Proxmark3 community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

Announcement

Time changes and with it the technology
Proxmark3 @ discord

Users of this forum, please be aware that information stored on this site is not private.

#1 2020-06-06 06:03:22

emersonxr3
Contributor
Registered: 2020-03-20
Posts: 26

help help format mifare 7byte

folks i really need your help, i have an original 7byte card used in transport i would like to format this card to restore another dump but i can't format the error in sector 13 here are sector data and sorry for my bad english

proxmark3> hf mf rdsc 13 b 9c6ba726e044
--sector no:13 key type:B key:9c 6b a7 26 e0 44

#db# READ SECTOR FINISHED
isOk:01
data   : 9b ff ff 7f 64 00 00 80 9b ff ff 7f 00 ff 00 ff
data   : 9b ff ff 7f 64 00 00 80 9b ff ff 7f 00 ff 00 ff
data   : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
trailer: 00 00 00 00 00 00 73 c4 b8 00 00 00 00 00 00 00
Trailer decoded:
Access block 52: read AB; decrement transfer restore AB
Access block 53: read AB; decrement transfer restore AB
Access block 54: read AB; writeB
Access block 55: read ACCESS by AB
UserData: 00
proxmark3>/

Offline

#2 2020-06-07 10:50:51

Monster1024
Contributor
Registered: 2020-05-05
Posts: 33

Re: help help format mifare 7byte

Replace KEYB with your keyb for current sector.
After that you can write dump with hf mf restore.

hf mf wrbl 3 B KEYB FFFFFFFFFFFFFF078000FFFFFFFFFFFF
hf mf wrbl 7 B KEYB FFFFFFFFFFFFFF078000FFFFFFFFFFFF
hf mf wrbl 11 B KEYB FFFFFFFFFFFFFF078000FFFFFFFFFFFF
hf mf wrbl 15 B KEYB FFFFFFFFFFFFFF078000FFFFFFFFFFFF
hf mf wrbl 19 B KEYB FFFFFFFFFFFFFF078000FFFFFFFFFFFF
hf mf wrbl 23 B KEYB FFFFFFFFFFFFFF078000FFFFFFFFFFFF
hf mf wrbl 27 B KEYB FFFFFFFFFFFFFF078000FFFFFFFFFFFF
hf mf wrbl 31 B KEYB FFFFFFFFFFFFFF078000FFFFFFFFFFFF
hf mf wrbl 35 B KEYB FFFFFFFFFFFFFF078000FFFFFFFFFFFF
hf mf wrbl 39 B KEYB FFFFFFFFFFFFFF078000FFFFFFFFFFFF
hf mf wrbl 43 B KEYB FFFFFFFFFFFFFF078000FFFFFFFFFFFF
hf mf wrbl 47 B KEYB FFFFFFFFFFFFFF078000FFFFFFFFFFFF
hf mf wrbl 51 B KEYB FFFFFFFFFFFFFF078000FFFFFFFFFFFF
hf mf wrbl 55 B KEYB FFFFFFFFFFFFFF078000FFFFFFFFFFFF
hf mf wrbl 59 B KEYB FFFFFFFFFFFFFF078000FFFFFFFFFFFF
hf mf wrbl 63 B KEYB FFFFFFFFFFFFFF078000FFFFFFFFFFFF

Offline

#3 2020-06-07 17:12:21

emersonxr3
Contributor
Registered: 2020-03-20
Posts: 26

Re: help help format mifare 7byte

thanks for your reply friend more seems to not work I will post the error below

proxmark3> hf mf wrbl 7 B 9c6ba726e044 FFFFFFFFFFFFFF078000FFFFFFFFFFFF
--block no:7, key type:B, key:9c 6b a7 26 e0 44
--data: ff ff ff ff ff ff ff 07 80 00 ff ff ff ff ff ff
#db# Cmd Error: 04
#db# Write block error
isOk:00

Offline

#4 2020-06-07 19:19:44

Monster1024
Contributor
Registered: 2020-05-05
Posts: 33

Re: help help format mifare 7byte

Your keyB didn't have write access (I got same error when I f*cked up access conditions block). You can try with KEYA. And try checking you access conditions.

hf mf wrbl 7 A KEYA FFFFFFFFFFFFFF078000FFFFFFFFFFFF

Last edited by Monster1024 (2020-06-07 19:21:31)

Offline

#5 2020-06-07 20:14:40

emersonxr3
Contributor
Registered: 2020-03-20
Posts: 26

Re: help help format mifare 7byte

again thank you very much for your attention to my post i will put here the access conditions and other information

pm3 --> hf search
 UID : 04 9D 51 22 7E 62 80
ATQA : 00 44
 SAK : 08 [2]
TYPE : NXP MIFARE CLASSIC 1k | Plus 2k SL1 | 1k Ev1
MANUFACTURER : NXP Semiconductors Germany
SAK incorrectly claims that card doesn't support RATS
 ATS : 0C 75 77 80 02 C1 05 2F 2F 01 BC D6 60 D3
       -  TL : length is 12 bytes
       -  T0 : TA1 is present, TB1 is present, TC1 is present, FSCI is 5 (FSC = 64)
       - TA1 : different divisors are supported, DR: [2, 4, 8], DS: [2, 4, 8]
       - TB1 : SFGI = 0 (SFGT = (not needed) 0/fc), FWI = 8 (FWT = 1048576/fc)
       - TC1 : NAD is NOT supported, CID is supported
[=] Answers to magic commands: NO
[+] Prng detection: HARD

[+] Valid ISO14443-A Tag Found

pm3 -->
proxmark3> hf mf rdsc 3 B 9c6ba726e044
--sector no:3 key type:B key:9c 6b a7 26 e0 44

isOk:01
data   : 32 14 8c f3 e5 9f 95 16 28 bf 87 4f 51 a7 b9 fd
data   : df 5b d9 4b 21 eb 66 6e 45 0a 06 76 45 a5 50 4e
data   : 0e fc 49 c2 d6 b5 24 34 b4 13 dc 48 8f c0 e5 6a
trailer: 00 00 00 00 00 00 73 cc 38 00 00 00 00 00 00 00
Trailer decoded:
Access block 12: read AB; decrement transfer restore AB
Access block 13: read AB; decrement transfer restore AB
Access block 14: read AB; writeB
Access block 15: read ACCESS by AB
UserData: 00
proxmark3>

it seems to be impossible to write on this tag. but there's a guy who can do this

Offline

#6 2020-06-07 20:20:47

Monster1024
Contributor
Registered: 2020-05-05
Posts: 33

Re: help help format mifare 7byte

Please post here  "hf mf autopwn" results. This will help, because include all the keys.

Last edited by Monster1024 (2020-06-07 20:20:55)

Offline

#7 2020-06-07 20:27:29

emersonxr3
Contributor
Registered: 2020-03-20
Posts: 26

Re: help help format mifare 7byte

here is a result this tag uses only two keys. I want to find out how the guy managed to get back the credits for this tag because it seems impossible

proxmark3> hf mf chk *2 ? teste.txt
--chk keys. sectors:32, block no:  0, key type:?, eml:n, dmp=n checktimeout=471 us
chk custom key[ 0] ffffffffffff
chk custom key[ 1] 9c6ba726e044

To cancel this operation press the button on the proxmark...
--#db# ChkKeys: Can't select card
o
|---|----------------|----------------|
|sec|key A           |key B           |
|---|----------------|----------------|
|000|  ffffffffffff  |  ffffffffffff  |
|001|  9c6ba726e044  |  9c6ba726e044  |
|002|  9c6ba726e044  |  9c6ba726e044  |
|003|  9c6ba726e044  |  9c6ba726e044  |
|004|  9c6ba726e044  |  9c6ba726e044  |
|005|  9c6ba726e044  |  9c6ba726e044  |
|006|  9c6ba726e044  |  9c6ba726e044  |
|007|  9c6ba726e044  |  9c6ba726e044  |
|008|  9c6ba726e044  |  9c6ba726e044  |
|009|  9c6ba726e044  |  9c6ba726e044  |
|010|  9c6ba726e044  |  9c6ba726e044  |
|011|  9c6ba726e044  |  9c6ba726e044  |
|012|  9c6ba726e044  |  9c6ba726e044  |
|013|  9c6ba726e044  |  9c6ba726e044  |
|014|  9c6ba726e044  |  9c6ba726e044  |
|015|  9c6ba726e044  |  9c6ba726e044  |
|016|  ffffffffffff  |  ffffffffffff  |
|017|  ffffffffffff  |  ffffffffffff  |
|018|  ffffffffffff  |  ffffffffffff  |
|019|  ffffffffffff  |  ffffffffffff  |
|020|  ffffffffffff  |  ffffffffffff  |
|021|  ffffffffffff  |  ffffffffffff  |
|022|  ffffffffffff  |  ffffffffffff  |
|023|  ffffffffffff  |  ffffffffffff  |
|024|  ffffffffffff  |  ffffffffffff  |
|025|  ffffffffffff  |  ffffffffffff  |
|026|  ffffffffffff  |  ffffffffffff  |
|027|  ffffffffffff  |  ffffffffffff  |
|028|  ffffffffffff  |  ffffffffffff  |
|029|  ffffffffffff  |  ffffffffffff  |
|030|  ffffffffffff  |  ffffffffffff  |
|031|  ffffffffffff  |  ffffffffffff  |
|---|----------------|----------------|

proxmark3>

Offline

#8 2020-06-07 20:41:39

Monster1024
Contributor
Registered: 2020-05-05
Posts: 33

Re: help help format mifare 7byte

Oh yep, according to access conditions on your sector 3, you can't write to block 15 (to replace access conditions), but you can write to block 14 (I don't know is it matters to you?).
So, yep, you can't restore whole card - but can write to some allowed blocks.

ex:
>hf mf wrbl 14 B 9c6ba726e044 0efc49c2d6b52434b413dc488fc0e56a

Also, because it is transport card and may be refilled, I think that your balance can be in writable block. You can refill it and compare dumps smile

Last edited by Monster1024 (2020-06-07 20:48:21)

Offline

#9 2020-06-07 20:49:08

emersonxr3
Contributor
Registered: 2020-03-20
Posts: 26

Re: help help format mifare 7byte

how would I restore to factory defaults?
or write the same data from sector 16

Offline

#10 2020-06-07 21:04:10

Monster1024
Contributor
Registered: 2020-05-05
Posts: 33

Re: help help format mifare 7byte

because your card hasn't any 'backdoor' commands (not a Chinese card), you can't restore it to factory defaults; neither rewrite access conditions.

But you transport system can write data to it - so you can do it too. Maybe you don't need to write ALL block's, just some of them.

Last edited by Monster1024 (2020-06-07 21:28:42)

Offline

#11 2020-06-07 22:06:41

emersonxr3
Contributor
Registered: 2020-03-20
Posts: 26

Re: help help format mifare 7byte

just one more question how do i know the right blocks to write?

Offline

#12 2020-06-08 00:09:20

Winds
Member
Registered: 2020-01-28
Posts: 53

Re: help help format mifare 7byte

emersonxr3 wrote:

just one more question how do i know the right blocks to write?

I using way for rewrite ACs from the script, becomes from this video https://yev.ooo/PqtG

Offline

#13 2020-06-08 01:09:41

Monster1024
Contributor
Registered: 2020-05-05
Posts: 33

Re: help help format mifare 7byte

>just one more question how do i know the right blocks to write?

make 2 dumps of same card (original and after any money refill), and look at dumps smile
The changed value is your goal.

P.S. Just to be sure, that you know: You can't write other card dump to original card (because balance value is signed with card UID). But you can always use chineese gen3 and write anywhere including block 0/UID smile

Offline

#14 2020-06-08 02:21:28

emersonxr3
Contributor
Registered: 2020-03-20
Posts: 26

Re: help help format mifare 7byte

I will test this tomorrow and post an answer about the experience

Offline

#15 2020-06-08 23:54:56

emersonxr3
Contributor
Registered: 2020-03-20
Posts: 26

Re: help help format mifare 7byte

Hello my friends !
I did a test today and found that the card has an original signature how do I copy the signature which proxmark command I use

Offline

#16 2020-06-09 07:27:25

Monster1024
Contributor
Registered: 2020-05-05
Posts: 33

Re: help help format mifare 7byte

What is signature? where did you find it?

Offline

#17 2020-06-09 09:46:37

iceman
Administrator
Registered: 2013-04-25
Posts: 9,506
Website

Re: help help format mifare 7byte

You can only read the signature.  You can't write the signature on MFC.

Offline

#18 2020-06-09 12:46:57

emersonxr3
Contributor
Registered: 2020-03-20
Posts: 26

Re: help help format mifare 7byte

I want to restore only the credit

Last edited by emersonxr3 (2020-06-10 00:08:08)

Offline

#19 2020-06-10 18:02:55

Monster1024
Contributor
Registered: 2020-05-05
Posts: 33

Re: help help format mifare 7byte

Upload both dumps with credit amount info (how many credits per each dump). Maybe we will find something interesting inside. Did you search info at metrodroid ?

Last edited by Monster1024 (2020-06-10 18:03:47)

Offline

#20 2020-06-11 01:55:31

emersonxr3
Contributor
Registered: 2020-03-20
Posts: 26

Re: help help format mifare 7byte

Offline

#21 2020-06-11 14:05:32

Ollibolli
Contributor
Registered: 2019-04-27
Posts: 51

Re: help help format mifare 7byte

Which credit amount is on the dump?

Last edited by Ollibolli (2020-06-11 14:05:56)

Offline

#22 2020-06-11 19:03:07

emersonxr3
Contributor
Registered: 2020-03-20
Posts: 26

Re: help help format mifare 7byte

credit 4.70

Offline

#23 2020-06-11 21:10:13

Ollibolli
Contributor
Registered: 2019-04-27
Posts: 51

Re: help help format mifare 7byte

Can you upload a dump with a less credit amount from the same card?

Last edited by Ollibolli (2020-06-11 21:11:22)

Offline

#24 2020-06-12 00:36:54

emersonxr3
Contributor
Registered: 2020-03-20
Posts: 26

Re: help help format mifare 7byte

unfortunately the minimum purchase price and this

Offline

#25 2020-06-13 22:47:27

Ollibolli
Contributor
Registered: 2019-04-27
Posts: 51

Re: help help format mifare 7byte

What is the minimum purchase price?

Offline

#26 2020-06-13 23:29:36

emersonxr3
Contributor
Registered: 2020-03-20
Posts: 26

Re: help help format mifare 7byte

4.70

Offline

#27 2020-06-13 23:31:46

emersonxr3
Contributor
Registered: 2020-03-20
Posts: 26

Re: help help format mifare 7byte

if i managed to format the whole card it would be enough just to restore the data

Offline

#28 2020-06-13 23:36:24

emersonxr3
Contributor
Registered: 2020-03-20
Posts: 26

Re: help help format mifare 7byte

I did the formatting with the script, take a look below

[usb] pm3 --> script run formatMifare -k de1fcbec764b -n ffffffffffff -a 787788 -x
[+] executing lua C:\prox64\win64\luascripts/formatMifare.lua
[+] args '-k de1fcbec764b -n ffffffffffff -a 787788 -x'
----------------------------------------
----------------------------------------

Found:  NXP MIFARE CLASSIC 1k | Plus 2k
Estimating number of blocks: 63
Old key:    de1fcbec764b
New key:    ffffffffffff
New Access: 787788
----------------------------------------
###     New sector-trailer : ffffffffffff78778800ffffffffffff
###     New emptyblock: 00000000000000000000000000000000
###
[Warning] you have used the EXECUTE parameter, which means this will run these commands against card.
Do you want to erase this card [y/n] ?y
----------------------------------------
hf mf wrbl 1 B de1fcbec764b 00000000000000000000000000000000
--block no:1, key type:B, key:DE 1F CB EC 76 4B
--data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
#db# Auth error
isOk:00
hf mf wrbl 2 B de1fcbec764b 00000000000000000000000000000000
--block no:2, key type:B, key:DE 1F CB EC 76 4B
--data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
#db# Auth error
isOk:00
hf mf wrbl 3 B de1fcbec764b ffffffffffff78778800ffffffffffff
--block no:3, key type:B, key:DE 1F CB EC 76 4B
--data: FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF
#db# Auth error
isOk:00
hf mf wrbl 4 B de1fcbec764b 00000000000000000000000000000000
--block no:4, key type:B, key:DE 1F CB EC 76 4B
--data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
isOk:01
hf mf wrbl 5 B de1fcbec764b 00000000000000000000000000000000
--block no:5, key type:B, key:DE 1F CB EC 76 4B
--data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
isOk:01
hf mf wrbl 6 B de1fcbec764b 00000000000000000000000000000000
--block no:6, key type:B, key:DE 1F CB EC 76 4B
--data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
isOk:01
hf mf wrbl 7 B de1fcbec764b ffffffffffff78778800ffffffffffff
--block no:7, key type:B, key:DE 1F CB EC 76 4B
--data: FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF
isOk:01
hf mf wrbl 8 B de1fcbec764b 00000000000000000000000000000000
--block no:8, key type:B, key:DE 1F CB EC 76 4B
--data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
isOk:01
hf mf wrbl 9 B de1fcbec764b 00000000000000000000000000000000
--block no:9, key type:B, key:DE 1F CB EC 76 4B
--data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
isOk:01
hf mf wrbl 10 B de1fcbec764b 00000000000000000000000000000000
--block no:10, key type:B, key:DE 1F CB EC 76 4B
--data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
isOk:01
hf mf wrbl 11 B de1fcbec764b ffffffffffff78778800ffffffffffff
--block no:11, key type:B, key:DE 1F CB EC 76 4B
--data: FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF
isOk:01
hf mf wrbl 12 B de1fcbec764b 00000000000000000000000000000000
--block no:12, key type:B, key:DE 1F CB EC 76 4B
--data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
isOk:01
hf mf wrbl 13 B de1fcbec764b 00000000000000000000000000000000
--block no:13, key type:B, key:DE 1F CB EC 76 4B
--data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
isOk:01
hf mf wrbl 14 B de1fcbec764b 00000000000000000000000000000000
--block no:14, key type:B, key:DE 1F CB EC 76 4B
--data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
isOk:01
hf mf wrbl 15 B de1fcbec764b ffffffffffff78778800ffffffffffff
--block no:15, key type:B, key:DE 1F CB EC 76 4B
--data: FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF
isOk:01
hf mf wrbl 16 B de1fcbec764b 00000000000000000000000000000000
--block no:16, key type:B, key:DE 1F CB EC 76 4B
--data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
isOk:01
hf mf wrbl 17 B de1fcbec764b 00000000000000000000000000000000
--block no:17, key type:B, key:DE 1F CB EC 76 4B
--data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
isOk:01
hf mf wrbl 18 B de1fcbec764b 00000000000000000000000000000000
--block no:18, key type:B, key:DE 1F CB EC 76 4B
--data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
isOk:01
hf mf wrbl 19 B de1fcbec764b ffffffffffff78778800ffffffffffff
--block no:19, key type:B, key:DE 1F CB EC 76 4B
--data: FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF
isOk:01
hf mf wrbl 20 B de1fcbec764b 00000000000000000000000000000000
--block no:20, key type:B, key:DE 1F CB EC 76 4B
--data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
isOk:01
hf mf wrbl 21 B de1fcbec764b 00000000000000000000000000000000
--block no:21, key type:B, key:DE 1F CB EC 76 4B
--data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
isOk:01
hf mf wrbl 22 B de1fcbec764b 00000000000000000000000000000000
--block no:22, key type:B, key:DE 1F CB EC 76 4B
--data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
isOk:01
hf mf wrbl 23 B de1fcbec764b ffffffffffff78778800ffffffffffff
--block no:23, key type:B, key:DE 1F CB EC 76 4B
--data: FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF
isOk:01
hf mf wrbl 24 B de1fcbec764b 00000000000000000000000000000000
--block no:24, key type:B, key:DE 1F CB EC 76 4B
--data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
isOk:01
hf mf wrbl 25 B de1fcbec764b 00000000000000000000000000000000
--block no:25, key type:B, key:DE 1F CB EC 76 4B
--data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
isOk:01
hf mf wrbl 26 B de1fcbec764b 00000000000000000000000000000000
--block no:26, key type:B, key:DE 1F CB EC 76 4B
--data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
isOk:01
hf mf wrbl 27 B de1fcbec764b ffffffffffff78778800ffffffffffff
--block no:27, key type:B, key:DE 1F CB EC 76 4B
--data: FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF
isOk:01
hf mf wrbl 28 B de1fcbec764b 00000000000000000000000000000000
--block no:28, key type:B, key:DE 1F CB EC 76 4B
--data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
isOk:01
hf mf wrbl 29 B de1fcbec764b 00000000000000000000000000000000
--block no:29, key type:B, key:DE 1F CB EC 76 4B
--data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
isOk:01
hf mf wrbl 30 B de1fcbec764b 00000000000000000000000000000000
--block no:30, key type:B, key:DE 1F CB EC 76 4B
--data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
isOk:01
hf mf wrbl 31 B de1fcbec764b ffffffffffff78778800ffffffffffff
--block no:31, key type:B, key:DE 1F CB EC 76 4B
--data: FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF
isOk:01
hf mf wrbl 32 B de1fcbec764b 00000000000000000000000000000000
--block no:32, key type:B, key:DE 1F CB EC 76 4B
--data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
isOk:01
hf mf wrbl 33 B de1fcbec764b 00000000000000000000000000000000
--block no:33, key type:B, key:DE 1F CB EC 76 4B
--data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
isOk:01
hf mf wrbl 34 B de1fcbec764b 00000000000000000000000000000000
--block no:34, key type:B, key:DE 1F CB EC 76 4B
--data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
isOk:01
hf mf wrbl 35 B de1fcbec764b ffffffffffff78778800ffffffffffff
--block no:35, key type:B, key:DE 1F CB EC 76 4B
--data: FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF
isOk:01
hf mf wrbl 36 B de1fcbec764b 00000000000000000000000000000000
--block no:36, key type:B, key:DE 1F CB EC 76 4B
--data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
isOk:01
hf mf wrbl 37 B de1fcbec764b 00000000000000000000000000000000
--block no:37, key type:B, key:DE 1F CB EC 76 4B
--data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
isOk:01
hf mf wrbl 38 B de1fcbec764b 00000000000000000000000000000000
--block no:38, key type:B, key:DE 1F CB EC 76 4B
--data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
isOk:01
hf mf wrbl 39 B de1fcbec764b ffffffffffff78778800ffffffffffff
--block no:39, key type:B, key:DE 1F CB EC 76 4B
--data: FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF
isOk:01
hf mf wrbl 40 B de1fcbec764b 00000000000000000000000000000000
--block no:40, key type:B, key:DE 1F CB EC 76 4B
--data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
isOk:01
hf mf wrbl 41 B de1fcbec764b 00000000000000000000000000000000
--block no:41, key type:B, key:DE 1F CB EC 76 4B
--data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
isOk:01
hf mf wrbl 42 B de1fcbec764b 00000000000000000000000000000000
--block no:42, key type:B, key:DE 1F CB EC 76 4B
--data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
isOk:01
hf mf wrbl 43 B de1fcbec764b ffffffffffff78778800ffffffffffff
--block no:43, key type:B, key:DE 1F CB EC 76 4B
--data: FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF
isOk:01
hf mf wrbl 44 B de1fcbec764b 00000000000000000000000000000000
--block no:44, key type:B, key:DE 1F CB EC 76 4B
--data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
isOk:01
hf mf wrbl 45 B de1fcbec764b 00000000000000000000000000000000
--block no:45, key type:B, key:DE 1F CB EC 76 4B
--data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
isOk:01
hf mf wrbl 46 B de1fcbec764b 00000000000000000000000000000000
--block no:46, key type:B, key:DE 1F CB EC 76 4B
--data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
isOk:01
hf mf wrbl 47 B de1fcbec764b ffffffffffff78778800ffffffffffff
--block no:47, key type:B, key:DE 1F CB EC 76 4B
--data: FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF
isOk:01
hf mf wrbl 48 B de1fcbec764b 00000000000000000000000000000000
--block no:48, key type:B, key:DE 1F CB EC 76 4B
--data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
isOk:01
hf mf wrbl 49 B de1fcbec764b 00000000000000000000000000000000
--block no:49, key type:B, key:DE 1F CB EC 76 4B
--data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
isOk:01
hf mf wrbl 50 B de1fcbec764b 00000000000000000000000000000000
--block no:50, key type:B, key:DE 1F CB EC 76 4B
--data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
isOk:01
hf mf wrbl 51 B de1fcbec764b ffffffffffff78778800ffffffffffff
--block no:51, key type:B, key:DE 1F CB EC 76 4B
--data: FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF
isOk:01
hf mf wrbl 52 B de1fcbec764b 00000000000000000000000000000000
--block no:52, key type:B, key:DE 1F CB EC 76 4B
--data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
#db# Auth error
isOk:00
hf mf wrbl 53 B de1fcbec764b 00000000000000000000000000000000
--block no:53, key type:B, key:DE 1F CB EC 76 4B
--data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
#db# Auth error
isOk:00
hf mf wrbl 54 B de1fcbec764b 00000000000000000000000000000000
--block no:54, key type:B, key:DE 1F CB EC 76 4B
--data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
#db# Auth error
isOk:00
hf mf wrbl 55 B de1fcbec764b ffffffffffff78778800ffffffffffff
--block no:55, key type:B, key:DE 1F CB EC 76 4B
--data: FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF
#db# Auth error
isOk:00
hf mf wrbl 56 B de1fcbec764b 00000000000000000000000000000000
--block no:56, key type:B, key:DE 1F CB EC 76 4B
--data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
#db# Auth error
isOk:00
hf mf wrbl 57 B de1fcbec764b 00000000000000000000000000000000
--block no:57, key type:B, key:DE 1F CB EC 76 4B
--data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
#db# Auth error
isOk:00
hf mf wrbl 58 B de1fcbec764b 00000000000000000000000000000000
--block no:58, key type:B, key:DE 1F CB EC 76 4B
--data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
#db# Auth error
isOk:00
hf mf wrbl 59 B de1fcbec764b ffffffffffff78778800ffffffffffff
--block no:59, key type:B, key:DE 1F CB EC 76 4B
--data: FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF
#db# Auth error
isOk:00
hf mf wrbl 60 B de1fcbec764b 00000000000000000000000000000000
--block no:60, key type:B, key:DE 1F CB EC 76 4B
--data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
#db# Auth error
isOk:00
hf mf wrbl 61 B de1fcbec764b 00000000000000000000000000000000
--block no:61, key type:B, key:DE 1F CB EC 76 4B
--data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
#db# Auth error
isOk:00
hf mf wrbl 62 B de1fcbec764b 00000000000000000000000000000000
--block no:62, key type:B, key:DE 1F CB EC 76 4B
--data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
#db# Auth error
isOk:00
hf mf wrbl 63 B de1fcbec764b ffffffffffff78778800ffffffffffff
--block no:63, key type:B, key:DE 1F CB EC 76 4B
--data: FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF
#db# Auth error
isOk:00

[+] finished formatMifare

[usb] pm3 -->
[usb] pm3 --> script run mifare_access -a 73c4b800
[+] executing lua C:\prox64\win64\luascripts/mifare_access.lua
[+] args '-a 73c4b800'
----------------------------------------
----------------------------------------

--> block 0
                   read: key A|B
                  write: never
                    inc: never
decr, transfer, restore: key A|B
--> block 1
                   read: key A|B
                  write: never
                    inc: never
decr, transfer, restore: key A|B
--> block 2
                   read: key A|B
                  write: key B
                    inc: never
decr, transfer, restore: never
--> block 3
     KEYSECXA read: never
    KEYSECXA write: never
 ACCESS COND. read: key A|B
ACCESS COND. write: never
     KEYSECXB read: never
    KEYSECXB write: never
GPB: 00

[+] finished mifare_access

[usb] pm3 -->

Last edited by emersonxr3 (2020-06-13 23:45:39)

Offline

Board footer

Powered by FluxBB