How to break it ? I got it, but how to fix it ?. help

Hello ProxmarkWaiders )) some time ago, buy smart ring (Jakcom R5) & some tools (ChameleonUltra) all worked perfectly until my crooked hands forced to write 2 bytes in 0 block and part of the ring stopped to be defined.
I was looking for all sorts of solutions on the Internet, and here I am:
And with me: win10x64 & Proxmark3 & ProxSpace.
Help me to return the ring to service ))

some out>>> from Proxmark3:

[=] hf search
[|] Searching for ISO14443-A tag…[#] BCC0 incorrect, got 0xdd, expected 0x43

The Chinese borderline illegal “magic” chips have no official SKU or model number or any way to refer to the plethora of different magic chips with any reliable name. The R5 manual refers to the mifare 1k magic chip only as “IC Module Chip: CUID” (changeable UID) .. do you know if it’s a gen1a or gen2 chip? I doubt it’s gen3 or gen4. What commands did you use with the proxmark3 to change the UID on these chips in the ring?

3 Likes

I noticed a hint of sarcasm ) Apparently, it’s not all lost yet.
I damaged the ring using Chamelion Ultra,

(Sorry: I have no idea where the information from the past came from.)

I was writing a letter to my favorite aunt., I changed the values in the 0 block of the dump and set the “WARNING” write block '0' to true.
Now I’m here. I decided to seek help from the first authority in the restoration process. The ring has stopped being recognized as functional.
ISO14443-A tag

? Unintentional if so.

I don’t know much about that process. What needs to be sorted out is what kind of magic chip it is. Is it gen1a or gen2? The reason I’m asking is that the recovery process you could try depends on which type it is.

2 Likes

I’m not sure what that has to do with the process
, but whatever works I guess

anyway, once you are finished, try a

hf mf ccheck

3 Likes

OMG, magical online translators )))

1 Like

“Please understand me correctly: everything I used to damage the tag no longer recognizes it and, therefore, cannot interact with it. That is why I switched to using Proxmark3, which at least is capable of detecting the presence of the tag. Could you advise which set of commands I should use in the Proxmark3 console to make our discussion more informative?”

Just an idea
:light_bulb:
Can you use MCT and try to read it

2 Likes

I know. I was maybe unclear. You should contact jacom support and ask them specifically if the chip is a gen1a or gen2. They might not know. In that case you will have to buy another ring just for testing if you want to have a starting place where you may be able to fix your first one.

No, that didn’t work. MCT does not detect the tag.
The card/ring has 4 zones.

Zone 1, which I rewrote, has stopped responding — BCC error.

However, there are still 3 other zones, from which I can easily provide data.

It is also known that Zone 1 and Zone 3 are parts of a single logical block and use a 4-byte BCC, while Zones 2 and 4 use a 7-byte BCC, and I suspect they are sequential.

Zone 2: 04:DD:2D:AA:5C:17:90
Zone 4: 04:51:4A:AA:5C:17:91
Zone 3: 6A:B7:E8:69

Or maybe I’m going in the wrong direction :slight_smile: sorry…

“That’s fine. The request is already on its way to Jakcom. In any case, they have already offered me a new ring with only shipping costs to be paid — I should take it without unnecessary discussion and wait for the information.
Thanks.

3 Likes

Ready. Support said: The device in your hand cannot change the incorrect data.
The IC module of the ring in your hand is a second-generation CUID chip.

Ok so they think it’s a gen2 (maybe).. in this case a proxmark3 might be possible to fix it but generally speaking a gen2 chip is very sensitive to misconfiguration and might be bricked at this point. The gen1a chips have a backdoor command you can use to get around all security and configuration settings to force write changes to fix things but a gen2 chip does not have this feature.

Anyone have any ideas to try on a gen2 chip with messed up sector 0

1 Like

Hi, I’m sure this is around elsewhere on this forum, but here go’s anyway.
hf 14a config --atqa force --bcc ignore --cl2 skip --rats skip

hf mf wrbl --blk 0 --force -k FFFFFFFFFFFF -d 11223344440804006263646566676869

hf 14a config --std

That should unbrick a gen2, Good luck!!!

5 Likes

I decided to make this post in FAQ;

Please ping with with any suggestions or updates.

4 Likes

[usb] pm3 → hf search
[-] Searching for ISO14443-A tag…
[=] ---------- ISO14443-A Information ----------
[+] UID: 11 22 33 44 ( ONUID, re-used )
[+] ATQA: 00 04

+\] SAK: 08 \[2

[+] Possible types:
[+] MIFARE Classic 1K

[=] Proprietary non iso14443-4 card found
[=] RATS not supported

[+] Magic capabilities… Gen 2 / CUID
[+] Prng detection… weak

[?] Hint: Use hf mf commands

[+] Valid ISO 14443-A tag found

===============================================

“I am very grateful to you for this information. Everything has been restored :slight_smile: Everything is working now.
Gentlemen, I bow to you. Thank you. TO ALL.”

4 Likes

Excellent, that’s the result we like!!!
Looks like an unbricking faq is coming, this is very good!

Cheers!

4 Likes