Hi all , i started to use my proxmark3 2 month ago and i try to copy all the tags i find .
I bought an appartement last year with new tag system called HEXACT . It is (i think) the same system than INTRATONE from COGELEC . I tryied to copy my tag and i thought i succeed . When i try to use my tag , it seemed to be not recognize at all by the reader .
Here is what i found .
When i do a CHK on the tag with the known keys i find all of them from sector 0 to 15 on A and B . What i found is the fact there are 2 more sectors with 4 blocs each for A and B .
I used the hardnested attack to find the 4 last missing keys .
The problems are :
There is no way to dump more than 16 sectors ( mine has 18 )
When i do a rdsc 16 A or B or 17 A i have an error :
"#db# Cmd Error: 04
#db# Read sector 16 block 0 error "
But when i do a rdsc 17 B i find :
proxmark3> hf mf rdsc 17 B 4b791bea7bcc
–sector no:17 key type:B key:4b 79 1b ea 7b cc
#db# READ SECTOR FINISHED
data : 48 48 57 36 33 38 11 44 15 ad a8 00 00 00 00 00
data : 70 c7 2b ef c4 a0 6e 6b 16 da b9 69 5e 6e ec 09
data : 33 90 64 91 e4 c9 ed e8 e3 f6 86 58 ca b0 41 5a
trailer: 00 00 00 00 00 00 70 f0 f8 69 00 00 00 00 00 00
Access block 68: read B
Access block 69: read B
Access block 70: read B
Access block 71: read ACCESS by AB
In the same way i tried to read all the blocs and the only one readable (except the 4 blocs from sector 17 B) is bloc 71 A from sector 17 A ( the last of the 4 blocs ) .
Any ideas anyone ? Did someone find the same results ?