Research, development and trades concerning the powerful Proxmark3 device.
Remember; sharing is caring. Bring something back to the community.
"Learn the tools of the trade the hard way." +Fravia
You are not logged in.
Time changes and with it the technology
Proxmark3 @ discord
Users of this forum, please be aware that information stored on this site is not private.
online PWD gen http://ldpwd.ericbetts.org
Unless I'm doing something incorrectly (don't believe I am, but stranger things have happened ) there is a bug somewhere in that online PWD generation. I've had 2 tags that gave no response, as if the PWD was incorrect, so I compared the PWD generated by the online generator, and by pwdgen.js using the same UID. The PWDs were different for the same UID, with the online generator being incorrect.
However, most often the online PWD generator outputs the correct PWD.
If it would help to fix the problem, I will gladly share the UID used.
Last edited by trasixes (2016-02-23 23:17:01)
Offline
Can you provide the UIDs and the different generated PWDs?
Offline
UID = 04391D9A294981
Online PWD gen = c08a832b
PWDgen.js = ac38b802
Offline
It was a bug! Thank you for finding it, I've pushed a fixed version of the service.
Offline
It was a bug! Thank you for finding it, I've pushed a fixed version of the service.
I'm just glad it wasn't me doing something silly this time. Thanks for the fix!
Btw, good to see a fellow Oregonian here! I'm in Eugene.
Last edited by trasixes (2016-02-23 23:59:28)
Offline
I'm in Eugene.
If you tell me you're a student at UO, i'm gonna have to re-introduce the bug
Go Beavs!
Offline
I'm in Eugene.
If you tell me you're a student at UO, i'm gonna have to re-introduce the bug
Go Beavs!
LOL!
Too old to be a duck, and definitely not a duck fan. Beavers all the way!
Offline
hello,
Thank you for your work !
i'm following this topic and read it.
but i don't think i have read it :
- can y used some blanck ntag215 since i have some for my amiibo ?
- and where you find the uid on ntag ?
Thank you in advance.
Offline
you can only use ntag213
The UID is the page 1&2 combined, except you need to remove the 4th byte
Offline
Hello again,
I will try to be more clear (thank Bettse.
I have 2 questions about this.
Can i used some ntag215 to do this ? (i know it's ntag213, but i will receive some ntag215 for amiibo....)
and my other question was where you are finding the UID of this NTAG for generating the PWD ?
Thank you in advance and sorry for this bad english i'm french.
Offline
@kurapika666 ok thank you for your answer
Offline
@ags131, I've compiled a full mapping of the vehicle upgrades: http://pastebin.com/VNtGB2Lh
If you need it in another format please ask.
Offline
Trasixes,
Using mifare++ultra light, the card uid is first 7 bytes of page 2 and 3?
Offline
Trasixes,
Using mifare++ultra light, the card uid is first 7 bytes of page 2 and 3?
First 3 bytes of page 0, and all four bytes of page 1. That makes up the UID.
Last edited by trasixes (2016-03-07 17:00:52)
Offline
Kurapika666, trasixes, ags131... "Thanks for the Q & A !" Explained a great deal of things. My question is regarding the character encryption. Is the tag UID being used? I have no issues with making vehicles. Falling short on character encryption. Any suggestions ! Gonna RE-READ the thread again.
Offline
Kurapika666, trasixes, ags131... "Thanks for the Q & A !" Explained a great deal of things. My question is regarding the character encryption. Is the tag UID being used? I have no issues with making vehicles. Falling short on character encryption. Any suggestions ! Gonna RE-READ the thread again.
Ags131 posted this in this thread.
http://ldcharcrypto.ags131.com/
If you want to dig into the actual encryption, have a look at node-ld. Between node-ld, this thread, and the datasheet for the ntag213, everything you could ever want to know is there.
Offline
http://ldcharcrypto.ags131.com/
Took a minute to RE-READ the information here and figured out the proper usage of the IdCharCrypto. Thanks "ags131"
I'll reiterate to ALL to please Re-READ ALL the information provided, not just here any of the threads ! Top notch information !
THANKS to ALL !
Offline
I tried to update the tardis (07040000 on page 36), it worked too
What did this update do? curious... Thanks in advance
Offline
It's just the second form of the tardis
Offline
online PWD gen http://ldpwd.ericbetts.org
Has this been taken down?
Offline
ags131 wrote:online PWD gen http://ldpwd.ericbetts.org
Has this been taken down?
Still opens for me
Offline
Has anyone else had issues with NTAG213 tags? I bought some 25mm ones and while they work on the left and right sides of the portal, they do not work correctly in the middle spot. They official tags work fine in the middle spot.
I am guessing that they are not sensitive enough (RF). Counting the number of turns on the antenna, the ones I bought only have 7 turns.
Where (in the UK) have people bought tags from that have worked successfully?
Offline
@trasixes : I also have that app, but as I'm a developper, I couldn't resist to make my own app, dedicated to this purpose
It's more like a game, than just to create new tags (as my official Lego Dimensions collection is already nearly full ...)
Doing this let me understand the NFC protocol, and as a binus, it gave me the possibility to create backup of my tags on thinner tags (very interesting when traveling with the game)So the app is dedicated to Lego Dimensions, and for example, when I'm using a Lego Dimensions tag on my android phone, it gave me the type (character or item/vehicle), and the name. Next step is to introduce upgrades for items.
Hi Pixel1666, did you ever finish your App? I would be very interested in trying it out, especially if you have developed the App to also program blank NTAG's. Thank you in advance, Jeppe
Offline
Has anyone else had issues with NTAG213 tags? I bought some 25mm ones and while they work on the left and right sides of the portal, they do not work correctly in the middle spot. They official tags work fine in the middle spot.
I am guessing that they are not sensitive enough (RF). Counting the number of turns on the antenna, the ones I bought only have 7 turns.
Where (in the UK) have people bought tags from that have worked successfully?
Yeah I've found that the following tags work flawlessly and can be bought on ebay UK
http://m.ebay.co.uk/itm/361513418941
And you can use the new Id's of 45 for Green arrow and 46 for Supergirl (Red Lantern)
I suggest you get in there and buy them as soon as you can. I haven't found another tag yet that works as well. Most tags work but getting them to work on the centre reader for the vehicles is hard and these tags are the only ones so far which I've found that just work.
Report back with your successes
Blite.
Offline
Stay away from the 25mm tags and go for 27mm - 28mm tags ones with 10-11 metal loops on the sticker, they get better distance and work better in the center reader/writer.
25mm tags are fine for characters but when you get to parts of the game which require you to move your player around on the portal this can be a pain off your character isn't read in the centre reader. Also ab pain when doing the hacking in the minigame where once again you have to move your character around.
Offline
I've found these 25mm tags to work very well. In fact, the Toypad often detects them 1-2 inches away. I've tested them extensively, in all locations on the Toypad, and have had no problems at all.
http://r.ebay.com/WVIHDT
Offline
I've been using these 22mm tags and so far haven't had any issues.
http://www.amazon.com/dp/B00SI3BXUW
Offline
I've been using these 22mm tags and so far haven't had any issues.
http://www.amazon.com/dp/B00SI3BXUW
Price wise those tags are expensive, even with the 48% discount they are still more expensive. Have you played around with the new supergirl character yet?
Offline
They are expensive relative to other sources, but I was wanting them quicker than the usual china snail mail. I have played with supergirl a small amount, but not much.
Offline
I've found these 25mm tags to work very well. In fact, the Toypad often detects them 1-2 inches away. I've tested them extensively, in all locations on the Toypad, and have had no problems at all.
http://r.ebay.com/WVIHDT
I love these tags, shame about the long delivery times from China... Is there a local seller for these in the UK?
Offline
I read the tag with Mifare++ Ultralight
Page0: 04897174
Page1: 7A333580
So UID = 0489717A333580
http://ldpwd.ericbetts.org/ gives me PWD: 660d01d8
http://ldcharcrypto.ags131.com/ with character 10 gives me:
A798B47F
755D0DBF
I successfully write the following:
Page36: A798B47F
Page37: 755D0DBF
Then I try to write Page 43 with 660d01d8 and if fails.
Any suggestions welcome!
Offline
I read the tag with Mifare++ Ultralight
Page0: 04897174
Page1: 7A333580So UID = 0489717A333580
http://ldpwd.ericbetts.org/ gives me PWD: 660d01d8
http://ldcharcrypto.ags131.com/ with character 10 gives me:
A798B47F
755D0DBFI successfully write the following:
Page36: A798B47F
Page37: 755D0DBFThen I try to write Page 43 with 660d01d8 and if fails.
Any suggestions welcome!
I confirmed your PWD, and your encrypted character ID. All checks out. Did you have a failure at some point with that particular tag? If so, you'd need to reboot the console and start the game again. LD caches the UID, so if you had a typo, and received "update required" message, it will always display that message until you reboot/restart LD.
Offline
shindigs wrote:I read the tag with Mifare++ Ultralight
Page0: 04897174
Page1: 7A333580So UID = 0489717A333580
http://ldpwd.ericbetts.org/ gives me PWD: 660d01d8
http://ldcharcrypto.ags131.com/ with character 10 gives me:
A798B47F
755D0DBFI successfully write the following:
Page36: A798B47F
Page37: 755D0DBFThen I try to write Page 43 with 660d01d8 and if fails.
Any suggestions welcome!
I confirmed your PWD, and your encrypted character ID. All checks out. Did you have a failure at some point with that particular tag? If so, you'd need to reboot the console and start the game again. LD caches the UID, so if you had a typo, and received "update required" message, it will always display that message until you reboot/restart LD.
No it fails when trying to write Page 43 in Mifare++ Ultralight.
"Error writing page 43. All following pages have NOT been written"
The gamepad never detects these anyway so looks like I have to buy another set of tags.
Offline
The gamepad only detects them if the PWD is set. You may have to try a different app to write page 43
Offline
trasixes wrote:shindigs wrote:I read the tag with Mifare++ Ultralight
Page0: 04897174
Page1: 7A333580So UID = 0489717A333580
http://ldpwd.ericbetts.org/ gives me PWD: 660d01d8
http://ldcharcrypto.ags131.com/ with character 10 gives me:
A798B47F
755D0DBFI successfully write the following:
Page36: A798B47F
Page37: 755D0DBFThen I try to write Page 43 with 660d01d8 and if fails.
Any suggestions welcome!
I confirmed your PWD, and your encrypted character ID. All checks out. Did you have a failure at some point with that particular tag? If so, you'd need to reboot the console and start the game again. LD caches the UID, so if you had a typo, and received "update required" message, it will always display that message until you reboot/restart LD.
No it fails when trying to write Page 43 in Mifare++ Ultralight.
"Error writing page 43. All following pages have NOT been written"The gamepad never detects these anyway so looks like I have to buy another set of tags.
Are you using a new tag or trying to rewrite a genuine LD tag? If it is the latter, it won't work, at least not that way.
Offline
shindigs wrote:trasixes wrote:I confirmed your PWD, and your encrypted character ID. All checks out. Did you have a failure at some point with that particular tag? If so, you'd need to reboot the console and start the game again. LD caches the UID, so if you had a typo, and received "update required" message, it will always display that message until you reboot/restart LD.
No it fails when trying to write Page 43 in Mifare++ Ultralight.
"Error writing page 43. All following pages have NOT been written"The gamepad never detects these anyway so looks like I have to buy another set of tags.
Are you using a new tag or trying to rewrite a genuine LD tag? If it is the latter, it won't work, at least not that way.
New tag.
Offline
trasixes wrote:shindigs wrote:No it fails when trying to write Page 43 in Mifare++ Ultralight.
"Error writing page 43. All following pages have NOT been written"The gamepad never detects these anyway so looks like I have to buy another set of tags.
Are you using a new tag or trying to rewrite a genuine LD tag? If it is the latter, it won't work, at least not that way.
New tag.
Hmmm and the tag type isn't set to vehicle, right? I'm just spitballing at this point.
Offline
shindigs wrote:trasixes wrote:Are you using a new tag or trying to rewrite a genuine LD tag? If it is the latter, it won't work, at least not that way.
New tag.
Hmmm and the tag type isn't set to vehicle, right? I'm just spitballing at this point.
I don't think so, just to make sure here is the full dump:
04897174
7A333580
FC480000
E1101200
0103A010
440300FE
00000000
00000000
00000000
00000000
00000000
00000000
00000000
00000000
00000000
00000000
00000000
00000000
00000000
00000000
00000000
00000000
00000000
00000000
00000000
00000000
00000000
00000000
00000000
00000000
00000000
00000000
00000000
00000000
00000000
00000000
A798B47F
755D0DBF
00000000
00000000
00000000
00000000
04897174
7A333580
Offline
Not seeing anything that should cause a problem. The only potential issue I can see is the PWD not being set.
Do you have a link to the tags you are using?
Last edited by trasixes (2016-03-30 20:03:01)
Offline
Not seeing anything that should cause a problem. The only potential issue I can see is the PWD not being set.
Do you have a link to the tags you are using?
Thanks for verifying. The tags I am using can be found here:
http://www.ebay.com/itm/281460266998?_trksid=p2060353.m2749.l2649&ssPageName=STRK%3AMEBIDX%3AIT
Offline
Those are the wrong tags, probably smaller. They are NTAG203s instead of NTAG213s
From Datasheet:
168 bytes of total memory, divided in 42 pages (4 bytes each)
144 bytes of user r/w memory area, divided in 36 pages (4 bytes each)
Thats not enough space for LD tags
Last edited by ags131 (2016-03-30 20:22:44)
Offline
trasixes wrote:Not seeing anything that should cause a problem. The only potential issue I can see is the PWD not being set.
Do you have a link to the tags you are using?
Thanks for verifying. The tags I am using can be found here:
http://www.ebay.com/itm/281460266998?_trksid=p2060353.m2749.l2649&ssPageName=STRK%3AMEBIDX%3AIT
NTAG203? is that correct? If so, that would likely be your problem.
Offline
shindigs wrote:trasixes wrote:Not seeing anything that should cause a problem. The only potential issue I can see is the PWD not being set.
Do you have a link to the tags you are using?
Thanks for verifying. The tags I am using can be found here:
http://www.ebay.com/itm/281460266998?_trksid=p2060353.m2749.l2649&ssPageName=STRK%3AMEBIDX%3AITNTAG203? is that correct? If so, that would likely be your problem.
Those are the wrong tags, probably smaller. They are NTAG203s instead of NTAG213s
From Datasheet:
168 bytes of total memory, divided in 42 pages (4 bytes each)
144 bytes of user r/w memory area, divided in 36 pages (4 bytes each)Thats not enough space for LD tags
And so the mystery is solved. I have ordered new tags. Thank you both for helping!
Offline
I have been speaking to the supplier of the 25mm tags I had that did not work correctly.
They have got a new batch of tags and they work perfectly. I can even elevate the tag about 4mm above the center space and they still work
The company I brought from is http://zipnfc.com and the tags I used are http://zipnfc.com/nfc-stickers/clear-nfc-stickers/25mm-nfc-sticker-ntag213-clear-ntag213.html
If you buy from them, ask for the high sensitivity tags and that Paul told you about them. They are phasing out the old stock and phasing in the new high sensitivity. At the moment, they have both in stock so telling them the above should mean you get the correct tags
They also have an ebay store www.ebay.co.uk/itm/271279788892 but if you buy in quantity 50, the ebay shop is more expensive
I wonder what is your UID and what values at which pages and with which tool you write.
I use a program on my android phone is called "RFID NFC Tool". It supports keys so can read the original tags
Has anyone figured out the vehicle upgrades? Im trying to work out the codes to generate the vehicle updates
Offline
@Wootty2000 on 2016-02-28 I made a post about the vehicle upgrades. I posted a pastebin link to the full list of upgrades for all the vehicles. It's a list of the upgrades and the numeric value for each upgrade. Adding the numeric values for the upgrades you get the complete code you have to write to the tag.
Offline
I know how to create characters and vehicles in Lego Dimensions:
Characters:
- Read the UID of your NTAG213 (I use Mifare++ Ultralight). This UID are on page 1 and 2 except last 2 digits from page 1.
- With this: http://ldcharcrypto.ags131.com/ you write your UID and the ID of the character you want and the resoult you have to write on page 36 and 37.
- With this: http://ldpwd.ericbetts.org/ you write your UID and it gives you the pass that you have to write on page 43.
- This new code you write on your NTAG213 and done.
Vehicles:
- With this: http://ldpwd.ericbetts.org/ you write your UID and it gives you the pass that you have to write on page 43.
- This new code you write on your NTAG213 and done. When the game ask you to build the toy you place this NFC and the game will write it.
Now my question is about the upgrades of vehicles. I saw this: http://pastebin.com/VNtGB2Lh but I don't know where I have to write the numbers or how I have to do it.
Thanks!
Offline
Sorry I made a mistake, the vehicle can't be created on this way.
- Using this page: http://www.binaryhexconverter.com/decimal-to-hex-converter you put the ID of the vehicle and you get the hex.
- You change the position of the bytes and you write on page 36
- On page 38 you change byte 2 to -> 01
- You use page: http://ldpwd.ericbetts.org/ to create the PSW.
- You write in page 43 and done.
But I am still stuck to upgrade a vehicle.
Thanks and sorry for the mistake.
Offline
@algope For the upgrades you have to:
- Calculate the total upgrade value by adding the values for each individual upgrade (having in mind that, in order to select an upgrade, you also have to select all the upgrades of the same family that preceed the one you want, just like you would do in the game).
- Convert this total upgrade value to hexadecimal.
- Write this number (in BIG ENDIAN convention, i.e. reversing the natural order of the bytes that compose the number: 435423A1B7 -> B7A1235443) to pages 35 and 37 (if the number is small enough, and has 4 or less bytes, you just use page 35 and leave page 37 with all zeros, and if it doesn't fit on page 35, you use page 35 for the first 4 bytes and page 37 for the next ones).
That is only for the upgrades, of course you also have to write the vehicle id to page 36 and the type of the tag (00010000 hex) to page 38.
That way, when you read the tag on the toypad, it will have all the selected upgrades in the game and you'll be able to use them. However if you go into the upgrade menu, you will just see the upgrades you have activated in the game, because this menu doesn't show the actual state of the tag, but what you have done in-game.
Offline
@algope For the upgrades you have to:
- Calculate the total upgrade value by adding the values for each individual upgrade (having in mind that, in order to select an upgrade, you also have to select all the upgrades of the same family that preceed the one you want, just like you would do in the game).
- Convert this total upgrade value to hexadecimal.
- Write this number (in BIG ENDIAN convention, i.e. reversing the natural order of the bytes that compose the number: 435423A1B7 -> B7A1235443) to pages 35 and 37 (if the number is small enough, and has 4 or less bytes, you just use page 35 and leave page 37 with all zeros, and if it doesn't fit on page 35, you use page 35 for the first 4 bytes and page 37 for the next ones).That is only for the upgrades, of course you also have to write the vehicle id to page 36 and the type of the tag (00010000 hex) to page 38.
That way, when you read the tag on the toypad, it will have all the selected upgrades in the game and you'll be able to use them. However if you go into the upgrade menu, you will just see the upgrades you have activated in the game, because this menu doesn't show the actual state of the tag, but what you have done in-game.
Thanks @Olfan, I saw that you create this: http://pastebin.com/VNtGB2Lh but I don't understand where I find the values.
I'm trying with Emmet's Excavator and I see that in this pastebin you put numbers to each familie, that means that I have to sum all of them? And if I want to made a total upgrade, I have to sum all the numbers?
Thanks a lot!
Offline
@algope, for Emmet's Excavator, let's say you want to set Horn Sound Chooser upgrade to "B" sound. Then you have to add:
- (1) In the Rebuild Family, you have to activate the second model, because this upgrade belongs to the second model. If it belonged to the third model, you would have had to activate the third and the second model. Actually, this is optional, because the upgrade would work, even without the second model activated.
- In the Extras Family, you have to select all the preceeding upgrades:
* (3542940) Bolt Colour Chooser: let's say you select it, but leave it disabled.
* (590490) Enemy Hearts Ability active.
* (590490) Regenerate Armour Ability active.
* (106288200) Horn Sound Chooser "B" sound.
Adding all this numbers: 1+3542940+590490+590490+106288200=111012121 -> 069DE919 hex -> 19E99D06 BIG ENDIAN hex
Since it's 4 bytes, you write them to page 35 and leave page 37 with all zeroes.
If you want a full upgrade, you have to add the values for all the upgrades (but just choosing one value for the upgrades with a multiple possible value. For example, in an upgrade with several colours, you would just choose one of them, of course). Some of the values are exclusive (for example you can only have one enabled weapon at a time, so if you select the value "enabled" for more than one weapon, I think you will have really enabled just the first of them).
The values for each of the upgrades depend on the number of upgrades available to each vehicle (and on the number of possible values of each upgrade). Most vehicles have 47 possible upgrades (including the upgrade to the second and third models), so all of them get the same values for each upgrade, which means that you can re-use the values. However, keep in mind that there are some vehicles and gadgets with less posible upgrades, and those have different upgrade values.
As you see, all this process is quite tedious, and surely would be better if automated.
Offline