Emulating a Mifare Classic 1K Tag with the Proxmark3
Here is some background on the assumed operating environment.
proxmark3> hw ver
#db# Prox/RFID mark3 RFID instrument #db#
bootrom: master/v1.1.0-269-g0387cd3-suspect 2015-02-24 19:18:25 #db#
os: master/v1.1.0-269-g0387cd3-suspect 2015-03-26 22:58:14 #db#
HF FPGA image built on 2015/02/11 at 21:05:50
uC: AT91SAM7S512
Rev B Embedded Processor: ARM7TDMI
Nonvolatile Program Memory Size: 512K bytes
Second Nonvolatile Program Memory Size: None Internal SRAM
Size: 64K bytes
Architecture Identifier: AT91SAM7Sxx Series
Nonvolatile Program Memory Type: Embedded Flash Memory
Measuring antenna characteristics, please wait.........
# LF antenna: 0.00 V @ 125.00 kHz
# LF antenna: 0.00 V @ 134.00 kHz
# LF optimal: 0.28 V @ 600.00 kHz
# HF antenna: 12.55 V @ 13.56 MHz
# Your LF antenna is unusable.
Place the HF antenna above the Mifare 1K tag as pictured below. A little space between the antenna and tag seems to produce a more stable read.
The excerpt below demonstrates recovering keys from an actual tag (this step is optional if you already know the keys).
proxmark3> hf mf mifare uid(5c9f9f0d) nt(87057a14) par(64dc1c049c0414cc) ks(06060f0803070902) nr(00000000) |diff|{nr} |ks3|ks3^5|parity | +----+--------+---+-----+---------------+ | 00 |00000000| 6 | 3 |0,0,1,0,0,1,1,0| | 20 |00000020| 6 | 3 |0,0,1,1,1,0,1,1| | 40 |00000040| f | a |0,0,1,1,1,0,0,0| | 60 |00000060| 8 | d |0,0,1,0,0,0,0,0| | 80 |00000080| 3 | 6 |0,0,1,1,1,0,0,1| | a0 |000000a0| 7 | 2 |0,0,1,0,0,0,0,0| | c0 |000000c0| 9 | c |0,0,1,0,1,0,0,0| | e0 |000000e0| 2 | 7 |0,0,1,1,0,0,1,1| key_count:1 ------------------------------------------------------------------ Key found:ffffffffffff Found valid key:ffffffffffff
Specify the emulator keys that were discovered in the previous step.
proxmark3> hf mf nested 1 0 A FFFFFFFFFFFF t Testing known keys. Sector count=16 nested... Time in nested: 0.030 (inf sec per key) ----------------------------------------------- Iterations count: 0 |---|----------------|---|----------------|---| |sec|key A |res|key B |res| |---|----------------|---|----------------|---| |000| ffffffffffff | 1 | ffffffffffff | 1 | |001| ffffffffffff | 1 | ffffffffffff | 1 | |002| ffffffffffff | 1 | ffffffffffff | 1 | |003| ffffffffffff | 1 | ffffffffffff | 1 | |004| ffffffffffff | 1 | ffffffffffff | 1 | |005| ffffffffffff | 1 | ffffffffffff | 1 | |006| ffffffffffff | 1 | ffffffffffff | 1 | |007| ffffffffffff | 1 | ffffffffffff | 1 | |008| ffffffffffff | 1 | ffffffffffff | 1 | |009| ffffffffffff | 1 | ffffffffffff | 1 | |010| ffffffffffff | 1 | ffffffffffff | 1 | |011| ffffffffffff | 1 | ffffffffffff | 1 | |012| ffffffffffff | 1 | ffffffffffff | 1 | |013| ffffffffffff | 1 | ffffffffffff | 1 | |014| ffffffffffff | 1 | ffffffffffff | 1 | |015| ffffffffffff | 1 | ffffffffffff | 1 | |---|----------------|---|----------------|---|
The ekeyprn command shown below prints the keys configured within the simulator memory.
proxmark3> hf mf ekeyprn |---|----------------|----------------| |sec|key A |key B | |---|----------------|----------------| |000| ffffffffffff | ffffffffffff | |001| ffffffffffff | ffffffffffff | |002| ffffffffffff | ffffffffffff | |003| ffffffffffff | ffffffffffff | |004| ffffffffffff | ffffffffffff | |005| ffffffffffff | ffffffffffff | |006| ffffffffffff | ffffffffffff | |007| ffffffffffff | ffffffffffff | |008| ffffffffffff | ffffffffffff | |009| ffffffffffff | ffffffffffff | |010| ffffffffffff | ffffffffffff | |011| ffffffffffff | ffffffffffff | |012| ffffffffffff | ffffffffffff | |013| ffffffffffff | ffffffffffff | |014| ffffffffffff | ffffffffffff | |015| ffffffffffff | ffffffffffff | |---|----------------|----------------|
Now we can read the 1K tag info the PM3’s emulator memory. The HFA should be above the tag before running this command.
proxmark3> hf mf ecfill A 1 #db# EMUL FILL SECTORS FINISHED proxmark3>
We can save the dump with the esave command as shown below.
proxmark3> hf mf esave Saved 64 blocks to file: 5C9F9F0D518804.eml
Now simulate the tag with hf mf sim.
proxmark3> hf mf sim uid:N/A, numreads:0, flags:0 (0x00) #db# 4B UID: 5c9f9f0d #db# Emulator stopped. Tracing: 1 trace length: 481
Bring the HF antenna into the reader field. The reader should beep or acknowledge reading the tag some other way. Push the button when you are done.
To view a trace of Mifare communication messages run the command below.
proxmark3> hf list 14a Recorded Activity (TraceLen = 481 bytes) Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer iso14443a - All times are in carrier periods (1/13.56Mhz) iClass - Timings are not as accurate Start | End | Src | Data (! denotes parity error) | CRC | Annotation | -----------|-----------|-----|-----------------------------------------------------------------|-----|--------------------| 0 | 1056 | Rdr | 26 | | REQA 2548 | 4916 | Tag | 04 00 | | 13630 | 16094 | Rdr | 93 20 | | ANTICOLL 17778 | 23666 | Tag | 5c 9f 9f 0d 51 | | 44834 | 55298 | Rdr | 93 70 5c 9f 9f 0d 51 32 b7 | | SELECT_UID 56982 | 60502 | Tag | 08 b6 dd | | 3090530 | 3091522 | Rdr | 52 | | WUPA 3093270 | 3095638 | Tag | 04 00 | | 3108792 | 3119256 | Rdr | 93 70 5c 9f 9f 0d 51 32 b7 | | SELECT_UID 3120812 | 3124332 | Tag | 08 b6 dd | | 524726774 | 524727830 | Rdr | 26 | | REQA 524729258 | 524731626 | Tag | 04 00 | | 524740322 | 524742786 | Rdr | 93 20 | | ANTICOLL 524744598 | 524750486 | Tag | 5c 9f 9f 0d 51 | | 524771958 | 524782422 | Rdr | 93 70 5c 9f 9f 0d 51 32 b7 | | SELECT_UID 524783786 | 524787306 | Tag | 08 b6 dd | | 527817528 | 527818520 | Rdr | 52 | | WUPA 527820076 | 527822444 | Tag | 04 00 | | 527835774 | 527846238 | Rdr | 93 70 5c 9f 9f 0d 51 32 b7 | | SELECT_UID 527847922 | 527851442 | Tag | 08 b6 dd | | 533193150 | 533194142 | Rdr | 52 | | WUPA 533195762 | 533198130 | Tag | 04 00 | | 533211604 | 533222068 | Rdr | 93 70 5c 9f 9f 0d 51 32 b7 | | SELECT_UID 533223432 | 533226952 | Tag | 08 b6 dd | | 565450552 | 565451608 | Rdr | 26 | | REQA 565452972 | 565455340 | Tag | 04 00 | | 566201370 | 566202426 | Rdr | 26 | | REQA 566203726 | 566206094 | Tag | 04 00 | | 570432668 | 570433724 | Rdr | 26 | | REQA 570435152 | 570437520 | Tag | 04 00 | | 570446106 | 570448570 | Rdr | 93 20 | | ANTICOLL 570450254 | 570456142 | Tag | 5c 9f 9f 0d 51 | | 570477438 | 570487902 | Rdr | 93 70 5c 9f 9f 0d 51 32 b7 | | SELECT_UID 570489586 | 570493106 | Tag | 08 b6 dd | | 573523136 | 573524128 | Rdr | 52 | | WUPA 573525748 | 573528116 | Tag | 04 00 | | 573541332 | 573551796 | Rdr | 93 70 5c 9f 9f 0d 51 32 b7 | | SELECT_UID 573553288 | 573556808 | Tag | 08 b6 dd | |
The trace above is shallow and only shows UID reads. Here’s a trace of a full read where actual blocks are being read.
Start | End | Src | Data (! denotes parity error) | CRC | Annotation | -----------|-----------|-----|-----------------------------------------------------------------|-----|--------------------| 0 | 1056 | Rdr | 26 | | REQA 2356 | 4724 | Tag | 04 00 | | 13468 | 15932 | Rdr | 93 20 | | ANTICOLL 17552 | 23440 | Tag | 5c 9f 9f 0d 51 | | 44800 | 55264 | Rdr | 93 70 5c 9f 9f 0d 51 32 b7 | | SELECT_UID 56884 | 60404 | Tag | 08 b6 dd | | 3090516 | 3091508 | Rdr | 52 | | WUPA 3093064 | 3095432 | Tag | 04 00 | | 3108792 | 3119256 | Rdr | 93 70 5c 9f 9f 0d 51 32 b7 | | SELECT_UID 3120876 | 3124396 | Tag | 08 b6 dd | | 6153690 | 6154682 | Rdr | 52 | | WUPA 6156302 | 6158670 | Tag | 04 00 | | 6171840 | 6182304 | Rdr | 93 70 5c 9f 9f 0d 51 32 b7 | | SELECT_UID 6183988 | 6187508 | Tag | 08 b6 dd | | 8131362 | 8132354 | Rdr | 52 | | WUPA 8134102 | 8136470 | Tag | 04 00 | | 8149878 | 8160342 | Rdr | 93 70 5c 9f 9f 0d 51 32 b7 | | SELECT_UID 8161770 | 8165290 | Tag | 08 b6 dd | | 11196216 | 11197208 | Rdr | 52 | | WUPA 11198828 | 11201196 | Tag | 04 00 | | 11214556 | 11225020 | Rdr | 93 70 5c 9f 9f 0d 51 32 b7 | | SELECT_UID 11226640 | 11230160 | Tag | 08 b6 dd | | 13398804 | 13403508 | Rdr | 60 00 f5 7b | | AUTH-A(0) 13407816 | 13412552 | Tag | 01 02 03 04 | | 13413914 | 13423226 | Rdr | 1e 25 05 2f 09 9c da 01 | !crc| ? 13431566 | 13436238 | Tag | a2 d5 c8 d7 | | 14870812 | 14875516 | Rdr | 60 00 f5 7b | | AUTH-A(0) 14881936 | 14886672 | Tag | fe ad 30 a1 | | 14888212 | 14897524 | Rdr | da 5d 8c 54 3c bc f0 d7 | !crc| ? 14905544 | 14910280 | Tag | 7e b4 92 10 | | 14971264 | 14976032 | Rdr | 30 00 02 a8 | | READBLOCK(0) 14990260 | 15011060 | Tag | 6a! 4e! a0! f2! 0e! 2b 62! 5b bf! 5e! c7! c9 cc d4 21 f2 | | | | | 14 70! | !crc| 15888824 | 15893528 | Rdr | 30 01 8b b9 | | READBLOCK(1) 15907820 | 15928620 | Tag | 67! f6 7a! 04 33 cc a4! 50 52! 06! e1 18! ad! 12 b6! ea | | | | | e0 cb! | !crc| 17072476 | 17077180 | Rdr | 30 02 10 8b | | READBLOCK(2) 17091472 | 17112336 | Tag | fa f6 cc! eb f0! e1 4e 80 25! 5e! e2! 7d 74! 07 f9! 91 | | | | | ee! 03! | !crc| 18554422 | 18559190 | Rdr | 30 03 99 9a | | READBLOCK(3) 18573418 | 18594218 | Tag | 48 0d e0 b8 9b! 3d 36! 0e! d1! 83 54! 27 e3 56 27 ef! | | | | | 6e 1b | !crc| 19397110 | 19401878 | Rdr | 60 04 d1 3d | | AUTH-A(4) 19408106 | 19412842 | Tag | fe ad 30 a1 | | 19414198 | 19423574 | Rdr | f2 d0 e7 f6 18 a3 a8 a9 | !crc| ? 19431786 | 19436522 | Tag | 4b 7d be b5 | | 20589978 | 20594682 | Rdr | 30 04 26 ee | | READBLOCK(4) 20609038 | 20629838 | Tag | 5c! 1d! 05! a1! 7c! 3a! 79 dd 46 dd! f5 d6! 48 d4! 05 46 | | | | | 1a! 44 | !crc| 21545434 | 21550202 | Rdr | 30 05 af ff | | READBLOCK(5) 21564430 | 21585230 | Tag | d3! 70! 54! 7c! 12! 13! 2a! 88! 89! 12 0e! 6c! 09! 9d! ba! cc | | | | | f9! c3 | !crc| 22581952 | 22586656 | Rdr | 30 06 34 cd | | READBLOCK(6) 22601012 | 22621812 | Tag | 17 b8! 3f! 39! 67 25 15! 48 c4 45! b8 96 f2 03 96 82 | | | | | fd! a2! | !crc| 24288220 | 24292924 | Rdr | 30 07 bd dc | | READBLOCK(7) 24307216 | 24328080 | Tag | 38 e6 b8 91 78 31 3c cb d2! e3 c6 7f! 73 8c 74! fa! | | | | | 43! 3e | !crc| 25036800 | 25041568 | Rdr | 60 08 bd f7 | | AUTH-A(8) 25047860 | 25052596 | Tag | fe ad 30 a1 | | 25054134 | 25063446 | Rdr | 56 0d b3 97 23 58 dd 47 | !crc| ? 25071466 | 25076138 | Tag | a4 37 2e fc | | 26194388 | 26199156 | Rdr | 30 08 4a 24 | | READBLOCK(8) 26213320 | 26234184 | Tag | 37 91! b0! b2 ca 2a 33 00 c8 71 02 87 c0 28! 99 8a! | | | | | c1 ef | !crc| 27257378 | 27262146 | Rdr | 30 09 c3 35 | | READBLOCK(9) 27276502 | 27297366 | Tag | 33! a7! b8! a3! e9 7f! 94! 32 53 64! 3c! 35 a4 b9! e0! 12 | | | | | 19 2b! | !crc| 28273216 | 28277984 | Rdr | 30 0a 58 07 | | READBLOCK(10) 28292276 | 28313140 | Tag | b6 b5 73! 78 e6 5d a7! 6e 95! c1 a1 51 29! 24! 77 70 | | | | | 24 b8! | !crc| 29249656 | 29254360 | Rdr | 30 0b d1 16 | | READBLOCK(11) 29268460 | 29289260 | Tag | 5c f1 44 51! a9! 76! 95 bb! 20! fe 70! 5f f1! a5! 32 d0 | | | | | 71! 5f | !crc| 29958676 | 29963380 | Rdr | 60 0c 99 b1 | | AUTH-A(12) 29969608 | 29974344 | Tag | fe ad 30 a1 | | 29975764 | 29985140 | Rdr | 3f 07 62 7a 82 83 80 64 | !crc| ? 29993288 | 29997960 | Tag | f3 4c 67 30 | | 31075866 | 31080570 | Rdr | 30 0c 6e 62 | | READBLOCK(12) 31094926 | 31115790 | Tag | bb! 3f 4e 32 33! 6f 3c! 31 29 11 94! 38 ab! da 37 3b! | | | | | 17 ce | !crc| 32052992 | 32057696 | Rdr | 30 0d e7 73 | | READBLOCK(13) 32071988 | 32092788 | Tag | 37! e2 94 39! 03! b9! 42! 9d af! 5d 6d 31! 8c! 64 27 6a! | | | | | 24! 69 | !crc| 33201406 | 33206174 | Rdr | 30 0e 7c 41 | | READBLOCK(14) 33220274 | 33241138 | Tag | ff! a7! 92 01! aa! 71! 33 52 2b f2! be 2a! 8c! d0! 9a! 99 | | | | | 79! 0c! | !crc| 34139062 | 34143766 | Rdr | 30 0f f5 50 | | READBLOCK(15) 34157802 | 34178666 | Tag | 6b! 19! 5d 4a! 77 4d! aa d7! 8a! 5a b3 8e! 26 32 1c! c9 | | | | | 68 fb | !crc| 34932472 | 34937240 | Rdr | 60 10 74 6b | | AUTH-A(16) 34943468 | 34948204 | Tag | fe ad 30 a1 | | 34949568 | 34958880 | Rdr | 0e cc 1b 8d d4 14 23 97 | !crc| ? 34967220 | 34971956 | Tag | a8 65 5d 75 | | 36259802 | 36264570 | Rdr | 30 10 83 b8 | | READBLOCK(16) 36278670 | 36299470 | Tag | 47 82 12! 35! bb 2a f5! 79! a0! 61! 58! bc! 60 fe! 76! 6c! | | | | | 4e! 4d | !crc| 37263202 | 37267906 | Rdr | 30 11 0a a9 | | READBLOCK(17) 37282262 | 37303062 | Tag | 7e! 1f 4d 66! f7! a0! 05! 85 71! b1 6a! 19! a0! a3! 6d ad | | | | | b0 7d | !crc| 38276544 | 38281312 | Rdr | 30 12 91 9b | | READBLOCK(18) 38295604 | 38316468 | Tag | a6 8a! de! 73 f3 48 66! e9! 4e d4 e2 b4 26! e6 97 e5! | | | | | 85! c2 | !crc| 39230336 | 39235104 | Rdr | 30 13 18 8a | | READBLOCK(19) 39249332 | 39270132 | Tag | 63! 06 df! c7 92! 17 db b7! ec 27! 36 65! 5c 4f ae 86! | | | | | aa 08! | !crc| 42238804 | 42243572 | Rdr | 60 14 50 2d | | AUTH-A(20) 42249800 | 42254536 | Tag | fe ad 30 a1 | | 42255898 | 42265210 | Rdr | 2f e0 65 80 d9 da 4c 96 | !crc| ? 42273550 | 42278286 | Tag | b6 fe 27 f7 | | 43290360 | 43295128 | Rdr | 30 14 a7 fe | | READBLOCK(20) 43309292 | 43330156 | Tag | b2 90 d2 10 db 78 58! 7c! 6c bc! 94 d7 7e 84! 4f! 0e | | | | | 26 b9 | !crc| 44232832 | 44237536 | Rdr | 30 15 2e ef | | READBLOCK(21) 44251828 | 44272692 | Tag | 4d d4! bb 80! c2! 8c 37 89! 80! b4! 41 e8 94! bc d1 18! | | | | | a0 56! | !crc| 45172160 | 45176928 | Rdr | 30 16 b5 dd | | READBLOCK(22) 45191220 | 45212084 | Tag | 8f! c6 86! 4e 96! 8b! 6f 9c 80 9f! e3! c6! 37 ff 70 2b | | | | | 9b! 20 | !crc| 46048026 | 46052730 | Rdr | 30 17 3c cc | | READBLOCK(23) 46067086 | 46087950 | Tag | 13! b7 51 6a ad 02! e5 68 6c! 09! da! 55 3d 44! 26! f1 | | | | | bf! 82! | !crc| 46877332 | 46882036 | Rdr | 60 18 3c e7 | | AUTH-A(24) 46888136 | 46892872 | Tag | fe ad 30 a1 | | 46894242 | 46903618 | Rdr | 4d f2 53 49 69 c6 51 81 | !crc| ? 46911958 | 46916694 | Tag | 37 8a 46 4f | | 47947968 | 47952736 | Rdr | 30 18 cb 34 | | READBLOCK(24) 47967028 | 47987892 | Tag | a4 bd! f7! 50! 21 fa! f3 e2! 8b! 37 33 b0 e5! 38 59 e8! | | | | | c8 83 | !crc| 48899392 | 48904160 | Rdr | 30 19 42 25 | | READBLOCK(25) 48918452 | 48939252 | Tag | 2c 3f! 51! 32 b7! 4d 30 3c! 0d 1f f7! 14! 8f c7 0d 37 | | | | | 82 84 | !crc| 49827490 | 49832258 | Rdr | 30 1a d9 17 | | READBLOCK(26) 49846614 | 49867478 | Tag | 27! f1! 20 55 bc! 62! 30 ac 7a! 3e 2f! 58! 68 c5 d8 c0 | | | | | d7! bb! | !crc| 50783770 | 50788474 | Rdr | 30 1b 50 06 | | READBLOCK(27) 50802830 | 50823630 | Tag | 1d! 16 66! 46 fc! 62 9a! 0a! da! 80! 57! db 39! b0 a8! 6b | | | | | cd a1! | !crc| 51543038 | 51547806 | Rdr | 60 1c 18 a1 | | AUTH-A(28) 51553970 | 51558706 | Tag | fe ad 30 a1 | | 51560220 | 51569596 | Rdr | 0c b0 10 73 43 b7 d4 e7 | !crc| ? 51577616 | 51582352 | Tag | e7 3e 66 04 | | 52773624 | 52778392 | Rdr | 30 1c ef 72 | | READBLOCK(28) 52792556 | 52813356 | Tag | 23 c9! 6b! e4 74 c4! e0 73 15! 20 93! 63! d3 63! 6d 45 | | | | | 32! c0 | !crc| 53663864 | 53668632 | Rdr | 30 1d 66 63 | | READBLOCK(29) 53682796 | 53703660 | Tag | e1! 93 98! 78! 87! ad! 1c 19! 44 8a cb! ec! 7a! de 92 6d | | | | | 80! 06! | !crc| 54689080 | 54693848 | Rdr | 30 1e fd 51 | | READBLOCK(30) 54708076 | 54728940 | Tag | 3e f3 d6 11 30 1e be e4 5a 94! 74 ca! 15 ef 2b 2a! | | | | | 41 6a! | !crc| 55616320 | 55621024 | Rdr | 30 1f 74 40 | | READBLOCK(31) 55635380 | 55656180 | Tag | 5c 69! 00! 0a! c4! e1! e2! 5c 8f 55! 9e e4 41! 8c 36! ae! | | | | | 06! 61! | !crc| 56561920 | 56566688 | Rdr | 60 20 f7 5a | | AUTH-A(32) 56572980 | 56577716 | Tag | fe ad 30 a1 | | 56579070 | 56588446 | Rdr | 07 33 e5 fd 1a 4f b6 be | !crc| ? 56596658 | 56601330 | Tag | 09 8c 9b 84 | | 57712276 | 57716980 | Rdr | 30 20 00 89 | | READBLOCK(32) 57731144 | 57752008 | Tag | 6f! ed d8 6a 26 fb! 2c 65! 93! bd! f5! 11 b8! f7 eb 60! | | | | | c0 98 | !crc| 58679586 | 58684354 | Rdr | 30 21 89 98 | | READBLOCK(33) 58698710 | 58719510 | Tag | 2e 20 6b! 32! de! 6f 22 70 69 7e 7e! 9f f6 56! 83! f4! | | | | | 85! 08! | !crc| 59577172 | 59581940 | Rdr | 30 22 12 aa | | READBLOCK(34) 59596104 | 59616968 | Tag | dd d0! 52 2f e1 c6 de! 91 c3 b4! 9f 0c! 17! 75 c5! 1b | | | | | 01! c4 | !crc| 60572706 | 60577474 | Rdr | 30 23 9b bb | | READBLOCK(35) 60591830 | 60612694 | Tag | 1e ed 1f! 4d! 2c 96! 4c 54! 81 7e db 1b! 5e e4 d3 42 | | | | | 4e a6! | !crc| 61311030 | 61315798 | Rdr | 60 24 d3 1c | | AUTH-A(36) 61322090 | 61326826 | Tag | fe ad 30 a1 | | 61328220 | 61337532 | Rdr | 96 a9 b0 1e d4 52 6c e8 | !crc| ? 61345808 | 61350480 | Tag | 96 bb 93 7e | | 62413146 | 62417914 | Rdr | 30 24 24 cf | | READBLOCK(36) 62432142 | 62452942 | Tag | 93 92 71! c9! 21! 3d 65! 25 d5! 64! 38! f8 07! 2a! 82 ec! | | | | | 89! bc! | !crc| 63348442 | 63353210 | Rdr | 30 25 ad de | | READBLOCK(37) 63367438 | 63388302 | Tag | 49! a2! 5c 30 12! 47 7a! b2 04 23 d9 c9! 0f! 65! 11! 0d | | | | | da! 48! | !crc| 64237922 | 64242626 | Rdr | 30 26 36 ec | | READBLOCK(38) 64256982 | 64277846 | Tag | a1! ac! a9! 23 bb! 47! 83! e0! 4a 8d! 2b! 19! a8 a7! b8 18 | | | | | 8d! e7! | !crc| 65152284 | 65156988 | Rdr | 30 27 bf fd | | READBLOCK(39) 65171344 | 65192144 | Tag | 92 24! fc! 90! ec! 8d! 10! 67 8c! 0a c7! 47! e2 0d 5e! 91 | | | | | 4f! 0e! | !crc| 65892984 | 65897688 | Rdr | 60 28 bf d6 | | AUTH-A(40) 65903980 | 65908716 | Tag | fe ad 30 a1 | | 65910134 | 65919510 | Rdr | 84 ee 40 dc 3c 92 de 2f | !crc| ? 65927658 | 65932330 | Tag | d1 ba ef 8d | | 66972470 | 66977238 | Rdr | 30 28 48 05 | | READBLOCK(40) 66991466 | 67012330 | Tag | dd 8c! bc 9b 89 af 12! b1 a2! b0 89! e4 f0 96! c7 4f! | | | | | 9f! 47! | !crc| 67865918 | 67870622 | Rdr | 30 29 c1 14 | | READBLOCK(41) 67884978 | 67905842 | Tag | 3e! 6e cd! be 6c 82 5c 40! 48! 4d! 33! f1 41 22! 81! 67 | | | | | 52 57 | !crc| 68799614 | 68804382 | Rdr | 30 2a 5a 26 | | READBLOCK(42) 68818610 | 68839474 | Tag | 40 b7! 63 88! f5! ed bc 53! ed 7a 8d! 3d! 7e! 8b 9c 34 | | | | | 74 30! | !crc| 69695542 | 69700246 | Rdr | 30 2b d3 37 | | READBLOCK(43) 69714410 | 69735274 | Tag | 3a af 91 ac 3f! 70 84 57 16 f7! 9f 3d 48! 6e! 21 a9 | | | | | 84! 35! | !crc| 70385378 | 70390082 | Rdr | 60 2c 9b 90 | | AUTH-A(44) 70396502 | 70401238 | Tag | fe ad 30 a1 | | 70402586 | 70411898 | Rdr | 8a 77 00 29 53 fe df 8d | !crc| ? 70420238 | 70424974 | Tag | 6e 5b 8d 85 | | 71417728 | 71422432 | Rdr | 30 2c 6c 43 | | READBLOCK(44) 71436724 | 71457588 | Tag | 0b 79 43 cf 6e c9 5c! 1d! 11 ee f4! bc! 76! ae! 3e! 30 | | | | | ab e7! | !crc| 72359480 | 72364184 | Rdr | 30 2d e5 52 | | READBLOCK(45) 72378476 | 72399276 | Tag | 1d 9c! 77! 8f 81! a5! 21! 41! f3! 97 bd 72 6a 60! af! fb | | | | | b8 b4 | !crc| 73367096 | 73371864 | Rdr | 30 2e 7e 60 | | READBLOCK(46) 73386092 | 73406956 | Tag | 69 a6 9a! 85! 00! d1! 53! 1d! a7 15 43 1d! 7b! e7! 9f! c3 | | | | | 87 38 | !crc| 74257370 | 74262138 | Rdr | 30 2f f7 71 | | READBLOCK(47) 74276366 | 74297166 | Tag | c2 16 ca 4b 41 79! 0b 08! c3! ed! 8e! 28! f4 f2! 81 ff | | | | | 84! b7 | !crc| 74984340 | 74989044 | Rdr | 60 30 76 4a | | AUTH-A(48) 74995272 | 75000008 | Tag | fe ad 30 a1 | | 75001372 | 75010684 | Rdr | 65 2d ed 2a b7 6f f5 b8 | !crc| ? 75019024 | 75023696 | Tag | 78 71 c3 87 | | 76037338 | 76042106 | Rdr | 30 30 81 99 | | READBLOCK(48) 76056334 | 76077198 | Tag | c3 26 4d 5a 54! e0 d9! e0! cc! 93 ae 2f ad 3d 03! 7f | | | | | d8! 67 | !crc| 76922850 | 76927554 | Rdr | 30 31 08 88 | | READBLOCK(49) 76941910 | 76962710 | Tag | 00 3a! 01! 4e f2 6b! 78! 3d 85! 22! d9 a3 c0! cd 91 09! | | | | | fe! ee | !crc| 78021440 | 78026208 | Rdr | 30 32 93 ba | | READBLOCK(50) 78040500 | 78061364 | Tag | 8a! 9e 43 81! 7f 57 c3! 21 12! 7b 9e f3 56 de e0 43! | | | | | 61 7d! | !crc| 78945600 | 78950368 | Rdr | 30 33 1a ab | | READBLOCK(51) 78964660 | 78985524 | Tag | b1! 68 58! 2b 73 d2! 34! a9 4f db b1! 7c! 55! 50! 1a 5e | | | | | 51 67 | !crc| 79630804 | 79635572 | Rdr | 60 34 52 0c | | AUTH-A(52) 79641800 | 79646536 | Tag | fe ad 30 a1 | | 79647900 | 79657212 | Rdr | fd 6e ac ac da 58 17 0f | !crc| ? 79665552 | 79670288 | Tag | e2 d9 dc bc | | 80698332 | 80703100 | Rdr | 30 34 a5 df | | READBLOCK(52) 80717328 | 80738192 | Tag | 6e! d2! 15! ba! 52! 10! b0 cb! d2! a5! ab 77! f5! 7d! 4b! 67 | | | | | 34 93! | !crc| 81539476 | 81544180 | Rdr | 30 35 2c ce | | READBLOCK(53) 81558344 | 81579208 | Tag | 57 8f! 10 0f! f7! b4! a7! 44 66! 41! c1! 7c fd! 72 7c! 58 | | | | | 66! 85 | !crc| 82399934 | 82404638 | Rdr | 30 36 b7 fc | | READBLOCK(54) 82418994 | 82439858 | Tag | 1a! 5c! 7b 90! 81! 7b 72 10 59! 6d! 70 a9! 91 59! af! bd! | | | | | ec 6f! | !crc| 83333630 | 83338398 | Rdr | 30 37 3e ed | | READBLOCK(55) 83352626 | 83373426 | Tag | ac 2d 59 05! 38 f4! ed! 5a! 88! 15 a0! b4! 36 b3! b5! 35 | | | | | 30! fb! | !crc| 84069376 | 84074144 | Rdr | 60 38 3e c6 | | AUTH-A(56) 84080436 | 84085172 | Tag | fe ad 30 a1 | | 84086710 | 84096022 | Rdr | 22 1a 35 7c 68 49 36 ba | !crc| ? 84104042 | 84108778 | Tag | de cf b5 a4 | | 85171420 | 85176124 | Rdr | 30 38 c9 15 | | READBLOCK(56) 85190416 | 85211216 | Tag | 87 60! 1b b4! b3 b3! 9c c2! da! b8! 75! d4! cb 13! 38 b9 | | | | | 5a! 4f! | !crc| 86047230 | 86051998 | Rdr | 30 39 40 04 | | READBLOCK(57) 86066226 | 86087090 | Tag | 5e! b4 3e 35 82! dd 3a 30 56! 1d 76 37 3d 4b! 37 a5 | | | | | ed 26 | !crc| 87013276 | 87018044 | Rdr | 30 3a db 36 | | READBLOCK(58) 87032080 | 87052880 | Tag | 2f 45 99! 89 0d! 7a 79! 2a! c2 cb! 4c 7b! 4b c6 ea! 5c | | | | | 55 1c! | !crc| 87914622 | 87919390 | Rdr | 30 3b 52 27 | | READBLOCK(59) 87933618 | 87954482 | Tag | 12! 12! ba! 73 32 5c e1 45 6a 10! 47 03! ee bf 5c! 06 | | | | | 66! 1f | !crc| 88603064 | 88607768 | Rdr | 60 3c 1a 80 | | AUTH-A(60) 88614124 | 88618860 | Tag | fe ad 30 a1 | | 88620216 | 88629592 | Rdr | fb 01 d2 3a 85 c2 3d f2 | !crc| ? 88637804 | 88642540 | Tag | 0b ca 31 2c | | 89701182 | 89705886 | Rdr | 30 3c ed 53 | | READBLOCK(60) 89720242 | 89741106 | Tag | 58 9d! 20 41! f7! 2c! 80 5b ad b5 7b 64! 5c 8e 76 9f | | | | | 71 9e | !crc| 90765212 | 90769980 | Rdr | 30 3d 64 42 | | READBLOCK(61) 90784144 | 90805008 | Tag | 1d! a3! 51! 80 f5 f2! 58! f0 76! 60 38 29 5f bc 23 d9! | | | | | 4f! 7c | !crc| 91702036 | 91706740 | Rdr | 30 3e ff 70 | | READBLOCK(62) 91720904 | 91741704 | Tag | 55! 6b 95! 71 7c 8d! 3d! 58 45 eb! 8b 5c! e7! 1f c7! 52 | | | | | ee! 05 | !crc| 92702292 | 92707060 | Rdr | 30 3f 76 61 | | READBLOCK(63) 92721224 | 92742088 | Tag | db 25 18 c1! 6f! 92! 03! 56! 24! 08 b3 5e e8! ba 10! 0d | | | | | f2 1b! | !crc| 114724222 | 114725214 | Rdr | 52 | | WUPA 114726834 | 114729202 | Tag | 04 00 | | 114742498 | 114752962 | Rdr | 93 70 5c 9f 9f 0d 51 32 b7 | | SELECT_UID 114754646 | 114758166 | Tag | 08 b6 dd | | 117787446 | 117788438 | Rdr | 52 | | WUPA 117790058 | 117792426 | Tag | 04 00 | | 117805722 | 117816186 | Rdr | 93 70 5c 9f 9f 0d 51 32 b7 | | SELECT_UID 117817870 | 117821390 | Tag | 08 b6 dd | | 120850716 | 120851708 | Rdr | 52 | | WUPA 120853264 | 120855632 | Tag | 04 00 | | 120868962 | 120879426 | Rdr | 93 70 5c 9f 9f 0d 51 32 b7 | | SELECT_UID 120881110 | 120884630 | Tag | 08 b6 dd | | proxmark3>
Here’s the resulting card information obtained through Cardpeek.
Also in Blog

Proxmark Pro - Sniffing a Mifare Desfire 4K Tag

ProxmarkPro - Sniffing a Mifare 4K Tag
