[Solved] .

Aliendennis · 2016-04-09 17:52:56

.

Last edited by Aliendennis (2016-06-06 04:31:48)

ntk · 2016-04-09 21:18:26

I have none of viking card so I am not the right person.

But We have got on the forum these threads handled viking tag

http://www.proxmark.org/forum/viewtopic.php?id=1767&p=3
http://www.proxmark.org/forum/viewtopic.php?id=2693&p=2
from 10/2015 viking demod is working thanks to Marshmellow

There is two ways to make a copy of a viking card. One is using viking clone command.
lf viking clone where it use the printed ID (by iceman) to T55x7

lf viking read
lf viking clone <8 digit ID number>

but there was an issue in the SW concerning the mask 0xffff applied to raw ID.S.O. has cloned but not working on real reader. I am not sure the fix it in the main stream SW yet.

Do you have reader?

Aliendennis · 2016-04-10 16:19:08

I will have the reader in a week time. I will test it with the reader and update you with the results.

Thank ntk!

Aliendennis · 2016-04-12 09:01:42

I still can't figure out how to do lf viking clone ? It seems that cmd doesn't recognise it.

Can some kind soul guide me through this ? Thanks much!

ntk · 2016-04-12 11:18:25

Have you update your PM3 with latest SW. It should recognise viking command

proxmark3> lf viking
help This help
read Attempt to read and Extract tag data
clone <8 digit ID number> clone viking tag
sim <8 digit ID number> simulate viking tag.

Pls do that by getting the build env right or using the pre-built version in
http://www.proxmark.org/forum/viewtopic.php?id=1562

Last edited by ntk (2016-04-12 11:37:49)

Aliendennis · 2016-04-13 01:39:20

Yea i downloaded pm3 v2.5. got onto github and downloaded the files.

I tried to patch it up but seems it could not update.

I will try out again today.

Thanks ntk.

iceman · 2016-04-13 06:25:31

Don't go for Asper's precompiled binaries if you gonna patch up things.

Download latest official release here https://github.com/Proxmark/proxmark3/releases

Compile, flash, and use the client.

Aliendennis · 2016-04-17 18:54:00

Thanks guys. Figured it out.

Aliendennis · 2016-04-19 19:19:57

proxmark3> lf viking clone 06033ED5
Cloning - ID: 06033ED5, Raw: F2000000033ED5B4
#db# unknown command:: 0x0223
Waiting for a response from the proxmark...
Don't forget to cancel its operation first by pressing on the button

This is happening on my pm3 for the viking clone command.

So I guess I can't clone it for now ?

iceman · 2016-04-19 19:34:19

no, you are mixing up fullimage and client versions from different builds/forks/branches/releases.

Its been said before, use fullimage.elf and client from the same compilation build.

Aliendennis · 2016-04-24 19:44:27

I got it patched up finally.

I tried cloning the viking coding on to a T5577 card.

It seems that the cloning failed.

proxmark3> lf viking clone 06033ED5
Cloning - ID: 06033ED5, Raw: F2000000033ED5B4
proxmark3>

proxmark3> lf se
Reading 30000 bytes from device memory

Data fetched
Samples @ 8 bits/smpl, decimation 1:1
NOTE: some demods output possible binary
if it finds something that looks like a tag
False Positives ARE possible

Checking for known tags:

No Known Tags Found!

proxmark3>

So I guess it is still not possible to clone it yet ?

iceman · 2016-04-24 20:02:45

Got curios, Did your clone,
Debugged it.
http://pastebin.com/LMeyxHCJ

Exit message -5, is a hint. In source code, VikingDemod_AM, -5 is returned when the CRC is wrong.
Code works as it should.

but your tag id is not correct...

iceman · 2016-04-24 20:29:29

I think I found the bug, sneaky one.

The getVikingsbits function dropped the highest byte in the uid when creating the new block data.
I'll push it to my fork for ppl to manually patch it up.

pm3 --> lf vik clone 06033ed5
Cloning - ID: 06033ED5, Raw: F2000006033ED5B4
pm3 --> lf se
Reading 30000 bytes from device memory

Data fetched
Samples @ 8 bits/smpl, decimation 1:1
NOTE: some demods output possible binary
  if it finds something that looks like a tag
False Positives ARE possible


Checking for known tags:

Viking Tag Found: Card ID 06033ED5, Checksum: B4
Raw: F2000006033ED5B4

Valid Viking ID Found!

Aliendennis · 2016-04-25 03:54:11

You used a t5577 card to write it ?

I am trying it now. None of my card can be clone.

Weird.

Last edited by Aliendennis (2016-04-25 07:01:28)

Aliendennis · 2016-04-25 07:43:11

proxmark3> lf vik clone 06033ed5
Cloning - ID: 06033ED5, Raw: F2000000033ED5B4
proxmark3> lf se
Reading 30000 bytes from device memory

Data fetched
Samples @ 8 bits/smpl, decimation 1:1
NOTE: some demods output possible binary
if it finds something that looks like a tag
False Positives ARE possible

Checking for known tags:

No Known Tags Found!

proxmark3>

iceman · 2016-04-25 07:48:25

Did you compile/flash my fork? Or did you patch your file?

lohcm88 · 2016-04-25 09:32:17

iceman wrote:

Did you compile/flash my fork? Or did you patch your file?

Hi Alien Dennis - lend me your thread.. I am having same problem as well duplicating Viking cards

Hi Iceman.. i have compile and flash using your fork but still not able to duplicate the Viking card, do you mind taking a look at it.. thank you..

pm3 ~$ ./client/proxmark3.exe COM4
Qt: Untested Windows version 6.2 detected!
Prox/RFID mark3 RFID instrument
bootrom: iceman/-suspect 2016-04-25 08:19:09
os: iceman/-suspect 2016-04-25 08:20:28
LF FPGA image built for 2s30vq100 on 2015/03/06 at 07:38:04
HF FPGA image built for 2s30vq100 on 2015/11/ 2 at  9: 8: 8

uC: AT91SAM7S512 Rev B
Embedded Processor: ARM7TDMI
Nonvolatile Program Memory Size: 512K bytes. Used: 213601 bytes (41%). Free: 310687 bytes (59%).
Second Nonvolatile Program Memory Size: None
Internal SRAM Size: 64K bytes
Architecture Identifier: AT91SAM7Sxx Series
Nonvolatile Program Memory Type: Embedded Flash Memory

proxmark3> lf viking clone 05032B18
Cloning - ID: 05032B18, Raw: F2000000032B186F
#db# Initialization delay : 0 us
#db# Offsets : -128 us on the low pulses width, -128 us on the low pulses positions
#db# Password (LSB first on each byte) : 00 00 00 00 00 00 00
#db# Block address : 00
#db# Byte address : 6f
#db# Data : 00
#db# Sending data frame...
Waiting for a response from the proxmark...

iceman · 2016-04-25 09:43:18

Are you using the lastest code from my fork and running the client?

[edit]I can see that you flashed the fullimage.elf [/edit]

lohcm88 · 2016-04-25 09:54:08

Yes.. i downloaded the zip file from your fork.. This happen during compilation

pm3 ~$ make clean && make all
make -C client clean
Qt: Untested Windows version 6.2 detected!
Qt Meta Object Compiler version 62 (Qt 4.6.2)
make[1]: Entering directory `/pm3/client'
rm -f cli cli.exe flasher flasher.exe proxmark3 proxmark3.exe fpga_compress fpga_compress.exe snooper snooper.exe obj/nonce2key/crapto1.o obj/nonce2key/crypto1.o obj/nonce2key/nonce2key.o obj/nonce2key/crypto1_bs.o obj/loclass/cipher.o obj/loclass/cipherutils.o obj/loclass/des.o obj/loclass/ikeys.o obj/loclass/elite_crack.o obj/loclass/fileutils.o obj/mifarehost.o obj/parity.o obj/crc.o obj/crc16.o obj/crc64.o obj/iso14443crc.o obj/iso15693tools.o obj/data.o obj/graph.o obj/ui.o obj/cmddata.o obj/lfdemod.o obj/cmdhf.o obj/cmdhf14a.o obj/cmdhf14b.o obj/cmdhf15.o obj/cmdhfepa.o obj/cmdhflegic.o obj/cmdhficlass.o obj/cmdhfmf.o obj/cmdhfmfu.o obj/cmdhfmfhard.o obj/cmdhfmfdes.o obj/cmdhftopaz.o obj/cmdhw.o obj/cmdlf.o obj/cmdlfio.o obj/cmdlfhid.o obj/cmdlfawid.o obj/cmdlfem4x.o obj/cmdlfhitag.o obj/cmdlfti.o obj/cmdparser.o obj/cmdmain.o obj/cmdlft55xx.o obj/cmdlfpcf7931.o obj/cmdlfviking.o obj/cmdlfpresco.o obj/cmdlfpyramid.o obj/cmdlfguard.o obj/pm3_binlib.o obj/scripting.o obj/cmdscript.o obj/pm3_bitlib.o obj/aes.o obj/protocols.o obj/sha1.o obj/sha256.o obj/cmdcrc.o obj/reveng/preset.o obj/reveng/reveng.o obj/reveng/cli.o obj/reveng/bmpbit.o obj/reveng/model.o obj/reveng/poly.o obj/reveng/getopt.o obj/tea.o obj/prng.o obj/radixsort.o obj/bucketsort.o obj/*.o *.o *.moc.cpp
cd ../liblua && make clean
make[2]: Entering directory `/pm3/liblua'
rm -f liblua.a lua luac lapi.o lcode.o lctype.o ldebug.o ldo.o ldump.o lfunc.o lgc.o llex.o lmem.o lobject.o lopcodes.o lparser.o lstate.o lstring.o ltable.o ltm.o lundump.o lvm.o lzio.o lauxlib.o lbaselib.o lbitlib.o lcorolib.o ldblib.o liolib.o lmathlib.o loslib.o lstrlib.o ltablib.o loadlib.o linit.o  lua.o luac.o
make[2]: Leaving directory `/pm3/liblua'
make[1]: Leaving directory `/pm3/client'
make -C bootrom clean
make[1]: Entering directory `/pm3/bootrom'
make[1]: Leaving directory `/pm3/bootrom'
make[1]: Entering directory `/pm3/bootrom'
rm -rf obj/*.o
rm -rf obj/*.elf
rm -rf obj/*.s19
rm -rf obj/*.map
rm -rf obj/*.d
rm -rf version.c
make[1]: Leaving directory `/pm3/bootrom'
make -C armsrc clean
make[1]: Entering directory `/pm3/armsrc'
make[1]: Leaving directory `/pm3/armsrc'
make[1]: Entering directory `/pm3/armsrc'
rm -rf obj/*.o
rm -rf obj/*.elf
rm -rf obj/*.s19
rm -rf obj/*.map
rm -rf obj/*.d
rm -rf obj/*.z
rm -rf obj/*.bin
rm -rf version.c
make[1]: Leaving directory `/pm3/armsrc'
make -C recovery clean
make[1]: Entering directory `/pm3/recovery'
rm -f bootrom.bin fullimage.bin proxmark3_recovery.bin
make[1]: Leaving directory `/pm3/recovery'
make -C client all
Qt: Untested Windows version 6.2 detected!
Qt Meta Object Compiler version 62 (Qt 4.6.2)
make[1]: Entering directory `/pm3/client'
Compiling liblua, using platform mingw
cd ../liblua && make mingw
make[2]: Entering directory `/pm3/liblua'
make "LUA_A=lua52.dll" "LUA_T=lua.exe" \
        "AR=gcc -shared -o" "RANLIB=strip --strip-unneeded" \
        "SYSCFLAGS=-DLUA_BUILD_AS_DLL" "SYSLIBS=" "SYSLDFLAGS=-s" lua.exe
make[3]: Entering directory `/pm3/liblua'
gcc -O3 -Wall -DLUA_COMPAT_ALL -DLUA_BUILD_AS_DLL    -c -o lua.o lua.c
gcc -O3 -Wall -DLUA_COMPAT_ALL -DLUA_BUILD_AS_DLL    -c -o lapi.o lapi.c
gcc -O3 -Wall -DLUA_COMPAT_ALL -DLUA_BUILD_AS_DLL    -c -o lcode.o lcode.c
gcc -O3 -Wall -DLUA_COMPAT_ALL -DLUA_BUILD_AS_DLL    -c -o lctype.o lctype.c
gcc -O3 -Wall -DLUA_COMPAT_ALL -DLUA_BUILD_AS_DLL    -c -o ldebug.o ldebug.c
gcc -O3 -Wall -DLUA_COMPAT_ALL -DLUA_BUILD_AS_DLL    -c -o ldo.o ldo.c
gcc -O3 -Wall -DLUA_COMPAT_ALL -DLUA_BUILD_AS_DLL    -c -o ldump.o ldump.c
gcc -O3 -Wall -DLUA_COMPAT_ALL -DLUA_BUILD_AS_DLL    -c -o lfunc.o lfunc.c
gcc -O3 -Wall -DLUA_COMPAT_ALL -DLUA_BUILD_AS_DLL    -c -o lgc.o lgc.c
gcc -O3 -Wall -DLUA_COMPAT_ALL -DLUA_BUILD_AS_DLL    -c -o llex.o llex.c
gcc -O3 -Wall -DLUA_COMPAT_ALL -DLUA_BUILD_AS_DLL    -c -o lmem.o lmem.c
gcc -O3 -Wall -DLUA_COMPAT_ALL -DLUA_BUILD_AS_DLL    -c -o lobject.o lobject.c
gcc -O3 -Wall -DLUA_COMPAT_ALL -DLUA_BUILD_AS_DLL    -c -o lopcodes.o lopcodes.c
gcc -O3 -Wall -DLUA_COMPAT_ALL -DLUA_BUILD_AS_DLL    -c -o lparser.o lparser.c
gcc -O3 -Wall -DLUA_COMPAT_ALL -DLUA_BUILD_AS_DLL    -c -o lstate.o lstate.c
gcc -O3 -Wall -DLUA_COMPAT_ALL -DLUA_BUILD_AS_DLL    -c -o lstring.o lstring.c
gcc -O3 -Wall -DLUA_COMPAT_ALL -DLUA_BUILD_AS_DLL    -c -o ltable.o ltable.c
gcc -O3 -Wall -DLUA_COMPAT_ALL -DLUA_BUILD_AS_DLL    -c -o ltm.o ltm.c
gcc -O3 -Wall -DLUA_COMPAT_ALL -DLUA_BUILD_AS_DLL    -c -o lundump.o lundump.c
gcc -O3 -Wall -DLUA_COMPAT_ALL -DLUA_BUILD_AS_DLL    -c -o lvm.o lvm.c
gcc -O3 -Wall -DLUA_COMPAT_ALL -DLUA_BUILD_AS_DLL    -c -o lzio.o lzio.c
gcc -O3 -Wall -DLUA_COMPAT_ALL -DLUA_BUILD_AS_DLL    -c -o lauxlib.o lauxlib.c
gcc -O3 -Wall -DLUA_COMPAT_ALL -DLUA_BUILD_AS_DLL    -c -o lbaselib.o lbaselib.c
gcc -O3 -Wall -DLUA_COMPAT_ALL -DLUA_BUILD_AS_DLL    -c -o lbitlib.o lbitlib.c
gcc -O3 -Wall -DLUA_COMPAT_ALL -DLUA_BUILD_AS_DLL    -c -o lcorolib.o lcorolib.c
gcc -O3 -Wall -DLUA_COMPAT_ALL -DLUA_BUILD_AS_DLL    -c -o ldblib.o ldblib.c
gcc -O3 -Wall -DLUA_COMPAT_ALL -DLUA_BUILD_AS_DLL    -c -o liolib.o liolib.c
gcc -O3 -Wall -DLUA_COMPAT_ALL -DLUA_BUILD_AS_DLL    -c -o lmathlib.o lmathlib.c
gcc -O3 -Wall -DLUA_COMPAT_ALL -DLUA_BUILD_AS_DLL    -c -o loslib.o loslib.c
gcc -O3 -Wall -DLUA_COMPAT_ALL -DLUA_BUILD_AS_DLL    -c -o lstrlib.o lstrlib.c
gcc -O3 -Wall -DLUA_COMPAT_ALL -DLUA_BUILD_AS_DLL    -c -o ltablib.o ltablib.c
gcc -O3 -Wall -DLUA_COMPAT_ALL -DLUA_BUILD_AS_DLL    -c -o loadlib.o loadlib.c
gcc -O3 -Wall -DLUA_COMPAT_ALL -DLUA_BUILD_AS_DLL    -c -o linit.o linit.c
gcc -shared -o lua52.dll lapi.o lcode.o lctype.o ldebug.o ldo.o ldump.o lfunc.o lgc.o llex.o lmem.o lobject.o lopcodes.o lparser.o lstate.o lstring.o ltable.o ltm.o lundump.o lvm.o lzio.o lauxlib.o lbaselib.o lbitlib.o lcorolib.o ldblib.o liolib.o lmathlib.o loslib.o lstrlib.o ltablib.o loadlib.o linit.o
strip --strip-unneeded lua52.dll
gcc -o lua.exe -s  lua.o lua52.dll -lm
make[3]: Leaving directory `/pm3/liblua'
make "LUAC_T=luac.exe" luac.exe
make[3]: Entering directory `/pm3/liblua'
gcc -O3 -Wall -DLUA_COMPAT_ALL     -c -o luac.o luac.c
ar rcu liblua.a lapi.o lcode.o lctype.o ldebug.o ldo.o ldump.o lfunc.o lgc.o llex.o lmem.o lobject.o lopcodes.o lparser.o lstate.o lstring.o ltable.o ltm.o lundump.o lvm.o lzio.o lauxlib.o lbaselib.o lbitlib.o lcorolib.o ldblib.o liolib.o lmathlib.o loslib.o lstrlib.o ltablib.o loadlib.o linit.o
ranlib liblua.a
gcc -o luac.exe   luac.o liblua.a -lm
make[3]: Leaving directory `/pm3/liblua'
make[2]: Leaving directory `/pm3/liblua'
gcc -std=c99 -O3 -mpopcnt -march=native -g -I. -I../include -I../common -I../zlib -I/opt/local/include -I../liblua -Wall -I/mingw/include -DHAVE_GUI -DZ_SOLO -DZ_PREFIX -DNO_GZIP -DZLIB_PM3_TUNED  -c -o obj/proxmark3.o proxmark3.c
gcc -std=c99 -O3 -mpopcnt -march=native -g -I. -I../include -I../common -I../zlib -I/opt/local/include -I../liblua -Wall -I/mingw/include -DHAVE_GUI -DZ_SOLO -DZ_PREFIX -DNO_GZIP -DZLIB_PM3_TUNED  -c -o obj/uart.o uart.c
gcc -std=c99 -O3 -mpopcnt -march=native -g -I. -I../include -I../common -I../zlib -I/opt/local/include -I../liblua -Wall -I/mingw/include -DHAVE_GUI -DZ_SOLO -DZ_PREFIX -DNO_GZIP -DZLIB_PM3_TUNED  -c -o obj/util.o util.c
gcc -std=c99 -O3 -mpopcnt -march=native -g -I. -I../include -I../common -I../zlib -I/opt/local/include -I../liblua -Wall -I/mingw/include -DHAVE_GUI -DZ_SOLO -DZ_PREFIX -DNO_GZIP -DZLIB_PM3_TUNED  -c -o obj/sleep.o sleep.c
gcc -std=c99 -O3 -mpopcnt -march=native -g -I. -I../include -I../common -I../zlib -I/opt/local/include -I../liblua -Wall -I/mingw/include -DHAVE_GUI -DZ_SOLO -DZ_PREFIX -DNO_GZIP -DZLIB_PM3_TUNED  -c -o obj/nonce2key/crapto1.o nonce2key/crapto1.c
gcc -std=c99 -O3 -mpopcnt -march=native -g -I. -I../include -I../common -I../zlib -I/opt/local/include -I../liblua -Wall -I/mingw/include -DHAVE_GUI -DZ_SOLO -DZ_PREFIX -DNO_GZIP -DZLIB_PM3_TUNED  -c -o obj/nonce2key/crypto1.o nonce2key/crypto1.c
gcc -std=c99 -O3 -mpopcnt -march=native -g -I. -I../include -I../common -I../zlib -I/opt/local/include -I../liblua -Wall -I/mingw/include -DHAVE_GUI -DZ_SOLO -DZ_PREFIX -DNO_GZIP -DZLIB_PM3_TUNED  -c -o obj/nonce2key/nonce2key.o nonce2key/nonce2key.c
gcc -std=c99 -O3 -mpopcnt -march=native -g -I. -I../include -I../common -I../zlib -I/opt/local/include -I../liblua -Wall -I/mingw/include -DHAVE_GUI -DZ_SOLO -DZ_PREFIX -DNO_GZIP -DZLIB_PM3_TUNED  -c -o obj/nonce2key/crypto1_bs.o nonce2key/crypto1_bs.c
In file included from nonce2key/crypto1_bs.c:25:
nonce2key/crypto1_bs.h:25: error: alignment of array elements is greater than element size
make[1]: *** [obj/nonce2key/crypto1_bs.o] Error 1
make[1]: Leaving directory `/pm3/client'
make: *** [client/all] Error 2
pm3 ~$

Last edited by lohcm88 (2016-04-25 09:55:22)

iceman · 2016-04-25 10:00:51

yeah, that would explain why you don't have a working client.
Problem with this is the old gcc4.4.0 in the ready packed devenvironment in the proxspace file.
You would need gcc4.8 or higher.

ref: https://github.com/iceman1001/proxmark3/issues/5

lohcm88 · 2016-04-25 10:03:27

Thx iceman.. i will look into it again.... information are everywhere in bits and pieces.. got a hard time searching around..

iceman · 2016-04-25 10:10:14

this patch is a very small one, you might just change that one row in your pm3 master folder. And continue using the pm3 master.

lohcm88 · 2016-04-25 10:49:38

iceman wrote:

this patch is a very small one, you might just change that one row in your pm3 master folder. And continue using the pm3 master.

it seems that there are 2 things i need to do?

1) remove the "-march=native" in the client\makefile and to replace it with: "-mmmx" or "-msse" (i hv done this but still the same)

2) Update old gcc to the latest? I am lost on this.. do i need to download the latest MinGW and replace it?

thx iceman for your patience..

iceman · 2016-04-25 10:51:57

For this patch, just change your PM3_master fork instead.
Skip my fork.

Its only a one row change inside cmdlfviking.c

lohcm88 · 2016-04-25 11:17:25

iceman wrote:

For this patch, just change your PM3_master fork instead.
Skip my fork.
Its only a one row change inside cmdlfviking.c

Thx iceman!

Alien Dennis - copy the cmdlfviking.c from iceman fork and replace it to PM3 master fork.

pm3 ~$ ./client/proxmark3.exe COM4
Qt: Untested Windows version 6.2 detected!
Prox/RFID mark3 RFID instrument
bootrom: /-suspect 2016-04-25 10:14:07
os: /-suspect 2016-04-25 10:15:08
LF FPGA image built for 2s30vq100 on 2015/03/06 at 07:38:04
HF FPGA image built for 2s30vq100 on 2015/11/ 2 at  9: 8: 8

uC: AT91SAM7S512 Rev B
Embedded Processor: ARM7TDMI
Nonvolatile Program Memory Size: 512K bytes. Used: 186749 bytes (36%). Free: 337539 bytes (64%).
Second Nonvolatile Program Memory Size: None
Internal SRAM Size: 64K bytes
Architecture Identifier: AT91SAM7Sxx Series
Nonvolatile Program Memory Type: Embedded Flash Memory
proxmark3> lf viking clone 05032B18
Cloning - ID: 05032B18, Raw: F2000005032B186F
#db# DownloadFPGA(len: 42096)
proxmark3> lf search
Reading 30000 bytes from device memory

Data fetched
Samples @ 8 bits/smpl, decimation 1:1
NOTE: some demods output possible binary
  if it finds something that looks like a tag
False Positives ARE possible


Checking for known tags:

Viking Tag Found: Card ID 05032B18, Checksum: 6F
Raw: F2000005032B186F

Valid Viking ID Found!
proxmark3>

Aliendennis · 2016-04-26 02:55:58

Will try it now.

Aliendennis · 2016-04-26 03:26:51

How do I know my card is t55xx ?

lf t55xx detect ?

proxmark3> lf t55xx config
Chip Type : T55x7
Modulation : FSK2a
Bit Rate : 4 - RF/50
Inverted : Yes
Offset : 30
Seq. Term. : No
Block0 : 0x00107060

proxmark3>

I tried to clone it, still invalid.

proxmark3> lf t55xx config
Chip Type : T55x7
Modulation : FSK2a
Bit Rate : 4 - RF/50
Inverted : Yes
Offset : 30
Seq. Term. : No
Block0 : 0x00107060

proxmark3> lf viking clone 06033ED5
Cloning - ID: 06033ED5, Raw: F2000000033ED5B4
proxmark3> lf se
Reading 30000 bytes from device memory

Data fetched
Samples @ 8 bits/smpl, decimation 1:1
NOTE: some demods output possible binary
if it finds something that looks like a tag
False Positives ARE possible

Checking for known tags:

No Known Tags Found!

proxmark3>

Aliendennis · 2016-04-26 03:43:05

gcc --version

C:\Users\Dennis>gcc --version
gcc (x86_64-posix-sjlj, built by strawberryperl.com project) 4.8.3
Copyright (C) 2013 Free Software Foundation, Inc.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

iceman · 2016-04-26 06:38:27

Yes, your tag is t55x7, and you must have one to be able to use the "lf viking clone" command.

However, you havn't followed instructions. Either 1) use my fork. or 2) copy the cmdlfviking.c from my fork into pm3 master

Since you have gcc 4.8.3, you will be able to compile my fork.

Aliendennis · 2016-04-26 14:54:13

i already copy the cmdlfviking.c from your fork into my pm3.

I think probably the card issue.

I will keep trying. Very weird to experience this.

Aliendennis · 2016-04-26 15:08:49

iceman could it be the antenna power ?

# LF antenna: 11.41 V @ 125.00 kHz
# LF antenna: 14.57 V @ 134.00 kHz
# LF optimal: 20.07 V @ 144.58 kHz
# HF antenna: 27.40 V @ 13.56 MHz
Displaying LF tuning graph. Divisor 89 is 134khz, 95 is 125khz.

iceman · 2016-04-26 17:39:12

Nope, the antenna looks good. A bit missaligned toward 144khz, instead of 125Khz, but still functional.

Run
"lf t55 detect"
"lf t55 info"

I'm guessing you set the password on yr tag.

Aliendennis · 2016-04-26 18:03:55

proxmark3> lf t55 detect
Chip Type : T55x7
Modulation : ASK
Bit Rate : 2 - RF/32
Inverted : No
Offset : 33
Seq. Term. : Yes
Block0 : 0x00088040

proxmark3> lf t55 info

-- T55x7 Configuration & Tag Information --------------------
-------------------------------------------------------------
Safer key : 0
reserved : 0
Data bit rate : 2 - RF/32
eXtended mode : No
Modulation : 8 - Manchester
PSK clock frequency : 0
AOR - Answer on Request : No
OTP - One Time Pad : No
Max block : 2
Password mode : No
Sequence Start Terminator : No
Fast Write : No
Inverse data : No
POR-Delay : No
-------------------------------------------------------------
Raw Data - Page 0
Block 0 : 0x00088040 00000000000010001000000001000000
-------------------------------------------------------------
proxmark3>

iceman · 2016-04-26 18:19:28

ok, that seems to have worked in your clone.

First try the clone command and post the output here.
then,
"lf t55 dump" and post it.

Aliendennis · 2016-04-26 18:20:45

proxmark3> lf t55xx dump
Reading Page 0:
blk | hex data | binary
----+----------+---------------------------------
Reading Page 1:
blk | hex data | binary
----+----------+---------------------------------
proxmark3>

iceman · 2016-04-26 18:23:39

ok,

"lf viking clone..." post output

"lf t55xx detect"
"lf t55xx dump" post output

Aliendennis · 2016-04-26 18:24:25

proxmark3> lf viking clone 06033ED5
Cloning - ID: 06033ED5, Raw: F2000000033ED5B4
proxmark3> lf se
Reading 30000 bytes from device memory

Data fetched
Samples @ 8 bits/smpl, decimation 1:1
NOTE: some demods output possible binary
if it finds something that looks like a tag
False Positives ARE possible

Checking for known tags:

No Known Tags Found!

proxmark3>

Aliendennis · 2016-04-26 18:27:43

proxmark3> lf viking clone 06033ED5
Cloning - ID: 06033ED5, Raw: F2000000033ED5B4
proxmark3> lf t55xx detect
Chip Type : T55x7
Modulation : ASK
Bit Rate : 2 - RF/32
Inverted : No
Offset : 33
Seq. Term. : Yes
Block0 : 0x00088040

proxmark3> lf t55xx dump
Reading Page 0:
blk | hex data | binary
----+----------+---------------------------------
0 | 00088040 | 00000000000010001000000001000000
1 | F2000000 | 11110010000000000000000000000000
2 | 033ED5B4 | 00000011001111101101010110110100
3 | 6A5696A6 | 01101010010101101001011010100110
4 | 00000000 | 00000000000000000000000000000000
5 | 00000000 | 00000000000000000000000000000000
6 | 00000000 | 00000000000000000000000000000000
7 | 00000000 | 00000000000000000000000000000000
Reading Page 1:
blk | hex data | binary
----+----------+---------------------------------
0 | 00088040 | 00000000000010001000000001000000
1 | E03900D0 | 11100000001110010000000011010000
2 | 1531D45E | 00010101001100011101010001011110
3 | 00A00003 | 00000000101000000000000000000011
proxmark3>

iceman · 2016-04-26 18:32:17

Your output from "lf viking clone" shows that you have not the patched file.
Make sure you pull the latest code from my fork. Copy the cmdlfviking.c to your pm3 master folder.
recompile your client, run the client, do the clone command..

Aliendennis · 2016-04-26 18:41:32

Thanks much iceman. I really hope it will work.

Aliendennis · 2016-04-26 18:46:54

Qt: Untested Windows version 6.2 detected!
g++ -I/qt/include -I/qt/include/QtCore -I/qt/include/QtGui -c -o obj/proxguiqt.moc.o proxguiqt.moc.cpp
g++ -I/qt/include -I/qt/include/QtCore -I/qt/include/QtGui obj/proxmark3.o obj/uart.o obj/util.o obj/sleep.o obj/nonce2key/crapto1.o obj/nonce2key/crypto1.o obj/nonce2key/nonce2key.o obj/loclass/cipher.o obj/loclass/cipherutils.o obj/loclass/des.o obj/loclass/ikeys.o obj/loclass/elite_crack.o obj/loclass/fileutils.o obj/mifarehost.o obj/crc.o obj/crc16.o obj/crc64.o obj/iso14443crc.o obj/iso15693tools.o obj/data.o obj/graph.o obj/ui.o obj/cmddata.o obj/lfdemod.o obj/cmdhf.o obj/cmdhf14a.o obj/cmdhf14b.o obj/cmdhf15.o obj/cmdhfepa.o obj/cmdhflegic.o obj/cmdhficlass.o obj/cmdhfmf.o obj/cmdhfmfu.o obj/cmdhftopaz.o obj/cmdhw.o obj/cmdlf.o obj/cmdlfio.o obj/cmdlfhid.o obj/cmdlfawid.o obj/cmdlfem4x.o obj/cmdlfhitag.o obj/cmdlfti.o obj/cmdparser.o obj/cmdmain.o obj/cmdlft55xx.o obj/cmdlfpcf7931.o obj/cmdlfviking.o obj/pm3_binlib.o obj/scripting.o obj/cmdscript.o obj/pm3_bitlib.o obj/aes.o obj/protocols.o obj/sha1.o obj/proxgui.o obj/proxguiqt.o obj/proxguiqt.moc.o -L/opt/local/lib -L/usr/local/lib -lreadline -lpthread -lm ../liblua/liblua.a -L/qt/lib -lQtCore4 -lQtGui4 -o proxmark3
obj/crc.o: In function `CRC8Legic':
C:\Projects\Proxmark\pm3\client/../common/crc.c:67: undefined reference to `SwapBits'
collect2: ld returned 1 exit status
make[1]: *** [proxmark3] Error 1
make[1]: Leaving directory `/pm3/client'
make: *** [client/all] Error 2

I don't know whether is this causing the problem

iceman · 2016-04-26 18:52:31

I don't know why your source code seems to be mixed up. Let guess, you should have two folders.
One with PM3 master and one with my fork.

follow earlier instructions.

Aliendennis · 2016-04-27 17:11:24

Done. Thanks so much Iceman.

Problem solved.

iceman · 2016-04-27 17:34:31

perfect, if you can edit your first post and add a change to the title. Add "[solved]" in the beginning of the title.

Proxmark3 community

Announcement

#1 2016-04-09 17:52:56

[Solved] .

#2 2016-04-09 21:18:26

Re: [Solved] .

#3 2016-04-10 16:19:08

Re: [Solved] .

#4 2016-04-12 09:01:42

Re: [Solved] .

#5 2016-04-12 11:18:25

Re: [Solved] .

#6 2016-04-13 01:39:20

Re: [Solved] .

#7 2016-04-13 06:25:31

Re: [Solved] .

#8 2016-04-17 18:54:00

Re: [Solved] .

#9 2016-04-19 19:19:57

Re: [Solved] .

#10 2016-04-19 19:34:19

Re: [Solved] .

#11 2016-04-24 19:44:27

Re: [Solved] .

#12 2016-04-24 20:02:45

Re: [Solved] .

#13 2016-04-24 20:29:29

Re: [Solved] .

#14 2016-04-25 03:54:11

Re: [Solved] .

#15 2016-04-25 07:43:11

Re: [Solved] .

#16 2016-04-25 07:48:25

Re: [Solved] .

#17 2016-04-25 09:32:17

Re: [Solved] .

#18 2016-04-25 09:43:18

Re: [Solved] .

#19 2016-04-25 09:54:08

Re: [Solved] .

#20 2016-04-25 10:00:51

Re: [Solved] .

#21 2016-04-25 10:03:27

Re: [Solved] .

#22 2016-04-25 10:10:14

Re: [Solved] .

#23 2016-04-25 10:49:38

Re: [Solved] .

#24 2016-04-25 10:51:57

Re: [Solved] .

#25 2016-04-25 11:17:25

Re: [Solved] .

#26 2016-04-26 02:55:58

Re: [Solved] .

#27 2016-04-26 03:26:51

Re: [Solved] .

#28 2016-04-26 03:43:05

Re: [Solved] .

#29 2016-04-26 06:38:27

Re: [Solved] .

#30 2016-04-26 14:54:13

Re: [Solved] .

#31 2016-04-26 15:08:49

Re: [Solved] .

#32 2016-04-26 17:39:12

Re: [Solved] .

#33 2016-04-26 18:03:55

Re: [Solved] .

#34 2016-04-26 18:19:28

Re: [Solved] .

#35 2016-04-26 18:20:45

Re: [Solved] .

#36 2016-04-26 18:23:39

Re: [Solved] .

#37 2016-04-26 18:24:25

Re: [Solved] .

#38 2016-04-26 18:27:43

Re: [Solved] .

#39 2016-04-26 18:32:17

Re: [Solved] .