User:Artem HQ/sandbox/proxmark3

From Wikipedia, the free encyclopedia
proxmark3
proxmark3 version on proxmark.org
DeveloperJonathan Westhues
Release dateMay 2007 (2007-05)

proxmark3 is a multipurpose RFID tool initially created by Jonathan Westhues as his PHD project[1]. The device has a split architecture (microcontroller /FPGA) can perform many tasks with low ( 125 kHz) or high ( 13.56 MHz) frequency RFID systems such as sniffing, reading, cloning and etc. The project released under GNU General Public License and continue to develop and maintained by community. There are several hardware revisions of proxmark3 that mostly share a single code-base[2]. Proxmark 3 widely used in academic research, product development, penetration testing and other fields.


General Specifications[edit]

  • CPU : ARM, 256/512kB (AT91SAM7S256 or AT91SAM7S512) of flash memory, 64kB of RAM
  • FPGA : Xilinx Spartan-II
  • Two independent RF circuits, HF and LF
  • Power : through USB port
  • Connectivity : mini-USB port
  • User interface : one button, four LEDs.

Generations and revisions[edit]

proxmark3[edit]

The proxmark3 is an improved version of proxmarkii. Developed by Jonathan Westhues during his research of RFID systems in 2007. As he freely released full project data the devise quickly start used for finding security vulnerabilities in RFID systems, eg MIFARE Classic [3]. At the time of design, microcontrollers can't perform decent high-bandwidth signal processing of RFID protocols, so a split architecture was designed: a MCU provides the high-level functionality (cli tool, etc) while an FPGA handled the RFID. As mentioned at [1] the FPGA/MCU achitecture is technically outdated, Proxmark 3 codebase became increasingly fractured over time, resulting in hardware instabilities, so next generation devices were created.

There are multiple versions of the proxmark3 have been produced. Originally manufactured individually or in small runs, a handful of manufacturers began to commercialise the device.

Some early proxmark3 versions:[edit]

  • Original
  • XFPGA / RadioWar [2]
  • Rysc [3]
  • Elechouse [4]


Proxmark 3 RDV 2[edit]

Proxmark III RDV 2 by Chinese manufacturer Elechouse is an revised version in hardware based on the original version. It has smaller size. Antennas are pre-tuned HF and LF antennas, using the standard SMA interface instead of the USB-Hirose cables used previously. The software is compatible.[4]

Proxmark 3 RDV 2 with battery.

Technical Specifications:[edit]

  • CPU : AT91SAM7S512
  • Storage : 512Kb SPI flash
  • Interface : 4x mode LEDs, 1x button.
  • Battery : External battery connector
  • Antennas : LF Pretuned, HF Pretuned (both Removable)

Proxmark 3 Easy[edit]

The Proxmark 3 Easy was designed and produced by Elechouse, the creators of the Proxmark 3 RDV 2. It was designed as a lower-cost version of the Proxmark 3 RDV 2 specifically for domestic sales in China. It was created to be a cheaper, less capable fork of the RDV 2. Hardware changes resulted in the Proxmark 3 Easy being incapable of performing several of the Proxmark's advanced features, including the Mifare Hard-Nested attacks. [5]

Proxmark 3 EVO[edit]

The Proxmark 3 EVO, or "Evolution" is designed by Elechouse is revisited, modernised version of the Proxmark 3 RDV 2. Has a smaller size and RGB LED.[5]

Proxmark 3 Evolution.

Technical Specifications:[edit]

  • CPU : AT91SAM7S512
  • Storage : External 2MBits / 512Kb SPI flash
  • Interface : 1x RGB LED, 1x button.
  • Battery : External battery connector
  • Antennas : LF Pretuned, HF Pretuned (both Removable)


Proxmark 3 RDV4[edit]

The Proxmark 3 RDV4 is revision of the Proxmark 3 Platform designed and manufactured by RRG, a company formed by four people instrumental to the Proxmark 3 including Chris Hermann (iceman) and Kevin (0xFFFF) - both moderators of the proxmark forums.[6] The RDV 4 revision has a small size (54 x 87 x 10mm), hot-swappable mid and long range antennas, SIM/Smart card reader, also can work with BLE/Wifi modules.

Proxmark3 RDV4 kit.

Technical Specifications:[edit]

  • CPU : SAM7S512
  • Storage : External 2MBits / 256Kb SPI flash
  • Interface : 4x power LEDs, 4x mode LEDs, 1x button.
  • Performance : LF (125KHz): 70mm @ 65V, HF (13.56MHz): 88mm @ 44V


Comparison[edit]

Comparison of proxmark3 versions
Name proxmark3 original Proxmark 3 RDV 2 Proxmark 3 Easy Proxmark 3 EVO Proxmark 3 RDV4.01
Dimensions (L x W x H) approx. 150mm x 50mm approx. 150mm x 50mm 54 mm x 86.6 mm [6] 60x90x12mm 54x87x10mm
Colors Green Blue, Purple, Green, Black Vary Black Black
Interface 4x mode LEDs 4x mode LEDs 1x LED 1x RGB LED 8x LED
Processor AT91SAM7S512 / AT91SAM7S256 AT91SAM7S512 AT91SAM7S512 / AT91SAM7S256 AT91SAM7S512 SAM7S512
Speed Max 55 MHz 55 MHz 55 MHz 55 MHz 55 MHz
Memory (RAM/ROM) External None

Internal 256 - 512Kb SPI

External None

Internal 512Kb SPI

External None

Internal 256 - 512Kb SPI

External 2MBits

Internal 512Kb SPI

External 2MBits

Internal 512Kb SPI

LF Read Range 10mm - 35mm 10mm - 35mm 10mm - 35mm 40mm @ 55V 70mm @ 65V
HF Read Range 10mm - 40mm 10mm - 40mm 10mm - 40mm 50mm @ 40V 40 - 85mm @ 44V
HF Read Range (medium antenna) 90mm
HF Read Range (large antenna) 100 - 120mm
Internal Antennas yes yes
SIM/SAM Reader yes

References[edit]

  1. ^ Westhues, Jonathan (February 2009). "A Test Instrument for HF/LF RFID".
  2. ^ "Proxmark 3".
  3. ^ Digital Security Group (1 March 2008). "Security Flaw in Mifare Classic" (PDF). Radboud University Nijmegen.
  4. ^ "Proxmark 3 RDV 2".
  5. ^ "Proxmark 3 EVO".
  6. ^ "Proxmark 3 RDV4".

Category:Radio electronics Category:Digital technology Category:Radio modulation modes Category:Radio resource management Category:Radio technology Category:Receiver (radio)