I have several chips that allow me to change the UID using a machine with its own software that was sold to me along with the chips.
When trying to change it with the Proxmark Easy using the csetuid command, including or excluding the v2 flag, I can’t change the UID.
Is there any way to find out what the machine sent with the chips does so I can change it?
Try getting the proxmark3 to detect what type of chip it is. The csetuid command is for gen1a chips only. They might be gen2 chips, for example, which just use the standard write command to change sector 0 (where the UID lives).
Run hf search or hf mf info to start.
I just realized you are talking about 15693.. so csetuid is not even for the correct ISO standard. Specifically, csetuid is for gen1a Magic Mifare 1K chips which are ISO14443A chips, not ISO15693.
To work with ISO15693 changeable UID chips, there is a LUA script you can try;
Be sure you have the latest Iceman firmware and client for your proxmark3.
I tried using csetuid within the hf 15 menu, which I thought would be the way to change it, however the script didn’t work either, as shown in the screenshot.
The UID E0C7CCCCBBBBAAAA was modified by me using the software and machine provided by the label supplier.
Original UID shows NXP Semicondutors ICODE SLIX(SL2S2002) but i thinks this info was put because i request.
I performed an hf 15 sniff with pm3, between the machine and the tag.
Initially I only read the tag, and then wrote a new uid ending in FF.
The resulting trace was as follows.
Interesting. Where did you get these chips and machine from?
Can you explain the -hack options in the hf 15 command?
From what I understand, two commands are needed, each with 4 bytes of the uid. I might need to use one of these options to keep the tag active, but I don’t know which one.
I’m asking because I want to purchase some for testing. Have a link?
I don’t know much about it
https://yiangroup.en.alibaba.com/contactinfo.html?spm=a2700.shop_index.88.47.64011306bfMtmE
I bought it from Alibaba, from Mr. Jarry.
I specifically requested chips with a 28mm diameter, ISO15693 protocol, ICODE SLIX tags with changeable UID.
With 1k bits of memory.
At the time of sale, he mentioned that the PM3 wouldn’t be able to modify it, but I think he only resells the chip and doesn’t have information on how to proceed with modifying it using the PM3.
Is there any website or document where I can obtain this information?
Hey,
I recently got some tags that look very similar to yours. The only difference is that I didn’t buy the software or programmer from the supplier… those things are way too expensive
I tried changing the UID with a Proxmark3, both with and without the --v2 option, but no luck. Same result as you.
I also tried sending 12 C0 04 36 and 12 C0 04 37 manually, but that didn’t work either.
Could you do another sniff and see if you get the same trace again?
I’m especially curious about this part:
22 02 3A E1 !!
I know it looks like a STAY_QUIET command, but it’s odd that it shows up between the inventory and the custom commands.
Maybe we’re both missing something before the 12 C0 04 36 commands.
Thanks!
-k might keep the tag active between consecutive commands.
Eh, i just use -a keep the field on. Mostly because it’s less to type. It’s only awkward if you don’t unplug your proxmark 