000FFFFFFFFFFFF
--block number:51 data:FF FF FF FF FF FF FF 07 80 00 FF FF FF FF FF FF
[#] write block send command error
[!!] ? Can't write block. error=-1
hf mf csetbl 55 FFFFFFFFFFFFFF078000FFFFFFFFFFFF
--block number:55 data:FF FF FF FF FF FF FF 07 80 00 FF FF FF FF FF FF
[#] wupC1 error
[!!] ? Can't write block. error=-1
hf mf csetbl 59 FFFFFFFFFFFFFF078000FFFFFFFFFFFF
--block number:59 data:FF FF FF FF FF FF FF 07 80 00 FF FF FF FF FF FF
hf mf csetbl 63 FFFFFFFFFFFFFF078000FFFFFFFFFFFF
--block number:63 data:FF FF FF FF FF FF FF 07 80 00 FF FF FF FF FF FF
[#] write block send command error
[!!] ? Can't write block. error=-1
[+] finished remagic
[usb] pm3 --> hf 14a re
[=] Card doesn't support standard iso14443-3 anticollision
[+] ATQA: 00 00
[usb] pm3 --> hf 14a li
[=] downloading tracelog from device
[+] Recorded activity (trace len = 21 bytes)
[=] Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer
[=] ISO14443A - All times are in carrier periods (1/13.56MHz)
Start | End | Src | Data (! denotes parity error) | CRC | Annotation
------------+------------+-----+-------------------------------------------------------------------------+-----+--------------------
0 | 992 | Rdr |52 | | WUPA
2100 | 4468 | Tag |00 00 | |Happy for any suggestions and thanks again for continuing to work with me on this Iceman!!
Offline
#9 2020-07-27 08:04:27
- iceman
- Administrator
- Registered: 2013-04-25
- Posts: 9,538
- Website
Re: Card doesn't support standard iso14443-3 anticollision ATQA: 00 00
To rule out problems with current repo, try using the release https://github.com/RfidResearchGroup/pr … ag/v4.9237 compiled it generic, flash bootrom, flash fullimage, run client, and csetuid, hf 14a info, no need to run all scripts since they do about the same.
there is also a "hf mf cwipe" command to use instead of scripts, which works on gen1a.
Offline
#10 2020-07-28 18:38:54
- jirvin
- Contributor
- Registered: 2020-07-23
- Posts: 7
Re: Card doesn't support standard iso14443-3 anticollision ATQA: 00 00
Sorry for the delay, had some issues getting the client setup properly and issues with flashing the PM3 but think I got it working.
Here is the output of the commands you asked:
Instead of showing the output of compiling, flashing bootrom and fullimage, Ill show the output of hw version. I did have some issues getting this client running so please let me know if it doesnt look as it should.
[usb] pm3 --> hw ver
[ Proxmark3 RFID instrument ]
[ CLIENT ]
client: RRG/Iceman/master/release (git)
compiled with GCC 9.3.0 OS:Linux ARCH:x86_64
[ PROXMARK3 ]
[ ARM ]
bootrom: RRG/Iceman/master/v4.9237-618-g84a49bf0 2020-07-23 22:32:11
os: RRG/Iceman/master/release (git)
compiled with GCC 9.2.1 20191025 (release) [ARM/arm-9-branch revision 277599]
[ FPGA ]
LF image built for 2s30vq100 on 2020-02-22 at 12:51:14
HF image built for 2s30vq100 on 2020-01-12 at 15:31:16
[ Hardware ]
--= uC: AT91SAM7S512 Rev B
--= Embedded Processor: ARM7TDMI
--= Nonvolatile Program Memory Size: 512K bytes, Used: 256065 bytes (49%) Free: 268223 bytes (51%)
--= Second Nonvolatile Program Memory Size: None
--= Internal SRAM Size: 64K bytes
--= Architecture Identifier: AT91SAM7Sxx Series
--= Nonvolatile Program Memory Type: Embedded Flash MemoryOutput when trying to set UID with csetuid. Would like to note the output from the first hf 14a re as it says ATQA 02 00 but reissuing the command returns the same error as expected.
[usb] pm3 --> hf mf csetuid 01020304 w
--wipe card:YES uid:01 02 03 04
[+] old block 0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[+] new block 0: 01 02 03 04 04 00 00 00 00 00 00 00 00 00 00 00
[+] Old UID : 00 00 00 00
[+] New UID : 01 02 03 04
[usb] pm3 --> hf 14a re
[=] Card doesn't support standard iso14443-3 anticollision
[+] ATQA: 02 00
[usb] pm3 --> hf 14a re
[=] Card doesn't support standard iso14443-3 anticollision
[+] ATQA: 00 00I am aware of the cwipe command and have used it previously with no avail. I instead used remagic.lua since it used hf 14a raw based commands and thought that may be more advantageous.
Thanks again for the support and always happy for suggestions!
Offline
#11 2020-08-30 06:40:02
- blu3rats
- Contributor
- Registered: 2020-08-11
- Posts: 4
Re: Card doesn't support standard iso14443-3 anticollision ATQA: 00 00
I am having the exact same problem with the exact same implant. so just tagging along, I have tried everything I found on the subject to no avail.
Offline