151

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

Original
http://soliforum.com/i/?3J20794.png
http://soliforum.com/i/?80GWkZg.png

138Meter
http://soliforum.com/i/?SgKAop8.png
http://soliforum.com/i/?XcAleQW.png

152

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

Kawareiter wrote:

Hello Cgrillo,

Yes, the Card was in the Printer.
No, it is not emty, it have 138m/200m.

Yesterday i reading the Card and see this:
14: D41D0200
15: 9C0F3054
16: CCA1E1CE
17: E6904876
At the Spool are 138 Meters Filament.


This are the original Setting of the Card before first using:

14: 400D0300
15: 081F3154
16: 50B1E0CE
17: 52E74F76

0A: 400D0300
0B: 400D0300



Then i write the original Setting on the Card.

With this Data says the Davinci:

The spool is not recognized!


I think the Problem is the Firmware. The Printer is a Da Vinci Junior 3in1 with scanner and WLAN.
Firmware Number is 1.0.5. and the Device is buyed in Dezember 2016.

Thank you vor Helping
Christian

Yes, I agree it is probably the firmware stopping you refilling cards.
You can wither tag swap once it's empty (or very low as emptying it may get the card locked)
or buy an EMUTAG.

153

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

Can you reset a printer on version 2.2.7 with an EMUTAG? I might buy one if I'm able to do that.

154

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

@freefloater

You can't reset nothing with an EMUTAG. What you will be able to do is to emulate TAGS with the data already extracted by some forum members.

XYZ Junior/Mini Passwords Thread
If you are in a hurry and need your password NOW, or if it takes me too long for you, you can read the posts from 1851. I'm not going to be as effective as Bozo or Cgrillo, but you can give a try with me. If PASSWORDS thread follow it's current flow: asking for repeated passwords, not returning or false PACKS... I will end up with it as others before me.

155

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

Hey!

New to this form, I read the first portion of this thread and was curious.  Is there a way to simply write the NFC data from an existing filament spool into something like an ntag213 sticker rather than using a more expensive emutag? I haven't really explored the idea of rewriting a tag with the concept.  But the cost of something like a roll of stickers is considerably cheaper than an emutag.

156

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

woogerboy21 wrote:

Hey!

New to this form, I read the first portion of this thread and was curious.  Is there a way to simply write the NFC data from an existing filament spool into something like an ntag213 sticker rather than using a more expensive emutag? I haven't really explored the idea of rewriting a tag with the concept.  But the cost of something like a roll of stickers is considerably cheaper than an emutag.

In short - no.

The card password and more importantly PACK code are derived from the card uid.
The card uid is fixed and cannot be changed on normal NTAG cards - it can on an EMUTAG.

157

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

cgrillo wrote:
woogerboy21 wrote:

Hey!

New to this form, I read the first portion of this thread and was curious.  Is there a way to simply write the NFC data from an existing filament spool into something like an ntag213 sticker rather than using a more expensive emutag? I haven't really explored the idea of rewriting a tag with the concept.  But the cost of something like a roll of stickers is considerably cheaper than an emutag.

In short - no.

The card password and more importantly PACK code are derived from the card uid.
The card uid is fixed and cannot be changed on normal NTAG cards - it can on an EMUTAG.

Thanks for the quick reply.  Even more reason to see if I can help the process out in any fashion.
Another quick question.  I've seen lots of talk about circumventing the filament products and only a small blurb about attacking the actual printer itself.  Is there any threads on discussions on what has been done to look at the operations of the printer?  Clearly the printer is storing the existing NFC UID's some were.

158

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

woogerboy21 wrote:
cgrillo wrote:
woogerboy21 wrote:

Hey!

New to this form, I read the first portion of this thread and was curious.  Is there a way to simply write the NFC data from an existing filament spool into something like an ntag213 sticker rather than using a more expensive emutag? I haven't really explored the idea of rewriting a tag with the concept.  But the cost of something like a roll of stickers is considerably cheaper than an emutag.

In short - no.

The card password and more importantly PACK code are derived from the card uid.
The card uid is fixed and cannot be changed on normal NTAG cards - it can on an EMUTAG.

Thanks for the quick reply.  Even more reason to see if I can help the process out in any fashion.
Another quick question.  I've seen lots of talk about circumventing the filament products and only a small blurb about attacking the actual printer itself.  Is there any threads on discussions on what has been done to look at the operations of the printer?  Clearly the printer is storing the existing NFC UID's some were.

The firmware has been looked at, but it's encrypted - so that ended that.
There are a number of other discussions, but as you have read, none have come to anything.

159

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

Awesome.... EMUTAG HERE I COME!

160 (edited by cgrillo 2017-03-13 17:52:38)

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

woogerboy21 wrote:

Awesome.... EMUTAG HERE I COME!


This may help (if you have arduinos)..
https://www.instructables.com/id/EMUTAG … -Printers/

161

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

cgrillo wrote:
woogerboy21 wrote:

Awesome.... EMUTAG HERE I COME!


This may help (if you have arduinos)..
https://www.instructables.com/id/EMUTAG … -Printers/

Cool thanks.  I have a (w) model so the reset trick shouldn't work but one thing I may eventually want is a passcode to one of my tags just to tinker.  Though one of the things I want to try is to find it out myself (personal project).  I prob wont get around to doing so since I have the (w) unit but maybe some day.

162

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

Anyone know if the emutag will work fine on a ACR122U? I have the MiFare Learning tool software as well.

163

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

sobojoebot wrote:

Anyone know if the emutag will work fine on a ACR122U? I have the MiFare Learning tool software as well.

Yes, it will.
BUT - I'm not sure if the software you get with the card will allow you to re-write the UID.

164

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

cgrillo wrote:
sobojoebot wrote:

Anyone know if the emutag will work fine on a ACR122U? I have the MiFare Learning tool software as well.

Yes, it will.
BUT - I'm not sure if the software you get with the card will allow you to re-write the UID.

Thanks for the reply. The software that came with it was crap. I purchased different software from that one dude you recommend often on Ebay. It is RFID Learning Tool. If that doesn't work would any other software work for writting the UID?

165 (edited by cgrillo 2017-03-14 17:46:49)

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

sobojoebot wrote:
cgrillo wrote:
sobojoebot wrote:

Anyone know if the emutag will work fine on a ACR122U? I have the MiFare Learning tool software as well.

Yes, it will.
BUT - I'm not sure if the software you get with the card will allow you to re-write the UID.

Thanks for the reply. The software that came with it was crap. I purchased different software from that one dude you recommend often on Ebay. It is RFID Learning Tool. If that doesn't work would any other software work for writting the UID?

I'm not sure his software will work either - try asking him thru eBay - he is very helpful.
I had to write my own - but I have an Arduino and a PN532

166

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

Does anyone happen to know if it has ever been attempted to emulate a tag using a rasp-pi and and something like an explore nfc ww?  Looking at the data sheets for the device you can emulate a tag but I haven't found out if the UID information can be manipulated.  If so I wouldnt see why I couldn't fire up something like a pi-zero and emulate a full card with the expansion board.

167

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

Search help.
Because several kilo bought PLA before I got the printer, fu .. chip: /

[00] : 04 BF 99 AA
[01] : E2 CE 4F 80
[02] : E3 48 00 00
[03] : E1 10 12 00
[04] : 01 03 A0 0C
[05] : 34 03 00 FE
[06] : 00 00 00 00
[07] : 00 00 00 00

168 (edited by mjf55 2017-06-15 17:01:48)

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

folks, as a newbie that is learning, ( trial end error ) I have discovered the addresses in post 1 in section 2.3.2 Important Pages are actually decimal pages numbers and hex data.   I was confused as it was not clearly stated that they (the addresses) are decimal.  Can you please update that section to clarify that.   I would help other newbies like me.  Thanks

This is my post where I discovered that in my tag after trying to program it for 300M. 
http://www.soliforum.com/post/136082/#p136082

169

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

I followed this guide and reset my values for 0A, 0B, 14, 15, 16 & 17
to the ones suggested in the guide.
http://www.instructables.com/id/XYZ-Da- … eset-Hack/

My tag is now "unidentified" according to my printer.

Help?

170

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

peter.ammel wrote:

I followed this guide and reset my values for 0A, 0B, 14, 15, 16 & 17
to the ones suggested in the guide.
http://www.instructables.com/id/XYZ-Da- … eset-Hack/

My tag is now "unidentified" according to my printer.

Help?

What printer and firmware do you have?

171

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

cgrillo wrote:
peter.ammel wrote:

I followed this guide and reset my values for 0A, 0B, 14, 15, 16 & 17
to the ones suggested in the guide.
http://www.instructables.com/id/XYZ-Da- … eset-Hack/

My tag is now "unidentified" according to my printer.

Help?

What printer and firmware do you have?

I have an xyz Da Vinci Junior 
1.0.5

172 (edited by cgrillo 2017-06-18 11:04:15)

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

peter.ammel wrote:
cgrillo wrote:
peter.ammel wrote:

I followed this guide and reset my values for 0A, 0B, 14, 15, 16 & 17
to the ones suggested in the guide.
http://www.instructables.com/id/XYZ-Da- … eset-Hack/

My tag is now "unidentified" according to my printer.

Help?

What printer and firmware do you have?

I have an xyz Da Vinci Junior 
1.0.5

ok , that should accept hacked/refilled tags.
- OR - is it a 3 in 1 ?
Can you post the data on the card?

173

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

Is it a Da Vinci Jr or a Jr with wireless? That firmware level seems to be verrrrrry old for a Jr.  (Mine is 2.2.7 and that's not the latest). I think it is a wireless version.  That should make a difference as to refilling tags.

174

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

My printer looks like this. I think it is wireless but in the info it says 1.0.5

https://cdn.instructables.com/FDT/3EE1/ … MEDIUM.jpg


Here are the codes. I've now reset to default and its not registering it

Post's attachments

19357795_10210485891837682_1841560395_n.png
19357795_10210485891837682_1841560395_n.png 129.35 kb, file has never been downloaded. 

19397835_10210485891717679_1642677795_n.png 144.48 kb, file has never been downloaded. 

You don't have the permssions to download the attachments of this post.

175

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

peter.ammel wrote:

My printer looks like this. I think it is wireless but in the info it says 1.0.5

https://cdn.instructables.com/FDT/3EE1/ … MEDIUM.jpg


Here are the codes. I've now reset to default and its not registering it

looking at your screenshots, address 0x14  contains all 00000's.  That address is the amount left on the spool.  It is usually set to the same data as in 0x0a and 0x0b, which is the starting amount on the spool.  Try changing it to that value