Proxmark3 community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

Announcement

Time changes and with it the technology
Proxmark3 @ discord

Users of this forum, please be aware that information stored on this site is not private.

#1 2020-05-30 09:48:30

adameng
Contributor
Registered: 2020-04-15
Posts: 20

sniff the LF 125khz communication from the car to the keyfob (NCF2951)

I would like to sniff the LF 125khz communication from the car to the keyfob (NCF2951 transponder), which uses OOK modulation with Manchester encoding at 3.9 kbaud.

The structure of the message that the car sends out is described on page 53 of https://smallpdf.com/shared#st=0dd4a89d … nt&rf=link.

Which settings should I use on the proxmark to sniff and demodulate these messages?

Offline

#2 2020-07-09 23:56:38

batman192
Contributor
Registered: 2019-07-16
Posts: 24

Re: sniff the LF 125khz communication from the car to the keyfob (NCF2951)

Honestly, I think that attempting this with a proxmark is going to be very tough.

Are you certain that the frequency of the keyfob communication is 125khz? The PDF link you sent expired so I couldn't take a look

Even if the frequency is indeed 125khz, I don't think the range of the antenna wouldn't be nearly good enough to capture the signal, even with the key fob right next to the door.

You may want to look into a Software-Defined Radio (SDR) solution that can receive and transmit on the keyfob frequencies, such as a HackRF or YARD Stick One.

Last edited by batman192 (2020-07-11 17:34:43)

Offline

Board footer

Powered by FluxBB