Proxmark3 community

zbee

Member

Registered: 2013-01-30

Posts: 8

Unknown Card but it is a lf card

Hi Guys,

I have this unknown card and would like to know how I should go about obtaining its ID or UID number.

I have used "hw tune" to found out it is a lf card.
I have used "lf hid fskedmod" and it can not read anything.
I have used "lf em4x em410xwatch" and get the attached result.
As in the pic below:

When I used:
"lf emx em410xwatch "
#db# buffer samples: 6f 70 72 70 6f 72 71 6e ...
Reading 2000 samples

Done!

Auto-detected clock rate: 65535
#db# buffer samples: 00 00 00 00 00 ad ff ff ...
Reading 2000 samples
Done!

Auto-detected clock rate: 32
Thought we had a valid tag but failed at word 1 (i=...)
Thought we had a valid tag but failed at word 1 (i=...)
...

and continue for a long time and then crashed or freeze.

Screen Shot

Also I notice that the clock rate is: 32 or 31
which make me wonder if it is an EM410x card as I notice it is normally 64.

Any ideas on how I might be able to read the ID or UID?

Thank you for looking and any advice would be appreciated.

elliot42

Contributor

From: Australia

Registered: 2013-01-11

Posts: 16

Re: Unknown Card but it is a lf card

Seen this wiki page? https://code.google.com/p/proxmark3/wiki/TagOps
I haven't had a go at this myself, but it's probably a good place to start to get some more info about what's on the card.

Last edited by elliot42 (2013-01-30 15:31:30)

zbee

Member

Registered: 2013-01-30

Posts: 8

Re: Unknown Card but it is a lf card

Hi Elliot42,
Had a quick look at it the link, looks pretty hardcore.

I think I will need to tackle this one on the weekend.

Thank you for the advice.

elliot42

Contributor

From: Australia

Registered: 2013-01-11

Posts: 16

Re: Unknown Card but it is a lf card

Yeah, it does look pretty hardcore. I've only just started with the Proxmark3 myself but would like to have a go at some of that hard stuff, it'd make me learn a lot.

zbee

Member

Registered: 2013-01-30

Posts: 8

Re: Unknown Card but it is a lf card

Hey guys,
I have tried the different steps to find an unknown tag and these are the results I have been got.

lf read
data samples 2000

lf read h
data samples 2000

data autocorr 2000

zoom of above

data mandemod 64
nothing really happen so I tried
data mandemod 32 and this is what I got.

Found it odd that there was only one line, not many like in the example in "lf tag operations"

Does anyone have any idea what type of card this might be and also what commands do I need to used to find the cards ID?

thanks for looking and any recommendations would be appreciated.

robsoninc

Member

From: Vancouver, BC

Registered: 2013-04-18

Posts: 5

Re: Unknown Card but it is a lf card

I am interested as well. I have a thicker LF card used for PROX access.. simple elevator stuff.. I wanted to clone it like I did with a simular LF hid reader. I just am unable to find the card type. There were a couple identifiers on the card, one that I found which was for Keri Systems (Security). Other other being the site ID and Card ID I believe.

I'm not able to run data samples 2000 with build 698 - so not sure what to do at this point

marshmellow

Contributor

From: US

Registered: 2013-06-10

Posts: 2,302

Re: Unknown Card but it is a lf card

@zbee  i have seen a similar tag.  the data mandemod 32 worked for me however.  did you do a lf read - data samples 4000 (4000 at least to get repeating pattern) and then a data mandemod 32 (with no other commands in between?)  sometimes the proxmark can be picky as far as command order.

@robsoninc  keri cards are discussed in another posting http://www.proxmark.org/forum/viewtopic.php?id=280 that I do not see a resolution on.  however, what i know is they have a few different types of LF prox cards.  some are FSK formatted some PSK.  depending on the type you should be able to read off the raw binary and potentially clone the card ( if FSK use fskdemod...).  That said the data on the cards is typically encrypted and therefore difficult to make sense out of.   
As far as not being able to run data samples 2000 - to run data samples you must do a lf read first.  I am unaware of a bug in build 698 that would cause data samples not to work.

Last edited by marshmellow (2013-06-25 19:59:12)

MnBadger

Contributor

Registered: 2013-03-09

Posts: 19

Re: Unknown Card but it is a lf card

Give this a shot.

>lf read
>data samples 4000
> lf indalademod