Emulating a Mifare Classic 1K Tag with the Proxmark3
Here is some background on the assumed operating environment.
proxmark3> hw ver
#db# Prox/RFID mark3 RFID instrument #db#
bootrom: master/v1.1.0-269-g0387cd3-suspect 2015-02-24 19:18:25 #db#
os: master/v1.1.0-269-g0387cd3-suspect 2015-03-26 22:58:14 #db#
HF FPGA image built on 2015/02/11 at 21:05:50
uC: AT91SAM7S512
Rev B Embedded Processor: ARM7TDMI
Nonvolatile Program Memory Size: 512K bytes
Second Nonvolatile Program Memory Size: None Internal SRAM
Size: 64K bytes
Architecture Identifier: AT91SAM7Sxx Series
Nonvolatile Program Memory Type: Embedded Flash Memory
Measuring antenna characteristics, please wait.........
# LF antenna: 0.00 V @ 125.00 kHz
# LF antenna: 0.00 V @ 134.00 kHz
# LF optimal: 0.28 V @ 600.00 kHz
# HF antenna: 12.55 V @ 13.56 MHz
# Your LF antenna is unusable.
Place the HF antenna above the Mifare 1K tag as pictured below. A little space between the antenna and tag seems to produce a more stable read.
The excerpt below demonstrates recovering keys from an actual tag (this step is optional if you already know the keys).
proxmark3> hf mf mifare
uid(5c9f9f0d) nt(87057a14) par(64dc1c049c0414cc) ks(06060f0803070902) nr(00000000)
|diff|{nr} |ks3|ks3^5|parity |
+----+--------+---+-----+---------------+
| 00 |00000000| 6 | 3 |0,0,1,0,0,1,1,0|
| 20 |00000020| 6 | 3 |0,0,1,1,1,0,1,1|
| 40 |00000040| f | a |0,0,1,1,1,0,0,0|
| 60 |00000060| 8 | d |0,0,1,0,0,0,0,0|
| 80 |00000080| 3 | 6 |0,0,1,1,1,0,0,1|
| a0 |000000a0| 7 | 2 |0,0,1,0,0,0,0,0|
| c0 |000000c0| 9 | c |0,0,1,0,1,0,0,0|
| e0 |000000e0| 2 | 7 |0,0,1,1,0,0,1,1|
key_count:1
------------------------------------------------------------------
Key found:ffffffffffff
Found valid key:ffffffffffff
Specify the emulator keys that were discovered in the previous step.
proxmark3> hf mf nested 1 0 A FFFFFFFFFFFF t
Testing known keys. Sector count=16
nested...
Time in nested: 0.030 (inf sec per key)
-----------------------------------------------
Iterations count: 0
|---|----------------|---|----------------|---|
|sec|key A |res|key B |res|
|---|----------------|---|----------------|---|
|000| ffffffffffff | 1 | ffffffffffff | 1 |
|001| ffffffffffff | 1 | ffffffffffff | 1 |
|002| ffffffffffff | 1 | ffffffffffff | 1 |
|003| ffffffffffff | 1 | ffffffffffff | 1 |
|004| ffffffffffff | 1 | ffffffffffff | 1 |
|005| ffffffffffff | 1 | ffffffffffff | 1 |
|006| ffffffffffff | 1 | ffffffffffff | 1 |
|007| ffffffffffff | 1 | ffffffffffff | 1 |
|008| ffffffffffff | 1 | ffffffffffff | 1 |
|009| ffffffffffff | 1 | ffffffffffff | 1 |
|010| ffffffffffff | 1 | ffffffffffff | 1 |
|011| ffffffffffff | 1 | ffffffffffff | 1 |
|012| ffffffffffff | 1 | ffffffffffff | 1 |
|013| ffffffffffff | 1 | ffffffffffff | 1 |
|014| ffffffffffff | 1 | ffffffffffff | 1 |
|015| ffffffffffff | 1 | ffffffffffff | 1 |
|---|----------------|---|----------------|---|
The ekeyprn command shown below prints the keys configured within the simulator memory.
proxmark3> hf mf ekeyprn |---|----------------|----------------| |sec|key A |key B | |---|----------------|----------------| |000| ffffffffffff | ffffffffffff | |001| ffffffffffff | ffffffffffff | |002| ffffffffffff | ffffffffffff | |003| ffffffffffff | ffffffffffff | |004| ffffffffffff | ffffffffffff | |005| ffffffffffff | ffffffffffff | |006| ffffffffffff | ffffffffffff | |007| ffffffffffff | ffffffffffff | |008| ffffffffffff | ffffffffffff | |009| ffffffffffff | ffffffffffff | |010| ffffffffffff | ffffffffffff | |011| ffffffffffff | ffffffffffff | |012| ffffffffffff | ffffffffffff | |013| ffffffffffff | ffffffffffff | |014| ffffffffffff | ffffffffffff | |015| ffffffffffff | ffffffffffff | |---|----------------|----------------|
Now we can read the 1K tag info the PM3’s emulator memory. The HFA should be above the tag before running this command.
proxmark3> hf mf ecfill A 1 #db# EMUL FILL SECTORS FINISHED proxmark3>
We can save the dump with the esave command as shown below.
proxmark3> hf mf esave Saved 64 blocks to file: 5C9F9F0D518804.eml
Now simulate the tag with hf mf sim.
proxmark3> hf mf sim uid:N/A, numreads:0, flags:0 (0x00) #db# 4B UID: 5c9f9f0d #db# Emulator stopped. Tracing: 1 trace length: 481
Bring the HF antenna into the reader field. The reader should beep or acknowledge reading the tag some other way. Push the button when you are done.
To view a trace of Mifare communication messages run the command below.
proxmark3> hf list 14a
Recorded Activity (TraceLen = 481 bytes)
Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer
iso14443a - All times are in carrier periods (1/13.56Mhz)
iClass - Timings are not as accurate
Start | End | Src | Data (! denotes parity error) | CRC | Annotation |
-----------|-----------|-----|-----------------------------------------------------------------|-----|--------------------|
0 | 1056 | Rdr | 26 | | REQA
2548 | 4916 | Tag | 04 00 | |
13630 | 16094 | Rdr | 93 20 | | ANTICOLL
17778 | 23666 | Tag | 5c 9f 9f 0d 51 | |
44834 | 55298 | Rdr | 93 70 5c 9f 9f 0d 51 32 b7 | | SELECT_UID
56982 | 60502 | Tag | 08 b6 dd | |
3090530 | 3091522 | Rdr | 52 | | WUPA
3093270 | 3095638 | Tag | 04 00 | |
3108792 | 3119256 | Rdr | 93 70 5c 9f 9f 0d 51 32 b7 | | SELECT_UID
3120812 | 3124332 | Tag | 08 b6 dd | |
524726774 | 524727830 | Rdr | 26 | | REQA
524729258 | 524731626 | Tag | 04 00 | |
524740322 | 524742786 | Rdr | 93 20 | | ANTICOLL
524744598 | 524750486 | Tag | 5c 9f 9f 0d 51 | |
524771958 | 524782422 | Rdr | 93 70 5c 9f 9f 0d 51 32 b7 | | SELECT_UID
524783786 | 524787306 | Tag | 08 b6 dd | |
527817528 | 527818520 | Rdr | 52 | | WUPA
527820076 | 527822444 | Tag | 04 00 | |
527835774 | 527846238 | Rdr | 93 70 5c 9f 9f 0d 51 32 b7 | | SELECT_UID
527847922 | 527851442 | Tag | 08 b6 dd | |
533193150 | 533194142 | Rdr | 52 | | WUPA
533195762 | 533198130 | Tag | 04 00 | |
533211604 | 533222068 | Rdr | 93 70 5c 9f 9f 0d 51 32 b7 | | SELECT_UID
533223432 | 533226952 | Tag | 08 b6 dd | |
565450552 | 565451608 | Rdr | 26 | | REQA
565452972 | 565455340 | Tag | 04 00 | |
566201370 | 566202426 | Rdr | 26 | | REQA
566203726 | 566206094 | Tag | 04 00 | |
570432668 | 570433724 | Rdr | 26 | | REQA
570435152 | 570437520 | Tag | 04 00 | |
570446106 | 570448570 | Rdr | 93 20 | | ANTICOLL
570450254 | 570456142 | Tag | 5c 9f 9f 0d 51 | |
570477438 | 570487902 | Rdr | 93 70 5c 9f 9f 0d 51 32 b7 | | SELECT_UID
570489586 | 570493106 | Tag | 08 b6 dd | |
573523136 | 573524128 | Rdr | 52 | | WUPA
573525748 | 573528116 | Tag | 04 00 | |
573541332 | 573551796 | Rdr | 93 70 5c 9f 9f 0d 51 32 b7 | | SELECT_UID
573553288 | 573556808 | Tag | 08 b6 dd | |
The trace above is shallow and only shows UID reads. Here’s a trace of a full read where actual blocks are being read.
Start | End | Src | Data (! denotes parity error) | CRC | Annotation |
-----------|-----------|-----|-----------------------------------------------------------------|-----|--------------------|
0 | 1056 | Rdr | 26 | | REQA
2356 | 4724 | Tag | 04 00 | |
13468 | 15932 | Rdr | 93 20 | | ANTICOLL
17552 | 23440 | Tag | 5c 9f 9f 0d 51 | |
44800 | 55264 | Rdr | 93 70 5c 9f 9f 0d 51 32 b7 | | SELECT_UID
56884 | 60404 | Tag | 08 b6 dd | |
3090516 | 3091508 | Rdr | 52 | | WUPA
3093064 | 3095432 | Tag | 04 00 | |
3108792 | 3119256 | Rdr | 93 70 5c 9f 9f 0d 51 32 b7 | | SELECT_UID
3120876 | 3124396 | Tag | 08 b6 dd | |
6153690 | 6154682 | Rdr | 52 | | WUPA
6156302 | 6158670 | Tag | 04 00 | |
6171840 | 6182304 | Rdr | 93 70 5c 9f 9f 0d 51 32 b7 | | SELECT_UID
6183988 | 6187508 | Tag | 08 b6 dd | |
8131362 | 8132354 | Rdr | 52 | | WUPA
8134102 | 8136470 | Tag | 04 00 | |
8149878 | 8160342 | Rdr | 93 70 5c 9f 9f 0d 51 32 b7 | | SELECT_UID
8161770 | 8165290 | Tag | 08 b6 dd | |
11196216 | 11197208 | Rdr | 52 | | WUPA
11198828 | 11201196 | Tag | 04 00 | |
11214556 | 11225020 | Rdr | 93 70 5c 9f 9f 0d 51 32 b7 | | SELECT_UID
11226640 | 11230160 | Tag | 08 b6 dd | |
13398804 | 13403508 | Rdr | 60 00 f5 7b | | AUTH-A(0)
13407816 | 13412552 | Tag | 01 02 03 04 | |
13413914 | 13423226 | Rdr | 1e 25 05 2f 09 9c da 01 | !crc| ?
13431566 | 13436238 | Tag | a2 d5 c8 d7 | |
14870812 | 14875516 | Rdr | 60 00 f5 7b | | AUTH-A(0)
14881936 | 14886672 | Tag | fe ad 30 a1 | |
14888212 | 14897524 | Rdr | da 5d 8c 54 3c bc f0 d7 | !crc| ?
14905544 | 14910280 | Tag | 7e b4 92 10 | |
14971264 | 14976032 | Rdr | 30 00 02 a8 | | READBLOCK(0)
14990260 | 15011060 | Tag | 6a! 4e! a0! f2! 0e! 2b 62! 5b bf! 5e! c7! c9 cc d4 21 f2 | |
| | | 14 70! | !crc|
15888824 | 15893528 | Rdr | 30 01 8b b9 | | READBLOCK(1)
15907820 | 15928620 | Tag | 67! f6 7a! 04 33 cc a4! 50 52! 06! e1 18! ad! 12 b6! ea | |
| | | e0 cb! | !crc|
17072476 | 17077180 | Rdr | 30 02 10 8b | | READBLOCK(2)
17091472 | 17112336 | Tag | fa f6 cc! eb f0! e1 4e 80 25! 5e! e2! 7d 74! 07 f9! 91 | |
| | | ee! 03! | !crc|
18554422 | 18559190 | Rdr | 30 03 99 9a | | READBLOCK(3)
18573418 | 18594218 | Tag | 48 0d e0 b8 9b! 3d 36! 0e! d1! 83 54! 27 e3 56 27 ef! | |
| | | 6e 1b | !crc|
19397110 | 19401878 | Rdr | 60 04 d1 3d | | AUTH-A(4)
19408106 | 19412842 | Tag | fe ad 30 a1 | |
19414198 | 19423574 | Rdr | f2 d0 e7 f6 18 a3 a8 a9 | !crc| ?
19431786 | 19436522 | Tag | 4b 7d be b5 | |
20589978 | 20594682 | Rdr | 30 04 26 ee | | READBLOCK(4)
20609038 | 20629838 | Tag | 5c! 1d! 05! a1! 7c! 3a! 79 dd 46 dd! f5 d6! 48 d4! 05 46 | |
| | | 1a! 44 | !crc|
21545434 | 21550202 | Rdr | 30 05 af ff | | READBLOCK(5)
21564430 | 21585230 | Tag | d3! 70! 54! 7c! 12! 13! 2a! 88! 89! 12 0e! 6c! 09! 9d! ba! cc | |
| | | f9! c3 | !crc|
22581952 | 22586656 | Rdr | 30 06 34 cd | | READBLOCK(6)
22601012 | 22621812 | Tag | 17 b8! 3f! 39! 67 25 15! 48 c4 45! b8 96 f2 03 96 82 | |
| | | fd! a2! | !crc|
24288220 | 24292924 | Rdr | 30 07 bd dc | | READBLOCK(7)
24307216 | 24328080 | Tag | 38 e6 b8 91 78 31 3c cb d2! e3 c6 7f! 73 8c 74! fa! | |
| | | 43! 3e | !crc|
25036800 | 25041568 | Rdr | 60 08 bd f7 | | AUTH-A(8)
25047860 | 25052596 | Tag | fe ad 30 a1 | |
25054134 | 25063446 | Rdr | 56 0d b3 97 23 58 dd 47 | !crc| ?
25071466 | 25076138 | Tag | a4 37 2e fc | |
26194388 | 26199156 | Rdr | 30 08 4a 24 | | READBLOCK(8)
26213320 | 26234184 | Tag | 37 91! b0! b2 ca 2a 33 00 c8 71 02 87 c0 28! 99 8a! | |
| | | c1 ef | !crc|
27257378 | 27262146 | Rdr | 30 09 c3 35 | | READBLOCK(9)
27276502 | 27297366 | Tag | 33! a7! b8! a3! e9 7f! 94! 32 53 64! 3c! 35 a4 b9! e0! 12 | |
| | | 19 2b! | !crc|
28273216 | 28277984 | Rdr | 30 0a 58 07 | | READBLOCK(10)
28292276 | 28313140 | Tag | b6 b5 73! 78 e6 5d a7! 6e 95! c1 a1 51 29! 24! 77 70 | |
| | | 24 b8! | !crc|
29249656 | 29254360 | Rdr | 30 0b d1 16 | | READBLOCK(11)
29268460 | 29289260 | Tag | 5c f1 44 51! a9! 76! 95 bb! 20! fe 70! 5f f1! a5! 32 d0 | |
| | | 71! 5f | !crc|
29958676 | 29963380 | Rdr | 60 0c 99 b1 | | AUTH-A(12)
29969608 | 29974344 | Tag | fe ad 30 a1 | |
29975764 | 29985140 | Rdr | 3f 07 62 7a 82 83 80 64 | !crc| ?
29993288 | 29997960 | Tag | f3 4c 67 30 | |
31075866 | 31080570 | Rdr | 30 0c 6e 62 | | READBLOCK(12)
31094926 | 31115790 | Tag | bb! 3f 4e 32 33! 6f 3c! 31 29 11 94! 38 ab! da 37 3b! | |
| | | 17 ce | !crc|
32052992 | 32057696 | Rdr | 30 0d e7 73 | | READBLOCK(13)
32071988 | 32092788 | Tag | 37! e2 94 39! 03! b9! 42! 9d af! 5d 6d 31! 8c! 64 27 6a! | |
| | | 24! 69 | !crc|
33201406 | 33206174 | Rdr | 30 0e 7c 41 | | READBLOCK(14)
33220274 | 33241138 | Tag | ff! a7! 92 01! aa! 71! 33 52 2b f2! be 2a! 8c! d0! 9a! 99 | |
| | | 79! 0c! | !crc|
34139062 | 34143766 | Rdr | 30 0f f5 50 | | READBLOCK(15)
34157802 | 34178666 | Tag | 6b! 19! 5d 4a! 77 4d! aa d7! 8a! 5a b3 8e! 26 32 1c! c9 | |
| | | 68 fb | !crc|
34932472 | 34937240 | Rdr | 60 10 74 6b | | AUTH-A(16)
34943468 | 34948204 | Tag | fe ad 30 a1 | |
34949568 | 34958880 | Rdr | 0e cc 1b 8d d4 14 23 97 | !crc| ?
34967220 | 34971956 | Tag | a8 65 5d 75 | |
36259802 | 36264570 | Rdr | 30 10 83 b8 | | READBLOCK(16)
36278670 | 36299470 | Tag | 47 82 12! 35! bb 2a f5! 79! a0! 61! 58! bc! 60 fe! 76! 6c! | |
| | | 4e! 4d | !crc|
37263202 | 37267906 | Rdr | 30 11 0a a9 | | READBLOCK(17)
37282262 | 37303062 | Tag | 7e! 1f 4d 66! f7! a0! 05! 85 71! b1 6a! 19! a0! a3! 6d ad | |
| | | b0 7d | !crc|
38276544 | 38281312 | Rdr | 30 12 91 9b | | READBLOCK(18)
38295604 | 38316468 | Tag | a6 8a! de! 73 f3 48 66! e9! 4e d4 e2 b4 26! e6 97 e5! | |
| | | 85! c2 | !crc|
39230336 | 39235104 | Rdr | 30 13 18 8a | | READBLOCK(19)
39249332 | 39270132 | Tag | 63! 06 df! c7 92! 17 db b7! ec 27! 36 65! 5c 4f ae 86! | |
| | | aa 08! | !crc|
42238804 | 42243572 | Rdr | 60 14 50 2d | | AUTH-A(20)
42249800 | 42254536 | Tag | fe ad 30 a1 | |
42255898 | 42265210 | Rdr | 2f e0 65 80 d9 da 4c 96 | !crc| ?
42273550 | 42278286 | Tag | b6 fe 27 f7 | |
43290360 | 43295128 | Rdr | 30 14 a7 fe | | READBLOCK(20)
43309292 | 43330156 | Tag | b2 90 d2 10 db 78 58! 7c! 6c bc! 94 d7 7e 84! 4f! 0e | |
| | | 26 b9 | !crc|
44232832 | 44237536 | Rdr | 30 15 2e ef | | READBLOCK(21)
44251828 | 44272692 | Tag | 4d d4! bb 80! c2! 8c 37 89! 80! b4! 41 e8 94! bc d1 18! | |
| | | a0 56! | !crc|
45172160 | 45176928 | Rdr | 30 16 b5 dd | | READBLOCK(22)
45191220 | 45212084 | Tag | 8f! c6 86! 4e 96! 8b! 6f 9c 80 9f! e3! c6! 37 ff 70 2b | |
| | | 9b! 20 | !crc|
46048026 | 46052730 | Rdr | 30 17 3c cc | | READBLOCK(23)
46067086 | 46087950 | Tag | 13! b7 51 6a ad 02! e5 68 6c! 09! da! 55 3d 44! 26! f1 | |
| | | bf! 82! | !crc|
46877332 | 46882036 | Rdr | 60 18 3c e7 | | AUTH-A(24)
46888136 | 46892872 | Tag | fe ad 30 a1 | |
46894242 | 46903618 | Rdr | 4d f2 53 49 69 c6 51 81 | !crc| ?
46911958 | 46916694 | Tag | 37 8a 46 4f | |
47947968 | 47952736 | Rdr | 30 18 cb 34 | | READBLOCK(24)
47967028 | 47987892 | Tag | a4 bd! f7! 50! 21 fa! f3 e2! 8b! 37 33 b0 e5! 38 59 e8! | |
| | | c8 83 | !crc|
48899392 | 48904160 | Rdr | 30 19 42 25 | | READBLOCK(25)
48918452 | 48939252 | Tag | 2c 3f! 51! 32 b7! 4d 30 3c! 0d 1f f7! 14! 8f c7 0d 37 | |
| | | 82 84 | !crc|
49827490 | 49832258 | Rdr | 30 1a d9 17 | | READBLOCK(26)
49846614 | 49867478 | Tag | 27! f1! 20 55 bc! 62! 30 ac 7a! 3e 2f! 58! 68 c5 d8 c0 | |
| | | d7! bb! | !crc|
50783770 | 50788474 | Rdr | 30 1b 50 06 | | READBLOCK(27)
50802830 | 50823630 | Tag | 1d! 16 66! 46 fc! 62 9a! 0a! da! 80! 57! db 39! b0 a8! 6b | |
| | | cd a1! | !crc|
51543038 | 51547806 | Rdr | 60 1c 18 a1 | | AUTH-A(28)
51553970 | 51558706 | Tag | fe ad 30 a1 | |
51560220 | 51569596 | Rdr | 0c b0 10 73 43 b7 d4 e7 | !crc| ?
51577616 | 51582352 | Tag | e7 3e 66 04 | |
52773624 | 52778392 | Rdr | 30 1c ef 72 | | READBLOCK(28)
52792556 | 52813356 | Tag | 23 c9! 6b! e4 74 c4! e0 73 15! 20 93! 63! d3 63! 6d 45 | |
| | | 32! c0 | !crc|
53663864 | 53668632 | Rdr | 30 1d 66 63 | | READBLOCK(29)
53682796 | 53703660 | Tag | e1! 93 98! 78! 87! ad! 1c 19! 44 8a cb! ec! 7a! de 92 6d | |
| | | 80! 06! | !crc|
54689080 | 54693848 | Rdr | 30 1e fd 51 | | READBLOCK(30)
54708076 | 54728940 | Tag | 3e f3 d6 11 30 1e be e4 5a 94! 74 ca! 15 ef 2b 2a! | |
| | | 41 6a! | !crc|
55616320 | 55621024 | Rdr | 30 1f 74 40 | | READBLOCK(31)
55635380 | 55656180 | Tag | 5c 69! 00! 0a! c4! e1! e2! 5c 8f 55! 9e e4 41! 8c 36! ae! | |
| | | 06! 61! | !crc|
56561920 | 56566688 | Rdr | 60 20 f7 5a | | AUTH-A(32)
56572980 | 56577716 | Tag | fe ad 30 a1 | |
56579070 | 56588446 | Rdr | 07 33 e5 fd 1a 4f b6 be | !crc| ?
56596658 | 56601330 | Tag | 09 8c 9b 84 | |
57712276 | 57716980 | Rdr | 30 20 00 89 | | READBLOCK(32)
57731144 | 57752008 | Tag | 6f! ed d8 6a 26 fb! 2c 65! 93! bd! f5! 11 b8! f7 eb 60! | |
| | | c0 98 | !crc|
58679586 | 58684354 | Rdr | 30 21 89 98 | | READBLOCK(33)
58698710 | 58719510 | Tag | 2e 20 6b! 32! de! 6f 22 70 69 7e 7e! 9f f6 56! 83! f4! | |
| | | 85! 08! | !crc|
59577172 | 59581940 | Rdr | 30 22 12 aa | | READBLOCK(34)
59596104 | 59616968 | Tag | dd d0! 52 2f e1 c6 de! 91 c3 b4! 9f 0c! 17! 75 c5! 1b | |
| | | 01! c4 | !crc|
60572706 | 60577474 | Rdr | 30 23 9b bb | | READBLOCK(35)
60591830 | 60612694 | Tag | 1e ed 1f! 4d! 2c 96! 4c 54! 81 7e db 1b! 5e e4 d3 42 | |
| | | 4e a6! | !crc|
61311030 | 61315798 | Rdr | 60 24 d3 1c | | AUTH-A(36)
61322090 | 61326826 | Tag | fe ad 30 a1 | |
61328220 | 61337532 | Rdr | 96 a9 b0 1e d4 52 6c e8 | !crc| ?
61345808 | 61350480 | Tag | 96 bb 93 7e | |
62413146 | 62417914 | Rdr | 30 24 24 cf | | READBLOCK(36)
62432142 | 62452942 | Tag | 93 92 71! c9! 21! 3d 65! 25 d5! 64! 38! f8 07! 2a! 82 ec! | |
| | | 89! bc! | !crc|
63348442 | 63353210 | Rdr | 30 25 ad de | | READBLOCK(37)
63367438 | 63388302 | Tag | 49! a2! 5c 30 12! 47 7a! b2 04 23 d9 c9! 0f! 65! 11! 0d | |
| | | da! 48! | !crc|
64237922 | 64242626 | Rdr | 30 26 36 ec | | READBLOCK(38)
64256982 | 64277846 | Tag | a1! ac! a9! 23 bb! 47! 83! e0! 4a 8d! 2b! 19! a8 a7! b8 18 | |
| | | 8d! e7! | !crc|
65152284 | 65156988 | Rdr | 30 27 bf fd | | READBLOCK(39)
65171344 | 65192144 | Tag | 92 24! fc! 90! ec! 8d! 10! 67 8c! 0a c7! 47! e2 0d 5e! 91 | |
| | | 4f! 0e! | !crc|
65892984 | 65897688 | Rdr | 60 28 bf d6 | | AUTH-A(40)
65903980 | 65908716 | Tag | fe ad 30 a1 | |
65910134 | 65919510 | Rdr | 84 ee 40 dc 3c 92 de 2f | !crc| ?
65927658 | 65932330 | Tag | d1 ba ef 8d | |
66972470 | 66977238 | Rdr | 30 28 48 05 | | READBLOCK(40)
66991466 | 67012330 | Tag | dd 8c! bc 9b 89 af 12! b1 a2! b0 89! e4 f0 96! c7 4f! | |
| | | 9f! 47! | !crc|
67865918 | 67870622 | Rdr | 30 29 c1 14 | | READBLOCK(41)
67884978 | 67905842 | Tag | 3e! 6e cd! be 6c 82 5c 40! 48! 4d! 33! f1 41 22! 81! 67 | |
| | | 52 57 | !crc|
68799614 | 68804382 | Rdr | 30 2a 5a 26 | | READBLOCK(42)
68818610 | 68839474 | Tag | 40 b7! 63 88! f5! ed bc 53! ed 7a 8d! 3d! 7e! 8b 9c 34 | |
| | | 74 30! | !crc|
69695542 | 69700246 | Rdr | 30 2b d3 37 | | READBLOCK(43)
69714410 | 69735274 | Tag | 3a af 91 ac 3f! 70 84 57 16 f7! 9f 3d 48! 6e! 21 a9 | |
| | | 84! 35! | !crc|
70385378 | 70390082 | Rdr | 60 2c 9b 90 | | AUTH-A(44)
70396502 | 70401238 | Tag | fe ad 30 a1 | |
70402586 | 70411898 | Rdr | 8a 77 00 29 53 fe df 8d | !crc| ?
70420238 | 70424974 | Tag | 6e 5b 8d 85 | |
71417728 | 71422432 | Rdr | 30 2c 6c 43 | | READBLOCK(44)
71436724 | 71457588 | Tag | 0b 79 43 cf 6e c9 5c! 1d! 11 ee f4! bc! 76! ae! 3e! 30 | |
| | | ab e7! | !crc|
72359480 | 72364184 | Rdr | 30 2d e5 52 | | READBLOCK(45)
72378476 | 72399276 | Tag | 1d 9c! 77! 8f 81! a5! 21! 41! f3! 97 bd 72 6a 60! af! fb | |
| | | b8 b4 | !crc|
73367096 | 73371864 | Rdr | 30 2e 7e 60 | | READBLOCK(46)
73386092 | 73406956 | Tag | 69 a6 9a! 85! 00! d1! 53! 1d! a7 15 43 1d! 7b! e7! 9f! c3 | |
| | | 87 38 | !crc|
74257370 | 74262138 | Rdr | 30 2f f7 71 | | READBLOCK(47)
74276366 | 74297166 | Tag | c2 16 ca 4b 41 79! 0b 08! c3! ed! 8e! 28! f4 f2! 81 ff | |
| | | 84! b7 | !crc|
74984340 | 74989044 | Rdr | 60 30 76 4a | | AUTH-A(48)
74995272 | 75000008 | Tag | fe ad 30 a1 | |
75001372 | 75010684 | Rdr | 65 2d ed 2a b7 6f f5 b8 | !crc| ?
75019024 | 75023696 | Tag | 78 71 c3 87 | |
76037338 | 76042106 | Rdr | 30 30 81 99 | | READBLOCK(48)
76056334 | 76077198 | Tag | c3 26 4d 5a 54! e0 d9! e0! cc! 93 ae 2f ad 3d 03! 7f | |
| | | d8! 67 | !crc|
76922850 | 76927554 | Rdr | 30 31 08 88 | | READBLOCK(49)
76941910 | 76962710 | Tag | 00 3a! 01! 4e f2 6b! 78! 3d 85! 22! d9 a3 c0! cd 91 09! | |
| | | fe! ee | !crc|
78021440 | 78026208 | Rdr | 30 32 93 ba | | READBLOCK(50)
78040500 | 78061364 | Tag | 8a! 9e 43 81! 7f 57 c3! 21 12! 7b 9e f3 56 de e0 43! | |
| | | 61 7d! | !crc|
78945600 | 78950368 | Rdr | 30 33 1a ab | | READBLOCK(51)
78964660 | 78985524 | Tag | b1! 68 58! 2b 73 d2! 34! a9 4f db b1! 7c! 55! 50! 1a 5e | |
| | | 51 67 | !crc|
79630804 | 79635572 | Rdr | 60 34 52 0c | | AUTH-A(52)
79641800 | 79646536 | Tag | fe ad 30 a1 | |
79647900 | 79657212 | Rdr | fd 6e ac ac da 58 17 0f | !crc| ?
79665552 | 79670288 | Tag | e2 d9 dc bc | |
80698332 | 80703100 | Rdr | 30 34 a5 df | | READBLOCK(52)
80717328 | 80738192 | Tag | 6e! d2! 15! ba! 52! 10! b0 cb! d2! a5! ab 77! f5! 7d! 4b! 67 | |
| | | 34 93! | !crc|
81539476 | 81544180 | Rdr | 30 35 2c ce | | READBLOCK(53)
81558344 | 81579208 | Tag | 57 8f! 10 0f! f7! b4! a7! 44 66! 41! c1! 7c fd! 72 7c! 58 | |
| | | 66! 85 | !crc|
82399934 | 82404638 | Rdr | 30 36 b7 fc | | READBLOCK(54)
82418994 | 82439858 | Tag | 1a! 5c! 7b 90! 81! 7b 72 10 59! 6d! 70 a9! 91 59! af! bd! | |
| | | ec 6f! | !crc|
83333630 | 83338398 | Rdr | 30 37 3e ed | | READBLOCK(55)
83352626 | 83373426 | Tag | ac 2d 59 05! 38 f4! ed! 5a! 88! 15 a0! b4! 36 b3! b5! 35 | |
| | | 30! fb! | !crc|
84069376 | 84074144 | Rdr | 60 38 3e c6 | | AUTH-A(56)
84080436 | 84085172 | Tag | fe ad 30 a1 | |
84086710 | 84096022 | Rdr | 22 1a 35 7c 68 49 36 ba | !crc| ?
84104042 | 84108778 | Tag | de cf b5 a4 | |
85171420 | 85176124 | Rdr | 30 38 c9 15 | | READBLOCK(56)
85190416 | 85211216 | Tag | 87 60! 1b b4! b3 b3! 9c c2! da! b8! 75! d4! cb 13! 38 b9 | |
| | | 5a! 4f! | !crc|
86047230 | 86051998 | Rdr | 30 39 40 04 | | READBLOCK(57)
86066226 | 86087090 | Tag | 5e! b4 3e 35 82! dd 3a 30 56! 1d 76 37 3d 4b! 37 a5 | |
| | | ed 26 | !crc|
87013276 | 87018044 | Rdr | 30 3a db 36 | | READBLOCK(58)
87032080 | 87052880 | Tag | 2f 45 99! 89 0d! 7a 79! 2a! c2 cb! 4c 7b! 4b c6 ea! 5c | |
| | | 55 1c! | !crc|
87914622 | 87919390 | Rdr | 30 3b 52 27 | | READBLOCK(59)
87933618 | 87954482 | Tag | 12! 12! ba! 73 32 5c e1 45 6a 10! 47 03! ee bf 5c! 06 | |
| | | 66! 1f | !crc|
88603064 | 88607768 | Rdr | 60 3c 1a 80 | | AUTH-A(60)
88614124 | 88618860 | Tag | fe ad 30 a1 | |
88620216 | 88629592 | Rdr | fb 01 d2 3a 85 c2 3d f2 | !crc| ?
88637804 | 88642540 | Tag | 0b ca 31 2c | |
89701182 | 89705886 | Rdr | 30 3c ed 53 | | READBLOCK(60)
89720242 | 89741106 | Tag | 58 9d! 20 41! f7! 2c! 80 5b ad b5 7b 64! 5c 8e 76 9f | |
| | | 71 9e | !crc|
90765212 | 90769980 | Rdr | 30 3d 64 42 | | READBLOCK(61)
90784144 | 90805008 | Tag | 1d! a3! 51! 80 f5 f2! 58! f0 76! 60 38 29 5f bc 23 d9! | |
| | | 4f! 7c | !crc|
91702036 | 91706740 | Rdr | 30 3e ff 70 | | READBLOCK(62)
91720904 | 91741704 | Tag | 55! 6b 95! 71 7c 8d! 3d! 58 45 eb! 8b 5c! e7! 1f c7! 52 | |
| | | ee! 05 | !crc|
92702292 | 92707060 | Rdr | 30 3f 76 61 | | READBLOCK(63)
92721224 | 92742088 | Tag | db 25 18 c1! 6f! 92! 03! 56! 24! 08 b3 5e e8! ba 10! 0d | |
| | | f2 1b! | !crc|
114724222 | 114725214 | Rdr | 52 | | WUPA
114726834 | 114729202 | Tag | 04 00 | |
114742498 | 114752962 | Rdr | 93 70 5c 9f 9f 0d 51 32 b7 | | SELECT_UID
114754646 | 114758166 | Tag | 08 b6 dd | |
117787446 | 117788438 | Rdr | 52 | | WUPA
117790058 | 117792426 | Tag | 04 00 | |
117805722 | 117816186 | Rdr | 93 70 5c 9f 9f 0d 51 32 b7 | | SELECT_UID
117817870 | 117821390 | Tag | 08 b6 dd | |
120850716 | 120851708 | Rdr | 52 | | WUPA
120853264 | 120855632 | Tag | 04 00 | |
120868962 | 120879426 | Rdr | 93 70 5c 9f 9f 0d 51 32 b7 | | SELECT_UID
120881110 | 120884630 | Tag | 08 b6 dd | |
proxmark3>
Here’s the resulting card information obtained through Cardpeek.
Also in Blog
Proxmark Pro - Sniffing a Mifare Desfire 4K Tag
This post covers how to Sniff a Mifare Desfire 4K tag with the ProxmarkPro.
ProxmarkPro - Sniffing a Mifare 4K Tag
This post covers how to Sniff a Mifare 4K tag with the ProxmarkPro.
ProxmarkPro - Sniffing a Mifare 1K Tag
This post covers how to sniff a Mifare 1K tag with the ProxmarkPro.