Proxmark - Revision history

PhilippeTeuwen: /* Resources */

2020-10-16T15:42:35Z

Resources

← Older revision		Revision as of 15:42, 16 October 2020
Line 232:		Line 232:

	==Resources==		==Resources==
			* https://github.com/RfidResearchGroup/proxmark3/blob/master/doc/jtag_notes.md
	* https://github.com/Proxmark/proxmark3/wiki/Debricking-Proxmark3 using a Bus Pirate		* https://github.com/Proxmark/proxmark3/wiki/Debricking-Proxmark3 using a Bus Pirate
	* "Lock Error Bit Detected, Operation Abort" ?		* "Lock Error Bit Detected, Operation Abort" ?

PhilippeTeuwen at 15:41, 16 October 2020

2020-10-16T15:41:49Z

← Older revision		Revision as of 15:41, 16 October 2020
Line 1:		Line 1:
	==Compiling==
	iceman branch has a compile flag to specify if you have a at91sam7s256 or a at91sam7s512. Proxmark3 Easy v3 is always 256kb but I've seen on the original Proxmark3 both 256kb and 512kb versions, so always check carefully the chip you have on your board.

	By default iceman branch may compile for 512kb or 256kb versions. Always check <code>common/Makefile.common</code> and adapt accordingly. E.g. if you've a 256kb version, comment out those two lines:
	<source lang=diff>
	--- a/common/Makefile.common
	+++ b/common/Makefile.common
	@@ -65,8 +65,8 @@ endif

	# uncomment these two; to fix 256 vs 512kb PM3 devices
	# flashing bootrom -b is needed
	-APP_CFLAGS += -DHAS_512_FLASH
	-COMMON_FLAGS += -DHAS_512_FLASH
	+#APP_CFLAGS += -DHAS_512_FLASH
	+#COMMON_FLAGS += -DHAS_512_FLASH
	</source>

	<source lang=bash>
	make clean
	make
	</source>
	==Upgrading ELECHOUSE Proxmark3 Easy V3 to 512k==		==Upgrading ELECHOUSE Proxmark3 Easy V3 to 512k==
	===(de)soldering===		===(de)soldering===

PhilippeTeuwen: /* Proxmark3 Easy without headers */

2017-05-29T08:38:05Z

Proxmark3 Easy without headers

← Older revision		Revision as of 08:38, 29 May 2017
Line 243:		Line 243:
	<br>I used a breakout but you can directly connect to the JLink if you prefer. You can fint the board by searching for "jlink adapter card" on aliexpress. You'll need to add a jumper to connect jlink pin2 and 3.3v.		<br>I used a breakout but you can directly connect to the JLink if you prefer. You can fint the board by searching for "jlink adapter card" on aliexpress. You'll need to add a jumper to connect jlink pin2 and 3.3v.
	===Proxmark3 Easy without headers===		===Proxmark3 Easy without headers===
			See [[Proxmark#JTAG_programming_on_Proxmark3_Easy_V3\|above]] for pinouts

	[[File:Pm3easy4.jpg\|400px]]		[[File:Pm3easy4.jpg\|400px]]
	<br>Using Dupont individual wires		<br>Using Dupont individual wires

PhilippeTeuwen: /* JTAG programming */

2017-05-29T08:37:12Z

JTAG programming

← Older revision		Revision as of 08:37, 29 May 2017
Line 43:		Line 43:
	Note that it's maybe easier to solder the new chip not by using flux+solder+iron but [https://www.aliexpress.com/wholesale?SearchText=mechanic+solder+flux solder flux paste] and heating with air gun, as shown [https://www.youtube.com/watch?v=2Z7nCAxS2Rg&t=9m30s in this video]...		Note that it's maybe easier to solder the new chip not by using flux+solder+iron but [https://www.aliexpress.com/wholesale?SearchText=mechanic+solder+flux solder flux paste] and heating with air gun, as shown [https://www.youtube.com/watch?v=2Z7nCAxS2Rg&t=9m30s in this video]...

	===JTAG programming===		===JTAG programming on Proxmark3 Easy V3===
	Then wire your JTAG programmer to the board. Mine is a Segger J-Link.		Then wire your JTAG programmer to the board. Mine is a Segger J-Link.
	<br>To make it easier, solder a [https://www.aliexpress.com/wholesale?SearchText=breakable+single+row+male+curved+header+2.54 breakable single-row male curved header].		<br>To make it easier, solder a [https://www.aliexpress.com/wholesale?SearchText=breakable+single+row+male+curved+header+2.54 breakable single-row male curved header].

PhilippeTeuwen: /* Proxmark3 Easy */

2017-05-29T08:36:02Z

Proxmark3 Easy

← Older revision		Revision as of 08:36, 29 May 2017
Line 237:		Line 237:
	<br>Apply some pressure to ensure a proper connection during the whole flashing operation		<br>Apply some pressure to ensure a proper connection during the whole flashing operation

	===Proxmark3 Easy===		===Proxmark3 Easy with headers===
	[[File:Pm3easy.jpg\|400px]] [[File:Pm3easy2.jpg\|400px]] [[File:Pm3easy3.jpg\|400px]]		[[File:Pm3easy.jpg\|400px]] [[File:Pm3easy2.jpg\|400px]] [[File:Pm3easy3.jpg\|400px]]
	<br>See above for the proper pinout.		<br>See above for the proper pinout.
	<br>If you want to solder a header, beware that there is very little space between both PCBs. It's possible to solder curved pins but without their plastic support, see pics.		<br>If you want to solder a header, beware that there is very little space between both PCBs. It's possible to solder curved pins but without their plastic support, see pics.
	<br>I used a breakout but you can directly connect to the JLink if you prefer. You can fint the board by searching for "jlink adapter card" on aliexpress. You'll need to add a jumper to connect jlink pin2 and 3.3v.		<br>I used a breakout but you can directly connect to the JLink if you prefer. You can fint the board by searching for "jlink adapter card" on aliexpress. You'll need to add a jumper to connect jlink pin2 and 3.3v.
			===Proxmark3 Easy without headers===
			[[File:Pm3easy4.jpg\|400px]]
			<br>Using Dupont individual wires

			[[File:Pm3easy6.jpg\|400px]] [[File:Pm3easy5.jpg\|400px]]
			<br>Using the same cable as shown above

	==Resources==		==Resources==
	* https://github.com/Proxmark/proxmark3/wiki/Debricking-Proxmark3 using a Bus Pirate		* https://github.com/Proxmark/proxmark3/wiki/Debricking-Proxmark3 using a Bus Pirate

PhilippeTeuwen: /* Flashing full image, take 3 */

2017-05-29T07:41:35Z

Flashing full image, take 3

← Older revision		Revision as of 07:41, 29 May 2017
Line 197:		Line 197:
	$(OBJCOPY) -Osrec --srec-forceS3 --strip-debug $(OBJCOPY_TRANSLATIONS) $^ $@		$(OBJCOPY) -Osrec --srec-forceS3 --strip-debug $(OBJCOPY_TRANSLATIONS) $^ $@
	</source>		</source>

			Update: patch applied in https://github.com/iceman1001/proxmark3/commit/d59026518e02c37ab0673a670b9ea14e17ae399c

	===Flashing full image, take 4===		===Flashing full image, take 4===

PhilippeTeuwen at 22:08, 28 May 2017

2017-05-28T22:08:53Z

← Older revision		Revision as of 22:08, 28 May 2017
Line 228:		Line 228:
	Nonvolatile Program Memory Type: Embedded Flash Memory		Nonvolatile Program Memory Type: Embedded Flash Memory
	</pre>		</pre>
	==JTAG ~~conectors~~==		==JTAG connectors==
	===Proxmark3 with headers===		===Proxmark3 with headers===
	[[File:Pm3.jpg\|400px]]		[[File:Pm3.jpg\|400px]]
Line 240:		Line 240:
	<br>If you want to solder a header, beware that there is very little space between both PCBs. It's possible to solder curved pins but without their plastic support, see pics.		<br>If you want to solder a header, beware that there is very little space between both PCBs. It's possible to solder curved pins but without their plastic support, see pics.
	<br>I used a breakout but you can directly connect to the JLink if you prefer. You can fint the board by searching for "jlink adapter card" on aliexpress. You'll need to add a jumper to connect jlink pin2 and 3.3v.		<br>I used a breakout but you can directly connect to the JLink if you prefer. You can fint the board by searching for "jlink adapter card" on aliexpress. You'll need to add a jumper to connect jlink pin2 and 3.3v.
			==Resources==
			* https://github.com/Proxmark/proxmark3/wiki/Debricking-Proxmark3 using a Bus Pirate
			* "Lock Error Bit Detected, Operation Abort" ?
			<pre>
			flash protect 0 0 15 off
			flash protect 1 0 15 off
			</pre>

PhilippeTeuwen at 21:53, 28 May 2017

2017-05-28T21:53:08Z

← Older revision		Revision as of 21:53, 28 May 2017
Line 2:		Line 2:
	iceman branch has a compile flag to specify if you have a at91sam7s256 or a at91sam7s512. Proxmark3 Easy v3 is always 256kb but I've seen on the original Proxmark3 both 256kb and 512kb versions, so always check carefully the chip you have on your board.		iceman branch has a compile flag to specify if you have a at91sam7s256 or a at91sam7s512. Proxmark3 Easy v3 is always 256kb but I've seen on the original Proxmark3 both 256kb and 512kb versions, so always check carefully the chip you have on your board.

	By default iceman branch may compile for 512kb or 256kb versions. Always check `common/Makefile.common` and adapt accordingly. E.g. if you've a 256kb version, comment out those two lines:		By default iceman branch may compile for 512kb or 256kb versions. Always check <code>common/Makefile.common</code> and adapt accordingly. E.g. if you've a 256kb version, comment out those two lines:
	<source lang=diff>		<source lang=diff>
	--- a/common/Makefile.common		--- a/common/Makefile.common
Line 161:		Line 161:
	wrote 217204 bytes from file ./recovery/proxmark3_recovery.bin in 18.417032s (11.517 KiB/s)		wrote 217204 bytes from file ./recovery/proxmark3_recovery.bin in 18.417032s (11.517 KiB/s)
	</pre>		</pre>
	This works also for restoring a `backup.bin` image dumped earlier.		This works also for restoring a <code>backup.bin</code> image dumped earlier.
	===Flashing full image, take 2===		===Flashing full image, take 2===
	Using the elf images, from the telnet session:		Using the elf images, from the telnet session:
Line 175:		Line 175:
	> flash write_image ./armsrc/obj/fullimage.s19 0x100000		> flash write_image ./armsrc/obj/fullimage.s19 0x100000
	</pre>		</pre>
	This failed when I tried because the data section seemed to be at a wrong address in `fullimage.s19`.		This failed when I tried because the data section seemed to be at a wrong address in <code>fullimage.s19</code>.

	Indeed `fullimmage.s19` loads code and data with offset 0x100000 (`flash write_image ./armsrc/obj/fullimage.s19 0x100000`):		Indeed <code>fullimmage.s19</code> loads code and data with offset 0x100000 (<code>flash write_image ./armsrc/obj/fullimage.s19 0x100000</code>):
	* code from 0x100000+0x200 to 0x100000+0x33580		* code from 0x100000+0x200 to 0x100000+0x33580
	* data from 0x100000+0x133580 to 0x100000+0x135200		* data from 0x100000+0x133580 to 0x100000+0x135200

PhilippeTeuwen at 21:50, 28 May 2017

2017-05-28T21:50:18Z

@@ Line 143: / Line 143: @@
 > flash erase_sector 0 0 15
 erased sectors 0 through 15 on flash bank 0 in 0.033260s
 > flash write_image /tmp/bootrom.s19 0x100000
 wrote 3624 bytes from file /tmp/bootrom.s19 in 0.392169s (9.024 KiB/s)
 </pre>
 * Press button and keep it pressed during the whole procedure
 * Plug PM3 to USB

PhilippeTeuwen: /* Proxmark3 without headers */

2017-05-28T19:50:13Z

Proxmark3 without headers

← Older revision		Revision as of 19:50, 28 May 2017
Line 178:		Line 178:
	===Proxmark3 without headers===		===Proxmark3 without headers===
	[[File:Pm3naked1.jpg\|400px]] [[File:Pm3naked2.jpg\|400px]]		[[File:Pm3naked1.jpg\|400px]] [[File:Pm3naked2.jpg\|400px]]
	Apply some pressure to ensure a proper connection during the whole flashing operation		<br>Apply some pressure to ensure a proper connection during the whole flashing operation

	===Proxmark3 Easy===		===Proxmark3 Easy===
	[[File:Pm3easy.jpg\|400px]] [[File:Pm3easy2.jpg\|400px]] [[File:Pm3easy3.jpg\|400px]]		[[File:Pm3easy.jpg\|400px]] [[File:Pm3easy2.jpg\|400px]] [[File:Pm3easy3.jpg\|400px]]