11:18 AM 2/21/2011 RESOLVED: * used proxmark3-r465 * pushed s19 not elf * pushed all compiled ( type make in the bootrom folder to compile the bootrom ) * rebooted the proxmark * not sure what fixed it but this works for me :) * the proxbrute pre compiled did NOT work with my pm3 /osimage-proxbrute-v0.3.elf BUGS: --------------- svn co [url]http://proxmark3.googlecode.com/svn/trunk[/url] proxmark3-read-only Checked out revision 468. MPFR=http://ftp.gnu.org/gnu/mpfr/mpfr-2.4.2.tar.bz2 #MPFR=http://mpfr.loria.fr/mpfr-current/mpfr-${MPFR_VER}.tar.bz2 --------- # cfg.cfg for OpenOCD [code] source [find /usr/local/share/openocd/scripts/interface/olimex-jtag-tiny.cfg] source [find /usr/local/share/openocd/scripts/target/sam7x256.cfg] telnet_port 4444 [/code] [code] export PATH=${PATH}:/home/bt/p/devkitARM/bin /usr/local/bin/openocd -f /home/bt/stm32-tools/OpenOCD/cfg.cfg flash write_image /home/bt/proxymark/proxmark3-r465/armsrc/obj/fpgaimage.s19 0x00100000 flash write_image /home/bt/proxymark/proxmark3-r465/armsrc/obj/osimage.s19 0x00100000 flash write_image /home/bt/proxymark/proxmark3-r465/bootrom/obj/bootrom.s19 0x00100000 /home/bt/proxymark/3/pm3-20090713-r52/linux/proxmark3 [/code] [code] proxmark3> #db# Stand-alone mode! No PC necessary. #db# Starting recording #db# TAG ID: 20******23 (1553) #db# Recorded 0 20 *****23 #db# [ProxBrute] In Mode Red, Copying read tag to Ora #db# Playing #db# Red is lit, not entering ProxBrute Mode #db# 0 20 *****23 #db# Stopped #db# Done playing #db# Starting recording #db# TAG ID: 20******23 (1553) #db# Recorded 1 20 *****23 #db# Playing #db# Entering ProxBrute Mode #db# brad a. - foundstone #db# Current Tag: Selected = 1 Facility = 00000020 ID #db# Trying Facility = 00000020 ID ******22 #db# Stopped #db# Trying Facility = 00000020 ID ******21 #db# Stopped #db# Trying Facility = 00000020 ID ******20 #db# Stopped #db# Trying Facility = 00000020 ID ******1f #db# Stopped #db# Trying Facility = 00000020 ID ******1e #db# Stopped #db# Trying Facility = 00000020 ID ******1d #db# Stopped #db# Trying Facility = 00000020 ID ******1c #db# Stopped #db# Trying Facility = 00000020 ID ******1b #db# Stopped #db# Trying Facility = 00000020 ID ******1a #db# Stopped #db# Trying Facility = 00000020 ID ******19 #db# Stopped #db# Trying Facility = 00000020 ID ******18 #db# Stopped #db# Trying Facility = 00000020 ID ******17 #db# Stopped #db# Trying Facility = 00000020 ID ******16 [/code] [code] ## random notes and urls export PATH=${PATH}:/home/bt/p/devkitARM/bin /home/bt/p/proxbrute-bundle-v0.3/osimage-proxbrute-v0.3.elf NOTES: apt-get install automake texinfo http://fun-tech.se/stm32/OpenOCD/index.php http://pauldotcom.com/wiki/index.php/Episode229#Standard_Proxmark3_Cloning http://www.proxmark.org/forum/topic/302/problem-with-jtag-connector/ http://www.google.com/codesearch/p?hl=en#GeX5Y-h0Grc/trunk/tools/at91sam7s256-armusbocd-flash-program.cfg&q=olimex%20package:http://proxmark3\.googlecode\.com&sa=N&cd=2&ct=rc http://www.proxmark.org/forum/post/3602/#p3602 http://www.proxmark.org/forum/post/3602/#p3602 export ARMLIB=/home/bt/gnuarm/lib/gcc/arm-elf/4.3.3/interwork export PATH=${PATH}:/home/bt/gnuarm/bin/ http://www.proxmark.org/forum/topic/294/flashing-with-openocd/ http://dl.packetstormsecurity.net/papers/general/proxbrute-proxcard.pdf lsusb Bus 002 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub Bus 001 Device 002: ID 15ba:0004 Olimex Ltd. OpenOCD JTAG TINY Bus 001 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub root@bt:~/proxymark/proxmark3-read-only# locate *.cfg | xargs grep "Olimex" /home/bt/proxymark/proxmark3-read-only/tools/at91sam7s256-armusbocd-flash-program.cfg:#commands specific to the Olimex ARM-USB-OCD Dongle /home/bt/proxymark/proxmark3-read-only/tools/at91sam7s256-armusbocd-flash-program.cfg:ft2232_device_desc "Olimex OpenOCD JTAG" /home/bt/proxymark/proxmark3-read-only/tools/at91sam7s256-armusbocd.cfg:#commands specific to the Olimex arm-usb-ocd /home/bt/proxymark/proxmark3-read-only/tools/at91sam7s256-armusbocd.cfg:ft2232_device_desc "Olimex OpenOCD JTAG" [/code]