Needing help with cloning fob for schlage lock

Hi,

I am trying to clone the fob for my shlage BE467F lock. I am using the proxmak3 easy and able to copy the lf part without an issue. However, I am running into issues with hf. I think I got all the key from autopwn.

But I am not sure if I have a bad dump because the copy doesn’t work after cloning. I have verified that he blank card I used was a gen1a card. Below is what my dump looks like.


Any thoughts on what I am doing wrong?

It looks like you might be missing a key
(Sector 1 Key B)

If that’s what’s causing the clone to fail, you can try re-running autopwn with a dictionary:

hf mf autopwn -f mfc_default_keys

If that doesn’t find the last key I believe you’re down to trying to sniff the reader, here’s some more info about that:

3 Likes

Got past one hurdle and got all the keys :raised_hands:

Unfortunately, when I try to do the full dump I keep getting auth errors.

No movement of card between the autopwn and the full dump the first time I tried the full dump. Then I have tried the card at different locations on the pm3 and even different usb cable with no luck.

Any suggestions for the full dump?

1 Like

It looks like you’re giving hf mf dump the file blah-dump-blah.bin instead of blah-key-blah.bin, it’s trying to unlock the tag with the wrong data

Also, Autopwn automatically dumps the card by default, if you look at the bottom of the output from it it’ll tell you the paths, in this case it’s the same blah-dump-blah.bin, which you should be able to write to a blank magic card directly

3 Likes

@Aoxhwjfoavdlhsvfpzha That worked. Able to clone card and works on my lock. :raised_hands:

Thank you for all your assistance. I guess being able to read is fundamental to not making stupid mistakes when trying to do this.

3 Likes