Newbie trying to Clone T55XX Paradox Id Tag

Ok, Im back, so I did the following:

  1. Dump of the original T55XX:
[usb] pm3 --> lf t55xx dump

[+] Page 0
[+] blk | hex data | binary                           | ascii
[+] ----+----------+----------------------------------+-------
[+]  00 | 08083870 | 00001000000010000011100001110000 | ..8p
[+]  01 | 7B334D2D | 01111011001100110100110100101101 | {3M-
[+]  02 | 2AAD54B2 | 00101010101011010101010010110010 | *.T.
[+]  03 | 3334D4AB | 00110011001101001101010010101011 | 34..
[+]  04 | 4D4D354A | 01001101010011010011010101001010 | MM5J
[+]  05 | 554AD332 | 01010101010010101101001100110010 | UJ.2
[+]  06 | 552ACD2A | 01010101001010101100110100101010 | U*.*
[+]  07 | 00000000 | 00000000000000000000000000000000 | ....

[+] Page 1
[+] blk | hex data | binary                           | ascii
[+] ----+----------+----------------------------------+-------
[+]  00 | 08083870 | 00001000000010000011100001110000 | ..8p
[+]  01 | 700A8546 | 01110000000010101000010101000110 | p..F
[+]  02 | 01A89990 | 00000001101010001001100110010000 | ....
[+]  03 | 00000000 | 00000000000000000000000000000000 | ....
[+] saved to json file D:\Gdrive\Proxmark3\ProxSpace\ProxSpace\pm3/lf-t55xx-7B334D2D-2AAD54B2-3334D4AB-4D4D354A-554AD332-552ACD2A-dump-004.json
[+] saved 12 blocks to text file D:\Gdrive\Proxmark3\ProxSpace\ProxSpace\pm3/lf-t55xx-7B334D2D-2AAD54B2-3334D4AB-4D4D354A-554AD332-552ACD2A-dump-004.eml
[+] saved 48 bytes to binary file D:\Gdrive\Proxmark3\ProxSpace\ProxSpace\pm3/lf-t55xx-7B334D2D-2AAD54B2-3334D4AB-4D4D354A-554AD332-552ACD2A-dump-004.bin
<pace\ProxSpace\pm3/lf-t55xx-7B334D2D-2AAD54B2-3334D4AB-4D4D354A-554AD332-552ACD2A-dump-004.json
  1. I put the new T55X7 on the Proxmark3, and ran an auto command:
[!] Specify one authentication mode
[-] No known 125/134 kHz tags found!
[+] Chipset detection: T55xx
[?] Hint: try `lf t55xx` commands
  1. Proceeded to do a lf detect, which asked me to do a lf t55xx config:
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with 'lf t55xx config'
[usb] pm3 --> lf t55xx config
[=] --- current t55xx config --------------------------
[=]  Chip type......... T55x7
[=]  Modulation........ FSK2a
[=]  Bit rate.......... 4 - RF/50
[=]  Inverted.......... Yes
[=]  Offset............ 0
[=]  Seq. terminator... No
[=]  Block0............ 00107060 (auto detect)
[=]  Downlink mode..... default/fixed bit length
[=]  Password set...... No
  1. Did a wipe of the T55X7 to prepare it for restoring:
[usb] pm3 --> lf t55xx wipe
[=] Target T55x7 tag
[=] Default configuration block 000880E0

[=] Begin wiping...
[=] Writing page 0  block: 00  data: 0x000880E0
[=] Writing page 0  block: 01  data: 0x00000000
[=] Writing page 0  block: 02  data: 0x00000000
[=] Writing page 0  block: 03  data: 0x00000000
[=] Writing page 0  block: 04  data: 0x00000000
[=] Writing page 0  block: 05  data: 0x00000000
[=] Writing page 0  block: 06  data: 0x00000000
[=] Writing page 0  block: 07  data: 0x00000000
  1. Did a dump just to check if it was empty:
[usb] pm3 --> lf t55xx dump

[+] Page 0
[+] blk | hex data | binary                           | ascii
[+] ----+----------+----------------------------------+-------
[+]  00 | 00000000 | 00000000000000000000000000000000 | ....
[+]  01 | 80000000 | 10000000000000000000000000000000 | ....
[+]  02 | 80000000 | 10000000000000000000000000000000 | ....
[+]  03 | 00000000 | 00000000000000000000000000000000 | ....
[+]  04 | 80000000 | 10000000000000000000000000000000 | ....
[+]  05 | 80000000 | 10000000000000000000000000000000 | ....
[+]  06 | 80000000 | 10000000000000000000000000000000 | ....
[+]  07 | 00000000 | 00000000000000000000000000000000 | ....

[+] Page 1
[+] blk | hex data | binary                           | ascii
[+] ----+----------+----------------------------------+-------
[+]  00 | 00000000 | 00000000000000000000000000000000 | ....
[+]  01 | 00000000 | 00000000000000000000000000000000 | ....
[+]  02 | 00000000 | 00000000000000000000000000000000 | ....
[+]  03 | 00000000 | 00000000000000000000000000000000 | ....
[+] saved to json file D:\Gdrive\Proxmark3\ProxSpace\ProxSpace\pm3/lf-t55xx-80000000-80000000-dump-001.json
[+] saved 12 blocks to text file D:\Gdrive\Proxmark3\ProxSpace\ProxSpace\pm3/lf-t55xx-80000000-80000000-dump-001.eml
[+] saved 48 bytes to binary file D:\Gdrive\Proxmark3\ProxSpace\ProxSpace\pm3/lf-t55xx-80000000-80000000-dump-001.bin
  1. Dumped the original T55XX again to be double sure no file mixups:
[usb] pm3 --> lf t55xx dump

[+] Page 0
[+] blk | hex data | binary                           | ascii
[+] ----+----------+----------------------------------+-------
[+]  00 | 08083870 | 00001000000010000011100001110000 | ..8p
[+]  01 | 7B334D2D | 01111011001100110100110100101101 | {3M-
[+]  02 | 2AAD54B2 | 00101010101011010101010010110010 | *.T.
[+]  03 | 3334D4AB | 00110011001101001101010010101011 | 34..
[+]  04 | 4D4D354A | 01001101010011010011010101001010 | MM5J
[+]  05 | 554AD332 | 01010101010010101101001100110010 | UJ.2
[+]  06 | 552ACD2A | 01010101001010101100110100101010 | U*.*
[+]  07 | 00000000 | 00000000000000000000000000000000 | ....

[+] Page 1
[+] blk | hex data | binary                           | ascii
[+] ----+----------+----------------------------------+-------
[+]  00 | 08083870 | 00001000000010000011100001110000 | ..8p
[+]  01 | 700A8546 | 01110000000010101000010101000110 | p..F
[+]  02 | 01A89990 | 00000001101010001001100110010000 | ....
[+]  03 | 00000000 | 00000000000000000000000000000000 | ....
[+] saved to json file D:\Gdrive\Proxmark3\ProxSpace\ProxSpace\pm3/lf-t55xx-7B334D2D-2AAD54B2-3334D4AB-4D4D354A-554AD332-552ACD2A-dump-005.json
[+] saved 12 blocks to text file D:\Gdrive\Proxmark3\ProxSpace\ProxSpace\pm3/lf-t55xx-7B334D2D-2AAD54B2-3334D4AB-4D4D354A-554AD332-552ACD2A-dump-005.eml
[+] saved 48 bytes to binary file D:\Gdrive\Proxmark3\ProxSpace\ProxSpace\pm3/lf-t55xx-7B334D2D-2AAD54B2-3334D4AB-4D4D354A-554AD332-552ACD2A-dump-005.bin
  1. Proceeded to do the restore on the new T55XX:
<pace\ProxSpace\pm3/lf-t55xx-7B334D2D-2AAD54B2-3334D4AB-4D4D354A-554AD332-552ACD2A-dump-005.json
[+] loaded from JSON file `D:\Gdrive\Proxmark3\ProxSpace\ProxSpace\pm3/lf-t55xx-7B334D2D-2AAD54B2-3334D4AB-4D4D354A-554AD332-552ACD2A-dump-005.json`
[=] Starting to write...
[=] Writing page 0  block: 01  data: 0x7B334D2D
[=] Writing page 0  block: 02  data: 0x2AAD54B2
[=] Writing page 0  block: 03  data: 0x3334D4AB
[=] Writing page 0  block: 04  data: 0x4D4D354A
[=] Writing page 0  block: 05  data: 0x554AD332
[=] Writing page 0  block: 06  data: 0x552ACD2A
[=] Writing page 0  block: 07  data: 0x00000000
[=] Writing page 1  block: 01  data: 0x700A8546
[=] Writing page 1  block: 02  data: 0x01A89990
[=] Writing page 1  block: 03  data: 0x00000000
[=] Writing page 0  block: 00  data: 0x08083870
[=] Done!

Still didnt work :frowning: any ideas?

I did a dump of the “cloned” FOB and it returned something totally different form the original:

[usb] pm3 --> lf t55 dump

[+] Page 0
[+] blk | hex data | binary                           | ascii
[+] ----+----------+----------------------------------+-------
[+]  00 | 01020120 | 00000001000000100000000100100000 | ...
[+]  01 | 00000000 | 00000000000000000000000000000000 | ....
[+]  02 | 00000000 | 00000000000000000000000000000000 | ....
[+]  03 | 00000000 | 00000000000000000000000000000000 | ....
[+]  04 | 00000002 | 00000000000000000000000000000010 | ....
[+]  05 | 00000000 | 00000000000000000000000000000000 | ....
[+]  06 | 00000000 | 00000000000000000000000000000000 | ....
[+]  07 | 00000000 | 00000000000000000000000000000000 | ....

[+] Page 1
[+] blk | hex data | binary                           | ascii
[+] ----+----------+----------------------------------+-------
[+]  00 | 00000000 | 00000000000000000000000000000000 | ....
[+]  01 | 00084100 | 00000000000010000100000100000000 | ..A.
[+]  02 | 00000000 | 00000000000000000000000000000000 | ....
[+]  03 | 00000010 | 00000000000000000000000000010000 | ....
[+] saved to json file D:\Gdrive\Proxmark3\ProxSpace\ProxSpace\pm3/lf-t55xx-dump-001.json
[+] saved 12 blocks to text file D:\Gdrive\Proxmark3\ProxSpace\ProxSpace\pm3/lf-t55xx-dump-001.eml
[+] saved 48 bytes to binary file D:\Gdrive\Proxmark3\ProxSpace\ProxSpace\pm3/lf-t55xx-dump-001.bin