Okay okay okay, I give in.
Some of you people need to find some other outlet for your venomn rather than patrolling this forum looking for posts to brand as scammers.
Sad people with nothing but contempt.
Please do not post any more on this subject while I am trying to find out how to close or delete it.
I’m currently doing a lot of academic research that involves Paxton overall and in particular their Net2 bullet tokens. I am very familiar with the NXP Hitag datasheets as I have read them several times when doing my research.
If you could describe in as much technical detail as possible how you were able to achieve what you have claimed then I can reference your work for my research paper.
I have a lot of knowledge of Paxton, the Hitag family and have briefly tried this myself to no avail.
The proxmark3 does have compatibility for RTF and TTF so given your reply, it would be nice (with permission) to implement your solution to the PM3 repo.
If you had spent more than a few minutes on this forum before posting your “solution” you would have seen that this is a community willing to help each other. It is filled with extremely knowledgeable people and people ( like me) who are still learning, you can be sure that if you come on here with with a sales pitch you have painted a target on your own back.
I mean… here’s a bit of info… so yeah the hitag2 can be set in “reader talk first” mode. This is critical to understand because most LF chips talk first… meaning as soon as they have power they are blabbing their ID out… but some chips are or can be put into a configuration where the reader has to actively ask “anyone out there” and then the chip(s) respond. If the reader doesn’t know how to do this, then chips will simply not talk and the reader sees the power drain on the field but isn’t hearing any chips… usually results in simply ignoring the chips or producing an error code.
The question is - can the proxmark3 properly put a HITAG into this mode? Technically it’s capable but does the firmware support it yet? Dunno.
I really only skimmed his comments. This is all doable, the biggest part would be breaking the keys. I know this to be pretty simple on Hitag2, but I’m not really trying to attract the ire of NXP these days.
depending on whether or not your paxton net2 installation has em410x configurations enabled as acceptable chipsets you can downgrade and write to T5577 which are present in the magic ring, xemNExT and more.
if you use the bullet fobs with this system or use the bullet fob compatible hardware, x-series implants can be used with 0 fuss
Hi, here is a pic of The paxton system our office has. i wave a white card and the green LED flashes and door open. How can i know clone this card to the magic ring. My android phone and tag info does not read anything from the card. Can i use the promark3 tool to clone the card to the ring?