Proxmark3 community

Tangoindia

Member

Registered: 2009-10-18

Posts: 14

Parking gate tag emulation

Dear Friends,

Just got my PM3 today. Please help me emulate (or clone?) a parking gate tag. I do not know what sort of tag is it yet. I have attached a picture of it. It is a proximity tag used on controlsoft AC3211 read head.

Please help me get started I am a total n00b in this although I hold a computer science degree:)

Please download pictures from here:

http://rapidshare.com/files/294531073/untitled.JPG --> Tag photo

http://rapidshare.com/files/294531573/head.bmp --> Head photo

Last edited by Tangoindia (2009-10-18 09:23:46)

Tangoindia

Member

Registered: 2009-10-18

Posts: 14

Re: Parking gate tag emulation

Getting into the business now. So I tuned with the LF antenna that comes in the box (the white sandwich board). The frequency drop in the 125kHz is ~20V.

Q1. Does this mean that my tag is LF HID 125kHz?

When I >loread for the first time the values are always 255 255 0 in decimal. Second >loread gives different values. Third and so on gives slightly different values that are close to the second read.

Q2. Am I doing everything right?

Please tell me how to proceed next. In few days I will need to return the tag to the owner. Please tell me how to clone or how to emulate..

Thx

henryk

Contributor

Registered: 2009-07-27

Posts: 99

Re: Parking gate tag emulation

Yes, even from the pictures it very much looks like a standard run-off-the-mill LF tag with no security properties.

See http://code.google.com/p/proxmark3/wiki/TagOps and http://www.cq.cx/verichip.pl

Tangoindia

Member

Registered: 2009-10-18

Posts: 14

Re: Parking gate tag emulation

Henryk,

Thanks for the reply. I am seconds away from doing it. I read so many pages and so confused. Please tell me step by step how to make PM3 emulate this tag and I'll be done. Please spare some time and let me know..

Thx

Tangoindia

Member

Registered: 2009-10-18

Posts: 14

Re: Parking gate tag emulation

Henryk,

If I want to use PM3 to simulate, is this the right way to proceed?

>loread>losamples>losim the yellow led appears. Now if I put the LF antenna near the reader it will simulate?

Is there any other way to simulate by PM3 itself without activating losim command from the pc?

Thanks for letting me know..

Tangoindia

Member

Registered: 2009-10-18

Posts: 14

Re: Parking gate tag emulation

Friends,

Losimed my tag last night and the PCB ignited yellow. Held the LF antenna next to the reader and nothing. Removed the usb, tried again, and nothing? Please let me know what should I do.

Tangoindia

Member

Registered: 2009-10-18

Posts: 14

Re: Parking gate tag emulation

This is the losamples 6000 > plot command on this card

This is the autocorr command

Last edited by Tangoindia (2009-10-20 11:40:35)