Proxmark3 community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

Announcement

Time changes and with it the technology
Proxmark3 @ discord

Users of this forum, please be aware that information stored on this site is not private.

#1 2016-02-16 20:08:45

Apt-Get
Contributor
Registered: 2015-12-23
Posts: 111

Manipulating HID card numbers.

Hi Guys. I remember there being some kind of HID bruteforce script around.
Can one of you point me to that script?

All i really want to play with is changing the number on a tag to see of the next few numbers in sequence also work.

HID Prox TAG ID: 3709cb6331 (45464) - Format Len: 36bit - FC: 0 - Card: 0

So i would like to try  (45465) etc. (I assume they usually are in sequence? or are they random numbers, and I should not bother?)

I am not sure how to calculate these out, so any info would be great.

Thanks guys.

A

Last edited by Apt-Get (2016-02-16 20:09:06)

Offline

#2 2016-02-16 20:13:40

iceman
Administrator
Registered: 2013-04-25
Posts: 9,538
Website

Re: Manipulating HID card numbers.

You find something like that in my fork,..

Offline

#3 2016-02-16 20:15:49

Apt-Get
Contributor
Registered: 2015-12-23
Posts: 111

Re: Manipulating HID card numbers.

iceman wrote:

You find something like that in my fork,..

Cheers Ice wink

Offline

#4 2016-02-16 20:17:03

marshmellow
Contributor
From: US
Registered: 2013-06-10
Posts: 2,302

Re: Manipulating HID card numbers.

does your tag have 45464 printed on it?  the pm3 didn't fully recognize the format (thus the FC: 0 - Card: 0) so the 45464 may not be correct either.

I believe iceman and others had a bruteforce, but it was only the 26 bit format as I recall.

Offline

#5 2016-02-16 20:50:05

Apt-Get
Contributor
Registered: 2015-12-23
Posts: 111

Re: Manipulating HID card numbers.

marshmellow wrote:

does your tag have 45464 printed on it?  the pm3 didn't fully recognize the format (thus the FC: 0 - Card: 0) so the 45464 may not be correct either.

I believe iceman and others had a bruteforce, but it was only the 26 bit format as I recall.

This is from a keyscan transmitter so no tag ids are printed on the fob.. I have noticed they always scan like that. but a clone works.

1455652366_4-button-mini-transmitter-with-hid-chip1.jpg

Last edited by Apt-Get (2016-02-16 20:52:49)

Offline

#6 2016-02-16 21:22:38

marshmellow
Contributor
From: US
Registered: 2013-06-10
Posts: 2,302

Re: Manipulating HID card numbers.

What other purpose does the fob serve? (What do the buttons do?)

Offline

#7 2016-02-16 21:23:53

iceman
Administrator
Registered: 2013-04-25
Posts: 9,538
Website

Re: Manipulating HID card numbers.

I'd forgotten to add the Bruteforce in the commandtable,  but now its there in the fork.  No script and untested.
I'm pretty sure you figure it out and can provide some feedback on it.

Offline

#8 2016-02-16 21:42:40

Apt-Get
Contributor
Registered: 2015-12-23
Posts: 111

Re: Manipulating HID card numbers.

marshmellow wrote:

What other purpose does the fob serve? (What do the buttons do?)

front doors for guests and there is a built in garage door transmitter.

Offline

#9 2016-02-19 11:03:36

iceman
Administrator
Registered: 2013-04-25
Posts: 9,538
Website

Re: Manipulating HID card numbers.

Found another online wiegand calc,  besides brivco
http://www.ccdesignworks.com/wiegand_calc.htm

Offline

Board footer

Powered by FluxBB