Proxmark 3 cant write t5577

Support
1

I bought in Taobao 5pcs t5577. But impossible to change id. It is in password mode. I dont know how can remove password. bruteforce didnt help.

[=] --- T55x7 Configuration & Information ---------
[=]  Safer key                 : 10
[=]  reserved                  : 44
[=]  Data bit rate             : 5 - RF/64
[=]  eXtended mode             : No
[=]  Modulation                : 0x15 (Unknown)
[=]  PSK clock frequency       : 1 - RF/4
[=]  AOR - Answer on Request   : No
[=]  OTP - One Time Pad        : Yes - Warning
[=]  Max block                 : 2
[=]  Password mode             : Yes
[=]  Sequence Terminator       : Yes
[=]  Fast Write                : No
[=]  Inverse data              : Yes - Warning
[=]  POR-Delay                 : No
[=] -------------------------------------------------------------
[=]  Raw Data - Page 0, block 0
[=]  A595555A - 10100101100101010101010101011010
[=] --- Fingerprint ------------
2

I got it second time. I don’t understand why the information from the tag has changed

[usb|script] pm3 --> lf t55xx info

[=] --- T55x7 Configuration & Information ---------
[=]  Safer key                 : 12
[=]  reserved                  : 0
[=]  Data bit rate             : 0 - RF/8
[=]  eXtended mode             : No
[=]  Modulation                : 0 - DIRECT (ASK/NRZ)
[=]  PSK clock frequency       : 0 - RF/2
[=]  AOR - Answer on Request   : No
[=]  OTP - One Time Pad        : No
[=]  Max block                 : 0
[=]  Password mode             : No
[=]  Sequence Terminator       : No
[=]  Fast Write                : No
[=]  Inverse data              : No
[=]  POR-Delay                 : No
[=] -------------------------------------------------------------
[=]  Raw Data - Page 0, block 0
[=]  C0000000 - 11000000000000000000000000000000
[=] --- Fingerprint ------------
3 
[usb] pm3 --> lf t55xx dump
[+] Reading Page 0:
[+] blk | hex data | binary                           | ascii
[+] ----+----------+----------------------------------+-------
[+]  00 | C0000000 | 11000000000000000000000000000000 | ....
[+]  01 | C0000000 | 11000000000000000000000000000000 | ....
[+]  02 | C0000000 | 11000000000000000000000000000000 | ....
[+]  03 | 80000000 | 10000000000000000000000000000000 | ....
[+]  04 | C0000000 | 11000000000000000000000000000000 | ....
[+]  05 | 80000000 | 10000000000000000000000000000000 | ....
[+]  06 | C0000000 | 11000000000000000000000000000000 | ....
[+]  07 | 80000000 | 10000000000000000000000000000000 | ....
[+] Reading Page 1:
[+] blk | hex data | binary                           | ascii
[+] ----+----------+----------------------------------+-------
[+]  00 | C0000000 | 11000000000000000000000000000000 | ....
[+]  01 | 80000000 | 10000000000000000000000000000000 | ....
[+]  02 | 80000000 | 10000000000000000000000000000000 | ....
[+]  03 | 80000000 | 10000000000000000000000000000000 | ....
1 Like
4

All is a mystery with China. It’s very possible you didn’t actually get legitimate t5577 chips but some sort of Chinese factory knock off that probably behaves much more erratically

1 Like