Reading a 134kHz EM4100 Tag with the Proxmark3

October 04, 2015

Follow the instructions below to read a 134kHz EM4100 tag using the Proxmark3.

Begin by connecting the proxmark to a PC and connecting the LF antenna to the proxmark.

Launch the client and enter the command below.

proxmark3> lf em em410xwatch h
Reading 8201 bytes from device memory
          
Data fetched          
Samples @ 8 bits/smpl, decimation 1:1           
Reading 8201 bytes from device memory
          
Data fetched          
Samples @ 8 bits/smpl, decimation 1:1           
EM410x pattern found:           

EM TAG ID      : 1C003CA6EE          
Unique TAG ID  : 38003C6577          

Possible de-scramble patterns         
HoneyWell IdentKey {          
DEZ 8          : 03974894          
DEZ 10         : 0003974894          
DEZ 5.5        : 00060.42734          
DEZ 3.5A       : 028.42734          
DEZ 3.5B       : 000.42734          
DEZ 3.5C       : 060.42734          
DEZ 14/IK2     : 00120263059182         
DEZ 15/IK3     : 000240522126711          
DEZ 20/ZK      : 03080000031206050707         
}
Other          : 42734_060_03974894         
Pattern Paxton : 475063534 [0x1C50E4EE]          
Pattern 1      : 5586357 [0x553DB5]         
Pattern Sebury : 42734 60 3974894  [0xA6EE 0x3C 0x3CA6EE]

The output shown above was obtained using version 2.2.0 of the client software/firmware.






Also in Blog

Black Hat / Defcon Sale - 2018
Black Hat / Defcon Sale - 2018

July 30, 2018

BH/DC sale until August 15th 2018. Get 10% off plus free shipping on purchase of $200 or more.

View full article →

How to Install a ChameleonMini Rev.G Driver on Windows 10
How to Install a ChameleonMini Rev.G Driver on Windows 10

May 30, 2018

View full article →

Getting Started with Version 3.0.1 of the Proxmark3
Getting Started with Version 3.0.1 of the Proxmark3

November 06, 2017

This guide covers how to get started with the Proxmark3 firmware V3.0.1 on Windows, Linux and macOS.

View full article →