52梯控论坛

标题: 转：滚动码电梯卡破解有效办法 [打印本页]

作者: hua0519 时间: 2020-1-5 10:47
标题: 转：滚动码电梯卡破解有效办法
本帖最后由 hua0519 于 2020-1-6 08:39 编辑

滚动码梯控门禁破解方法
1：到淘宝上买一个M1卡全扇区加密破解器，

推荐型号。proxmark3 淘宝上一搜索一大把，然后再买好UID或者FUID或者CUID复制卡。
2：准备好母卡，确保没有在梯控或者门禁上刷过，或者母卡在设备上刷过最后一次，如果有复制过卡片刷过母卡就无效。。母卡在设备上刷过最后一次，母卡在设备上刷过最后一次，，，，，重要的事情多说两遍。
3：打开破解软件，选择好串口，

选择好串口后选择一键自动解析

4：成功后把破译文件导入到数据编辑区

5：双击红色区域

6:界面，看到控制字。

把16个扇区的控制字全部改成”078F0F69”

改好了点修改退出

把16个扇区的控制字全部改成我给出的参考值078F0F69，其它数据不要做任何的改变。

最后一步把准备好的FUID卡放在复制器的感应区，点一下克隆到FUID卡，可以复制多张卡。

警告：复制好的卡都可以在梯控门禁设备任意使用，千万不要拿母卡区门禁设备上刷，否则复制卡全部失效，最好就在复制成功后把母卡剪刀剪掉。

作者: hjchzld 时间: 2020-1-5 12:30
学习了，谢谢楼主分享。

作者: hua0519 时间: 2020-1-5 14:20

hjchzld 发表于 2020-1-5 12:30
学习了，谢谢楼主分享。

客气了，我也是看网友写的不错，转载到这里

作者: suo1234 时间: 2020-1-5 23:46
学习了！谢谢分享

作者: mianshiweb 时间: 2020-1-6 01:34
学习了！谢谢分享

作者: hua0519 时间: 2020-1-6 08:39

作者: lgshennong 时间: 2020-1-6 11:02
学习啦，楼主有没有试验过呢？要是这样就可以破解的话，不一定要pm3吧。

作者: 疾风丶 时间: 2020-1-6 11:35
学习了感谢分享

作者: 胖嘟嘟 时间: 2020-1-6 19:11
小手一抖,积分到手

作者: a120744816 时间: 2020-1-7 14:45
kankan,几份到手

作者: a120744816 时间: 2020-1-7 17:32
求大神延期
0 扇区
0 区块: 5A 0F 80 96 43 08 04 00 02 82 14 84 DC 25 56 1D
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

1 扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

2 扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

3 扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: D4 83 D0 79 BA C2 09 C4 0E 4D 0D 9C 65 60 0D 05
2 区块: 00 00 10 40 00 00 00 84 06 00 00 10 00 00 40 C0
3 区块: 5D AC 53 7E FC F8 FF 07 80 69 5D AC 53 7E FC F8

4 扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 50 00 88 07 01 C8 00 06 08 0A 08 00 00 00 04 00
2 区块: E0 E0 C0 00 C4 00 C0 00 C0 00 00 C0 04 00 C0 0C
3 区块: 5D AC 53 7E FC F8 FF 07 80 69 5D AC 53 7E FC F8

5 扇区
0 区块: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
1 区块: 3E C8 3D E8 3A 78 E4 BD A8 43 9F FA F3 70 80 FF
2 区块: 17 E8 FA 78 30 F4 F8 30 D9 FF 87 7F 5D A8 F3 E4
3 区块: 5D AC 53 7E FC F8 FF 07 80 69 5D AC 53 7E FC F8

6 扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

7 扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

8 扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

9 扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

10 扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

11 扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

12 扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

13 扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

14 扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

15 扇区
0 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2 区块: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
3 区块: FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF

作者: hua0519 时间: 2020-1-7 20:49

a120744816 发表于 2020-1-7 17:32
求大神延期
0 扇区
0 区块: 5A 0F 80 96 43 08 04 00 02 82 14 84 DC 25 56 1D

你这是不是卡达7系统啊？有软件好像能解的

作者: a120744816 时间: 2020-1-8 16:58

hua0519 发表于 2020-1-7 20:49
你这是不是卡达7系统啊？有软件好像能解的

我联系过锤子和我说是卡达7系统的

作者: hua0519 时间: 2020-1-8 19:31

a120744816 发表于 2020-1-8 16:58
我联系过锤子和我说是卡达7系统的

那就对了，软件能解的，可是滚动码是怎么解的？像我的这个，11扇区第二行是滚动吗？第三行不用考虑，验证、时间、梯号、楼层，全在第一行，但是加密过，怎么解啊，愁死人啊，找了别家的对比也没用，全是这样的乱码？同一梯号，同一楼层也没有相同的数据，可悲吧

作者: zlyzlyzlyzly 时间: 2020-2-26 14:03
小手一抖,积分到手

作者: a120744816 时间: 2020-2-28 16:53

hua0519 发表于 2020-1-7 20:49
你这是不是卡达7系统啊？有软件好像能解的

问别人说是卡达7 ，有啥软件能解的

作者: 287166966 时间: 2020-6-15 16:27
看到信息好困！！吸收很多知识

作者: liulihui 时间: 2020-7-15 19:45
你好，卡达8的滚动码能破解吗

作者: liulihui 时间: 2020-7-15 19:46
求卡达8破解，滚动梯控

作者: 红色飞虫 时间: 2020-10-9 14:23

学习了，谢谢楼主分享。

作者: 蜡梗火柴 时间: 2021-1-2 14:32
小手一抖,积分到手

欢迎光临 52梯控论坛 (https://www.52tikong.com/)