haabands.blogg.se

loaded 1024 bytes from text file hf-mf-B4EE8234-data.eml Answers to magic commands (GEN 1a): YESĪt this point we can write the dump to the Chinese card: pm3 -> hf mf cload hf-mf-B4EE8234-dump.eml proprietary non iso14443-4 card found, RATS not supported TYPE : NXP MIFARE CLASSIC 1k | Plus 2k SL1 | 1k Ev1 The proxmark client will tell you if the card will answer to magic commands as highlighted in the command output: pm3 -> hf search However there are some Chinese sellers that sell so called “ Magic” or “ UID block 0” modifiable cards where block 0 is (re)writable. Therefore there is no way to change the UID on normal MiFare card. As I learned then the first block of any MiFare card is called the “Manufacturers block” and it is not writable by default. saved to json file hf-mf-B4EE8234-data.json Writing the dump to a new card*Īt this point I thought I hit the jackpot and could just write the dump to any blank MiFare card without issues but no. saved 64 blocks to text file hf-mf-B4EE8234-data.eml saved 1024 bytes to binary file hf-mf-B4EE8234-data.bin Found keys have been dumped to hf-mf-0EAE239A-key.bin | 015 | ffffffffffff | 1 | ffffffffffff | 1 | | 014 | ffffffffffff | 1 | ffffffffffff | 1 | | 013 | ffffffffffff | 1 | ffffffffffff | 1 | | 012 | ffffffffffff | 1 | ffffffffffff | 1 | | 011 | ffffffffffff | 1 | ffffffffffff | 1 | | 010 | ffffffffffff | 1 | ffffffffffff | 1 | | 009 | ffffffffffff | 1 | ffffffffffff | 1 |

| 008 | ffffffffffff | 1 | ffffffffffff | 1 | | 007 | ffffffffffff | 1 | ffffffffffff | 1 | | 006 | ffffffffffff | 1 | ffffffffffff | 1 | | 005 | ffffffffffff | 1 | ffffffffffff | 1 | | 004 | ffffffffffff | 1 | ffffffffffff | 1 | | 003 | ffffffffffff | 1 | ffffffffffff | 1 | | 002 | ffffffffffff | 1 | ffffffffffff | 1 | | 001 | ffffffffffff | 1 | ffffffffffff | 1 | | 000 | ffffffffffff | 1 | ffffffffffff | 1 | Running fchk with the –dump option will test for default keys and will dump them if successful. There are some default keys that manufacturers use and that are never changed. The RRG / Iceman git repo (found here: )īefore being able to dump the content of the card, the keys have to be obtained.In this post I will share how to clone a MiFare Classic card using the Proxmark 3 Easy.