Clone hang tag?

Is it possible to clone a parking garage hang tag? I think it uses UHF im not sure. Can anyone help with this?

you can see the classic UHF antenna at the bottom of the card;

What’s interesting about this antenna is that the center area is a closed loop, which indicates to me this might be an Impinj UHF tag that uses both coupled inductive and UHF backscatter technologies. They use a coupled coil approach with specific gate and panel antennas to help overcome metal and water interference that would usually completely destroy UHF tag performance, and it also helps the antennas determine direction of travel (coming in or leaving / going out).

Cloning transponders generally requires a “magic” transponder target.. normally there are “read only” memory block in all transponders that keep people from messing around with the unqiue aspects of each tranpsonder, like the serial number (called a UID or Unique ID).. as you can see, the intention is that each transponder have a unique ID and if you could just change it, then there goes the Unique part of the UID. A magic tag is simply a type of tag that is functionally similar or identical to the type of tag you want to clone (Magic Mifare 1K, Magic Ultralight, etc.) but the normally locked down parts of memory are left open in some way for people to write anything they want.. change the UID to the UID of another transponder for example - i.e. clone a tag.

There are magic UHF tags out there, but these tags appear to have the inductive element, which is likely impossible to find in a magic configuration. Even so, it might be possible to just use a gen2 EPC magic tag and only rely on backscatter operation without the inductive part.. but still, I don’t think I’ve ever actually found a magic UHF in the wild.. though I’ve not looked too hard either.

3 Likes

I tried scanning it with the proxmark3 but it doesnt read it. Anyone else know how to clone this tag?

Anyone know if this can be cloned?

Unknown. You’ll have to buy a UHF reader and find some “magic” UHF tags you can overwrite serial number data.. then find some software to drive it. Cloning UHF tags is not all that common.. at least not in these circles here on this forum.

2 Likes