Kaba access system

I already tried this but the card doesn’t scan, probably meaning its low frequency.

2 Likes

I hope so for your sake, your chances of compatibility have just increased substantially…

1 Like

whoa whoa whoa, DormaKaba? @Marc.r22

Yes

if you figure this out, please message me. lol im having a hard time with it.

1 Like

I will but I’m not very experienced with this sort of stuff. What have you tried so far?

https://www.dormakaba.com/us-en/solutions/products/electronic-access---data/readers---credentials/125-khz-credentials-602876

The readers look different to the ones from the link you sent but maybe they use the same standard. I can’t really make sense of the information from that link tho I’m quite new to this whole nfc/rfid stuff.

if you email this company and ask questions, they say their readers can not communicate with a key inside you body.

Wonderful customer service there. What they really mean is “we don’t support this and aren’t going to answer technical questions.”

2 Likes

I think at this point a good idea would be for you to use the proxmark3 to sniff comms between the kaba reader and your legit badge to see what it’s doing… is it looking for a signature? is it testing for backdoor cards? once we understand what the reader actually cares about we can narrow in on why the clone isn’t working.

@amal i don’t have access to a proxmark3 at the moment but i will get one to check it out. At least to read the badge. I don’t think i can just walk into work with a pc and proxmark connect to it without anyone from security getting suspicious :sweat_smile: they are pretty strict with this sort of stuff because the badges are also used to unlock safes as well. I figured out that they probably do use Hf because I tried reading the official card again with my phone but it says connection error.

iphone… classic… might be an ndef data container problem or possibly the card is mifare which is not NFC compliant and only works on certain phones with NXP reader chips inside with the proper license to read crypto1 used by mifare to secure memory… nxp also published their own pseudo-spec for “NFC Type Mifare” which is a laugh… the NFC Forum decides on NFC types and specs and there are currently NFC Type 1 through Type 5 … no official mifare support.

1 Like

actually research “headless mode” for proxmark3… it lets you set it up to operate without a host and you just init an action using the pushbutton… all you need is a proxmark3 and a power source like a usb battery pack or something.

2 Likes

Ok, thanks I’m going to look this up. It will probably be a few week until I can try this out but when I do I’m very keen on sharing what the results are :face_with_monocle:

Here is a quick starter diagram, for what Amal mentioned

that has caught out many people out in the past, I hope this helps you on a successful journey

image

1 Like

I assume “Computer Talky Hole” is a technical term.

Here is the official page for “Standalone Mode” you will need to decide what mode you want to set it up with in advance.

You can also use a Proxmark3 with the android app but there are limitations (lf search can be rather finicky)

3 Likes

I was able to read the keycard with my coworkers phone. This was the result.

I thinks it’s the same tag type the NExT has

NFC Tools isn’t the best at chip identification, If you could ask your Co-worker to Download TagInfo :logo_nxp_taginfo: and try again to be sure

then to share

2 Likes

Hi all

I’ve just got my NExT and xSIID installed :slight_smile: . Now I’m looking for some useful stuff for the future and found this thread and an answer in another forum for the questions here. Found this: “My ring (NTAG216) works perfectly with the Dorma Kaba evolo cylinder when using a Mifare master card. I assume it won’t work when you use a Legic master card however I have not tested this.