AWID Fob with peculiar info

Support
22

here are the results, it did not work

[usb] pm3 → lf t55 write -b 0 -d 000880E8 --r0
[=] Writing page 0 block: 00 data: 0x000880E8
[usb] pm3 → lf t55 write -b 0 -d 000880E8 --r1
[=] Writing page 0 block: 00 data: 0x000880E8
[usb] pm3 → lf t55 write -b 0 -d 000880E8 --r2
[=] Writing page 0 block: 00 data: 0x000880E8
[usb] pm3 → lf t55 write -b 0 -d 000880E8 --r3
[=] Writing page 0 block: 00 data: 0x000880E8
[usb] pm3 → lf t55 wipe
[=] Target T55x7 tag
[=] Default configuration block 000880E0

[=] Begin wiping…
[=] Writing page 0 block: 00 data: 0x000880E0
[=] Writing page 0 block: 01 data: 0x00000000
[=] Writing page 0 block: 02 data: 0x00000000
[=] Writing page 0 block: 03 data: 0x00000000
[=] Writing page 0 block: 04 data: 0x00000000
[=] Writing page 0 block: 05 data: 0x00000000
[=] Writing page 0 block: 06 data: 0x00000000
[=] Writing page 0 block: 07 data: 0x00000000
[usb] pm3 → lf t55 det
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 → lf t55 write -b 0 -d 000880E8 --r0 -t
[=] Writing page 0 block: 00 data: 0x000880E8
[#] Using Test Mode
[usb] pm3 → lf t55 write -b 0 -d 000880E8 --r1 -t
[=] Writing page 0 block: 00 data: 0x000880E8
[#] Using Test Mode
[usb] pm3 → lf t55 write -b 0 -d 000880E8 --r2 -t
[=] Writing page 0 block: 00 data: 0x000880E8
[#] Using Test Mode
[usb] pm3 → lf t55 write -b 0 -d 000880E8 --r3 -t
[=] Writing page 0 block: 00 data: 0x000880E8
[#] Using Test Mode
[usb] pm3 → lf t55 wipe
[=] Target T55x7 tag
[=] Default configuration block 000880E0

[=] Begin wiping…
[=] Writing page 0 block: 00 data: 0x000880E0
[=] Writing page 0 block: 01 data: 0x00000000
[=] Writing page 0 block: 02 data: 0x00000000
[=] Writing page 0 block: 03 data: 0x00000000
[=] Writing page 0 block: 04 data: 0x00000000
[=] Writing page 0 block: 05 data: 0x00000000
[=] Writing page 0 block: 06 data: 0x00000000
[=] Writing page 0 block: 07 data: 0x00000000
[usb] pm3 → lf t55 det
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 →

1 Like
23

hm. your t5577s dont have test mode, it might just be totally fucked.

can you do lf t55 info twice and post them please

1 Like
24

no return. Would you be interested in having this fob, I can mail it you?

[usb] pm3 → lf t55 info

[usb] pm3 → lf t55 info

1 Like
25

I love in the UK, nice of you to offer but it would be more hassle than it’s worth, it not returning info, it’s likely just fucked.

1 Like
26

Hi, I think it’s always a facination for some of us on here to get things unlocked or unbricked, perhaps far beyond their value, which for a t5577 isn’t that much!

I think you’ve already been given most of the best advice for this, but I might have a couple more things in my notes that could be tried!

First, there seem to be 2 main types of t5577.

There are the genuine atmal ones, the best, and the ones that seem to actually be a t5200 but are sold as t5577.

The t5200 tags are missing a couple of things, test mode, and some of the downlink modes.

If you’ve bricked your tag, there are a couple of things that might have happend.

1: a password got set.

You could try 0000 in the hope that it is 0 in block 7, or worse if the lock bit is set.

I don’t recall seeing this in the suggestions above, sorry if it is!

lf t55 write -b 0 -d 000880E0 -p 00000000

If you do know what you last wrote to block 7, you could try that as a password, it might get it back.

The test mode, -t can unlock a bricked tag in most cases, but not if it’s a 5200.

It also seems to clear out all data on the tag except the block you just wrote.

lf t55 write -b 0 -d 000880E0 -t

There is a stack of info about chinese cloners.

They often put a password on a t5577 when they write it so readers won’t detect it as a copy.

I don’t think you’ve used such a device, but there’s some good info around about how to work out the keys they might have used.

Finally, there is a LUA script with the proxmark you could try.

script run lf_t55xx_fix

Good luck, and hopefully we can enjoy the satisfaction of you being able to post a reply saying you unbricked it!

1 Like