Proxmark3 community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

Announcement

Time changes and with it the technology
Proxmark3 @ discord

Users of this forum, please be aware that information stored on this site is not private.

#1 2019-07-23 23:26:17

noreg0
Contributor
Registered: 2019-07-23
Posts: 5

Car PKE snooping NCF2951

Hi all,

I'm new to RF and Proxmark but some experience with SDR.

Context:
Honda odyssey 2018 with smart entry. I assume it's using some form of LF to detect the key proximity and most likely it's using this chip:
https://www.nxp.com/docs/en/brochure/75017275.pdf
When the key detects the wake-up signal (once you touch/pull the door handle) the signal gets send to the key. Once the key recognizes the signal it will respond over UHF (433Mhz) and the door opens.

Using some googling the key https://fccid.io/KR5V2X but no mention of the LF part (which makes sense as it would be in the car and not the key ?) and it mentions NCF2951 as chip.


I'm trying to basically see what is the wake-up signal that the car sends. I tried a couple of options with the proxmark client but I've had 0 success hmm

I tried:
setting up for LF and HF (lf config b 8 L t 8 and lf config H...)

I tried reading with lf read, I tried snooping with lf snoop but nothing worked. Anything I'm missing ?

Thanks !

Offline

#2 2019-07-24 17:48:15

iceman
Administrator
Registered: 2013-04-25
Posts: 9,497
Website

Re: Car PKE snooping NCF2951

Welcome and I suggest you read http://www.proxmark.org/forum/viewtopic.php?id=1125 as an introduction.

Your access rights has been updated.

Offline

Board footer

Powered by FluxBB