Proxmark3 community

bigd

Contributor

Registered: 2017-02-28

Posts: 4

Mifare opened sector but not sure how to interpret results

Hi,

We have been running the hf mf  sniff command and we get the following output:

key> 2338b4913111
dec> 30 3c ed 53
dec> 1a db a0 01 00 00 00 00 00 00 00 00 00 00 00 00 a9 05
dec> 6d 30

I have opened a sector that we think stores the card number and facility code on a 26 bit Weigand Mifare 1k classic and when we open the sector using the key 2338b4913111. We get the following:

#db# READ SECTOR FINISHED         
isOk:01         
data   : 1a db a0 01 00 00 00 00 00 00 00 00 00 00 00 00           
data   : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00           
data   : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00           
trailer: 00 00 00 00 00 00 7f 07 88 00 00 00 00 00 00 00

The facility code on the card is 183, we are not sure from here how to get the facility code and card number from the Read Sector Command, can anyone point us in the right direction?

Thank you.

D.

Last edited by bigd (2017-02-28 23:15:59)

bigd

Contributor

Registered: 2017-02-28

Posts: 4

Re: Mifare opened sector but not sure how to interpret results

Just as a follow-up.  Even though we see the same hex values on a sniff with every read of the card on a reader could the data be encrypted in some way?

iceman

Administrator

Registered: 2013-04-25

Posts: 9,507

Website

Re: Mifare opened sector but not sure how to interpret results

The data is not encrypted, given the fact there is a lot of zeros in the output. Encrypted data looks random.
You just need to look at the first block data,  where you actually have some data  1adba001...
See if you can find some wiegand in that.

bigd

Contributor

Registered: 2017-02-28

Posts: 4

Re: Mifare opened sector but not sure how to interpret results

There does not seem to be a 183 in that data anywhere.  Not sure how it can be formatted.