T55 impossible to write with Proxmark

Support
1

Hi,
I’m desparately trying to restore a T55 badge on a new chinese one (T55 as well), and even though when I restore, it seems to restore all sectors, when I dump, one sector is different (3).
When I try to write over this sector (32), it doesn’t work either.
The password is not activated and I think I copied all the parameters (bitrate, offset, etc…) of the original card I want to copy.

Also, when I try to detect the new badge (lf t55 detect), it always gives me a “lf config message”).

Please see below in case I am doing something wrong, and advise what you recommend.

[usb] pm3 → lf t55 restore -f BadgeKCOK.bin
[+] loaded 48 bytes from binary file BadgeKCOK.bin
[=] Starting to write…
[=] Writing page 0 block: 01 data: 0xBB0214FF
[=] Writing page 0 block: 02 data: 0x00298001
[=] Writing page 0 block: 03 data: 0x27770000
[=] Writing page 0 block: 04 data: 0x00000000
[=] Writing page 0 block: 05 data: 0x00000000
[=] Writing page 0 block: 06 data: 0x00000000
[=] Writing page 0 block: 07 data: 0x00000000
[=] Writing page 1 block: 01 data: 0xE0150157
[=] Writing page 1 block: 02 data: 0x894790F2
[=] Writing page 1 block: 03 data: 0x00000000
[=] Writing page 0 block: 00 data: 0x00088C6A
[=] Done!
[usb] pm3 → lf t55 detect
[=] Chip type… T55x7
[=] Modulation… ASK
[=] Bit rate… 2 - RF/32
[=] Inverted… No
[=] Offset… 32
[=] Seq. terminator… Yes
[=] Block0… 00088C6A (auto detect)
[=] Downlink mode… default/fixed bit length
[=] Password set… No

[usb] pm3 → lf t55 dump
[+] Reading Page 0:
[+] blk | hex data | binary | ascii
[+] ----±---------±---------------------------------±------
[+] 00 | 00088C6A | 00000000000010001000110001101010 | …j
[+] 01 | BB0214FF | 10111011000000100001010011111111 | …
[+] 02 | 00298001 | 00000000001010011000000000000001 | .)…
[+] 03 | 00000000 | 00000000000000000000000000000000 | …
[+] 04 | 00000000 | 00000000000000000000000000000000 | …
[+] 05 | 00000000 | 00000000000000000000000000000000 | …
[+] 06 | 00000000 | 00000000000000000000000000000000 | …
[+] 07 | 00000000 | 00000000000000000000000000000000 | …
[+] Reading Page 1:
[+] blk | hex data | binary | ascii
[+] ----±---------±---------------------------------±------
[+] 00 | 00088C6A | 00000000000010001000110001101010 | …j
[+] 01 | E0150157 | 11100000000101010000000101010111 | …W
[+] 02 | 894790F2 | 10001001010001111001000011110010 | .G…
[+] 03 | 00000000 | 00000000000000000000000000000000 | …

2

I’ve got a similar issue - was overzealous with a NExT and used a blue cloner to put the keys to a safe on it, couldn’t get a read with my PM3 Easy to reset so I had it removed to try and reset the PW outside my body. Unfortunately even with my NExT literally right on top of the LF antenna, it still won’t properly read.

My Flipper picks it up fine of course - can’t wait 'til I can reset the PW on there someday hopefully.

3

Good luck with that !
I hope someone will be able to tell us how to do…
My flipper has never been able to detect or read any t55… (I’m on the latest RG, but I tried unleashed as well).