Proxmark3 community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

Announcement

Time changes and with it the technology
Proxmark3 @ discord

Users of this forum, please be aware that information stored on this site is not private.

#1 2016-05-24 17:19:55

EPBrassil
Contributor
Registered: 2016-05-24
Posts: 4

Cloning not working HID.

I know this question comes up a lot but I still cant find it or understand it much. I have a HID Prox fob with a ten digit code that comes out when I do a "lf search". I've duplicated it to a card so I know it works but it doesn't work when I try to put it into another fob of the same type. I've tried to attach a picture of the fob down below but it says I cant post pictures. It's black with a grey circle in the center.

It's a proxmark3 v2. Got it from a friend.

I also know it's 125 but again don't know what to do. I am using the Proxmark client. I successfully flashed it to the latest firmware. Thanks guys.

Offline

#2 2016-05-24 18:55:38

mnelson
Contributor
From: Outside Denver, CO, USA
Registered: 2015-06-05
Posts: 33

Re: Cloning not working HID.

Hi EPBrassil,

You can't clone and HID to another HID credential.  They get "Locked" when they are programmed for the first time.  You'll need a blank card or FOB with a T55x7 chip if you want to clone a credential.

Offline

#3 2016-05-24 20:01:57

EPBrassil
Contributor
Registered: 2016-05-24
Posts: 4

Re: Cloning not working HID.

I bought these blank online. When I read them they have an ID on them already. About 50 of them do. I did an "lf search" and got the 10 characters for the new key. The typed in "lf hid clone ##########" (Obviously # is the number) but the number doesn't change.

Offline

#4 2016-05-24 20:25:47

EPBrassil
Contributor
Registered: 2016-05-24
Posts: 4

Re: Cloning not working HID.

This is what is on the screen.

 
proxmark3> lf search
Reading 30000 bytes from device memory
Data fetched          
Samples @ 8 bits/smpl, decimation 1:1           
NOTE: some demods output possible binary
  if it finds something that looks like a tag          
False Positives ARE possible
Checking for known tags:
HID Prox TAG ID: 2006ec6546 (12963) - Format Len: 26bit - FC: 118 - Card: 12963          
Valid HID Prox ID Found!          
proxmark3> 

That was the code for the blank one which I bought online. Then I cloned it with the new code "lf hid clone ##########" and it never changes.

Offline

#5 2016-05-25 04:52:39

ntk
Contributor
Registered: 2015-05-24
Posts: 701

Re: Cloning not working HID.

mnelson wrote:

Hi EPBrassil,

You can't clone and HID to another HID credential.  They get "Locked" when they are programmed for the first time.  You'll need a blank card or FOB with a T55x7 chip if you want to clone a credential.

@mnelson
there is one type of HID tag which can be written to, like t55x7, with the PM3! It looks like a thumb finger. I have seen somewhere reported on this forum, and also on a site similar to "clone my keys"

Offline

#6 2016-05-25 06:46:39

Apt-Get
Contributor
Registered: 2015-12-23
Posts: 111

Re: Cloning not working HID.

EPBrassil wrote:

This is what is on the screen.

 
proxmark3> lf search
Reading 30000 bytes from device memory
Data fetched          
Samples @ 8 bits/smpl, decimation 1:1           
NOTE: some demods output possible binary
  if it finds something that looks like a tag          
False Positives ARE possible
Checking for known tags:
HID Prox TAG ID: 2006ec6546 (12963) - Format Len: 26bit - FC: 118 - Card: 12963          
Valid HID Prox ID Found!          
proxmark3> 

That was the code for the blank one which I bought online. Then I cloned it with the new code "lf hid clone ##########" and it never changes.

it might be a fake HID with a t55 inside. elechouse has these.

if you cant just clone it then its probably not a t55. but try this anyways. (be prepared to kill this card if its not a t55, either way its useless to you how it is now..)
lf t55 wip
lf t55 det.

if it actually reads as a t55 then you can try your clone now that you have wiped it.

Last edited by Apt-Get (2016-05-25 06:48:25)

Offline

Board footer

Powered by FluxBB