求大神帮忙分析，日期已更改，猜测4扇区2区块为滚码。想问滚码初始码和改楼层

xubinde21

0扇区
0 区块: 7E 16 46 9F B1 08 04 00 00 08 61 33 16 42 28 80
1 区块: 04 A4 00 C4 17 06 1E 0E 08 00 27 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

1扇区
0 区块: 07 E5 12 08 07 E5 12 08 0C 7D 12 06 0C 7D 12 06
1 区块: 0C 7D 12 06 0C 7D 12 06 0C 7D 12 06 0C 7D 12 06
2 区块: 0C 7D 12 06 0C 7D 12 06 0C 7D 12 06 0C 7D 12 06
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

2扇区
0 区块: 27 96 12 03 07 C2 12 0B 23 32 12 03 F1 36 12 07
1 区块: 24 48 15 07 08 01 17 0C 08 A0 12 06 F1 50 12 04
2 区块: 08 9E 16 07 28 68 12 0B 08 B0 15 03 14 02 12 07
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

3扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

4扇区
0 区块: 00 1B 16 00 00 00 00 00 00 00 00 00 00 00 00 99
1 区块: 10 03 00 27 00 28 00 00 01 23 11 04 12 03 09 99
2 区块: 1B 53 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: 21 01 06 75 11 04 FF 07 80 69 21 01 06 75 11 04

5扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

6扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

7扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

8扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

9扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

10扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

11扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

12扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

13扇区
0 区块: 00 11 01 00 00 25 11 05 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: D2 BB C3 F9 CC EC FF 07 80 69 D2 BB C3 F9 CC EC

14扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 21 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: D2 BB C3 F9 CC EC FF 07 80 69 D2 BB C3 F9 CC EC

15扇区
0 区块: 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: D2 BB C3 F9 CC EC FF 07 80 69 D2 BB C3 F9 CC EC

水心游侠

楼层可以直接改吧……一般楼层不会牵扯滚动码或者校验码的。至于滚动初始码…… 你去物业重置一下，就知道了。

xubinde21

水心游侠 发表于 2023-7-11 10:41
楼层可以直接改吧……一般楼层不会牵扯滚动码或者校验码的。至于滚动初始码…… 你去物业重置一下，就知道 ...

楼层我猜是15扇区，但我改后依然不能用。物业手里有个激活卡，一旦不好使时物业会到电梯刷卡处激活卡，但激活后我第一时间记录了滚动码，但是可能激活后又刷了一次，又变了。不刷我又回不了家，哈哈，头疼。

水心游侠

…… 那你用初始数据覆盖就行了呀。

xubinde21

水心游侠 发表于 2023-7-11 11:00
…… 那你用初始数据覆盖就行了呀。

我是复制了一张卡，然后把时间改了，但再改楼层时虽然数据改了，但是电梯还是到指定楼层。现在我不用原卡，因为最新的滚码已经再复制卡上了。

水心游侠

原卡没刷过的话，那上面的数据就是初始数据。梯控读头会自动重新计数的。所以你保存好原卡数据就行了。复制卡可以随便改着试，滚动码的数据就用原卡数据覆盖回去。

xubinde21

水心游侠 发表于 2023-7-11 11:07
原卡没刷过的话，那上面的数据就是初始数据。梯控读头会自动重新计数的。所以你保存好原卡数据就行了。复制 ...

谢谢，我灵机一动。我现在复制的卡能用，然后我再复制一个，然后把滚动码改了，然后试，试成功了就说明是原始码，就破解了。您能帮我看看4扇区2区块的滚码从何改起。好像只有前1B 53 变化，我改过10 00不行，改过00 00不行。

fsjt7910

检测到以下信息

13 扇区
00 11 01 00 00 25 11 05 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
D2 BB C3 F9 CC EC FF 07 80 69 D2 BB C3 F9 CC EC

14 扇区
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 21 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
D2 BB C3 F9 CC EC FF 07 80 69 D2 BB C3 F9 CC EC

一鸣天门禁

到期时间：2025.11.05

水心游侠

xubinde21 发表于 2023-7-11 11:19
谢谢，我灵机一动。我现在复制的卡能用，然后我再复制一个，然后把滚动码改了，然后试，试成功了就说明是 ...

破解滚码的话，得专用卡。不是只有滚动初始码就行的。

xubinde21

水心游侠 发表于 2023-7-11 11:32
破解滚码的话，得专用卡。不是只有滚动初始码就行的。

谢谢，那我就不想复制卡的问题，研究下楼层问题吧，谢谢