Proxmark3 community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

Announcement

Time changes and with it the technology
Proxmark3 @ discord

Users of this forum, please be aware that information stored on this site is not private.

#1 2017-03-28 21:27:47

acmusabe
Contributor
Registered: 2017-03-28
Posts: 3

Unidentifiable Doorking Keyfob

Hello all,

I am a security hobbyist and using the Proxmark 3 to duplicate my apartment's keyfob into an ATA5577C chip if that is possible. For this I am first trying to find out the data format and encoding/modulation scheme used in the card. I have tried to do "lf search" command on this keyfob, but the PM3 does not return anything ("no known tags"). Then I used the "data plot" command to see how the trace looks like and I got this following trace.

trace

From this trace, I feel like it uses PSK modulation, but since I am a beginner, I have no idea on how I can approach this trace to extract the correct data format (first [X] bits are facility code, then [Y] bits are unique ID, etc). Has anyone worked with this type of Doorking keyfobs before and knows the correct data format? I have attached a picture of my keyfob (which has both a clicker and a keyfob in the same package) and our apartment's reader (Doorking 1815-330) below in case it might be helpful. Thank you for your help and have a nice day,

keyfob

reader

Offline

#2 2017-03-30 01:12:21

marshmellow
Contributor
From: US
Registered: 2013-06-10
Posts: 2,302

Re: Unidentifiable Doorking Keyfob

lf search u
Searches for unknown tags and would be an option.

Offline

#3 2017-03-30 08:24:26

iceman
Administrator
Registered: 2013-04-25
Posts: 9,538
Website

Re: Unidentifiable Doorking Keyfob

...and @OP's links is missing...

Offline

#4 2017-04-01 00:37:45

marshmellow
Contributor
From: US
Registered: 2013-06-10
Posts: 2,302

Re: Unidentifiable Doorking Keyfob

his images:
http://imgur.com/a/hmWDW

http://imgur.com/a/HW9JK

http://imgur.com/a/7PRPs

evidently imgur doesn't allow direct image linking.

Offline

#5 2017-04-01 00:54:37

marshmellow
Contributor
From: US
Registered: 2013-06-10
Posts: 2,302

Re: Unidentifiable Doorking Keyfob

it appears to be psk, so lf search u or

lf read
data samples
data rawd p1  ( or p2 )

to attempt to demod to binary

Offline

#6 2017-04-01 21:34:47

lonewolf
Contributor
Registered: 2016-09-03
Posts: 37

Re: Unidentifiable Doorking Keyfob

acmusabe wrote:

Doorking 1815-330

Uses 1508 tags, see http://www.proxmark.org/forum/viewtopic.php?id=2950 for more info.
http://www.doorking.com/sites/default/files/downloads/card_readers-Rev-2-15.pdf also relevant ("MicroPlus® and MicroClik® ProxMitters™ (Card + Transmitter) are available")

The linked trace has a terrible DC offset / is a bad read, which is why demod is failing.  Try running a "data norm" or "data hpf" first.

Last edited by lonewolf (2017-04-01 21:39:19)

Offline

Board footer

Powered by FluxBB