Paxton HT2 Tokens, Copy - Clone - Duplicate SOLVED

So to sum this up…

  • joins a community forum where a good percentage of people are intellectual / deep intrest in rfid and all the hardware and software that goes along with it.

  • States I’ve done this really “hard” thing that you would probably be interested in.

  • Claims it is too long and difficult to do a write up or share the information.

  • Implies members wouldnt understand how to do it anyway.

Sounds like there going to try and sell us something :thinking:

4 Likes

image

2 Likes

I did find this on YouTube, I’m just about to “take the hit for the team”.
I’ll report back

Listed 7 days ago
Meh! looks like “a thing”
less than 2 mins of a “functional demo” with no ACTUAL “thing” happening except for a key fob flashing.

IF it actually works, :man_shrugging: its kinda just a simplified one trick pony version of a Keysy

WOW, who turned on the search and destroy option.
It seems that I have stirred up a hornet’s nest.
I offered to share my knowledge with those who were interested, but it seems I just put a target on my back.
I cannot post a direct link to the product for sale on eBay, that was not the intention of this post.
I mentioned how to find the product so people could see detailed information about the whole exercise.
What is Keysy anyway?, who cares, that seems like deliberate advertising to me, seeing that you boast “Lead Development Engineer” for the Company.
There is a very detailed description on the ebay listing of what it does, and there are 2 youtube links with detailed commentary on what it does.

I will withdraw my offer.
Those who were genuinely interested in how to do it, can find another means to contact me. I would be more than happy to share.

Bye
Glenn

I do not think anyone turned it on. I feel you kinda brought it on yourself.

You say this, but you also posted no knowledge, even after several request for it.

After all that, most information about Paxton I can find was provided by this communities members, not you, who was asked several times.

Well, I don’t recall @fraggersparks or anyone saying they worked for them here. @Pilgrimsmaster made a reference to it, because hey, lots of us here like RFID stuff.

Fragger should boast about Vivokey imo

Yet again you come in here with this, but no real information of substance.

I personally feel that you never wanted to share, just sell.

After this interaction, I feel these people will likely try to find a work around. I saw several request of interest, and you just blowing them off.

Maybe. Maybe people just don’t like your tone and condescending comments.

3 Likes

PM3 and RFIDler can memory dump a standard Hitag2 token and can write new data to it.
Hitag2 (Paxton) is one of very few “Reader talk first” tokens, so neither of the above devices can automate the whole Hitag2 cloning process.
Paxton tokens do not use the default Hitag2 challenge and response credentials, plus the latest Paxton10 tokens use the Hitag2 in Crypt mode.

I think, by Keysy, he means VivoKey

Seems like he just came here to sell his Cloner (which I’m guessing just reconfigures the hitag2 into a Paxton card, it might be as simple as a password bring different idk)

Edit: he made it here, I’d say, by looking up Paxton hitag2, we’re on the first page of Google for that search, then shilling his cloner

1 Like

I think they came to sell also. It is listed for £395.00. Also, the information on the ebay page is pretty much a long winded version of what he said at the top. Not much for technical details there.

Okay okay okay, I give in.
Some of you people need to find some other outlet for your venomn rather than patrolling this forum looking for posts to brand as scammers.
Sad people with nothing but contempt.
Please do not post any more on this subject while I am trying to find out how to close or delete it.

Give in to what? That we are correct?

Prove us wrong then!!! Post something, anything of substance!!! You act like WE are the scammers when you come here with an expensive device?

I see no sad people. I see a sad Glenn.

@Pilgrimsmaster can you delete this please? His words, not mine.

1 Like

I disagree. Dirty deletes are not cool. We made our point. Prove your intentions or bugger off.

Yes, the forum regulars are all “patrolling” this forum… As we kind of do. This is our community, not yours.

If you were serious, you’d write a paper on it, like those who initially reverse-engineered Hitag2 (whose work I’m sure you used).

5 Likes

Well I like to see im not just synical. :sweat_smile: they had us in the first half :wink:

Hi,

I’m currently doing a lot of academic research that involves Paxton overall and in particular their Net2 bullet tokens. I am very familiar with the NXP Hitag datasheets as I have read them several times when doing my research.

If you could describe in as much technical detail as possible how you were able to achieve what you have claimed then I can reference your work for my research paper.

I have a lot of knowledge of Paxton, the Hitag family and have briefly tried this myself to no avail.

The proxmark3 does have compatibility for RTF and TTF so given your reply, it would be nice (with permission) to implement your solution to the PM3 repo.

3 Likes

If you had spent more than a few minutes on this forum before posting your “solution” you would have seen that this is a community willing to help each other. It is filled with extremely knowledgeable people and people ( like me) who are still learning, you can be sure that if you come on here with with a sales pitch you have painted a target on your own back.

1 Like

So, who wants to buy one to sniff its communication using a proxmark? Anyone got access to genuine paxton fobs?

1 Like

I thought about it but after seeing that the price is more than an RDV4 there is no way I could justify it. I would just get another RDV4 and probably be better off doing so.

I think @Backpackingvet meant you should be boasting about the Vivokey products and the work you have done with it.

When I watched the YouTube video, it reminded me of Keysy, which is also a Keyfob copy - clone - duplicator for $45

More than a one trick pony

COMPATIBILITY

Keysy supports 125kHz RFID keycards/keyfobs.

Supported Models

  • HID Prox (Proxcard, ISOProx, ProxKey)
    (Emulation not supported on multiClass readers, can still clone to rewritable)
  • HID Indala (Motorola Indala)
  • EM400x, EM410x, EM420x
  • Noralsy (KCP3000)
  • Farpointe Pyramid
  • Keri (KC-10X, MT-10X, PKT-10X)
  • Kantech ioProx
  • DoorKing (DKProx) [Not DKProx Long Range]
  • AWID (Low frequency only – CS-AWID, GR-AWID, KT-AWID, PW-AWID)
    (Emulation not supported, can still clone to rewritable)
  • Radio Key (SecuraKey RKKT-01, RKKT-02)
  • Viking
  • Visa2000
  • Schlage IBF iButton (RFID portion only)
  • T55x7 compatible keycard/keyfob

image

Now I just sit back and wait for my comissions to roll in.

tenor (59)

I mean… here’s a bit of info… so yeah the hitag2 can be set in “reader talk first” mode. This is critical to understand because most LF chips talk first… meaning as soon as they have power they are blabbing their ID out… but some chips are or can be put into a configuration where the reader has to actively ask “anyone out there” and then the chip(s) respond. If the reader doesn’t know how to do this, then chips will simply not talk and the reader sees the power drain on the field but isn’t hearing any chips… usually results in simply ignoring the chips or producing an error code.

The question is - can the proxmark3 properly put a HITAG into this mode? Technically it’s capable but does the firmware support it yet? Dunno.

I guess it’s down to writing firmware support.

I really only skimmed his comments. This is all doable, the biggest part would be breaking the keys. I know this to be pretty simple on Hitag2, but I’m not really trying to attract the ire of NXP these days.

Found this helpful guide on copying paxton fobs How to copy, read and write Paxton fobs and cards with an RFIDler · GitHub

2 Likes