52梯控论坛

标题: 求助：延期后时间验证分析算法 [打印本页]
作者: pkalei    时间: 2019-9-1 18:34
标题: 求助：延期后时间验证分析算法
本帖最后由 pkalei 于 2019-9-1 18:44 编辑




A.B文件为分别延期后的时间及验证码变动，
B.C文件为同样延期后的时间及验证码变动。

求助：改变延期后，如何计算时间验证？


下面是A.B.C文件的数据对比


A文件名：我7-2501电梯至20190831.dump区块B文件名：我7-2501电梯至20191031.dump区块C文件名：媳妇7-2501电梯至20191031.dump
67 BC 71 3A 90 08 04 00 62 63 64 65 66 67 68 69 067 BC 71 3A 90 08 04 00 62 63 64 65 66 67 68 69 020 64 C8 AE 22 08 04 00 01 4C CC 29 58 7E 58 1D
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 100 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 100 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 200 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 200 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF 3FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF 3FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF
02 1D E5 10 12 C8 19 01 0C 00 00 00 00 80 00 00 402 1D E5 10 12 C8 19 01 0C 00 00 00 00 80 00 00 402 1D E5 10 12 CE 19 01 0C 00 00 00 00 80 00 00
00 00 00 26 F5 27 1F 00 00 00 00 00 00 39 00 09 500 00 00 26 F5 27 5F 00 00 00 00 00 00 F9 00 09 500 00 00 26 F5 27 5F 00 00 00 00 00 00 9B 00 09
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 600 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 600 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
B7 4D B0 C0 5E 1D FF 07 80 00 B7 4D B0 C0 5E 1D 7B7 4D B0 C0 5E 1D FF 07 80 00 B7 4D B0 C0 5E 1D 7F0 95 09 54 EE AD FF 07 80 00 F0 95 09 54 EE AD
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 800 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 800 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 900 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 900 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1000 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1000 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF 11FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF 11FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1200 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1200 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1300 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1300 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1400 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1400 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF 15FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF 15FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1600 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1600 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1700 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1700 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1800 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1800 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF 19FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF 19FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2000 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2000 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2100 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2100 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2200 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2200 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF 23FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF 23FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2400 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2400 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2500 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2500 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2600 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2600 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF 27FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF 27FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2800 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2800 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2900 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2900 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3000 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3000 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF 31FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF 31FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3200 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3200 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3300 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3300 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3400 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3400 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF 35FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF 35FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3600 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3600 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3700 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3700 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3800 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3800 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF 39FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF 39FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4000 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4000 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4100 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4100 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4200 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4200 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF 43FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF 43FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4400 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4400 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4500 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4500 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4600 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4600 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF 47FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF 47FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4800 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4800 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4900 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4900 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 5000 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 5000 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF 51FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF 51FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 5200 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 5200 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 5300 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 5300 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 5400 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 5400 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF 55FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF 55FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF
0C 08 19 10 05 23 00 01 00 01 00 00 00 00 00 00 560C 08 20 12 31 23 00 01 00 01 00 00 00 00 00 00 560C 08 20 08 15 23 00 01 00 01 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 5700 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 5700 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 FF FF FF FF FF FF C4 B9 5800 00 00 00 00 00 00 00 FF FF FF FF FF FF C4 B9 5800 00 00 00 00 00 00 00 FF FF FF FF FF FF F9 51
FF FF FF FF FF 99 FF 07 80 69 FF FF FF FF FF 99 59FF FF FF FF FF 99 FF 07 80 69 FF FF FF FF FF 99 59FF FF FF FF FF 99 FF 07 80 69 FF FF FF FF FF 99
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6000 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6000 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6100 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6100 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6200 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6200 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF 63FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF 63FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF


作者: pkalei    时间: 2019-9-1 18:43
本帖最后由 pkalei 于 2019-9-2 10:09 编辑

另外请教下门禁卡问题
我改动前
0C 08 19 10 05 23 00 01 00 01 00 00 00 00 00 00               
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00               
00 00 00 00 00 00 00 00 FF FF FF FF FF FF C4 B9               
我改动后
0C 08 20 12 31 23 00 01 00 01 00 00 00 00 00 00            
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00              
00 00 00 00 00 00 00 00 FF FF FF FF FF FF C4 B9            
媳妇改动后（19年直接改成20年可用）
0C 08 20 08 15 23 00 01 00 01 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 FF FF FF FF FF FF F9 51

原来只要改动红色区域就可以，

媳妇改动后可以正常使用，

我的原来随便改可以用，现在改动后不行了，

最近门卫换了进出双向门，跟这有关系吗，
还是我的数据有问题了，蓝色位现在也需要变动
作者: 胆小的鱼    时间: 2019-9-1 19:42
看数据，这个像是康拓的梯控。
如何计算校验，这个真不会呀，只会用软件计算
作者: pkalei    时间: 2019-9-1 19:58
胆小的鱼 发表于 2019-9-1 19:42
看数据，这个像是康拓的梯控。
如何计算校验，这个真不会呀，只会用软件计算

00 00 00 26 F5 C7 9F 00 00 00 00 00 00 6D 00 09

00 00 00 26 F5 C7 9F 00 00 00 00 00 00 43 00 09

有朋友做过改成截止99年12月31日，但给的两个验证位同样无效。

哪位大神能帮给算算
作者: 名人凡客    时间: 2019-9-1 22:32
刷卡电梯什么反应
作者: 名人凡客    时间: 2019-9-1 22:34
我觉得应该让你的朋友给你发卡再延期，那样滚动码好弄
作者: kevinlam    时间: 2019-9-2 08:23
康拓梯控的校验和卡号相关
延期到2099.12.31
你的卡
1扇区
1区块：00000026F5C79F000000000000D90009
你媳妇的卡
1扇区
1区块：00000026F5C79F0000000000007B0009
作者: pkalei    时间: 2019-9-2 08:25
名人凡客 发表于 2019-9-1 22:32
刷卡电梯什么反应

改动时间和验证位后，刷卡会两声错误提示
作者: pkalei    时间: 2019-9-2 08:27
名人凡客 发表于 2019-9-1 22:34
我觉得应该让你的朋友给你发卡再延期，那样滚动码好弄

这不是滚动码，是校验码，刷卡数据不变动
作者: pkalei    时间: 2019-9-2 09:31
kevinlam 发表于 2019-9-2 08:23
康拓梯控的校验和卡号相关
延期到2099.12.31
你的卡

已测试，我的卡已可用，媳妇的未测试，应该也能用。

此方法思路正确，

就是不知道验证位跟卡号和时间位是如何异或转换计算出的，烧脑
作者: pkalei    时间: 2019-9-2 09:46
本帖最后由 pkalei 于 2019-9-2 10:08 编辑
kevinlam 发表于 2019-9-2 08:23
康拓梯控的校验和卡号相关
延期到2099.12.31
你的卡

另外请教下门禁卡问题
我改动前
0C 08 19 10 05 23 00 01 00 01 00 00 00 00 00 00        56        
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00        57        
00 00 00 00 00 00 00 00 FF FF FF FF FF FF C4 B9        58        
我改动后
0C 08 20 12 31 23 00 01 00 01 00 00 00 00 00 00        56        
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00        57        
00 00 00 00 00 00 00 00 FF FF FF FF FF FF C4 B9        58        
媳妇改动后（19年直接改成20年可用）
0C 08 20 08 15 23 00 01 00 01 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 FF FF FF FF FF FF F9 51

原来只要改动红色区域就可以，

媳妇改动后可以正常使用，

我的原来随便改可以用，现在改动后不行了，

最近门卫换了进出双向门，跟这有关系吗，
还是我的数据有问题了，蓝色位现在也需要变动
作者: kevinlam    时间: 2019-9-2 15:21
pkalei 发表于 2019-9-2 09:46
另外请教下门禁卡问题
我改动前
0C 08 19 10 05 23 00 01 00 01 00 00 00 00 00 00        56        
...

你去物业延期试试58行C4 B9是不是跟日期一起变化，那样的话，C4 B9 是日期的校验码，但我个人认为你媳妇的卡直接改动可用，应该就是直接改日期就可以。
作者: pkalei    时间: 2019-9-2 17:32
本帖最后由 pkalei 于 2019-9-2 17:37 编辑
kevinlam 发表于 2019-9-2 15:21
你去物业延期试试58行C4 B9是不是跟日期一起变化，那样的话，C4 B9 是日期的校验码，但我个人认为你媳妇 ...

中午拿媳妇卡试了下也不能用了，估计物业调系统了。

从物业那重新刷了门禁卡，下面数据

0区块:0C082006212300010001000000000000
1区块:00000000000000000000000000000000
2区块:0000000000000000FFFFFFFFFFFF73A6
3区块:FFFFFFFFFF99FF078069FFFFFFFFFF99

红色日期变了，蓝色验证也变了。

把这段复制到我媳妇卡上，她那卡也能用，（卡号无关联）刷卡数据无变化，应该是单纯的时间验证

如果把红色日期也改成99年12月31日，蓝色部分应该怎么改，

求解惑
作者: pkalei    时间: 2019-9-2 18:13
kevinlam 发表于 2019-9-2 15:21
你去物业延期试试58行C4 B9是不是跟日期一起变化，那样的话，C4 B9 是日期的校验码，但我个人认为你媳妇 ...

又从存档数据里找了2段原始数据

14 扇区
0区块:0C081910052300010001000000000000
1区块:00000000000000000000000000000000
2区块:0000000000000000FFFFFFFFFFFFC4B9
3区块:FFFFFFFFFF99FF078069FFFFFFFFFF99

这段19年10月5日到期，验证码正确，刷卡可用正常。

14 扇区
0区块:0C081908152300010001000000000000
1区块:00000000000000000000000000000000
2区块:0000000000000000FFFFFFFFFFFFF951
3区块:FFFFFFFFFF99FF078069FFFFFFFFFF99

这段截止19年8月15日，刷卡已无效，验证码应该正确，已无法验证。
（8月底前可用，随便改日期，现在需要验证码匹配）

门禁卡没有关联着卡号，可以互相复制，也不是计次卡，刷卡多次无数据变化，应该是单纯的时间验证

试了几种方法没有找到这三段时间数据和验证数据的对应规律，

算法跟A.B密码有没有关系，控制位感觉无关系。

“0C08”和“2300010001”这两段数据也不知道什么意思，其它楼层也一样

求解惑



欢迎光临 52梯控论坛 (https://52tikong.com/) Powered by Discuz! X3.4