Proxmark3 community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

Announcement

Time changes and with it the technology
Proxmark3 @ discord

Users of this forum, please be aware that information stored on this site is not private.

#1 2018-02-07 15:28:50

secany
Contributor
Registered: 2018-02-05
Posts: 4

iclass dp duplicate

Hi,
I have an iClass card that needed to be duplicated (iClass DP),
by using "hf search", sometimes it's just not working don't know what is the reason. I tried with other 13.56 cards and working perfectly.

On rare chance, I got those infos:

CSN: bb 64 16 01 f8 ff 12 e0           
CC: 16 f9 ff ff ff ff ff ff           

Valid iClass Tag (or PicoPass Tag) Found - Quiting Search

OR

CSN: bb 64 16 01 f8 ff 12 e0           
    Mode: Application [Locked]         
    Coding: ISO 14443-2 B/ISO 15693         
    Crypt: Secured page, keys not locked         
    RA: Read access not enabled         
  Mem: 2 KBits/2 App Areas (31 * 8 bytes) [1F]         
    AA1: blocks 06-12         
    AA2: blocks 13-1F         

Valid iClass Tag (or PicoPass Tag) Found - Quiting Search

It is possible to duplicate this card?
I've tried around and found some utils that called CopyClass.exe, iclassicfied.
However, I have proxmark3 easy and arc122, no HID reader.

Any help please?
PS: I'm willing to pay $$$ consider it's tuition fee ;p

Offline

#2 2018-02-09 08:36:11

secany
Contributor
Registered: 2018-02-05
Posts: 4

Re: iclass dp duplicate

anyone please?
Or at least tell me it is possible or not ?
thanks

Offline

#3 2018-05-30 11:26:04

Shashadow
Contributor
Registered: 2018-03-13
Posts: 58

Re: iclass dp duplicate

Hello secany,

I'm sorry I can't help you for cloning your iclass card.
but because you seems to have the same problem than me (with 'hf search' sometimes it's just not working don't know what is the reason. I tried with other 13.56 cards and working perfectly, and on rare chance, I got those infos)

I would like to know if you can tell me which proxmark you use please ? easy, rdv2, other ...?
and what is the output of hw version, and hw tune ?

thanks

Last edited by Shashadow (2018-05-30 12:55:06)

Offline

#4 2018-05-31 00:35:03

0xFFFF
Administrator
From: Vic - Australia
Registered: 2011-05-31
Posts: 632

Re: iclass dp duplicate

Most common issue with iClass is coupling. Don't place the card / tag / whatever directly on the antenna. In most cases the sweet spot is ~15mm from the surface (depending on the antenna characteristics of course).

Offline

#5 2018-05-31 01:55:03

brantz
Contributor
Registered: 2014-03-19
Posts: 50

Re: iclass dp duplicate

@secany, for DP, have a look of the serial number, if it starts with *, then you are in luck, but if it starts with +, PM3 seems not be able to read it.

Offline

#6 2018-05-31 02:12:27

0xFFFF
Administrator
From: Vic - Australia
Registered: 2011-05-31
Posts: 632

Re: iclass dp duplicate

'+' is programmed iClass non-ISO14443B
'*' is programmed iClass/Seos
This only applies to credentials programmed by HID.

Offline

#7 2018-05-31 08:27:28

Shashadow
Contributor
Registered: 2018-03-13
Posts: 58

Re: iclass dp duplicate

@0xFFFF
I don't think it's a issue with coupling, I open a new thread for this.
http://www.proxmark.org/forum/viewtopic.php?pid=32293
more a issue with firmware HF after 2015, because with a very old version of PM, card with same coupling work perfectly.

Offline

#8 2018-06-01 00:22:34

0xFFFF
Administrator
From: Vic - Australia
Registered: 2011-05-31
Posts: 632

Re: iclass dp duplicate

Ah ok. Good to know. Thanks @Shashadow

Offline

Board footer

Powered by FluxBB