I’ve spent some time trying to use Proxmark3 via an Android phone. The information in the Internet were a little disordered or maybe out of date. Therefore, I write the steps down in here.

Environment:

Windows-7 64bits (because the Nexus Root Toolkit can only run on Windows) Nexus 7 (Android 4.2.1)

Equipment:

OTG line (micro USB slave – USB master) USB hub (only support USB2.0 interface)

Apps (from Google Play):

Root Checker (Optional) Android Terminal Emulator

1. enable Developer Mode

  • Go to setting page => About tablet => click Build number 7 times => then the Developer options is available.
  • Go to Developer options => enable USB debugging
  • Note that your PC will install drivers for your device automatically.


2. Unlock and root the android device:

  • Download Nexus Root Toolkit (I was using NRT_v1.6.3.sfx.exe , maybe others will work, too)

  • Install and open it, follow the guide and the toolkit will help you to root your device.

2.5 Nexus Root Toolkit:

  • Click: Full Drivers Installation Guide.
  • Launch Device Manager => uninstall Nexus7 driver
  • Unplug device => Launch USBView => uninstall all Android ADB Interface and all drivers comes from Google Inc.
  • Plug device back, it will install the drivers you need automatically.
  • Go to step 3 (we can skip step 2 if drivers are OK) => full driver test
  • I’ll retry it about 5 times to pass the test. (press OK when the warning comes up)
  • NOTE: I use the USB hub and the transfer line for android, so that it will be forced to use USB2.0 interface.
  • NOTE: Reboot device if it is in the bootloader mode.
  • Click Unlock.
  • After you see the device is in the recovery mode, click the POWER key to choose YES.
  • NOTE: It will wipe all data, so you need to enable developer mode again.
  • Click Root:
  • If it halt at “Waiting for your device to finish booting backup… “ with a long time, click POWER button to reboot the device. But it will fail after all process done, You need root again.
  • Retry it again and again, it will finish successfully.
  • NOTE: DO NOT disconnect the device when the toolkit is rooting your phone.
  • NOTE: Download “root checker” from Google Play to confirm you root it successful.

3. Build proxmark3’s library

  • Follow this guide :
  • Or you can download the libraries and executable file here: libreadline, libtermcap, libusb, proxmark3
  • Put them into the SD card of your device.
  • Open Terminal Emulator app:
  • Follow this guide to remount the /system
  • In my case, I typed:

1
2
3
4
5
6
7
8
9
10
su
mount
mount –o remount /dev/block/platform/sdhci-tegra.3/by-name/APP /system
cd system
chmod 777 lib
chmod 777 bin
dd if=/sdcard/libusb.so of=/system/lib/libusb.so
dd if=/sdcard/libreadline.so of=/system/lib/libreadline.so
dd if=/sdcard/libtermcap.so of=/system/lib/libtermcap.so
dd if=/sdcard/proxmark3 of=/system/bin/proxmark3

4. Connect proxmark3 and android phone:

  • Phone – OTG line – USB hub – proxmark3
  • Enter proxmark3 in the terminal.
  • Then it works!!