HID iClass Picopass 2K Cloning help

Hi All,

I am brand new to the RFID/Proxmark world and need some help.

I have looked through just about every forum I can find about cloning the iclass picopass however I am still running into an issue and haven’t seen anyone talk about this.

I am trying to clone my apartment card, pictured


to a key fob, pictured

I can run hf iclass info on my card and get this result:

I can also run hf iclass info on my blank key fob and get this result:

However, when I go to run hf iclass dump --ki (0, 1, 2… etc) on my apartment card I get this response:

I can run hf iclass dump --ki 0 on my blank fob with no issues.

Appreciate any help guys, sorry if my issue is something stupid!

3 Likes

Try a hf iclass chk -f iclass_default_keys.dic to make sure you’re using the correct key

2 Likes

This is the result

1 Like

It looks like it didn’t find a valid key for that card

Give hf iclass chk -f iclass_elite_keys.dic --elite a try too

1 Like

Looks like it found a key

1 Like

hf iclass dump --key C8B2F9456B8D5897

And you’ll use that key for all future commands on that card.

You can use the hf iclass managekeys command like it suggests to save that to a key index, but I’m too lazy for that personally

1 Like

Appreciate the help so far,
Still unfortunately getting the same result
image

1 Like

Try moving the card all over/under/around the PM3 to try to rule out coupling issues

Also make sure the PM3 isn’t too near a metal desk or anything conductive which might impact the connection

It might help to put a bit of an air gap between the PM3 and the reader too

1 Like

Unfortunately no luck with moving the card/PM3 around, same issue everywhere.

Sorry I am a bit confused, when you say put a gap between the PM3 and the reader, what do you mean?

1 Like

I meant the PM3 and the card, my bad

Can you post the output from when you first start the PM3 client?

1 Like

1 Like

The CSN in the screenshots from your hf iclass chk commands doesn’t match either of the CSNs of the two scans in your initial post

That seems strange to me…

You might retry those commands while moving the card around again, see if you can get the CSN to register correctly.
I’d also try a chk on the blank fob and see if that returns the correct CSN, if it doesn’t it could be an issue in your client version

1 Like

Ran the commands again and the CSN matches on my card

Matches on the blank fob aswell

Unsure what happened

1 Like

Give hf iclass dump --key C8B2F9456B8D5897 --elite a try

2 Likes

Thanks mate this has worked for me.
Managed to write the blocks to the new key fob, still having issues with it not being detected by the reader, but I will have a look through the forums and I’m sure I can find something.

Appreciate the help, thanks a lot

3 Likes

The new fob is not being read by the reader correct?

Could you put a RSP on the reader?

1 Like

I think it’s possible that the reader can be configured to only use elite keys, so the blank fob which is using a standard key may not be recognized

Whether that’s a real thing, and whether you can change the keys on the blank, I’m way not the right person to ask :classic_smile:

2 Likes