I recently bought a KKmoon Portable RFID 125KHz Proximity Smart EM Card USB ID Reader from Amazon. I'm not currently able to locate a datasheet for the device. It reads tag IDs and prints them in plaintext over USB (presumably as keyboard input). The benefit of this device is that it's cheap and it works (as claimed) on multiple platforms including Android, which is a plus for me.
My question is how to figure out what sort of hidden features and "modes" (especially) are available for this device? For example, I would assume that the underlying hardware is able to sniff all communications on the 125 kHz channel. How would I go about getting the device to print all of this information over USB in whatever format it comes in? I'm thinking along the lines of turning the capabilities of this reader into a Chameleon-like sniffer device for the 125 kHz spectrum.
dmesg | tail lists the following:
[943853.964234] hidraw: raw HID events driver (C) Jiri Kosina [943853.976407] usbcore: registered new interface driver usbhid [943853.976409] usbhid: USB HID core driver [943853.982645] input: Sycreader RFID Technology Co., Ltd SYC ID&IC USB Reader as /devices/pci0000:00/0000:00:14.0/usb3/3-2/3-2:1.0/0003:08FF:0009.0001/input/input17 [943854.042578] hid-generic 0003:08FF:0009.0001: input,hidraw0: USB HID v1.10 Keyboard [Sycreader RFID Technology Co., Ltd SYC ID&IC USB Reader] on usb-0000:00:14.0-2/input0
and the relevant output from
Bus 003 Device 002: ID 08ff:0009 AuthenTec, Inc.
I can write C / kernel code that will enumerate the ioctl's of the device if this would be useful. Can someone please pass on some pointers about the reverse engineering aspects of this project? Many thanks.