Proxmark3 community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

Announcement

Time changes and with it the technology
Proxmark3 @ discord

Users of this forum, please be aware that information stored on this site is not private.

#1 2023-01-29 15:58:24

schnickfitzel
Contributor
Registered: 2023-01-27
Posts: 5

Unknown lf tag from SPA / Swimming site

Hello Community,
I rarly post anything anywhere so I tried already everything I could think of but here is some knowledge missing.
I also couldn't find a real generic tutorial on how to identify LF tags with proxmark.
Here is what I did so far:
To determine the right frequency I did an "lf tune" and voltage dropped to 32 while the tag is over the antenna.
As far as I read from this point I can be sure that it is lf, correct?
But that is all info I could retrieve about that tag.

I did an "auto" but the proxmark didn't find any valid tag leaving me with following output:

[usb] pm3 --> auto
[=] lf search

[=] NOTE: some demods output possible binary
[=] if it finds something that looks like a tag
[=] False Positives ARE possible
[=] 
[=] Checking for known tags...
[=] 
[-] ⛔ No known 125/134 kHz tags found!
[=] Couldn't identify a chipset
[=] hf search
[!] ⚠️  No known/supported 13.56 MHz tags found
[=] lf search - unknown
[=] -->  trying  ( 125.00 kHz )

[=] NOTE: some demods output possible binary
[=] if it finds something that looks like a tag
[=] False Positives ARE possible
[=] 
[=] Checking for known tags...
[=] 
[-] ⛔ No known 125/134 kHz tags found!
[=] Couldn't identify a chipset
[=] -->  trying  ( 134.83 kHz )

[=] NOTE: some demods output possible binary
[=] if it finds something that looks like a tag
[=] False Positives ARE possible
[=] 
[=] Checking for known tags...
[=] 
[-] ⛔ No known 125/134 kHz tags found!
[=] Couldn't identify a chipset
[=] -->  trying  ( 250.00 kHz )

[=] NOTE: some demods output possible binary
[=] if it finds something that looks like a tag
[=] False Positives ARE possible
[=] 
[=] Checking for known tags...
[=] 
[=] DEBUG: detectindala | 35
[-] ⛔ No known 125/134 kHz tags found!
[=] Couldn't identify a chipset
[=] -->  trying  ( 375.00 kHz )

[=] NOTE: some demods output possible binary
[=] if it finds something that looks like a tag
[=] False Positives ARE possible
[=] 
[=] Checking for known tags...
[=] 
 ? Searching for COTAG tag......

[-] ⛔ No data found!
[?] Maybe not an LF tag?

[=] -->  trying  ( 500.00 kHz )

[=] NOTE: some demods output possible binary
[=] if it finds something that looks like a tag
[=] False Positives ARE possible
[=] 
[=] Checking for known tags...
[=] 
 ? Searching for COTAG tag......

[-] ⛔ No data found!
[?] Maybe not an LF tag?

[=] Failed both LF / HF SEARCH,
[=] Trying `lf read` and save a trace for you
[#] LF Sampling config
[#]   [q] divisor............. 95 ( 125.00 kHz )
[#]   [b] bits per sample..... 8
[#]   [d] decimation.......... 1
[#]   [a] averaging........... no
[#]   [t] trigger threshold... 0
[#]   [s] samples to skip..... 0 
[#] 
[+] saved 40000 bytes to PM3 file 'lf_unknown_2023-01-29_14:52.pm3'

I have retrieved 3 samples you can download here https://file.io/nqMpfGUPyM4A
Is it possible that the tag needs a wakeup or password command?
Any more information needed?
Thanks in advance for your help!
Any more info needed?

Offline

#2 2023-01-29 16:02:41

schnickfitzel
Contributor
Registered: 2023-01-27
Posts: 5

Re: Unknown lf tag from SPA / Swimming site

Ah I forgot to tell you how this tag is used...
It opens one locker and gives you access to special areas although you can use it to pay at the restaurant inside the spa. In fact you pay when you leave and they scan the tag again. I thought it is all done over id and all data is stored outside the tag but I am not sure about it anymore.
I searched for company manufacturing theese systems and it maybe a gantner system as functionality and chip is similar. But not sure about it too.

Offline

#3 2023-01-29 18:52:28

iceman
Administrator
Registered: 2013-04-25
Posts: 9,486
Website

Re: Unknown lf tag from SPA / Swimming site

try running 

hf search

  with a distance of 1-2 cm between tag and antenna

Offline

#4 2023-01-29 19:45:03

schnickfitzel
Contributor
Registered: 2023-01-27
Posts: 5

Re: Unknown lf tag from SPA / Swimming site

nothing with hf search on hf antenna lf search gives false positives sometimes it detects a indala even if the tag is a meter away

Offline

#5 2023-01-29 19:49:05

schnickfitzel
Contributor
Registered: 2023-01-27
Posts: 5

Re: Unknown lf tag from SPA / Swimming site

with tag on antenna lf search doesn't detect a tag. I repeated 10 times

Offline

Board footer

Powered by FluxBB