Ok, Im back, so I did the following:
- Dump of the original T55XX:
[usb] pm3 --> lf t55xx dump
[+] Page 0
[+] blk | hex data | binary | ascii
[+] ----+----------+----------------------------------+-------
[+] 00 | 08083870 | 00001000000010000011100001110000 | ..8p
[+] 01 | 7B334D2D | 01111011001100110100110100101101 | {3M-
[+] 02 | 2AAD54B2 | 00101010101011010101010010110010 | *.T.
[+] 03 | 3334D4AB | 00110011001101001101010010101011 | 34..
[+] 04 | 4D4D354A | 01001101010011010011010101001010 | MM5J
[+] 05 | 554AD332 | 01010101010010101101001100110010 | UJ.2
[+] 06 | 552ACD2A | 01010101001010101100110100101010 | U*.*
[+] 07 | 00000000 | 00000000000000000000000000000000 | ....
[+] Page 1
[+] blk | hex data | binary | ascii
[+] ----+----------+----------------------------------+-------
[+] 00 | 08083870 | 00001000000010000011100001110000 | ..8p
[+] 01 | 700A8546 | 01110000000010101000010101000110 | p..F
[+] 02 | 01A89990 | 00000001101010001001100110010000 | ....
[+] 03 | 00000000 | 00000000000000000000000000000000 | ....
[+] saved to json file D:\Gdrive\Proxmark3\ProxSpace\ProxSpace\pm3/lf-t55xx-7B334D2D-2AAD54B2-3334D4AB-4D4D354A-554AD332-552ACD2A-dump-004.json
[+] saved 12 blocks to text file D:\Gdrive\Proxmark3\ProxSpace\ProxSpace\pm3/lf-t55xx-7B334D2D-2AAD54B2-3334D4AB-4D4D354A-554AD332-552ACD2A-dump-004.eml
[+] saved 48 bytes to binary file D:\Gdrive\Proxmark3\ProxSpace\ProxSpace\pm3/lf-t55xx-7B334D2D-2AAD54B2-3334D4AB-4D4D354A-554AD332-552ACD2A-dump-004.bin
<pace\ProxSpace\pm3/lf-t55xx-7B334D2D-2AAD54B2-3334D4AB-4D4D354A-554AD332-552ACD2A-dump-004.json
- I put the new T55X7 on the Proxmark3, and ran an auto command:
[!] Specify one authentication mode
[-] No known 125/134 kHz tags found!
[+] Chipset detection: T55xx
[?] Hint: try `lf t55xx` commands
- Proceeded to do a lf detect, which asked me to do a lf t55xx config:
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with 'lf t55xx config'
[usb] pm3 --> lf t55xx config
[=] --- current t55xx config --------------------------
[=] Chip type......... T55x7
[=] Modulation........ FSK2a
[=] Bit rate.......... 4 - RF/50
[=] Inverted.......... Yes
[=] Offset............ 0
[=] Seq. terminator... No
[=] Block0............ 00107060 (auto detect)
[=] Downlink mode..... default/fixed bit length
[=] Password set...... No
- Did a wipe of the T55X7 to prepare it for restoring:
[usb] pm3 --> lf t55xx wipe
[=] Target T55x7 tag
[=] Default configuration block 000880E0
[=] Begin wiping...
[=] Writing page 0 block: 00 data: 0x000880E0
[=] Writing page 0 block: 01 data: 0x00000000
[=] Writing page 0 block: 02 data: 0x00000000
[=] Writing page 0 block: 03 data: 0x00000000
[=] Writing page 0 block: 04 data: 0x00000000
[=] Writing page 0 block: 05 data: 0x00000000
[=] Writing page 0 block: 06 data: 0x00000000
[=] Writing page 0 block: 07 data: 0x00000000
- Did a dump just to check if it was empty:
[usb] pm3 --> lf t55xx dump
[+] Page 0
[+] blk | hex data | binary | ascii
[+] ----+----------+----------------------------------+-------
[+] 00 | 00000000 | 00000000000000000000000000000000 | ....
[+] 01 | 80000000 | 10000000000000000000000000000000 | ....
[+] 02 | 80000000 | 10000000000000000000000000000000 | ....
[+] 03 | 00000000 | 00000000000000000000000000000000 | ....
[+] 04 | 80000000 | 10000000000000000000000000000000 | ....
[+] 05 | 80000000 | 10000000000000000000000000000000 | ....
[+] 06 | 80000000 | 10000000000000000000000000000000 | ....
[+] 07 | 00000000 | 00000000000000000000000000000000 | ....
[+] Page 1
[+] blk | hex data | binary | ascii
[+] ----+----------+----------------------------------+-------
[+] 00 | 00000000 | 00000000000000000000000000000000 | ....
[+] 01 | 00000000 | 00000000000000000000000000000000 | ....
[+] 02 | 00000000 | 00000000000000000000000000000000 | ....
[+] 03 | 00000000 | 00000000000000000000000000000000 | ....
[+] saved to json file D:\Gdrive\Proxmark3\ProxSpace\ProxSpace\pm3/lf-t55xx-80000000-80000000-dump-001.json
[+] saved 12 blocks to text file D:\Gdrive\Proxmark3\ProxSpace\ProxSpace\pm3/lf-t55xx-80000000-80000000-dump-001.eml
[+] saved 48 bytes to binary file D:\Gdrive\Proxmark3\ProxSpace\ProxSpace\pm3/lf-t55xx-80000000-80000000-dump-001.bin
- Dumped the original T55XX again to be double sure no file mixups:
[usb] pm3 --> lf t55xx dump
[+] Page 0
[+] blk | hex data | binary | ascii
[+] ----+----------+----------------------------------+-------
[+] 00 | 08083870 | 00001000000010000011100001110000 | ..8p
[+] 01 | 7B334D2D | 01111011001100110100110100101101 | {3M-
[+] 02 | 2AAD54B2 | 00101010101011010101010010110010 | *.T.
[+] 03 | 3334D4AB | 00110011001101001101010010101011 | 34..
[+] 04 | 4D4D354A | 01001101010011010011010101001010 | MM5J
[+] 05 | 554AD332 | 01010101010010101101001100110010 | UJ.2
[+] 06 | 552ACD2A | 01010101001010101100110100101010 | U*.*
[+] 07 | 00000000 | 00000000000000000000000000000000 | ....
[+] Page 1
[+] blk | hex data | binary | ascii
[+] ----+----------+----------------------------------+-------
[+] 00 | 08083870 | 00001000000010000011100001110000 | ..8p
[+] 01 | 700A8546 | 01110000000010101000010101000110 | p..F
[+] 02 | 01A89990 | 00000001101010001001100110010000 | ....
[+] 03 | 00000000 | 00000000000000000000000000000000 | ....
[+] saved to json file D:\Gdrive\Proxmark3\ProxSpace\ProxSpace\pm3/lf-t55xx-7B334D2D-2AAD54B2-3334D4AB-4D4D354A-554AD332-552ACD2A-dump-005.json
[+] saved 12 blocks to text file D:\Gdrive\Proxmark3\ProxSpace\ProxSpace\pm3/lf-t55xx-7B334D2D-2AAD54B2-3334D4AB-4D4D354A-554AD332-552ACD2A-dump-005.eml
[+] saved 48 bytes to binary file D:\Gdrive\Proxmark3\ProxSpace\ProxSpace\pm3/lf-t55xx-7B334D2D-2AAD54B2-3334D4AB-4D4D354A-554AD332-552ACD2A-dump-005.bin
- Proceeded to do the restore on the new T55XX:
<pace\ProxSpace\pm3/lf-t55xx-7B334D2D-2AAD54B2-3334D4AB-4D4D354A-554AD332-552ACD2A-dump-005.json
[+] loaded from JSON file `D:\Gdrive\Proxmark3\ProxSpace\ProxSpace\pm3/lf-t55xx-7B334D2D-2AAD54B2-3334D4AB-4D4D354A-554AD332-552ACD2A-dump-005.json`
[=] Starting to write...
[=] Writing page 0 block: 01 data: 0x7B334D2D
[=] Writing page 0 block: 02 data: 0x2AAD54B2
[=] Writing page 0 block: 03 data: 0x3334D4AB
[=] Writing page 0 block: 04 data: 0x4D4D354A
[=] Writing page 0 block: 05 data: 0x554AD332
[=] Writing page 0 block: 06 data: 0x552ACD2A
[=] Writing page 0 block: 07 data: 0x00000000
[=] Writing page 1 block: 01 data: 0x700A8546
[=] Writing page 1 block: 02 data: 0x01A89990
[=] Writing page 1 block: 03 data: 0x00000000
[=] Writing page 0 block: 00 data: 0x08083870
[=] Done!
Still didnt work
any ideas?
I did a dump of the “cloned” FOB and it returned something totally different form the original:
[usb] pm3 --> lf t55 dump
[+] Page 0
[+] blk | hex data | binary | ascii
[+] ----+----------+----------------------------------+-------
[+] 00 | 01020120 | 00000001000000100000000100100000 | ...
[+] 01 | 00000000 | 00000000000000000000000000000000 | ....
[+] 02 | 00000000 | 00000000000000000000000000000000 | ....
[+] 03 | 00000000 | 00000000000000000000000000000000 | ....
[+] 04 | 00000002 | 00000000000000000000000000000010 | ....
[+] 05 | 00000000 | 00000000000000000000000000000000 | ....
[+] 06 | 00000000 | 00000000000000000000000000000000 | ....
[+] 07 | 00000000 | 00000000000000000000000000000000 | ....
[+] Page 1
[+] blk | hex data | binary | ascii
[+] ----+----------+----------------------------------+-------
[+] 00 | 00000000 | 00000000000000000000000000000000 | ....
[+] 01 | 00084100 | 00000000000010000100000100000000 | ..A.
[+] 02 | 00000000 | 00000000000000000000000000000000 | ....
[+] 03 | 00000010 | 00000000000000000000000000010000 | ....
[+] saved to json file D:\Gdrive\Proxmark3\ProxSpace\ProxSpace\pm3/lf-t55xx-dump-001.json
[+] saved 12 blocks to text file D:\Gdrive\Proxmark3\ProxSpace\ProxSpace\pm3/lf-t55xx-dump-001.eml
[+] saved 48 bytes to binary file D:\Gdrive\Proxmark3\ProxSpace\ProxSpace\pm3/lf-t55xx-dump-001.bin