I purchased some of these keyfobs from AliExpress, but can’t get them to work like some of the other ones I’ve tried.
Anyone have any experience with them?
For reference, this is the keyfob I’m trying to clone:
lf t55xx detect
[usb] pm3 → lf t55xx detect
[=] Chip type… Q5/T5555
[=] Modulation… FSK2a
[=] Bit rate… 4 - RF/50
[=] Inverted… Yes
[=] Offset… 33
[=] Seq. terminator… No
[=] Block0… 90018058 (auto detect)
[=] Downlink mode… default/fixed bit length
[=] Password set… No
When I attempt to write to block 0 in the new keybod, it doesn’t seem to accept it.
[usb] pm3 →
[/details]
[usb] pm3 → lf t55xx config
[=] — current t55xx config --------------------------
[=] Chip type… Q5/T5555
[=] Modulation… FSK2a
[=] Bit rate… 4 - RF/50
[=] Inverted… Yes
[=] Offset… 33
[=] Seq. terminator… No
[=] Block0… 001070E0 (user set)
[=] Downlink mode… default/fixed bit length
[=] Password set… No
[usb] pm3 →
[usb] pm3 → lf t55xx write -b 0 -d 90018058
[=] Writing page 0 block: 00 data: 0x90018058
[usb] pm3 → lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 → lf t55xx config
[=] — current t55xx config --------------------------
[=] Chip type… Q5/T5555
[=] Modulation… FSK2a
[=] Bit rate… 4 - RF/50
[=] Inverted… Yes
[=] Offset… 33
[=] Seq. terminator… No
[=] Block0… 001070E0 (user set)
[=] Downlink mode… default/fixed bit length
[=] Password set… No
[usb] pm3 →
lf t55xc dump- for reference
[usb] pm3 → lf t55xx dump
[+] Reading Page 0:
[+] blk | hex data | binary | ascii
[+] ----±---------±---------------------------------±------
[+] 00 | 80100200 | 10000000000100000000001000000000 | …
[+] 01 | 80100200 | 10000000000100000000001000000000 | …
[+] 02 | 80100200 | 10000000000100000000001000000000 | …
[+] 03 | 80100200 | 10000000000100000000001000000000 | …
[+] 04 | 80100200 | 10000000000100000000001000000000 | …
[+] 05 | 80100200 | 10000000000100000000001000000000 | …
[+] 06 | 80100200 | 10000000000100000000001000000000 | …
[+] 07 | 80100200 | 10000000000100000000001000000000 | …
[+] Reading Page 1:
[+] blk | hex data | binary | ascii
[+] ----±---------±---------------------------------±------
[+] 00 | A8AA8AA8 | 10101000101010101000101010101000 | …
[+] 01 | A8AA8AA8 | 10101000101010101000101010101000 | …
[+] 02 | A8AA8AA8 | 10101000101010101000101010101000 | …
[+] 03 | A8AA8AA8 | 10101000101010101000101010101000 | …
[+] saved to json file lf-t55xx-80100200-80100200-80100200-80100200-80100200-80100200-80100200-dump.json
[+] saved 12 blocks to text file lf-t55xx-80100200-80100200-80100200-80100200-80100200-80100200-80100200-dump.eml
[+] saved 48 bytes to binary file lf-t55xx-80100200-80100200-80100200-80100200-80100200-80100200-80100200-dump.bin