Skip to content

De Bricking Segger

vvzvlad edited this page Aug 12, 2019 · 2 revisions

JTAG Recovery Procedure

If for whatever reason the USB upgrade procedure (section above) failed and the Proxmark will no longer boot, you will need to load the bootrom on to the Proxmark using the JTAG interface. This procedure assumes that you have a Segger J-LINK (or clones) for the recovery process and J-link commander installed.

Plug both the Proxmark and the Segger J-LINK in to the computer. Attach the J-LINK to the Proxmark JTAG port.

Run J-link commander. Then:

exec device = AT91SAM7S256
exec EnableFlashDL
loadbin "C:\proxmark3\recovery\proxmark3_recovery.bin" 0x100000

that is it!

for flashing either the bootrom or firmware, these are the files and addresses:

bootrom.bin = 0x100000
fullimage.bin = 0x102000

Now un-plug the proxmark USB and JTAG and re-plug the Proxmark USB to the computer.


Connect ERASE pin AT91SAM7S256(55 pin, show in datasheet) to VCC+3 on second, connect ERASE pin to GND on second.

Make bin file:

git clone && cd proxmark3
cd bootrom && make clean && make all
cd ..
cd armsrc && make clean && make
cd ..
cd recovery && make clean && make

Run J-link Commander(JLinkExe):

J-Link>exec device = AT91SAM7S256  
J-Link>exec EnableFlashDL  
(target interface: J) JTAG, position in JTAG chain : -1,-1 => Auto-detect, target interface speed: 4000 kHz)  
JTAG chain detection found 1 devices:   
#0 Id: 0x3F0F0F0F, IRLen: 04, ARM7TDMI Core  
ARM7 identified.  
Erasing device...  
Comparing flash   [100%] Done.  
Erasing flash     [100%] Done.  
J-Link: Flash download: Total time needed: 6.309s (Prepare: 0.034s, Compare: 0.000s, Erase: 6.270s, Program: 0.000s, Verify: 0.000s, Restore: 0.004s)  
Erasing done.  
J-Link>loadbin "/tmp/proxmark/proxmark3/recovery/proxmark3_recovery.bin" 0x100000  
Downloading file [/tmp/proxmark/proxmark3/recovery/proxmark3_recovery.bin]...  
Comparing flash   [100%] Done.  
Erasing flash     [100%] Done.  
Programming flash [100%] Done.  
Verifying flash   [100%] Done.  
J-Link: Flash download: Bank 0 @ 0x00100000: 2 ranges affected (204288 bytes)  
J-Link: Flash download: Total time needed: 3.702s (Prepare: 0.132s, Compare: 0.123s, Erase: 0.000s, Program: 3.278s, Verify: 0.098s, Restore: 0.068s)  
You can’t perform that action at this time.