Proxmark3 community

lockakey

Contributor

Registered: 2015-10-10

Posts: 22

DKS - DOORKING - 125khz - WHITE FOB

Hi there, I previously had posted in thread about a IDTECK clone
http://www.proxmark.org/forum/viewtopic.php?id=1650&p=2

I just ran into a very similar fob, instead of an IDTECK label, it has a DKS label.

When I ran a block 0 read and a t55 dump I received a different block 0 (my reason for posting in a separate thread) than previous.

The lf dump and lf detect showed a block zero of 60081040 on the original tag.
lf detect showed PSK1, 2 -RF/32, not inverted, offset 29
It also dumped block 1 and 2 only

In the other thread the block 0 was set as 00081040...

I wrote the following:
BLOCK0  60081040
BLOCK1  4944544B
BLOCK2  A219D7AB
although when I run an LF Detect I get two different offsets.
On the detect with the original the offset shows 28, and on the detect with my copy the offset shows 29? Why are the offsets different?

To check if its the same, followed the same routing, lf read, search, data samples 16000, rawdemod p, then I used, data printd x o 4 and I found that same IDTeck match on block 1 "4944544B"

Is it safe to say that the above data is enough to clone with?

posted 2 sets of traces
http://www28.zippyshare.com/v/qY40hOgX/file.html

ntk

Contributor

Registered: 2015-05-24

Posts: 701

Re: DKS - DOORKING - 125khz - WHITE FOB

The lf dump and lf detect showed a block zero of 60081040 on the original tag.
lf detect showed PSK1, 2 -RF/32, not inverted, offset 29
It also dumped block 1 and 2 only
....

then you wrote

... and on the detect with my copy the offset shows 29? Why are the offsets different?

I do not see the difference offsets

marshmellow

Contributor

From: US

Registered: 2013-06-10

Posts: 2,302

Re: DKS - DOORKING - 125khz - WHITE FOB

the offsets can change from tag to tag (or from read to read if the tag/antenna position changes)  it is an indication of the amount of time it took for the tag to respond or power up.