Proxmark3 community

Skeltek

Contributor

Registered: 2017-12-31

Posts: 19

[solved] Hardnested keeps crashing

Hi, whenever I try anything including hardnested, the gui freezes, then Windows10 gives a message: "proxmark3 no longer works" ad the program terminates.
Here is some data on what I got:

Elechouse Proxmark3 RDV

proxmark3> hw tune
Measuring antenna characteristics, please wait.........
# LF antenna: 45.51 V @   125.00 kHz
# LF antenna: 20.35 V @   134.00 kHz
# LF optimal: 46.20 V @   123.71 kHz
# HF antenna: 31.73 V @    13.56 MHz
Displaying LF tuning graph. Divisor 89 is 134khz, 95 is 125khz.

proxmark3> hw version
[[[ Cached information ]]]
Prox/RFID mark3 RFID instrument
bootrom: master/v3.0.1-238-ge1e7a09-suspect 2017-12-31 12:48:06
os: master/v3.0.1-238-ge1e7a09-suspect 2017-12-31 12:48:34
LF FPGA image built for 2s30vq100 on 2015/03/06 at 07:38:04
HF FPGA image built for 2s30vq100 on 2017/10/27 at 08:30:59

uC: AT91SAM7S512 Rev B
Embedded Processor: ARM7TDMI
Nonvolatile Program Memory Size: 512K bytes. Used: 199370 bytes (38%). Free: 324918 bytes (62%).
Second Nonvolatile Program Memory Size: None
Internal SRAM Size: 64K bytes
Architecture Identifier: AT91SAM7Sxx Series
Nonvolatile Program Memory Type: Embedded Flash Memory

I got the proxspace-Master fork and proxmark3 client folder from GitHub, copied the folder into proxspace, compiled with "make clean && make all", flashed bootrom, updated firmware.

We are doing the project for my IT-security2 class, so I use my Student ID for testing. It showed:
proxmark3> hf search
UID : xx xx xx xx
ATQA : 00 04
SAK : 08 [2]
TYPE : NXP MIFARE CLASSIC 1k | Plus 2k SL1
proprietary non iso14443-4 card found, RATS not supported
No chinese magic backdoor command detected
Prng detection: HARDEND (hardnested)
Valid ISO14443A Tag Found - Quiting Search

Got a key with:
proxmark3> hf mf chk *1 ? d
No key specified, trying default keys
chk default key[ 0] ffffffffffff
chk default key[ 1] 000000000000
chk default key[ 2] a0a1a2a3a4a5
chk default key[ 3] b0b1b2b3b4b5
chk default key[ 4] aabbccddeeff
chk default key[ 5] 1a2b3c4d5e6f
chk default key[ 6] 123456789abc
chk default key[ 7] 010203040506
chk default key[ 8] 123456abcdef
chk default key[ 9] abcdef123456
chk default key[10] 4d3a99c351dd
chk default key[11] 1a982c7e459a
chk default key[12] d3f7d3f7d3f7
chk default key[13] 714c5c886e97
chk default key[14] 587ee5f9350f
chk default key[15] a0478cc39091
chk default key[16] 533cb6c723f6
chk default key[17] 8fd0a4f256e9

To cancel this operation press the button on the proxmark...
--o
|---|----------------|---|----------------|---|
|sec|key A           |res|key B           |res|
|---|----------------|---|----------------|---|
|000|  a0a1a2a3a4a5  | 1 |  ffffffffffff  | 0 |
|001|  ffffffffffff  | 0 |  ffffffffffff  | 0 |
|002|  ffffffffffff  | 0 |  ffffffffffff  | 0 |
|003|  ffffffffffff  | 0 |  ffffffffffff  | 0 |
|004|  ffffffffffff  | 0 |  ffffffffffff  | 0 |
|005|  ffffffffffff  | 0 |  ffffffffffff  | 0 |
|006|  ffffffffffff  | 0 |  ffffffffffff  | 0 |
|007|  ffffffffffff  | 0 |  ffffffffffff  | 0 |
|008|  ffffffffffff  | 0 |  ffffffffffff  | 0 |
|009|  ffffffffffff  | 0 |  ffffffffffff  | 0 |
|010|  ffffffffffff  | 0 |  ffffffffffff  | 0 |
|011|  ffffffffffff  | 0 |  ffffffffffff  | 0 |
|012|  ffffffffffff  | 0 |  ffffffffffff  | 0 |
|013|  ffffffffffff  | 0 |  ffffffffffff  | 0 |
|014|  ffffffffffff  | 0 |  ffffffffffff  | 0 |
|015|  ffffffffffff  | 0 |  ffffffffffff  | 0 |
|---|----------------|---|----------------|---|
Found keys have been dumped to file dumpkeys.bin. 0xffffffffffff has been inserted for unknown keys.

Whenever I type
proxmark3> hf mf hardnested 0 A A0A1A2A3A4A5 4 A FFFFFFFFFFFF
--target block no:  4, target key type:A, known target key: 0xffffffffffff, file action: none, Slow: No, Tests: 0

or anything similar -> it just  crashes after 10 seconds

Not sure what Im doing wrong of if I should just try another build or fork.

Would appreciate some help.

Last edited by Skeltek (2018-01-07 16:22:56)

iceman

Administrator

Registered: 2013-04-25

Posts: 9,538

Website

Re: [solved] Hardnested keeps crashing

Do you get any output from when you run hardnested?

btw, your known targetkey is wrong,... try without it.

Skeltek

Contributor

Registered: 2017-12-31

Posts: 19

Re: [solved] Hardnested keeps crashing

I do not get any output from when I run hardnested. it just crashes after '--target block no:  4, target key type:A, known target key: 0xffffffffffff, file action: none, Slow: No, Tests: 0'. Takes about ~8 seconds, then Windows informs me about the application no longer working and all I can do is choose 'debug' or 'close application'.

I dont really know what you mean, the documentation in the help is a bit hard to understand properly.
It said:
Add the known target key to check if it is present in the remaining key space:
      sample5: hf mf hardnested 0 A A0A1A2A3A4A5 4 A FFFFFFFFFFFF
So I just tried that out.
Also tried all possible kinds of variantions.

Skeltek

Contributor

Registered: 2017-12-31

Posts: 19

Re: [solved] Hardnested keeps crashing

Problem was resolved. The firmware from github a few days ago seemed faulty.
Hardnested works fine after yesterday downloading and compiling slightly newer sourcecode.