Proxmark developers community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

#1 2018-09-28 23:14:02

tristanik
Contributor
Registered: 2014-11-25
Posts: 82

Indala car wash

Hello my friends
I have a card for a car wash. Proxmark tells me it's Indala, but I've also tried other t55xx commands.
Do you have any ideas to give me?


Prox/RFID mark3 RFID instrument         
bootrom: master/v3.0.1-422-gb8a9231-suspect 2018-09-24 14:33:05
os: master/v3.0.1-422-gb8a9231-suspect 2018-09-24 14:33:08
fpga_lf.bit built for 2s30vq100 on 2015/03/06 at 07:38:04
fpga_hf.bit built for 2s30vq100 on 2018/09/12 at 15:18:46
SmartCard Slot: not available
         
uC: AT91SAM7S256 Rev C         
Embedded Processor: ARM7TDMI         
Nonvolatile Program Memory Size: 256K bytes. Used: 193327 bytes (74%). Free: 68817 bytes (26%).         
Second Nonvolatile Program Memory Size: None         
Internal SRAM Size: 64K bytes         
Architecture Identifier: AT91SAM7Sxx Series         
Nonvolatile Program Memory Type: Embedded Flash Memory         
proxmark3> lf t55xx config
Chip Type  : T55x7         
Modulation : ASK         
Bit Rate   : 0 - RF/8         
Inverted   : No         
Offset     : 0         
Seq. Term. : No         
Block0     : 0x00000000         
         
proxmark3> lf t55xx detect
Chip Type  : T55x7         
Modulation : ASK         
Bit Rate   : 5 - RF/64         
Inverted   : No         
Offset     : 32         
Seq. Term. : No         
Block0     : 0x00148010         
         
proxmark3> lf t55xx info
         
-- T55x7 Configuration & Tag Information --------------------         
-------------------------------------------------------------         
Safer key                 : 0         
reserved                  : 0         
Data bit rate             : 5 - RF/64         
eXtended mode             : No         
Modulation                : 8 - Manchester         
PSK clock frequency       : 0         
AOR - Answer on Request   : No         
OTP - One Time Pad        : No         
Max block                 : 0         
Password mode             : Yes         
Sequence Start Terminator : No         
Fast Write                : No         
Inverse data              : No         
POR-Delay                 : No         
-------------------------------------------------------------         
Raw Data - Page 0         
     Block 0  : 0x00148010  00000000000101001000000000010000         
-------------------------------------------------------------   


proxmark3> lf t55xx special
OFFSET | DATA       | BINARY         
----------------------------------------------------         
    00 | 0x00148010 | 00000000000101001000000000010000         
    01 | 0x00290020 | 00000000001010010000000000100000         
    02 | 0x00520040 | 00000000010100100000000001000000         
    03 | 0x00A40080 | 00000000101001000000000010000000         
    04 | 0x01480100 | 00000001010010000000000100000000         
    05 | 0x02900200 | 00000010100100000000001000000000         
    06 | 0x05200400 | 00000101001000000000010000000000         
    07 | 0x0A400800 | 00001010010000000000100000000000         
    08 | 0x14801000 | 00010100100000000001000000000000         
    09 | 0x29002000 | 00101001000000000010000000000000         
    10 | 0x52004000 | 01010010000000000100000000000000         
    11 | 0xA4008000 | 10100100000000001000000000000000         
    12 | 0x48010001 | 01001000000000010000000000000001         
    13 | 0x90020002 | 10010000000000100000000000000010         
    14 | 0x20040005 | 00100000000001000000000000000101         
    15 | 0x4008000A | 01000000000010000000000000001010         
    16 | 0x80100014 | 10000000000100000000000000010100         
    17 | 0x00200029 | 00000000001000000000000000101001         
    18 | 0x00400052 | 00000000010000000000000001010010         
    19 | 0x008000A4 | 00000000100000000000000010100100         
    20 | 0x01000148 | 00000001000000000000000101001000         
    21 | 0x02000290 | 00000010000000000000001010010000         
    22 | 0x04000520 | 00000100000000000000010100100000         
    23 | 0x08000A40 | 00001000000000000000101001000000         
    24 | 0x10001480 | 00010000000000000001010010000000         
    25 | 0x20002900 | 00100000000000000010100100000000         
    26 | 0x40005200 | 01000000000000000101001000000000         
    27 | 0x8000A400 | 10000000000000001010010000000000         
    28 | 0x00014801 | 00000000000000010100100000000001         
    29 | 0x00029002 | 00000000000000101001000000000010         
    30 | 0x00052004 | 00000000000001010010000000000100         
    31 | 0x000A4008 | 00000000000010100100000000001000         
    32 | 0x00148010 | 00000000000101001000000000010000         
    33 | 0x00290020 | 00000000001010010000000000100000         
    34 | 0x00520040 | 00000000010100100000000001000000         
    35 | 0x00A40080 | 00000000101001000000000010000000         
    36 | 0x01480100 | 00000001010010000000000100000000         
    37 | 0x02900200 | 00000010100100000000001000000000         
    38 | 0x05200400 | 00000101001000000000010000000000         
    39 | 0x0A400800 | 00001010010000000000100000000000         
    40 | 0x14801000 | 00010100100000000001000000000000         
    41 | 0x29002000 | 00101001000000000010000000000000         
    42 | 0x52004000 | 01010010000000000100000000000000         
    43 | 0xA4008000 | 10100100000000001000000000000000         
    44 | 0x48010001 | 01001000000000010000000000000001         
    45 | 0x90020002 | 10010000000000100000000000000010         
    46 | 0x20040005 | 00100000000001000000000000000101         
    47 | 0x4008000A | 01000000000010000000000000001010         
    48 | 0x80100014 | 10000000000100000000000000010100         
    49 | 0x00200029 | 00000000001000000000000000101001         
    50 | 0x00400052 | 00000000010000000000000001010010         
    51 | 0x008000A4 | 00000000100000000000000010100100         
    52 | 0x01000148 | 00000001000000000000000101001000         
    53 | 0x02000290 | 00000010000000000000001010010000         
    54 | 0x04000520 | 00000100000000000000010100100000         
    55 | 0x08000A40 | 00001000000000000000101001000000         
    56 | 0x10001480 | 00010000000000000001010010000000         
    57 | 0x20002900 | 00100000000000000010100100000000         
    58 | 0x40005200 | 01000000000000000101001000000000         
    59 | 0x8000A400 | 10000000000000001010010000000000         
    60 | 0x00014801 | 00000000000000010100100000000001         
    61 | 0x00029002 | 00000000000000101001000000000010         
    62 | 0x00052004 | 00000000000001010010000000000100         
    63 | 0x000A4008 | 00000000000010100100000000001000

Offline

#2 2018-09-28 23:16:24

tristanik
Contributor
Registered: 2014-11-25
Posts: 82

Re: Indala car wash

proxmark3> lf t55xx read
Reading Page 0:         
blk | hex data | binary         
----+----------+---------------------------------         
  255 | 00148010 | 00000000000101001000000000010000

Offline

#3 2018-09-28 23:19:20

tristanik
Contributor
Registered: 2014-11-25
Posts: 82

Re: Indala car wash

proxmark3> lf t55xx dump
Reading Page 0:         
blk | hex data | binary         
----+----------+---------------------------------         
  0 | 00148010 | 00000000000101001000000000010000         
  1 | 00148010 | 00000000000101001000000000010000         
  2 | 00148010 | 00000000000101001000000000010000         
  3 | 00148010 | 00000000000101001000000000010000         
  4 | 00148010 | 00000000000101001000000000010000         
  5 | 00148010 | 00000000000101001000000000010000         
  6 | 00148010 | 00000000000101001000000000010000         
  7 | 00148010 | 00000000000101001000000000010000         
Reading Page 1:         
blk | hex data | binary         
----+----------+---------------------------------         
  0 | 2537887C | 00100101001101111000100001111100         
  1 | 2537887C | 00100101001101111000100001111100         
  2 | 2537887C | 00100101001101111000100001111100         
  3 | 2537887C | 00100101001101111000100001111100

Offline

#4 2018-09-28 23:21:03

tristanik
Contributor
Registered: 2014-11-25
Posts: 82

Re: Indala car wash

proxmark3> lf search u
NOTE: some demods output possible binary
  if it finds something that looks like a tag         
False Positives ARE possible
         

Checking for known tags:
         

No Known Tags Found!
         

Checking for Unknown tags:
         
Possible Auto Correlation of 2048 repeating samples         

Using Clock:64, Invert:0, Bits Found:466         
ASK/Manchester - Clock: 64 - Decoded bitstream:         
0000000000000010
1001000000000010
0000000000000010
1001000000000010
0000000000000010
1001000000000010
0000000000000010
1001000000000010
0000000000000010
1001000000000010
0000000000000010
1001000000000010
0000000000000010
1001000000000010
0000000000000010
1001000000000010
0000000000000010
1001000000000010
0000000000000010
1001000000000010
0000000000000010
1001000000000010
0000000000000010
1001000000000010
0000000000000010
1001000000000010
0000000000000010
1001000000000010
0000000000000010
10         

Unknown ASK Modulated and Manchester encoded Tag Found!         

if it does not look right it could instead be ASK/Biphase - try 'data rawdemod ab'         

Valid T55xx Chip Found
Try lf t55xx ... commands

Offline

#5 2018-10-11 22:13:48

tristanik
Contributor
Registered: 2014-11-25
Posts: 82

Re: Indala car wash

pm3 --> lf t55xx trace         
-- T55x7 Trace Information ----------------------------------         
-------------------------------------------------------------         
ACL Allocation class (ISO/IEC 15963-1)  : 0xE0 (224)         
MFC Manufacturer ID (ISO/IEC 7816-6)    : 0x15 (21) - ATMEL France         
CID                                     : 0x01 (1) - ATA5577M1         
ICR IC Revision                         : 2         
Manufactured         
     Year/Quarter : 2017/1         
     Lot ID       : 595         
     Wafer number : 15         
     Die Number   : 2165         
-------------------------------------------------------------         
Raw Data - Page 1         
     Block 1  : 0xE0150A74  11100000000101010000101001110100         
     Block 2  : 0x25378875  00100101001101111000100001110101         
-------------------------------------------------------------

Offline

#6 2018-10-13 00:42:19

marshmellow
Moderator
From: US
Registered: 2013-06-10
Posts: 2,234

Re: Indala car wash

Hello my friends
I have a card for a car wash. Proxmark tells me it's Indala, but I've also tried other t55xx commands.
Do you have any ideas to give me?

You have not expressed what you'd like to do or know...  this is why no one has offered any help.

Offline

#7 2018-10-13 06:32:02

tristanik
Contributor
Registered: 2014-11-25
Posts: 82

Re: Indala car wash

ok, thanks Marshmellow. I can not figure out where the credit is written and why the blocks are all the same.

Offline

#8 2018-10-13 10:17:02

iceman
Administrator
Registered: 2013-04-25
Posts: 4,880
Website

Re: Indala car wash

....  lf t55 dump  ...  and share it...


冰人

modhex(hkhehghthbhudcfcdchkigiehgduiehg)

Offline

#9 2018-10-13 19:16:40

tristanik
Contributor
Registered: 2014-11-25
Posts: 82

Re: Indala car wash

pm3 --> lf t55 dump         
Reading Page 0:         
blk | hex data | binary                           | ascii         
----+----------+----------------------------------+-------         
00 | 00148010 | 00000000000101001000000000010000 | ....         
01 | 00148010 | 00000000000101001000000000010000 | ....         
02 | 00148010 | 00000000000101001000000000010000 | ....         
03 | 00148010 | 00000000000101001000000000010000 | ....         
04 | 00148010 | 00000000000101001000000000010000 | ....         
05 | 00148010 | 00000000000101001000000000010000 | ....         
06 | 00148010 | 00000000000101001000000000010000 | ....         
07 | 00148010 | 00000000000101001000000000010000 | ....         
Reading Page 1:         
blk | hex data | binary                           | ascii         
----+----------+----------------------------------+-------         
00 | 2537887C | 00100101001101111000100001111100 | %7.|         
01 | 2537887C | 00100101001101111000100001111100 | %7.|         
02 | 2537887C | 00100101001101111000100001111100 | %7.|         
03 | 2537887C | 00100101001101111000100001111100 | %7.|

Offline

#10 2018-10-14 08:03:46

iceman
Administrator
Registered: 2013-04-25
Posts: 4,880
Website

Re: Indala car wash

that looks like someone wrote the config block over the whole card....  Your dump data looks just wrong


冰人

modhex(hkhehghthbhudcfcdchkigiehgduiehg)

Offline

Board footer

Powered by FluxBB