Proxmark3 community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

Announcement

Time changes and with it the technology
Proxmark3 @ discord

Users of this forum, please be aware that information stored on this site is not private.

#1 2014-04-26 03:11:12

dcaponi
Member
Registered: 2014-04-26
Posts: 2

Clone hid to T5567 / T5577

I'm trying to clone my lf hid card to a T5567/T5577

I bought these:
10pcs RFID 125KHz Writable Rewrite T5567 T5577 thick card Proximity Access card
http://www.ebay.com/itm/271405289538?ssPageName=STRK:MEWNX:IT&_trksid=p3984.m1497.l2649

Found the ID of the HID i want to clone (values removed):

proxmark3> lf hid fskdemod
#db# TAG ID: xxxxxxxxx (36594)       

Tried this command with the card in every orientation and spacing I could think of:

proxmark3> lf hid clone xxxxxxxxxx
Cloning tag with ID xxxxxxxxxx         
#db# DONE!

Tried reading the cloned card and got nothing:

proxmark3> lf hid fskdemod
#db# Stopped                 
proxmark3>

Here are my antenna characteristics with no card:

proxmark3> hw tune
#db# Measuring antenna characteristics, please wait...                 
#db# Measuring complete, sending report back to host                 
         
# LF antenna: 10.61 V @   125.00 kHz         
# LF antenna: 14.77 V @   134.00 kHz         
# LF optimal: 41.36 V @   146.34 kHz         
# HF antenna:  6.57 V @    13.56 MHz 

With original tag to copy:

proxmark3> hw tune
#db# Measuring antenna characteristics, please wait...                 
#db# Measuring complete, sending report back to host                 
         
# LF antenna: 10.47 V @   125.00 kHz         
# LF antenna: 14.10 V @   134.00 kHz         
# LF optimal: 41.49 V @   151.90 kHz         
# HF antenna:  6.96 V @    13.56 MHz     

With blank rewritable card from ebay:

proxmark3> hw tune
#db# Measuring antenna characteristics, please wait...                 
#db# Measuring complete, sending report back to host                 
         
# LF antenna: 10.21 V @   125.00 kHz         
# LF antenna: 13.02 V @   134.00 kHz         
# LF optimal: 41.09 V @   151.90 kHz         
# HF antenna:  7.06 V @    13.56 MHz     

Here is version information:

proxmark3> hw version
#db# Prox/RFID mark3 RFID instrument                 
#db# bootrom: svn 756-unclean 2014-04-19 05:34:05                 
#db# os: svn 756-unclean 2014-04-19 05:34:06                 
#db# FPGA image built on 2012/ 1/ 6 at 15:27:56         


I read through this post and found at the very end user nmrn mentions he got it to work with a more powerful antenna.  However, my antenna seems to have similar characteristics to the one for sale by Proxmark:
http://www.proxmark.org/forum/viewtopic.php?id=996

Offline

#2 2014-04-26 16:52:19

carl55
Contributor
From: Arizona USA
Registered: 2010-07-04
Posts: 175

Re: Clone hid to T5567 / T5577

I would be very suspicious of buying cards where the picture in the ad has a card number already printed on the card. Even if those T55x7 cards "are" Read/Write as they claim they might only be read/writeable using one of the cheap Chinese cloners that are also sold on eBay. Those Chinese cloners utilize the password feature of the T55x7 cards such that the Proxmark would be unable to write them. I would try purchasing different cards and see if that will fix your problem. Here are ones that I have bought in the past that  have worked well for me.
http://www.ebay.com/itm/RFID-125KHz-Wri … 1c2c07574e

Offline

#3 2014-04-28 22:37:34

dcaponi
Member
Registered: 2014-04-26
Posts: 2

Re: Clone hid to T5567 / T5577

Thanks carl55.  I have these coming in too: http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItemVersion&item=261260401081&view=all&tid=1402813281016
If those don't work I will try an item that matches your suggestion.

Did you use "lf hid clone" or one of the T55xx write functions?

Offline

Board footer

Powered by FluxBB