Research, development and trades concerning the powerful Proxmark3 device.
Remember; sharing is caring. Bring something back to the community.
"Learn the tools of the trade the hard way." +Fravia
You are not logged in.
Time changes and with it the technology
Proxmark3 @ discord
Users of this forum, please be aware that information stored on this site is not private.
This is my first time praticing cloning. I am using a T55x7 tag to clone a EM410x tag.
Here are the infos of my new T55x7 tag.
[usb] pm3 --> lf t55xx detect
[=] Chip Type : T55x7
[=] Modulation : ASK
[=] Bit Rate : 2 - RF/32
[=] Inverted : No
[=] Offset : 32
[=] Seq. Term. : Yes
[=] Block0 : 0x000880E8
[=] Downlink Mode : default/fixed bit length
[=] Password Set : No
[usb] pm3 --> lf t55xx info
--- T55x7 Configuration & Information ---------
-------------------------------------------------------------
Safer key : 0
reserved : 0
Data bit rate : 2 - RF/32
eXtended mode : No
Modulation : 8 - Manchester
PSK clock frequency : 0 - RF/2
AOR - Answer on Request : No
OTP - One Time Pad : No
Max block : 7
Password mode : No
Sequence Terminator : Yes
Fast Write : No
Inverse data : No
POR-Delay : No
-------------------------------------------------------------
Raw Data - Page 0, block 0
0x000880E8 00000000000010001000000011101000
[+] Config block match : T55x7 Default
-------------------------------------------------------------
and then I input
lf t55xx wipe
, now its info becomes as follows.
[usb] pm3 --> lf t55xx info
--- T55x7 Configuration & Information ---------
-------------------------------------------------------------
Safer key : 0
reserved : 0
Data bit rate : 2 - RF/32
eXtended mode : No
Modulation : 8 - Manchester
PSK clock frequency : 0 - RF/2
AOR - Answer on Request : No
OTP - One Time Pad : No
Max block : 7
Password mode : No
Sequence Terminator : No
Fast Write : No
Inverse data : No
POR-Delay : No
-------------------------------------------------------------
Raw Data - Page 0, block 0
0x000880E0 00000000000010001000000011100000
[+] Config block match : T55x7 Raw
-------------------------------------------------------------
then I use command
lf em 410x_clone 08003A4D81 1
to clone. But it seems my T55x7 tag becomes invalid.
[usb] pm3 --> lf t55xx info
--- T55x7 Configuration & Information ---------
-------------------------------------------------------------
Safer key : 15
reserved : 15
Data bit rate : 63 - RF/128
eXtended mode : Yes - Warning
Modulation : 0x1F (Unknown)
PSK clock frequency : 3 - (Unknown)
AOR - Answer on Request : Yes
OTP - One Time Pad : Yes - Warning
Max block : 7
Password mode : Yes
Sequence Start Marker : Yes
Fast Write : Yes
Inverse data : Yes
POR-Delay : Yes
-------------------------------------------------------------
Raw Data - Page 0, block 0
0xFFFFFFFF 11111111111111111111111111111111
-------------------------------------------------------------
I tried to wipe it again or write to it, but whatever I do can't recovery it. It seems invalid permanently.
So, I have a question about the differences between T55x7 Raw mode and T55x7 default mode. Why can I use
lf em 410x_clone 08003A4D81 1
and clone successfully when its on default mode but not raw mode? And what is the difference between
lf t55xx wipe
and
lf t55xx dangerraw
? Is my T55x7 tag truely broken permanently and can't be recovered?
Offline
Sorry, I just found that the low frequency antenna is on the upper part of rdv4,I always put the T55x7 tag on the high frequency antenna before.
Offline
How to delete or close this thread?
Last edited by Arlen (2020-10-08 10:21:55)
Offline
Good that your issue is resolved. Let me suggest you edit your first post and add "[solved]" prefix to your title.
We just keep threads in order for other who might come along and find it useful.
Offline