Am I in Trouble? (T5577)

I think I am in trouble.

I’m just gonna wipe my hands and assume it’s bricked, if I google t5577 every link is purple now. Thankfully I still have the NFC and LED portion of the chip. Trying lf em 410x clone --id 0102030405 doesn’t change anything like it did previously

Ah dang well that kinda goes against our happy cyborgs policy… reply to your order confirmation email and we’ll get you sorted out.

5 Likes

will reply to this in 16 hours with instructions for fixing, if i don’t, just @ me and i will.

it’s incredibly hard to perma brick a t5577. you just loaded a bad config, we will sort it.

3 Likes

well momma didn’t raise a quitter. I went to the gym and went shopping and had enough time to come down from my disappointment.

here is lf t5 info while it is “bricked”

previously after Amal told me I should be writing to test cards first… :wink: I wrote my pyramid - anytime fitness fob to a blank t5577 card.

I copied it, and decided to spam lf t5 restore -f

now my lf t5 info is returning different results…

it’s a sign of hope, but the anytime fitness fobs already don’t play well with the proxmark3 so troubleshooting is a little more difficult.

I will wait to write anything else to it until Equipter gives his blessing

1 Like
lf t55 detect
lf t55 write -b 0 -d 000880E8 -t
lf t55 wipe
lf t55 detect

try these. more to come.

for now, stop restoring. you are only going to make it worse.

1 Like

no dice, i’ll wait until further instructions tomorrow

1 Like

ok so.

lf t55 detect is what we want to be using to find the implant

lf t55 detect
lf t55 write -b 0 -d 000880E8 -t
lf t55 write -b 0 -d 000880E8 -t
lf t55 write -b 0 -d 000880E8 -t
lf t55 wipe
lf t55 detect

lf t55 detect
lf t55 write -b 0 -d 000880E8 --r0
lf t55 write -b 0 -d 000880E8 --r1
lf t55 write -b 0 -d 000880E8 --r2
lf t55 write -b 0 -d 000880E8 --r3
lf t55 wipe
lf t55 detect

make sure you are intersecting the implant with the red ring antenna so it goes across the middle of the implant like a cross :x:

1 Like

No dice. See attached

1 Like

Here is the position of my hand when I’m doing it. I’m also running lf tune before each set of commands to make sure I get the lowest number

2 Likes

christ that info output is not healthy.

what needs to be fixed:

  • AOR
  • Init delay
  • POR delay
  • Password mode
  • OTP

a lot of this is fixable with some elbow grease, ran into some… life difficulties today so don’t have time right now but tomorrow i should. it may be worth getting a replacement sorted because i can’t guarantee all problems will be fixed after are done with it (IE OTP cuz it’s monotonic)

if you do go for a replacement please don’t do what you did first time, this was a crazy amount of layer 8 problems.

2 Likes

well that’s the thing…

I’m not entirely sure what caused it.

I was using known commands that were approved on this forum, I had ran lf tune to ensure there was a good bond before sending commands. After it started to seem wonky, I immediately began running the revival steps outlined by Amal.

Unfortunately this one will definitely be staying in my hand, but there is an xEM enroute that I can add into P0 when I build up the courage to sit through it again, and I will more than likely do an xMagic in the other hand.

1 Like

Just curious, is it possibly the proxmark? Running the same command without moving sometimes gets me different results…

A replacement/inserting another is really a last resort

1 Like

It might be worthwhile pulling the latest and recompiling then flashing on windows.

2 Likes

I’ll give it a go on Saturday before I head towards Seattle for the weekend.

It just doesn’t make sense that if I run a dump repeatedly, I get different results each time unless I wasn’t getting a good bond or there’s a hardware issue

1 Like

dumps follow configuration output from T55 detect, if detect isn’t picking anything up, the configuration isn’t probed to collect anything but random noise, none of these dumps contain data actually within your chip.

2 Likes

That makes sense. If you end up having time to troubleshoot further, I’ll still be monitoring this thread. Hopefully other people who stumble across this thread can learn something from it.

Lots of trouble to have my gym fob in my hand :face_with_spiral_eyes:

2 Likes

can you send the dump file of your anytime fitness pyramid fob for analysis

1 Like

yes, it’s at home and I’m at work for another few hours so check your dm’s late tonight or early tomorrow

1 Like

Did I just hear a pyramid dump file ?

I take a copy of that one too

4 Likes

Check your inbox!

3 Likes