ProxmarkPro - General Tag Operations - Getting Started

October 15, 2019

This is one section of the full ProxmarkPro Getting Started guide. You can find a PDF copy of the entire guide here.

Each supported tag has a submenu located under the LF or HF menus. These menus will typically include Read, Replay and Save operations. Once a tag is read, it is saved in memory as the current tag. At any time, the current tag can be replayed or saved using the menu. A saved tag can also be loaded from storage (SD Card) as the current tag.

General Tag Operations

Menu Option	Description
	Read a tag into memory and make it the current tag.
	Save the current tag onto the SD card. If there is no current tag, attempt to read the tag and save it. Saved tags will be stored under a directory bearing the name of the tag type (e.g. HID, EM4100). Filenames are automatically generated.
	Simulate the current tag for an external reader.
	Make a physical clone of the current tag. Before invoking, bring the physical target tag in-field of the antenna. For example, this function can be used to clone the current tag onto a T55x7 tag.
	Attempt to guess a valid tag by simulating some portion of the search space. This is only implemented for HID Tags.

Identifying a Tag

The ProxmarkPro is handy for quickly identifying an unknown tag. Before proceeding, ensure the appropriate antenna is connected.


Scroll through the main menu and select LF or HF by pressing →	Press → to select Identify	The device is now searching for tags. Bring the tag toward the antenna and let the ProxmarkPro attempt to identify it.	If successful, you will see confirmation on-screen that a tag has been recognized.

Once a tag has been recognized, press → to jump to the corresponding submenu where various tag-specific operations can be performed.

Saving and Loading Tags

The SD card used to store tags must be formatted with the FAT file system. Note that long file names are not supported. The ProxmarkPro will store tags under directories corresponding to the type of tag (e.g. HID, EM4100). When a tag is saved it is automatically named according to the format TAGN.txt. Where N is a serial number.


Select Load Tag by pressing →	Navigate to the tag type and press →	Select the desired tag by pressing →	Note the on-screen confirmation that the tag has loaded successfully. This is now the current tag. Press → to access the corresponding tag menu.

Stored tags can be renamed by ejecting the SD card, inserting it into a PC, browsing the card and renaming the target file to something more memorable.

Replaying a Tag

With a tag loaded you can now simulate the current tag for an external reader.


Scroll through the main menu and select LF or HF by pressing →	Press → to select Replay	Your Tag will now replay until stopped.	Press the ← to stop replaying. This will take you back to the previous menu.

Brute

Attempt to guess a valid HID tag by simulating some portion of the search space.


Scroll through the main menu and select LF or HF by pressing →	Press → to select Brute.	Configure your Brute by changing the Method, Format, Facility Code, Card Number, Duration, and Delay.	When done configuring click Start.