Research, development and trades concerning the powerful Proxmark3 device.
Remember; sharing is caring. Bring something back to the community.
"Learn the tools of the trade the hard way." +Fravia
You are not logged in.
Time changes and with it the technology
Proxmark3 @ discord
Users of this forum, please be aware that information stored on this site is not private.
Hello forum,
Please accept my apologies if the formatting of this question is incorrect for I am a n00b, I have lurked around these forums for a while now and have come across a problem that I've been unable to solve and hope that the community will be kind enough to help me:
I have an issue where
hw tune
results in:
[!] LF antenna is UNUSABLE
[!] HF antenna is UNUSABLE
[-] Not showing LF tuning graph since all values is zero.
I've got a (new out of the box) RDV2 and updated the bootloader and fullimage using:
user@user:~/proxmark3/proxmark3$ client/flasher /dev/ttyACM0 -b bootrom/obj/bootrom.elf armsrc/obj/fullimage.elf
i have compiled the cloned git using:
make clean && make all
which completes without error.
I am able to flash the bootloader.elf and fullimage.elf by keeping the button held (for the duration of the flash) whilst connecting the PM3.
The flash procedure completes like this:
user@user:~/proxmark3/proxmark3$ client/flasher /dev/ttyACM0 -b bootrom/obj/bootrom.elf armsrc/obj/fullimage.elf
Loading ELF file 'bootrom/obj/bootrom.elf'...
Loading usable ELF segments:
0: V 0x00100000 P 0x00100000 (0x00000200->0x00000200) [R X] @0x94
1: V 0x00200000 P 0x00100200 (0x00000d6c->0x00000d6c) [R X] @0x298
Loading ELF file 'armsrc/obj/fullimage.elf'...
Loading usable ELF segments:
0: V 0x00102000 P 0x00102000 (0x00037148->0x00037148) [R X] @0x94
1: V 0x00200000 P 0x00139148 (0x00001300->0x00001300) [RW ] @0x371dc
Note: Extending previous segment from 0x37148 to 0x38448 bytes
.Waiting for Proxmark to appear on /dev/ttyACM0 Found.
Flashing...
Writing segments for file: bootrom/obj/bootrom.elf
0x00100000..0x001001ff [0x200 / 1 blocks]. OK
0x00100200..0x00100f6b [0xd6c / 7 blocks]....... OK
Writing segments for file: armsrc/obj/fullimage.elf
0x00102000..0x0013a447 [0x38448 / 451 blocks]................................................................................................................................................................................................................................................................................................................................................................................................................................................................... OK
Resetting hardware...
All done.
Have a nice day!
I'm able to connect to the proxmark using the client:
user@user:~/proxmark3/proxmark3$ client/proxmark3 /dev/ttyACM0
██████╗ ███╗ ███╗ ████╗ ...iceman fork
██╔══██╗████╗ ████║ ══█║
██████╔╝██╔████╔██║ ████╔╝
██╔═══╝ ██║╚██╔╝██║ ══█║ iceman@icesql.net
██║ ██║ ╚═╝ ██║ ████╔╝ https://github.com/iceman1001/proxmark3
╚═╝ ╚═╝ ╚═╝ ╚═══╝ v3.1.0
Keep iceman fork alive with a donation! https://paypal.me/iceman1001/
MONERO: 43mNJLpgBVaTvyZmX9ajcohpvVkaRy1kbZPm8tqAb7itZgfuYecgkRF36rXrKFUkwEGeZedPsASRxgv4HPBHvJwyJdyvQuP
Proxmark3 RFID instrument
[ CLIENT ]
client: iceman build for RDV40 with flashmem; smartcard;
[ ARM ]
bootrom: iceman/master/ice_v3.1.0-1097-ga23414fe 2019-11-11 11:18:53
os: iceman/master/ice_v3.1.0-1097-ga23414fe 2019-11-11 11:18:55
[ FPGA ]
LF image built for 2s30vq100 on 2017/10/25 at 19:50:50
HF image built for 2s30vq100 on 2018/ 9/ 3 at 21:40:23
[ Hardware ]
--= uC: AT91SAM7S512 Rev B
--= Embedded Processor: ARM7TDMI
--= Nonvolatile Program Memory Size: 512K bytes, Used: 238663 bytes (46%) Free: 285625 bytes (54%)
--= Second Nonvolatile Program Memory Size: None
--= Internal SRAM Size: 64K bytes
--= Architecture Identifier: AT91SAM7Sxx Series
--= Nonvolatile Program Memory Type: Embedded Flash Memory
pm3 -->
The command hw tune gives me this output:
pm3 --> hw tune
[=] measuring antenna characteristics, please wait...
....
[!] LF antenna is UNUSABLE
[!] HF antenna is UNUSABLE
[-] Not showing LF tuning graph since all values is zero.
pm3 -->
if i try to issue
hf search
the proxmark resets itself and moves onto
/dev/ttyACM1
:
pm3 --> hf search
UART:: write time-out
sending bytes to proxmark failed
UART:: write time-out
sending bytes to proxmark failed
UART:: write time-out
sending bytes to proxmark failed
[!] timeout while waiting for reply.
Sending bytes to proxmark failed - offline
Sending bytes to proxmark failed - offline
Sending bytes to proxmark failed - offline
Waiting for a response from the proxmark...
You can cancel this operation by pressing the pm3 button
For what it is worth, I have read through ubuntu install instructions and uninstalled modemmanager, I'm on ubuntu 18.04.3 and have corrected permissions for /dev/ttyACM0:
user@user:~/proxmark3/proxmark3$ [ -r /dev/ttyACM0 ] && [ -w /dev/ttyACM0 ] && echo ok
ok
Please help!
Offline
.... try RRG/Iceman repo compiled with PM3OTHER and see what happens.
Offline
Hi Iceman/forum,
Thanks for the reply, could you expand a little on what you mean by 'compiled with PM3OTHER' and how to do this?
I've have also tried using the RRG/iceman repo but only using the same make clean && make all compile commands.
Is there a way to build this specifically for an RDV2?
Offline
Yes, since be default it targets PM3RDV4 devices when compiling but is easliy adapted to always target non-rdv4, ie PM3OTHER
Offline
This makes sense to me, thanks. I will give it a try and report back.
Offline
Hi iceman/forum,
I have compiled the RRG/Iceman repo and used the 'PM3OTHER' option which no shows voltage but is unable to locate any LF tags:
[usb] pm3 --> hw version
[ Proxmark3 RFID instrument ]
[ CLIENT ]
client: RRG/Iceman
compiled with GCC 7.4.0 OS:Linux ARCH:x86_64
[ PROXMARK3 ]
[ ARM ]
bootrom: RRG/Iceman/master/f08fd019 2019-11-17 15:26:37
os: RRG/Iceman/master/f08fd019 2019-11-17 15:26:47
compiled with GCC 6.3.1 20170620
[ FPGA ]
LF image built for 2s30vq100 on 2019-07-31 at 15:57:16
HF image built for 2s30vq100 on 2018-09-03 at 21:40:23
[ Hardware ]
--= uC: AT91SAM7S512 Rev B
--= Embedded Processor: ARM7TDMI
--= Nonvolatile Program Memory Size: 512K bytes, Used: 245876 bytes (47%) Free: 278412 bytes (53%)
--= Second Nonvolatile Program Memory Size: None
--= Internal SRAM Size: 64K bytes
--= Architecture Identifier: AT91SAM7Sxx Series
--= Nonvolatile Program Memory Type: Embedded Flash Memory
[usb] pm3 --> hw tune
[=] Measuring antenna characteristics, please wait...
[=] You can cancel this operation by pressing the pm3 button
..
[+] LF optimal: 1683597.10 V - 0.00 kHz
[+] LF antenna is OK
[!] HF antenna is UNUSABLE
[-] Not showing LF tuning graph since all values is zero.
[usb] pm3 -->
[usb] pm3 --> lf search
[=] NOTE: some demods output possible binary
[=] if it finds something that looks like a tag
[=] False Positives ARE possible
[=]
[=] Checking for known tags...
[=]
[-] No known 125/134 kHz tags found!
[!] command execution time out
[usb] pm3 -->
I've even tried applying 3.3v to pin 55 on the at91 and still see the same results.
Is there anything else that I can try?
Thanks
Offline
Your LF voltages is crap. Have you connected the hf/lf antennas to the right ports on your RDV2?
and run
hw status
Offline