I’ve received a magic ring a couple of days ago and tried to add credentials to both sides. Mifare went without too much hassle but when trying
“lf paradox -r […]” nothing happened
lf search returns
Indala
[+] Indala (len 167) Raw: 8000000000000000000000000000000058190a00500000000000000b
Which I thought was weird but figured it just needed t55xx wiped and should be good. There starts my slow descent into madness of a subject I don’t really understand… Wipe seems to add just a bunch of scrambled data on all blocks? lf write -b 0 -d 00088040 -t doesn’t seem to actually write anything.
Tried to
HW tune
[=] ---------- LF Antenna ----------
[+] LF antenna: 36.84 V - 125.00 kHz
[+] LF antenna: 26.34 V - 134.83 kHz
[+] LF optimal: 36.64 V - 123.71 kHz
[+] Approx. Q factor (): 5.5 by frequency bandwidth measurement
[+] Approx. Q factor (): 6.4 by peak voltage measurement
[+] LF antenna is OK
Seems fine to my rookie eyes
Tried
LF detect
[=] Chip type… T55x7
[=] Modulation… PSK1
[=] Bit rate… 1 - RF/16
[=] Inverted… Yes
[=] Offset… 30
[=] Seq. terminator… No
[=] Block0… 80061FFF (auto detect)
[=] Downlink mode… default/fixed bit length
[=] Password set… No
Which I’m not sure where to begin with.
And here’s an example of dump after a wipe
lf wipe/dump
[usb] pm3 → lf t55xx wipe
[=] Target T55x7 tag
[=] Default configuration block 000880E0
[=] Begin wiping…
[=] Writing page 0 block: 00 data: 0x000880E0
[=] Writing page 0 block: 01 data: 0x00000000
[=] Writing page 0 block: 02 data: 0x00000000
[=] Writing page 0 block: 03 data: 0x00000000
[=] Writing page 0 block: 04 data: 0x00000000
[=] Writing page 0 block: 05 data: 0x00000000
[=] Writing page 0 block: 06 data: 0x00000000
[=] Writing page 0 block: 07 data: 0x00000000
[usb] pm3 → lf t55xx dump
[+] Reading Page 0:
[+] blk | hex data | binary | ascii
[+] ----±---------±---------------------------------±------
[+] 00 | 030FFFFF | 00000011000011111111111111111111 | …
[+] 01 | 061FFFFF | 00000110000111111111111111111111 | …
[+] 02 | 0061FFFF | 00000000011000011111111111111111 | .a…
[+] 03 | 061FFFFF | 00000110000111111111111111111111 | …
[+] 04 | 0187FFFF | 00000001100001111111111111111111 | …
[+] 06 | 030FFFFF | 00000011000011111111111111111111 | …
[+] Reading Page 1:
[+] blk | hex data | binary | ascii
[+] ----±---------±---------------------------------±------
[+] 00 | 0061FFFF | 00000000011000011111111111111111 | .a…
[+] 01 | 0187FFFF | 00000001100001111111111111111111 | …
[+] 02 | 0187FFFF | 00000001100001111111111111111111 | …
[+] 03 | 00C3FFFF | 00000000110000111111111111111111 | …
Maybe I’m just a bit lost but help would be appreciated