52梯控论坛

标题: 求助金博加密版梯控延期及开全楼层 [打印本页]

作者: cnysq 时间: 2019-12-17 19:06
标题: 求助金博加密版梯控延期及开全楼层
今天研究了一天不知道如何解密，咨询下论坛各位大神，如何更改延期及开全楼层，谢谢
0扇区
1E 4A D1 A6 23 08 04 00 01 94 1E 8E 08 07 32 1D .J薛........2.
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF .........i......

1扇区
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF .........i......

2扇区
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF .........i......

3扇区
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF .........i......

4扇区
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF .........i......

5扇区
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF .........i......

6扇区
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF .........i......

7扇区
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF .........i......

8扇区
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF .........i......

9扇区
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
F2 B4 E1 A1 A1 A1 A1 A3 A1 A6 A1 84 B7 A2 E1 A1 虼帷....发帷
00 00 00 00 FF FF FF FF 00 00 00 00 06 F9 06 F9 ...............
EE 37 93 47 EC E2 FF 07 80 00 EE 37 93 47 EC E2 .揋焘.....揋焘

10扇区
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
A1 A0 A0 A1 A1 81 A0 A0 B1 91 A1 A1 A1 A1 A1 A1 .牎.牋睉...
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
EE 37 93 47 EC E2 FF 07 80 00 EE 37 93 47 EC E2 .揋焘.....揋焘

11扇区
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF .........i......

12扇区
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF .........i......

13扇区
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF .........i......

14扇区
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF .........i......

15扇区
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF .........i......

作者: Nuclear-Atk 时间: 2019-12-17 19:39
本帖最后由 Nuclear-Atk 于 2019-12-27 19:01 编辑

9扇区
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
问题解决，删除之~~~~~~~~
00 00 00 00 FF FF FF FF 00 00 00 00 06 F9 06 F9
EE 37 93 47 EC E2 FF 07 80 00 EE 37 93 47 EC E2

10扇区
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
问题解决，删除之~~~~~~~~
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
EE 37 93 47 EC E2 FF 07 80 00 EE 37 93 47 EC E2

写卡去其他没坐过的单元楼里试试回来反馈下

作者: cnysq 时间: 2019-12-17 21:47
本帖最后由 Nuclear-Atk 于 2019-12-27 19:01 编辑

Nuclear-Atk 发表于 2019-12-17 19:39
9扇区
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
问题解决，删除之~~~~~~~~ ...

管理员老大，刚写入新卡测试，刷卡后提示卡已过期

作者: cnysq 时间: 2019-12-17 22:20
期间尝试单纯复制刷卡成功
尝试只改楼层，不修改时间依然提示卡已过期

作者: Nuclear-Atk 时间: 2019-12-17 22:27
本帖最后由 Nuclear-Atk 于 2019-12-27 19:02 编辑

9扇区
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
问题解决，删除之~~~~~~~~
00 00 00 00 FF FF FF FF 00 00 00 00 06 F9 06 F9
EE 37 93 47 EC E2 FF 07 80 00 EE 37 93 47 EC E2

10扇区
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
问题解决，删除之~~~~~~~~
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
EE 37 93 47 EC E2 FF 07 80 00 EE 37 93 47 EC E2

再改一下试试看

作者: cnysq 时间: 2019-12-17 22:41
大神留步，请让我膜拜一下，刷了后全楼层成功了
能指导下什么原理吗?再次感谢

作者: cnysq 时间: 2019-12-17 22:42
本帖最后由 Nuclear-Atk 于 2019-12-27 19:02 编辑

Nuclear-Atk 发表于 2019-12-17 22:27
9扇区
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
问题解决，删除之~~~~~~~~ ...

大神留步，请让我膜拜一下，刷了后全楼层成功了
能指导下什么原理吗?再次感谢

作者: alyssa1089 时间: 2019-12-17 22:45
学习一下！！！！！！！！！！！！

作者: sqred 时间: 2019-12-17 23:08
本帖最后由 Nuclear-Atk 于 2019-12-27 19:03 编辑

Nuclear-Atk 发表于 2019-12-17 22:27
9扇区
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
问题解决，删除之~~~~~~~~ ...

大哥能讲解一下嘛，是不是存在校验位？

作者: Nuclear-Atk 时间: 2019-12-17 23:56
本帖最后由 Nuclear-Atk 于 2019-12-17 23:59 编辑

sqred 发表于 2019-12-17 23:08
大哥能讲解一下嘛，是不是存在校验位？

不是校验位，是功能位和实际总楼层有关系
你这个是金博加密语音版能刷卡的话刷卡后女声语音提示：“刷卡成功” 卡真过期或者卡数据不符合系统设定就会女声语音提示：“卡已过期”
这种金博系统管理卡是要加白名单的，第一次给你把功能位40改为30就是改的物业管理卡，不在白名单改卡无效“卡已过期”。改回40业主卡也照样可以通小区
梯号改00通小区所有电梯。
楼层改FF，看你实际总共多少层，地下几层，一个F代表4层，按实际楼层数改对应的数量F，可按楼层改的与实际楼层相差太多也会“卡已过期”
日期没有校验直接改，但是尽量避开99年也就是2099 尽量改69 59 49 一个梯控系统也不可能用到这么多年，成年人也活不到那个时候，没必要，有的系统改99就无效，改98就可以
红色加粗部分就是我改的地方，解密后细看就懂了

作者: hjchzld 时间: 2019-12-18 07:01

作者: sqred 时间: 2019-12-18 10:23

Nuclear-Atk 发表于 2019-12-17 23:56
不是校验位，是功能位和实际总楼层有关系
你这个是金博加密语音版能刷卡的话刷卡后女声语音提示：“刷 ...

感谢解答，似乎在加密/非加密的处理上，我发现一个有趣的现象
比如上面加密的参数区，就不需要使用校验码来double check；
而下面我琢磨的非加密的明码，就好像存在校验码（也是想顺便再请教一下）
但是校验码7F有点不理解，因为我前面的数字求和，结果是7B...

BTW：假如这真是校验码的话，是不是说明一般校验与加密都是二选一？

9扇区
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
53 01 40 00 00 00 00 00 00 1F 05 1F 03 03 00 00 S...............
19 12 16 00 00 20 01 10 09 00 00 00 00 00 7F 00 ................
47 42 49 43 66 67 FF 07 80 00 47 42 49 43 66 67 GBICfg....GBICfg

10扇区
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8...............
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
47 42 49 43 66 67 FF 07 80 00 47 42 49 43 66 67 GBICfg....GBICfg

作者: Nuclear-Atk 时间: 2019-12-18 12:38
9扇区1区块 05 1F这是用户码不是校验码 03 03是房间号
2区块日期直接改校验码清零

作者: lzg6876999 时间: 2019-12-19 10:38

前来学习学习

作者: 24886924叶 时间: 2019-12-20 09:33
路过学习·

作者: lzg6876999 时间: 2019-12-20 11:04
路过学习一下。

作者: lzg6876999 时间: 2019-12-20 14:52

前来学习学习

作者: lzg6876999 时间: 2019-12-20 20:37
我是来学习的

作者: lzg6876999 时间: 2019-12-22 09:31
路过学习一下。

作者: 赵三哥 时间: 2019-12-23 08:29

sqred 发表于 2019-12-18 10:23
感谢解答，似乎在加密/非加密的处理上，我发现一个有趣的现象
比如上面加密的参数区，就不需要使用校验 ...

7F是周控制位，意思是每星期一至星期日都可以使用，把它转成二进制，0111 1111 这样是不是就很直观了，

作者: freebreak 时间: 2019-12-23 21:55
管理员和赵三哥这样的真棒，帮助新手指导一下，虽然看不懂，看多了慢慢学也能进步

作者: a89481750 时间: 2019-12-24 21:20

大佬看一下我这个我复制了你这个数据读卡没反应能给改一下吗？
0扇区
15 B1 79 F5 28 08 04 00 01 38 25 E3 8C 0D 74 1D
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

1扇区
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

2扇区
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

3扇区
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

4扇区
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

5扇区
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

6扇区
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

7扇区
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

8扇区
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

9扇区
00 00 00 00 FF FF FF FF 00 00 00 00 06 F9 06 F9
F2 A9 E1 A1 A1 A1 A1 A1 81 A1 B0 2A B4 A0 E0 A1
00 00 00 00 FF FF FF FF 00 00 00 00 06 F9 06 F9
47 42 49 43 B6 41 FF 07 80 00 47 42 49 43 B6 41

10扇区
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
B8 A4 81 A8 E9 81 A3 A0 A8 E9 A1 A1 A1 A1 A1 A1
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
47 42 49 43 B6 41 FF 07 80 00 47 42 49 43 B6 41

11扇区
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

12扇区
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

13扇区
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

14扇区
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

15扇区
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

作者: ldd185 时间: 2020-1-4 14:01
我的也是金博语音版

作者: 奔跑的旗帜 时间: 2020-2-29 18:51
学习学习········

作者: cncost 时间: 2020-4-9 14:51
学习学习········

欢迎光临 52梯控论坛 (https://52tikong.com/)