滚动码或许可以这样改，大神指教

yyqiang66

天府一号门禁+鑫洋V8的滚动梯控，解码之后数据是这样的：
0 扇区
0 区块:3011710F5F080400021F50FE42A2091D
1 区块:00000000000000000000000000000000
2 区块:00000000000000000000000000000000
3 区块:FFFFFFFFFFFFFF078069FFFFFFFFFFFF

1 扇区
0 区块:6CA258E96E006CBA4DC25089405E4328
1 区块:3A53E0FBDAB42DCBF12437601B58F4DD
2 区块:3B1B570900987C5F20C5273E77E07CAE
3 区块:CD275ACC5019FF078000CD275ACC5019

2 扇区
0 区块:00000000000000000000000000000000
1 区块:00000000000000000000000000000000
2 区块:00000000000000000000000000000000
3 区块:FFFFFFFFFFFFFF078069000000000000

3 扇区
0 区块:00000000000000000000000000000000
1 区块:00000000000000000000000000000000
2 区块:00000000000000000000000000000000
3 区块:FFFFFFFFFFFFFF078069FFFFFFFFFFFF

4 扇区
0 区块:00000000000000000000000000000000
1 区块:00000000000000000000000000000000
2 区块:00000000000000000000000000000000
3 区块:FFFFFFFFFFFFFF078069FFFFFFFFFFFF

5 扇区
0 区块:00000000000000000000000000000000
1 区块:00000000000000000000000000000000
2 区块:00000000000000000000000000000000
3 区块:FFFFFFFFFFFFFF078069FFFFFFFFFFFF

6 扇区
0 区块:000006121DF600001FFFFFFFFF0040FF
1 区块:01FF0000000000000000000000000000
2 区块:1D430000173B00000000000000000000
3 区块:011557788999FF078069011557788999

7 扇区
0 区块:00000000000000000000000000000000
1 区块:00000000000000000000000000000000
2 区块:00000000000000000000000000000000
3 区块:FFFFFFFFFFFFFF078069FFFFFFFFFFFF

8 扇区
0 区块:00000000000000000000000000000000
1 区块:00000000000000000000000000000000
2 区块:00000000000000000000000000000000
3 区块:FFFFFFFFFFFFFF078069FFFFFFFFFFFF

9 扇区
0 区块:00000000000000000000000000000000
1 区块:00000000000000000000000000000000
2 区块:00000000000000000000000000000000
3 区块:FFFFFFFFFFFFFF078069FFFFFFFFFFFF

10 扇区
0 区块:00000000000000000000000000000000
1 区块:00017608053716760805371676080500
2 区块:0002750B253415750B253415750B2500
3 区块:CD275ACC5019FF078000CD275ACC5019

11 扇区
0 区块:00000000000000000000000000000000
1 区块:00000000000000000000000000000000
2 区块:00000000000000000000000000000000
3 区块:FFFFFFFFFFFFFF078069FFFFFFFFFFFF

12 扇区
0 区块:00000000000000000000000000000000
1 区块:00000000000000000000000000000000
2 区块:00000000000000000000000000000000
3 区块:FFFFFFFFFFFFFF078069FFFFFFFFFFFF

13 扇区
0 区块:00000000000000000000000000000000
1 区块:00000000000000000000000000000000
2 区块:00000000000000000000000000000000
3 区块:FFFFFFFFFFFFFF078069FFFFFFFFFFFF

14 扇区
0 区块:00000000000000000000000000000000
1 区块:00000000000000000000000000000000
2 区块:00000000000000000000000000000000
3 区块:FFFFFFFFFFFFFF078069FFFFFFFFFFFF

15 扇区
0 区块:00000000000000000000000000000000
1 区块:00000000000000000000000000000000
2 区块:00000000000000000000000000000000
3 区块:FFFFFFFFFFFFFF078069FFFFFFFFFFFF
经测试，10扇区为滚动码，后来又几经测试，把10扇区数据修改为：

10 扇区
0区块:00000000000000000000000000000000
1区块:00000000000000000000000000000000
2区块:00000000000000000000000000000000
3区块:CD275ACC5019FF078000CD275ACC5019
可是母卡刷一次之后，复制卡又失效了，后来经前辈指点，可以通过修改控制区，锁定全部数据，让电梯读卡器不能修改复制卡内数据。于是又修改所有16个扇区的控制码为：（以10扇区为例，其余扇区全部都改成一样的）

10 扇区
0区块:00000000000000000000000000000000
1区块:00000000000000000000000000000000
2区块:00000000000000000000000000000000
3区块:CD275ACC5019078F0F69CD275ACC5019

经多次测试，母卡和复制卡都可以任意刷了，母卡滚动码会变，复制卡不管刷多少次，滚动码依旧是初始码。




梯控小白初次上心研究，大神请勿见笑！！




至于延期和通卡，还希望大神们指点一二，这个真心研究不出来了，跪谢！！

yyqiang66

有效期只有一天，无论怎么改都没有用，求大神告知一下

songheming

小白路过，学习中！

wangchuanchao52

花钱找人吧，分分钟钟的事

yyqiang66

wangchuanchao52 发表于 2021-1-5 10:34
花钱找人吧，分分钟钟的事

哥们你行不，帮我改改，价钱你说

tucc

感谢楼主，又学到一招对付滚动码的方法

wangchuanchao52

yyqiang66 发表于 2021-1-5 11:25
哥们你行不，帮我改改，价钱你说

肯定行。。。。。

zys2011

我的也是鑫洋V8梯控，滚动码，现在就是不知道怎么延期，同求大神指点

yangzhen

直接花钱买个软件全解决

zys2011

yangzhen 发表于 2021-1-6 21:28
直接花钱买个软件全解决

还有啥软件可以直接延期？