Trouble with first implant

Thanks mate! Doing well - nothing civid related, totally spontaneous.

4 Likes

Ok so if we still have no luck trying to get output from the above I expect that the blue cloner has indeed cloned or half cloned the ID and locked the chip down with a password.

I just tried this on my own non password protected NeXT to make sure it wouldn’t break yours IF the cloner didn’t actually clone to it, so it doesn’t matter either way, this can’t make things go more askew.

Try this:

  1. Get in the position where you get the occasional “t5 detected” message.
  2. Issue: lf t55xx write b 0 d 00107060 p 51243648
    (this is the command to unlock a chip thats been password protected by the blue cloner in HID mode)
  3. Issue: lf t5xx write b 7 d 00000000
  4. Try again with the lf t5 detect / lf search and see if you get proper output.

Cheers,
TH

4 Likes

Just cloned the repo yesterday and mine says this;

[ ARM ]
bootrom: RRG/Iceman/master/0cb21c89 2020-05-02 21:58:52
os: RRG/Iceman/master/0cb21c89 2020-05-02 21:59:35
compiled with GCC 9.2.1 20191025 (release) [ARM/arm-9-branch revision 277599]

I’m using ProxSpace on Windows so I guess I should run the update, reclone the repo, re-flash, and try again?

1 Like

Same build number, just a different compile date - not sure why yours is different if it was built yesterday, but you’re up to date and not mismatched.

I think you’re good at least on version @amal! Good news that doesn’t help solve your issue at all (don’t you just hate that?!)

2 Likes

I know I have this command the iceman posted about on the proxmark repo

lf t55xx deviceconfig a 29 b 17 c 15 d 47 e 15 p

Apparently it is the preferred timings for the t5577.

1 Like

Just a quick note that there are 2 sets of these timing depending on if you are using a ‘generic’ PM3 easy or an RDV4 - make sure you use the right timings for your hardware!

1 Like

I’m 99.99% sure it was RDV4 specific as that is the one I have. :smiley:

1 Like

I would run proxspace, in the pm3 dir do a: git pull

followed by a: make clean && make all

One compilation completes use the pm3-flash-all.sh script. If it fails the first time, un plug pm3, hold physical button down, plug back in & keep the button held while doing a flash. The older bootrom has a bug that requires this, newer versions have mostly resolved this bug.

2 Likes

Fuckin FPGAs

Yeah, I am trying to get the software going. I thought that was it too. Seeing what I can do now. Sorry I had some personal things and was out.

okay, this is getting very frustrating. I am getting errors when trying to run proxmark3. Cant execute because files missing.

At this point I am willing to pay someone to RDP into my system and install the client.
Any takers?

haah sure… why not. what software are you using? i suggest proxspace… it’s dead simple.

Have you tried the precompiled clients here?

http://www.proxmark.net/forum/viewtopic.php?id=3975

So I got help, thanks, and I know the software is setup right. However, it is only reading the Next chip 1/25 ish times. It says to config it because it can’t detect it automatically.

It shouldn’t be like this, because I wasted one to test and literally have the bare implant next to the proxLF.

Any suggestions?

We need specific output from the proxmark. Paraphrasing the output won’t allow us to help. What command are you running, and what is the output?

As @cexshun said

This is off the top of my head, but to find the logs (happy to be corrected)
Proxspace/pm3/proxmark3
and the file should be named the date and time group of your session

I cant find the logs, but it says.

lf t55xx p1detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’

Output

[+] About to use the following file:
[+] C:\ProxSpace-64\pm3\proxmark3\client…/bootrom/obj/bootrom.elf
[+] Waiting for Proxmark3 to appear on COM3
found
[+] Entering bootloader…
[+] (Press and release the button only to abort)
[+] Waiting for Proxmark3 to appear on COM3
found
[=] Available memory on this board: 512K bytes

[=] Permitted flash range: 0x00100000-0x00180000
[+] Loading ELF file C:\ProxSpace-64\pm3\proxmark3\client…/bootrom/obj/bootrom.elf
[+] Loading usable ELF segments:
[+] 0: V 0x00100000 P 0x00100000 (0x00000200->0x00000200) [R X] @0x94
[+] 1: V 0x00200000 P 0x00100200 (0x00000d50->0x00000d50) [R X] @0x298

[+] Flashing…
[+] Writing segments for file: C:\ProxSpace-64\pm3\proxmark3\client…/bootrom/obj/bootrom.elf
[+] 0x00100000…0x001001ff [0x200 / 1 blocks]
OK
[+] 0x00100200…0x00100f4f [0xd50 / 7 blocks]
OK

[+] All done

Have a nice day!
[+] About to use the following file:
[+] C:\ProxSpace-64\pm3\proxmark3\client…/armsrc/obj/fullimage.elf
[+] Waiting for Proxmark3 to appear on COM3
found
[+] Entering bootloader…
[+] (Press and release the button only to abort)
[+] Waiting for Proxmark3 to appear on COM3
found
[=] Available memory on this board: 512K bytes

[=] Permitted flash range: 0x00102000-0x00180000
[+] Loading ELF file C:\ProxSpace-64\pm3\proxmark3\client…/armsrc/obj/fullimage.elf
[+] Loading usable ELF segments:
[+] 0: V 0x00102000 P 0x00102000 (0x0003d788->0x0003d788) [R X] @0x94
[+] 1: V 0x00200000 P 0x0013f788 (0x00001964->0x00001964) [RW ] @0x3d81c
[=] Note: Extending previous segment from 0x3d788 to 0x3f0ec bytes

[+] Flashing…
[+] Writing segments for file: C:\ProxSpace-64\pm3\proxmark3\client…/armsrc/obj/fullimage.elf
[+] 0x00102000…0x001410eb [0x3f0ec / 505 blocks]
OK

[+] All done

Have a nice day!
[=] Using UART port com3
[=] Communicating with PM3 over USB-CDC
[=] Creating initial preferences file
[=] Saving preferences…
[+] saved to json file C:\ProxSpace-64\pm3/.proxmark3/preferences.json

[ Proxmark3 RFID instrument ]

[ CLIENT ]
client: RRG/Iceman/master/v4.9237-629-g3ae8dedd 2020-08-11 14:06:42
compiled with MinGW-w64 10.2.0 OS:Windows (64b) ARCH:x86_64

[ PROXMARK3 RDV4 ]
external flash: present
smartcard reader: present

[ PROXMARK3 RDV4 Extras ]
FPC USART for BT add-on support: absent

[ ARM ]
bootrom: RRG/Iceman/master/v4.9237-629-g3ae8dedd 2020-08-11 14:07:24
os: RRG/Iceman/master/v4.9237-629-g3ae8dedd 2020-08-11 14:07:41
compiled with GCC 9.2.1 20191025 (release) [ARM/arm-9-branch revision 277599]

[ FPGA ]
LF image built for 2s30vq100 on 2020-02-22 at 12:51:14
HF image built for 2s30vq100 on 2020-01-12 at 15:31:16

[ Hardware ]
–= uC: AT91SAM7S512 Rev B
–= Embedded Processor: ARM7TDMI
–= Nonvolatile Program Memory Size: 512K bytes, Used: 264906 bytes (51%) Free: 259382 bytes (49%)
–= Second Nonvolatile Program Memory Size: None
–= Internal SRAM Size: 64K bytes
–= Architecture Identifier: AT91SAM7Sxx Series
–= Nonvolatile Program Memory Type: Embedded Flash Memory

[usb] pm3 --> via
[usb] pm3 --> Type a message
[usb] pm3 --> hw tune
[=] Measuring antenna characteristics, please wait…

[=] ---------- LF Antenna ----------
[+] LF antenna: 27.65 V - 125.00 kHz
[+] LF antenna: 26.75 V - 134.83 kHz
[+] LF optimal: 28.43 V - 127.66 kHz
[+] LF antenna is OK
[=] ---------- HF Antenna ----------
[!] HF antenna is UNUSABLE

[+] Displaying LF tuning graph. Divisor 88 is 134.83 kHz, 95 is 125.00 kHz.

[usb] pm3 --> lf hid read
[+] HID Prox - 23e0563aa5 (0) - len: 33 bit - OEM: 000 FC: 0 Card: 0
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf read
[#] LF Sampling config
[#] [q] divisor…95 ( 125.00 kHz )
[#] [b] bits per sample…8
[#] [d] decimation…1
[#] [a] averaging…Yes
[#] [t] trigger threshold…0
[#] [s] samples to skip…0
[#] LF Sampling Stack
[#] Max stack usage…3976 / 8480 bytes
[#] Done, saved 42056 out of 0 seen samples at 8 bits/sample
[=] Reading 42055 bytes from device memory
[+] Data fetched
[=] Samples @ 8 bits/smpl, decimation 1:1
[usb] pm3 --> lf read
[#] LF Sampling config
[#] [q] divisor…95 ( 125.00 kHz )
[#] [b] bits per sample…8
[#] [d] decimation…1
[#] [a] averaging…Yes
[#] [t] trigger threshold…0
[#] [s] samples to skip…0
[#] LF Sampling Stack
[#] Max stack usage…4048 / 8480 bytes
[#] Done, saved 42056 out of 0 seen samples at 8 bits/sample
[=] Reading 42055 bytes from device memory
[+] Data fetched
[=] Samples @ 8 bits/smpl, decimation 1:1
[usb] pm3 --> lf read
[#] LF Sampling config
[#] [q] divisor…95 ( 125.00 kHz )
[#] [b] bits per sample…8
[#] [d] decimation…1
[#] [a] averaging…Yes
[#] [t] trigger threshold…0
[#] [s] samples to skip…0
[#] LF Sampling Stack
[#] Max stack usage…4048 / 8480 bytes
[#] Done, saved 42056 out of 0 seen samples at 8 bits/sample
[=] Reading 42055 bytes from device memory
[+] Data fetched
[=] Samples @ 8 bits/smpl, decimation 1:1
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[=] Chip Type : T55x7
[=] Modulation : DIRECT/NRZ
[=] Bit Rate : 2 - RF/32
[=] Inverted : Yes
[=] Offset : 46
[=] Seq. Term. : No
[=] Block0 : 0x00080801
[=] Downlink Mode : default/fixed bit length
[=] Password Set : No

[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf config
[#] LF Sampling config
[#] [q] divisor…95 ( 125.00 kHz )
[#] [b] bits per sample…8
[#] [d] decimation…1
[#] [a] averaging…Yes
[#] [t] trigger threshold…0
[#] [s] samples to skip…0
[#] LF Sampling Stack
[#] Max stack usage…4048 / 8480 bytes
[usb] pm3 --> lf t55xx config
[=] Chip Type : T55x7
[=] Modulation : DIRECT/NRZ
[=] Bit Rate : 2 - RF/32
[=] Inverted : Yes
[=] Offset : 46
[=] Seq. Term. : No
[=] Block0 : 0x00080801
[=] Downlink Mode : default/fixed bit length
[=] Password Set : No

[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[=] Chip Type : T55x7
[=] Modulation : DIRECT/NRZ
[=] Bit Rate : 2 - RF/32
[=] Inverted : No
[=] Offset : 62
[=] Seq. Term. : No
[=] Block0 : 0x00080000
[=] Downlink Mode : leading zero reference
[=] Password Set : No

[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[=] Chip Type : T55x7
[=] Modulation : DIRECT/NRZ
[=] Bit Rate : 2 - RF/32
[=] Inverted : No
[=] Offset : 33
[=] Seq. Term. : No
[=] Block0 : 0x20080000
[=] Downlink Mode : 1 of 4 coding reference
[=] Password Set : No

[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[=] Chip Type : T55x7
[=] Modulation : DIRECT/NRZ
[=] Bit Rate : 2 - RF/32
[=] Inverted : Yes
[=] Offset : 59
[=] Seq. Term. : No
[=] Block0 : 0x00080000
[=] Downlink Mode : default/fixed bit length
[=] Password Set : No

[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[+] loaded from JSON file C:\prox\pm3/.proxmark3/preferences.json
[=] Using UART port com3
[=] Communicating with PM3 over USB-CDC

[ Proxmark3 RFID instrument ]

[ CLIENT ]
client: RRG/Iceman/master/v4.9237-629-g3ae8dedd 2020-08-11 14:06:42
compiled with MinGW-w64 10.2.0 OS:Windows (64b) ARCH:x86_64

[ PROXMARK3 RDV4 ]
external flash: present
smartcard reader: present

[ PROXMARK3 RDV4 Extras ]
FPC USART for BT add-on support: absent

[ ARM ]
bootrom: RRG/Iceman/master/v4.9237-629-g3ae8dedd 2020-08-11 14:07:24
os: RRG/Iceman/master/v4.9237-629-g3ae8dedd 2020-08-11 14:07:41
compiled with GCC 9.2.1 20191025 (release) [ARM/arm-9-branch revision 277599]

[ FPGA ]
LF image built for 2s30vq100 on 2020-02-22 at 12:51:14
HF image built for 2s30vq100 on 2020-01-12 at 15:31:16

[ Hardware ]
–= uC: AT91SAM7S512 Rev B
–= Embedded Processor: ARM7TDMI
–= Nonvolatile Program Memory Size: 512K bytes, Used: 259976 bytes (50%) Free: 264312 bytes (50%)
–= Second Nonvolatile Program Memory Size: None
–= Internal SRAM Size: 64K bytes
–= Architecture Identifier: AT91SAM7Sxx Series
–= Nonvolatile Program Memory Type: Embedded Flash Memory

[usb] pm3 --> lf read
[#] LF Sampling config
[#] [q] divisor…95 ( 125.00 kHz )
[#] [b] bits per sample…8
[#] [d] decimation…1
[#] [a] averaging…Yes
[#] [t] trigger threshold…0
[#] [s] samples to skip…0
[#] LF Sampling Stack
[#] Max stack usage…3976 / 8480 bytes
[#] Done, saved 42056 out of 0 seen samples at 8 bits/sample
[=] Reading 42055 bytes from device memory
[+] Data fetched
[=] Samples @ 8 bits/smpl, decimation 1:1
[usb] pm3 --> lf search
[=] NOTE: some demods output possible binary
[=] if it finds something that looks like a tag
[=] False Positives ARE possible
[=]
[=] Checking for known tags…
[=]
[!] timeout while waiting for reply.
No data found!
[=] Signal looks like noise. Maybe not an LF tag?
[usb] pm3 --> lf search
[=] NOTE: some demods output possible binary
[=] if it finds something that looks like a tag
[=] False Positives ARE possible
[=]
[=] Checking for known tags…
[=]
[+] HID Prox - 23e0563aa5 (0) - len: 33 bit - OEM: 000 FC: 0 Card: 0

[+] Valid HID Prox ID found!

[+] Chipset detection: EM4x05/EM4x69
[usb] pm3 --> lf search
[=] NOTE: some demods output possible binary
[=] if it finds something that looks like a tag
[=] False Positives ARE possible
[=]
[=] Checking for known tags…
[=]
[+] HID Prox - 23e0563aa5 (0) - len: 33 bit - OEM: 000 FC: 0 Card: 0

[+] Valid HID Prox ID found!

[+] Chipset detection: EM4x05/EM4x69
[usb] pm3 --> lf search
[=] NOTE: some demods output possible binary
[=] if it finds something that looks like a tag
[=] False Positives ARE possible
[=]
[=] Checking for known tags…
[=]
[+] HID Prox - 23e0563aa5 (0) - len: 33 bit - OEM: 000 FC: 0 Card: 0

[+] Valid HID Prox ID found!

[+] Chipset detection: EM4x05/EM4x69
[usb] pm3 --> lf search
[=] NOTE: some demods output possible binary
[=] if it finds something that looks like a tag
[=] False Positives ARE possible
[=]
[=] Checking for known tags…
[=]
[+] HID Prox - 23e0563aa5 (0) - len: 33 bit - OEM: 000 FC: 0 Card: 0

[+] Valid HID Prox ID found!

[+] Chipset detection: EM4x05/EM4x69
[usb] pm3 --> lf search
[=] NOTE: some demods output possible binary
[=] if it finds something that looks like a tag
[=] False Positives ARE possible
[=]
[=] Checking for known tags…
[=]
[+] HID Prox - 23e0563aa5 (0) - len: 33 bit - OEM: 000 FC: 0 Card: 0

[+] Valid HID Prox ID found!

[+] Chipset detection: EM4x05/EM4x69
[usb] pm3 --> lf search
[=] NOTE: some demods output possible binary
[=] if it finds something that looks like a tag
[=] False Positives ARE possible
[=]
[=] Checking for known tags…
[=]
[+] HID Prox - 23e0563aa5 (0) - len: 33 bit - OEM: 000 FC: 0 Card: 0

[+] Valid HID Prox ID found!

[usb] pm3 --> lf search
[=] NOTE: some demods output possible binary
[=] if it finds something that looks like a tag
[=] False Positives ARE possible
[=]
[=] Checking for known tags…
[=]
No data found!
[=] Signal looks like noise. Maybe not an LF tag?
[usb] pm3 --> lf search
[=] NOTE: some demods output possible binary
[=] if it finds something that looks like a tag
[=] False Positives ARE possible
[=]
[=] Checking for known tags…
[=]
[!] timeout while waiting for reply.
[+] HID Prox - 23e0563aa5 (0) - len: 33 bit - OEM: 000 FC: 0 Card: 0

[+] Valid HID Prox ID found!

[+] Chipset detection: EM4x05/EM4x69
[usb] pm3 --> lf search
[=] NOTE: some demods output possible binary
[=] if it finds something that looks like a tag
[=] False Positives ARE possible
[=]
[=] Checking for known tags…
[=]
No known 125/134 kHz tags found!
[!] timeout while waiting for reply.
[usb] pm3 --> lf search
[!] command execution time out
[=] NOTE: some demods output possible binary
[=] if it finds something that looks like a tag
[=] False Positives ARE possible
[=]
[=] Checking for known tags…
[=]
[!] timeout while waiting for reply.
[!] timeout while waiting for reply.
No known 125/134 kHz tags found!
[!] command execution time out
[!] timeout while waiting for reply.
[usb] pm3 --> lf search
[!] command execution time out
[=] NOTE: some demods output possible binary
[=] if it finds something that looks like a tag
[=] False Positives ARE possible
[=]
[=] Checking for known tags…
[=]
[!] timeout while waiting for reply.
[!] timeout while waiting for reply.
No known 125/134 kHz tags found!
[!] command execution time out
[!] timeout while waiting for reply.
[usb] pm3 --> lf read
[!] command execution time out
[usb] pm3 --> lf search
[!] command execution time out
[=] NOTE: some demods output possible binary
[=] if it finds something that looks like a tag
[=] False Positives ARE possible
[=]
[=] Checking for known tags…
[=]
[!] timeout while waiting for reply.
[!] timeout while waiting for reply.
No known 125/134 kHz tags found!
[!] command execution time out
[!] timeout while waiting for reply.
[usb] pm3 --> lf search
[!] command execution time out
[=] NOTE: some demods output possible binary
[=] if it finds something that looks like a tag
[=] False Positives ARE possible
[=]
[=] Checking for known tags…
[=]
[!] timeout while waiting for reply.
[!] timeout while waiting for reply.
No known 125/134 kHz tags found!
[!] command execution time out
[!] timeout while waiting for reply.
[usb] pm3 --> lf search
[!] command execution time out
[=] NOTE: some demods output possible binary
[=] if it finds something that looks like a tag
[=] False Positives ARE possible
[=]
[=] Checking for known tags…
[=]
[!] timeout while waiting for reply.
[!] timeout while waiting for reply.
No known 125/134 kHz tags found!
[!] command execution time out
[!] timeout while waiting for reply.
[usb] pm3 --> lf search
[!] command execution time out
[=] NOTE: some demods output possible binary
[=] if it finds something that looks like a tag
[=] False Positives ARE possible
[=]
[=] Checking for known tags…
[=]
[!] timeout while waiting for reply.
[!] timeout while waiting for reply.
No known 125/134 kHz tags found!
[!] command execution time out
[!] timeout while waiting for reply.
[usb] pm3 --> lf t55xx p1detect
[!] command execution time out
[!] command execution time out
[!] command execution time out
[!] command execution time out
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx p1detect
[!] command execution time out
[!] command execution time out
[!] command execution time out
[!] command execution time out
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] command execution time out
[!] command execution time out
[!] command execution time out
[!] command execution time out
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’
[usb] pm3 --> lf t55xx detect
[!] command execution time out
[!] command execution time out
[!] command execution time out
[!] command execution time out
[!] Could not detect modulation automatically. Try setting it manually with ‘lf t55xx config’

That’s odd, it seems to work fine for me once I get the position correct.

Are you running the most recent git master branch? Iceman has said that branch is not stable, and you should run the latest release ( v4.9237 rather than master.

Have you tried doing a test write? Maybe do a lf hid clone ffffff01, then try and see if it works.

Oh, I almost forgot, I trust you ran the initial commands and verification on the RDV4 first, which also sets the default t55 configs?

script run init_rdv4.lua

Should fix your t55 config issues. Then you should probably upgrade the smartcard firmware also.