52梯控论坛

标题: 康拓2复制cuid后刷卡长滴 [打印本页]
作者: 571037887    时间: 2021-2-28 02:39
标题: 康拓2复制cuid后刷卡长滴
我是康拓2+鼎博门禁，复制cuid后去刷电梯，电梯长滴，刷完cuid的0扇区uid那行被电梯清零，这是怎么回事？用pn532写入模拟了空白卡的小米手机，刷电梯没反应，刷门禁可以，另一部OPPO电梯门禁都可以。搞得我很郁闷求各位大佬指点一二，下面是我改了延期的数据截图，只有0，1，3扇区是加密的。
作者: 571037887    时间: 2021-2-28 02:40
扇区0   C04D7301FF0804000274506990DB111D 00000000000000000000000000000000 00000000000000000000000000000000 FFFFFFFFFFFFFF078069FFFFFFFFFFFF
作者: 571037887    时间: 2021-2-28 02:41
扇区10218F8101BB907012A00000000000107 00000028BD799D000000000010220008 00000000000000000000000000000000 10BCB2FB6A29FF07800010BCB2FB6A29
作者: 571037887    时间: 2021-2-28 02:41
扇区3   01C41100000000000100000000000000 00000000000000000000000000000000 000000000000000014051D3C0C1F0000 AF3D027330D3FF07806950C2FD8CCF2C
作者: 13664600428    时间: 2021-2-28 03:12
康拓要用M1卡才行
作者: 571037887    时间: 2021-2-28 08:16
13664600428 发表于 2021-2-28 03:12
康拓要用M1卡才行

大佬，你知道我的两部手机写入后，一个能用一个不能用是咋回事不
作者: 13664600428    时间: 2021-2-28 08:30
本帖最后由 13664600428 于 2021-2-28 08:32 编辑
571037887 发表于 2021-2-28 08:16
大佬，你知道我的两部手机写入后，一个能用一个不能用是咋回事不

一般手机都是模拟的M1卡，其中一部手机梯控不能用，如果写入的数据没有错误的话，就有能是康拓系统开启了滚动，而你先刷的是另一部手机。两部手机都重新发卡写入，再试试！仅供参考
作者: 571037887    时间: 2021-2-28 08:46
13664600428 发表于 2021-2-28 08:30
一般手机都是模拟的M1卡，其中一部手机梯控不能用，如果写入的数据没有错误的话，就有能是康拓系统开启了 ...

我每次都是往手机里刷最新的滚动数据，小米手机刷完电梯一点反应都没有，对了大佬，我在研究发卡，我这个数据用分析软件分析后没提示一卡一密，我还需要计算卡号key不，发卡序号有英文字母不知道咋改，用什么软件换算，校验计算软件我有。
作者: 13664600428    时间: 2021-2-28 09:20
571037887 发表于 2021-2-28 08:46
我每次都是往手机里刷最新的滚动数据，小米手机刷完电梯一点反应都没有，对了大佬，我在研究发卡，我这个 ...

康拓系统都是一卡一密的，需要计算卡密和校验位，收费软件才能做。建议买个锤子解密器，可以做很多系统。
作者: 571037887    时间: 2021-2-28 10:52
本帖最后由 571037887 于 2021-2-28 10:57 编辑
13664600428 发表于 2021-2-28 09:20
康拓系统都是一卡一密的，需要计算卡密和校验位，收费软件才能做。建议买个锤子解密器，可以做很多系统。

大佬下面是我计算的发卡数据，滚动码我改0了，发卡号根据原卡瞎改的，受累帮我看看卡密什么的对不对
第一张发卡数据：
0 扇区
0 区块: 9C 7B 89 32 5C 08 04 00 02 74 50 69 90 DB 11 1D
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

1 扇区
0 区块: 02 18 F8 10 3D D9 07 01 2A 00 00 00 00 00 01 07
1 区块: 00 00 00 28 BD 79 9D 00 00 00 00 00 00 95 00 08
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: 8E 4F DF 4A EB 23 FF 07 80 69 8E 4F DF 4A EB 23

2 扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

3 扇区
0 区块: 99 C4 11 00 00 00 00 00 01 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 14 05 1D 3C 0C 1F 00 00
3 区块: 9D 79 8A 36 30 68 FF 07 80 69 62 86 75 C9 CF 97

4 扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: 9D 79 8A 36 30 68 FF 07 80 69 62 86 75 C9 CF 97

5 扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

6 扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

7 扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

8 扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

9 扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

10 扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

11 扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

12 扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

13 扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

14 扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

15 扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

第二张发卡数据：
0 扇区
0 区块: 9A 13 5A BD 6E 08 04 00 62 63 64 65 66 67 68 69
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

1 扇区
0 区块: 02 18 F8 10 3B B8 07 01 2A 00 00 00 00 00 01 07
1 区块: 00 00 00 28 BD 79 9D 00 00 00 00 00 00 84 00 08
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: 88 27 0C C5 83 F0 FF 07 80 69 88 27 0C C5 83 F0

2 扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

3 扇区
0 区块: 88 C4 11 00 00 00 00 00 01 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 14 05 1D 3C 0C 1F 00 00
3 区块: 6B D5 C0 0D 30 43 FF 07 80 69 94 2A 3F F2 CF BC

4 扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: 6B D5 C0 0D 30 43 FF 07 80 69 94 2A 3F F2 CF BC

5 扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

6 扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

7 扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

8 扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

9 扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

10 扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

11 扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

12 扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

13 扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

14 扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

15 扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

作者: 13664600428    时间: 2021-2-28 11:10
571037887 发表于 2021-2-28 10:52
大佬下面是我计算的发卡数据，滚动码我改0了，发卡号根据原卡瞎改的，受累帮我看看卡密什么的对不对
第 ...

我帮你看了，数据应该没啥问题，一个小小的建议，把发卡号尽量改的大一些，防止跟物业原有的卡冲突而不能使用，最起码以B开头“BX XX”，一般情况下物业发卡号发不到这么大，比较把握一些。
作者: 571037887    时间: 2021-2-28 11:21
13664600428 发表于 2021-2-28 11:10
我帮你看了，数据应该没啥问题，一个小小的建议，把发卡号尽量改的大一些，防止跟物业原有的卡冲突而不能 ...

感谢您的指点，再多嘴问问这个发卡号用什么可以像日期那样换算
作者: 13664600428    时间: 2021-2-28 11:32
本帖最后由 13664600428 于 2021-2-28 11:41 编辑
571037887 发表于 2021-2-28 11:21
感谢您的指点，再多嘴问问这个发卡号用什么可以像日期那样换算

随便改，0~F,16个十六进制数字随意组合。发卡号就是发卡的顺序号，改完后去测试，用实践去检验。
作者: 力量源泉    时间: 2021-2-28 13:26
2020.5.29到2060.12.29
作者: wangchuanchao52    时间: 2021-2-28 20:47
又来白嫖的，买个锤子想咋改就咋改
作者: wangchuanchao52    时间: 2021-2-28 20:48
又来白嫖了，买个锤子想咋改咋改
作者: 571037887    时间: 2021-3-2 12:08
13664600428 发表于 2021-2-28 11:32
随便改，0~F,16个十六进制数字随意组合。发卡号就是发卡的顺序号，改完后去测试，用实践去检验。

可惜写到m1卡上，刷电梯一点反应都没有。不知道是我计算的key问题还是什么
作者: 13664600428    时间: 2021-3-2 16:10
发卡数据的卡号要和M1卡的卡号有要一致才行。
作者: 571037887    时间: 2021-3-2 17:39
13664600428 发表于 2021-3-2 16:10
发卡数据的卡号要和M1卡的卡号有要一致才行。

后来成功了，我可以自己发卡了，但是鼎博门禁没成功
作者: 13664600428    时间: 2021-3-2 20:11
571037887 发表于 2021-3-2 17:39
后来成功了，我可以自己发卡了，但是鼎博门禁没成功

鼎博门禁简单一些，一卡一密的，你自己改一下。
作者: hbt2hbt    时间: 2021-3-12 14:59
下载，慢慢学习
作者: hbzhanghui    时间: 2021-3-14 22:39

路过，学习下
作者: qd_software    时间: 2022-8-22 13:39
这个帖子不错，学到了



欢迎光临 52梯控论坛 (https://52tikong.com/) Powered by Discuz! X3.4