Proxmark3 community

EmatuM

Contributor

Registered: 2021-10-09

Posts: 4

Copy VISA2000 tag to T5577

Hi. My english is so-so. So I will try to explain my problem as well as possible.

I have a tag like this one
I have 2 tags T5577.

This is the informations on the tags :

LF T55xx Detect
[=]  Chip type......... T55x7
[=]  Modulation........ ASK
[=]  Bit rate.......... 2 - RF/32
[=]  Inverted.......... No
[=]  Offset............ 33
[=]  Seq. terminator... Yes
[=]  Block0............ 00088040 (auto detect)
[=]  Downlink mode..... default/fixed bit length
[=]  Password set...... No

LF T55XX INFO
[=] --- T55x7 Configuration & Information ---------
[=]  Safer key                 : 0
[=]  reserved                  : 0
[=]  Data bit rate             : 2 - RF/32
[=]  eXtended mode             : No
[=]  Modulation                : 8 - Manchester
[=]  PSK clock frequency       : 0 - RF/2
[=]  AOR - Answer on Request   : No
[=]  OTP - One Time Pad        : No
[=]  Max block                 : 2
[=]  Password mode             : No
[=]  Sequence Terminator       : No
[=]  Fast Write                : No
[=]  Inverse data              : No
[=]  POR-Delay                 : No
[=] -------------------------------------------------------------
[=]  Raw Data - Page 0, block 0
[=]  00088040 - 00000000000010001000000001000000
[=] --- Fingerprint ------------
[+] Config block match        : Viking

LF T55XX TRACE
[=] --- T55x7 Trace Information ----------------------------------
[=]  ACL Allocation class (ISO/IEC 15963-1)  : 0xE0 ( 224 )
[=]  MFC Manufacturer ID (ISO/IEC 7816-6)    : 0x39 ( 57 ) - Silicon Craft Technology Thailand
[=]  CID                                     : 0x00 ( 0 ) -
[=]  ICR IC Revision                         : 0
[=]  Manufactured
[=]      Year/Quarter... 2013/0
[=]      Lot ID......... 768
[=]      Wafer number... 27
[=]      Die Number..... 4444
[=] -------------------------------------------------------------
[=]  Raw Data - Page 1
[=]      Block 1... E03900D0 - 11100000001110010000000011010000
[=]      Block 2... 300D915C - 00110000000011011001000101011100

I have maked a dump of one of this 2 tags. After used the command LF VISA2000 --cn XXXXXX --q5 I can no longer use the command LF T55XX DETECT. He says NO TAG FOUND.
But when I use LF SEARCH he says my taf is an INDALA and I can't restore my tag like it left from the factory.

So my question is : How can I clone my VISA2000 tag with a T5577 tag ? It is possible ? If YES, how do I proceed ?
Thanks.

iceman

Administrator

Registered: 2013-04-25

Posts: 9,538

Website

Re: Copy VISA2000 tag to T5577

...   do you understand what --q5  does?

Wipe your card and redo your steps

EmatuM

Contributor

Registered: 2021-10-09

Posts: 4

Re: Copy VISA2000 tag to T5577

Hi Iceman.

"do you understand what --q5  does?"
>>> obviously no

When I look for VISA2000 commands I see :
lf visa2000 clone --cn 112233 --q5           -> encode for Q5/T5555 tag

My tags are T55XX models. So I thought I should use the Q5 option for this type of tags. I wrong ?
When I wipe my tag with LF T55XX WIPE I can no longer detect them as at the origin.

LF T55XX DETECT says "Could not detect modulation automatically. Try setting it manually with 'lf t55xx config' "
and LF SEARCH says
[+] Indala (len 1874)  Raw: 800000000000000000000000000000000060f1c0e1c0e1c0e1c0f1c0
[+] Valid Indala ID found!

How do I proceed ?
Thanks

EmatuM

Contributor

Registered: 2021-10-09

Posts: 4

Re: Copy VISA2000 tag to T5577

+1 up.

Can someone tell me how to return my badge as it left from factory (the WIPE function does not give the expected result) and explain to me how to clone my VISA2000 tag on my T5577 tags?

Thank you