Hitag2 Cloning to NExT Implant

I’m pretty sure the solution ended up being the hitag implant as even though the theory is the t5577 supports it the big on to overcome is that it is not a smart tag and will just “shout” the uid rather than waiting for a request.

As @Devilclarke said, HiTag uses a challenge/response authentication,

I don’t know a lot about HiTag, so take the below with a pinch of salt

The xEM side in EM41xx mode has a 40 bit ID; HiTag uses 48 bit so there could be some issues there but you MAY be able to write more???
HiTag uses ISO14223
Also I am STILL GUESSING here, But Amal released the xHT to probably fill the gap, because there would be no real point dong it if the xEM/ NExT… ( T5577) could emulate the HiTag.

So wait to see if anybody else has some more concrete information for you, otherwise, I guess you have 2 main options
Give it a try ( and let us know )
or
Grab an xHT

I hope you find a solution :+1:

1 Like

I tried a test card Hitag s2048 with a Paxton reader at work and it didn’t even beep, however this means nothing as even a new hitag2 card didn’t beep.

I’m now wondering if it is possible to emulate the hitag 2 tag on the hitag s card and maybe clone my work fob to the card and then eventually my xHT.

Thanks for the replies.

I’ve bought the other implant :grin:
Now I just need to find the right time to get it implanted.

Just wish I could test it with the readers at work before getting it implanted.
I’ll just have to buy some cards with the same chip and see if I can get those to work I guess.

1 Like

You can pick up what you need from ebay, amazon etc. but handily for today and your possible future purchases
KSEC do a complete bundle pack of cards

https://labs.ksec.co.uk/product/complete-test-card-bundle/

1 Like

Unfortunately it doesn’t include a hitag s2048 card.
I got one here

You can clone a paxton credential to a Hitag S256

2 Likes

Looks like I need a new implant :smiley:

1 Like

Hey everybody! Tom’s back!

1 Like

In some capacity yes, yes I am indeed back and I just found my own thread’s googling about hitag stuff :stuck_out_tongue:

3 Likes

For those that don’t know @TomHarkness

You might recognise his name from such things as…

3 Likes

I was able to enroll my Next into their Hitag system where they manage all their hitag tags and it works perfect, so maybe you could ask if it is possible if they can do that for you?

Hi,
Please correct me if I’m wrong, but from what I understand you managed to write Paxton black key fob with blue ring on it, which is used for their Net2 to your Next chip? If so, was there any specific tinkering with chip necessary to make it work? sorry if it sounds noobish, but I literally just got into biohacking and ordered xEM and NeXT chips.
EDIT: If you wouldn’t mind describing what you had to do to get it work in a few steps. Thank you!
Thank you in advance.

I’m not particularly familiar with Paxton.

I think it is a High Frequency system and I also think it is compatible with a Mifare Classic implant.
xM1
FlexM1
I’m not sure about the NExT. :man_shrugging:

It doesn’t sound like you have a Proxmark3, but if you do can you try either

lf search

or

hf search

If it is HF and you don’t have a ProxMark3.
Can you try and scan you fob with TagInfo and share your results here

Thank you so much for a quick reply. I have ProxMark3 in shipping. Will share everything as soon as I get it. Just thought maybe someone already got the answer :smile:.
Will create a sub to dump everything there.
Thank you!

1 Like

There may well be.
The search function on the forum works very well…
You might just have a bit of reading ahead of you.

it may still be worth trying TagInfo whilst you wait

.How to share NFC chip data via TagInfo app

If this is the same as the system you are using, you may well have your answer

That is exactly right. No tinkering.
They just scanned the HF side of my NEXT into their system and it worked perfectly on the readers.
They are indeed using the Paxton black key fob with blue ring on it.

2 Likes

Hi,
so just a ‘out of the box’ chip directly onto Paxton reader. No prior chip configuration?