Proxmark developers community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

#1 2018-04-06 10:37:44

falio
Contributor
Registered: 2018-04-04
Posts: 8

No Key Found NXP Mifare Classic 4k

Hi im new in this community. I have some difficulty with the Mifare Classic 4k as they doesnt reveal any key at all. I have successfully cloning a Mifare Classic 1k but have some difficulty with the 4k.

Proxmark3 RFID instrument

 [ ARM ]
 bootrom: iceman/master/ice_v3.1.0-765-g089beed4 2018-03-29 19:51:24
      os: iceman/master/ice_v3.1.0-765-g089beed4 2018-03-29 19:51:29
 [ FPGA ]
 LF image built for 2s30vq100 on 2017/10/25 at 19:50:50
 HF image built for 2s30vq100 on 2017/11/10 at 19:24:16

 [ Hardware ]
  --= uC: AT91SAM7S256 Rev D
  --= Embedded Processor: ARM7TDMI
  --= Nonvolatile Program Memory Size: 256K bytes, Used: 255312 bytes (97%) Free: 6832 bytes ( 3%)
  --= Second Nonvolatile Program Memory Size: None
  --= Internal SRAM Size: 64K bytes
  --= Architecture Identifier: AT91SAM7Sxx Series
  --= Nonvolatile Program Memory Type: Embedded Flash Memory

This is my proxmark3 easy using latest bootroom and os

The card that im using

pm3 --> hf se

 UID : EF A9 19 B5
ATQA : 00 02
 SAK : 18 [2]
TYPE : NXP MIFARE Classic 4k | Plus 4k SL1 | 4k Ev1
SAK incorrectly claims that card doesn't support RATS
 ATS : 0E 75 77 80 02 D0 07 00 02 00 E4 EF 75 0A 45 0F
       -  TL : length is 14 bytes
       -  T0 : TA1 is present, TB1 is present, TC1 is present, FSCI is 5 (FSC = 64)
       - TA1 : different divisors are supported, DR: [2, 4, 8], DS: [2, 4, 8]
       - TB1 : SFGI = 0 (SFGT = (not needed) 0/fc), FWI = 8 (FWT = 1048576/fc)
       - TC1 : NAD is NOT supported, CID is supported
Answers to magic commands: NO
Prng detection: WEAK
Valid ISO14443-A Tag Found

The command that i used

pm3 --> hf mf chk *4 ? d
No key specified, trying default keys
[ 0] ffffffffffff
[ 1] 000000000000
[ 2] a0a1a2a3a4a5
[ 3] b0b1b2b3b4b5
[ 4] c0c1c2c3c4c5
[ 5] d0d1d2d3d4d5
[ 6] aabbccddeeff
[ 7] 1a2b3c4d5e6f
[ 8] 123456789abc
[ 9] 010203040506
[10] 123456abcdef
[11] abcdef123456
[12] 4d3a99c351dd
[13] 1a982c7e459a
[14] d3f7d3f7d3f7
[15] 714c5c886e97
[16] 587ee5f9350f
[17] a0478cc39091
[18] 533cb6c723f6
[19] 8fd0a4f256e9
................................................................................Time in checkkeys: 41 seconds

testing to read key B...
|---|----------------|---|----------------|---|
|sec|key A           |res|key B           |res|
|---|----------------|---|----------------|---|
|000|  ------------  | 0 |  ------------  | 0 |
|001|  ------------  | 0 |  ------------  | 0 |
|002|  ------------  | 0 |  ------------  | 0 |
|003|  ------------  | 0 |  ------------  | 0 |
|004|  ------------  | 0 |  ------------  | 0 |
|005|  ------------  | 0 |  ------------  | 0 |
|006|  ------------  | 0 |  ------------  | 0 |
|007|  ------------  | 0 |  ------------  | 0 |
|008|  ------------  | 0 |  ------------  | 0 |
|009|  ------------  | 0 |  ------------  | 0 |
|010|  ------------  | 0 |  ------------  | 0 |
|011|  ------------  | 0 |  ------------  | 0 |
|012|  ------------  | 0 |  ------------  | 0 |
|013|  ------------  | 0 |  ------------  | 0 |
|014|  ------------  | 0 |  ------------  | 0 |
|015|  ------------  | 0 |  ------------  | 0 |
|016|  ------------  | 0 |  ------------  | 0 |
|017|  ------------  | 0 |  ------------  | 0 |
|018|  ------------  | 0 |  ------------  | 0 |
|019|  ------------  | 0 |  ------------  | 0 |
|020|  ------------  | 0 |  ------------  | 0 |
|021|  ------------  | 0 |  ------------  | 0 |
|022|  ------------  | 0 |  ------------  | 0 |
|023|  ------------  | 0 |  ------------  | 0 |
|024|  ------------  | 0 |  ------------  | 0 |
|025|  ------------  | 0 |  ------------  | 0 |
|026|  ------------  | 0 |  ------------  | 0 |
|027|  ------------  | 0 |  ------------  | 0 |
|028|  ------------  | 0 |  ------------  | 0 |
|029|  ------------  | 0 |  ------------  | 0 |
|030|  ------------  | 0 |  ------------  | 0 |
|031|  ------------  | 0 |  ------------  | 0 |
|032|  ------------  | 0 |  ------------  | 0 |
|033|  ------------  | 0 |  ------------  | 0 |
|034|  ------------  | 0 |  ------------  | 0 |
|035|  ------------  | 0 |  ------------  | 0 |
|036|  ------------  | 0 |  ------------  | 0 |
|037|  ------------  | 0 |  ------------  | 0 |
|038|  ------------  | 0 |  ------------  | 0 |
|039|  ------------  | 0 |  ------------  | 0 |
|---|----------------|---|----------------|---|
Printing keys to binary file hf-mf-EFA919B5-key.bin...
Found keys have been dumped to file hf-mf-EFA919B5-key.bin. 0xffffffffffff has been inserted for unknown keys.

There are no keys to be use.This is my first time handling this because the mifare 1k that i clone works like a charm.

next i try the darkside attack

pm3 --> hf mf darkside
--------------------------------------------------------------------------------

executing Darkside attack. Expected execution time: 25sec on average
press pm3-button on the proxmark3 device to abort both proxmark3 and client.
--------------------------------------------------------------------------------

.
card is not vulnerable to Darkside attack (its random number generator is not predictable).

Does this means that this card is uncrackable as its key are protected?
i hope the everyone could help me smile as im running out of ideas what to do next

Offline

#2 2018-04-06 11:14:10

iceman
Administrator
Registered: 2013-04-25
Posts: 4,849
Website

Re: No Key Found NXP Mifare Classic 4k

to only option left is to sniff a transaction between valid reader  & tag and hope you get one key off from there.
Once you have one key, you can use hardnested to find the rest.

Interesting output:
Prng detection: WEAK   vs  card is not vulnerable to darkside
but since darkside uses both nack bug & weak prng in order to work its possible.

try

hf 14a info n

冰人

modhex(hkhehghthbhudcfcdchkigiehgduiehg)

Offline

#3 2018-04-06 11:26:13

falio
Contributor
Registered: 2018-04-04
Posts: 8

Re: No Key Found NXP Mifare Classic 4k

Thank you for the reply. yes you are right. maybe sniffing would do the trick. seems like theres no other option available.

pm3 --> hf 14a info n
 UID : EF A9 19 B5
ATQA : 00 02
 SAK : 18 [2]
TYPE : NXP MIFARE Classic 4k | Plus 4k SL1 | 4k Ev1
SAK incorrectly claims that card doesn't support RATS
 ATS : 0E 75 77 80 02 D0 07 00 02 00 E4 EF 75 0A 45 0F
       -  TL : length is 14 bytes
       -  T0 : TA1 is present, TB1 is present, TC1 is present, FSCI is 5 (FSC = 64)
       - TA1 : different divisors are supported, DR: [2, 4, 8], DS: [2, 4, 8]
       - TB1 : SFGI = 0 (SFGT = (not needed) 0/fc), FWI = 8 (FWT = 1048576/fc)
       - TC1 : NAD is NOT supported, CID is supported
Answers to magic commands: NO
Prng detection: WEAK
...
detection failed

Does this means that there is no nack bug yikes

Offline

#4 2018-04-06 11:35:10

iceman
Administrator
Registered: 2013-04-25
Posts: 4,849
Website

Re: No Key Found NXP Mifare Classic 4k

yup.  only sniffing left.


冰人

modhex(hkhehghthbhudcfcdchkigiehgduiehg)

Offline

#5 2018-04-08 09:46:20

falio
Contributor
Registered: 2018-04-04
Posts: 8

Re: No Key Found NXP Mifare Classic 4k

Okay update on the sniffing. Actually im a bit confuse which command to use sniff or snoop. I think it is sniff so i try sniffing with a reader. However i did not know how to interpret the data i get.

pm3 --> hf 14a sniff
#db# Starting to sniff
#db# maxDataLen=155, Uart.state=0, Uart.len=0
#db# traceLen=1550, Uart.output[0]=00000000

then i use the list

pm3 --> hf 14a list
trace pointer not allocated
Recorded Activity (TraceLen = 1550 bytes)

Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer
iso14443a - All times are in carrier periods (1/13.56Mhz)

      Start |        End | Src | Data (! denotes parity error)                                           | CRC | Annotation
------------+------------+-----+-------------------------------------------------------------------------+-----+--------------------
          0 |       2368 | Tag |02  00                                                                   |     |        
      23920 |      29808 | Tag |ef  d5  2f  b7  a2                                                       |     |        
      58080 |      61664 | Tag |18  37  cd                                                               |     |        
      88784 |      93456 | Tag |42  0a  4f  ee                                                           |     |        
     105424 |     110160 | Tag |22  92  05! d2!                                                          |     |        
     128192 |     149056 | Tag |3a! ee! ae  41  9c  a6! 3f! 6a! 26  27  72  2f! 07  14  37  41  83  c4   | !crc|        
     248112 |     252848 | Tag |3a  cb  73  da                                                           |     |        
     264768 |     269504 | Tag |7e! 12! 26! bc                                                           |     |        
     287152 |     308016 | Tag |20! fc! 15  6f! d9  cc  8a! 37! 6a! 31! 08! dd! 68! a1  69  d4! e4! 9e   | !crc|        
     326560 |     347424 | Tag |4d! 47  db  da  51  e1  e1! 0b! 48  2e  97! b6  0b  0e  16! 2e! 5a  56!  | !crc|        
     375952 |     380624 | Tag |8f! ab  94! ef!                                                          |     |        
     392592 |     397264 | Tag |ce! ac! 25! 06                                                           |     |        
     414976 |     435840 | Tag |44  e5! cd! 5e! 7e! 6c  37  07  09  7e! af  9c  3f  dd  91! 9c  34! ae   | !crc|        
     454512 |     475312 | Tag |e0! c3! e0! 77  f5! a4! b9! 8e  8c! ac! e7! 75  a9! 9d  85! ea! 26! f3   | !crc|        
     494048 |     514848 | Tag |c1  da! bc! 32! 34! 92! 36! 41  5e! 62! 54! fc  20  b9  25! 66  e3  a5   | !crc|        
     543696 |     548368 | Tag |bc  31  c7! fb!                                                          |     |        
     560336 |     565072 | Tag |a7! 5c! 9b! 34                                                           |     |        
     582864 |     603728 | Tag |f0! 59! 71  52! 1a! 56  3a! 95! 1f! 6e! e8  e2! 2f! 80! 50  c8! b7  d0   | !crc|        
     633408 |     638080 | Tag |ea! 6a  1c  57!                                                          |     |        
     650048 |     654784 | Tag |1a! fe! ec! 05!                                                          |     |        
     673456 |     694320 | Tag |23  f6! 75! 5c  ac  44  e0! 03! 67  21! be  62! a3! 67  db  c8! b1! 6a!  | !crc|        
     715680 |     736544 | Tag |14  02! 38  61! d4! 2e  52  2e  fa  e8  64! f8! 62  4b  a2  09! 2e  2c   | !crc|        
     756240 |     777040 | Tag |c0! af  78! 01! 9e! 7c  fb! c8  81! 99! 8d! d1! 89! ee! 3b  83  fa! f1!  | !crc|        
     806656 |     811392 | Tag |ab  2e  d8  2c                                                           |     |        
     823296 |     828032 | Tag |ba  a8! 20! 0c!                                                          |     |        
     852208 |     873072 | Tag |5d  fd  7d! 9b! 84  6c  c8  eb  f8  bb! 69! 01  9f! 61! 14! a9  a1! 70   | !crc|        
     902880 |     907616 | Tag |4d  47  7f  bf                                                           |     |        
     919536 |     924272 | Tag |68! 74  ef! 47!                                                          |     |        
     942048 |     962912 | Tag |0f! d3  76  8f  61  58! 60! 18! 22! ab  20! 52  c7! bd! 2d  4d! b6  7d!  | !crc|        
     983888 |     984528 | Tag |00!                                                                      |     |        
    1080896 |    1081472 | Tag |0b                                                                       |     |        
    1100592 |    1121392 | Tag |a8! a8! cd  31  4d! 4c  c7  8c! bf! ce! 79  21! 09! cc  ea! 83! 5f! 89!  | !crc|        
    1150240 |    1154976 | Tag |4d! 10! 22! 40                                                           |     |        
    1166880 |    1171616 | Tag |47  ce! e8! 0b                                                           |     |        
    1190672 |    1211536 | Tag |0e  6b  92  b9  54  8c  db  b3! 98  cb  a8! aa  1e! ee! 03  1d! bd! 86   | !crc|        
    1231232 |    1231872 | Tag |05!                                                                      |     |        
    1327744 |    1328320 | Tag |0d                                                                       |     |        
    1347568 |    1368368 | Tag |b2  b6! 7f! 4e! 7e  d1  e4! f2  a7  5d! a9! a5  28! 10  c7  ae  6b  b6!  | !crc|        
    1399008 |    1403744 | Tag |34! 17  a1! 45                                                           |     |        
    1415648 |    1420320 | Tag |68  74  50  07!                                                          |     |        
    1438032 |    1458832 | Tag |b7! 1d  09  d0  d3! d7  b4  c3! 14! 75  3c! 29  d7! 8a! 06  63! 38! 0a   | !crc|        
  106248512 |  106250880 | Tag |02  00                                                                   |     |        
  106272432 |  106278320 | Tag |ef  d5  2f  b7  a2                                                       |     |        
  106306592 |  106310176 | Tag |18  37  cd                                                               |     |        
  106337296 |  106342032 | Tag |16  c1  0f  5e                                                           |     |        
  106353936 |  106358672 | Tag |8e! 02! 93! 37                                                           |     |        
  106376704 |  106397568 | Tag |0f! ec! 67  f7  09  e6  63! ce  94  af  d8  83! b1  0b  b0! 9a  33! 58   | !crc|        
  106496624 |  106501296 | Tag |f5  8d  e0  80!                                                          |     |        
  106513280 |  106518016 | Tag |73! c2  f2  c4                                                           |     |        
  106535664 |  106556528 | Tag |ba! 52  73! 68  61  32  79! d3! 86! 0c! ab  16! 3d  66  70! 12  5b! 03!  | !crc|        
  106575056 |  106595920 | Tag |1a  23! 1d! 8f! 38  9f! c2! 24  42  76  68! f2! 46  40! c9  34! 5b! 64   | !crc|        
  106624464 |  106629200 | Tag |45! 62  07  75                                                           |     |        
  106641104 |  106645776 | Tag |44! f1! 5c! b6!                                                          |     |        
  106663488 |  106684288 | Tag |05! d8! d2! 33  d8! f0  4b  6c! 9f  28  d8! 83  82  a7! e9! 14! e5  51!  | !crc|        
  106703024 |  106723888 | Tag |c0  e9! d5  22! de! de! 18! f3! 61! 2a  77  34! 56  38  6f  5e! 4e! 10   | !crc|        
  106742560 |  106763360 | Tag |c3  21! 93! bb  1e  2a! 46! 6e! 66! cb! ec  0d! 12! 2f! 18! 11  35  28   | !crc|        
  106792208 |  106796944 | Tag |82! 07  26! be!                                                          |     |        
  106808848 |  106813520 | Tag |f9! 87  fd  8c!                                                          |     |        
  106831376 |  106852176 | Tag |e5! e0! ba! 56  a0! 43! e2! e5  6b! 70  1f  99  88  48! fd  65! e6! 38!  | !crc|        
  106881920 |  106886656 | Tag |67! 30  49! fb                                                           |     |        
  106898560 |  106903296 | Tag |cb! 0f  16  7c                                                           |     |        
  106921968 |  106942832 | Tag |11! 0e! f4  69  ae! 48! 9b  2e! e9! c4  48! cd! 87  78  6e! 40! 1f  54   | !crc|        
  106964192 |  106984992 | Tag |37! c6! 4f  81! f7! 53! 9f  6f! 73  1d  34! 06  9c  44! 65! e1! f2! 24   | !crc|        
  107004752 |  107025616 | Tag |36  ce  7b  3e! 12! 93! bb! 95  06  4a! e6  f5  b8  92  c9  fa! fc  60!  | !crc|        
  107055168 |  107059840 | Tag |ed  e3  07  7d                                                           |     |        
  107071808 |  107076480 | Tag |99  bd  11! c7!                                                          |     |        
  107100720 |  107121520 | Tag |c4! d2  ea! 1e  52  a1  5d! c6  88  f8! 62! e8  82! 7b  d2  d8! fc! ad!  | !crc|        
  107151392 |  107156128 | Tag |39  4c  de! 57                                                           |     |        
  107168048 |  107172720 | Tag |73  89  bf! ae!                                                          |     |        
  107190560 |  107211424 | Tag |b7! 37! a3! a5! d9! 4b! 39! 1e  df! e0! 8d  b4! cf! 0a  3a  4d  3b  25   | !crc|        
  107232400 |  107233040 | Tag |05!                                                                      |     |        
  107329408 |  107329984 | Tag |0e                                                                       |     |        
  107349104 |  107369968 | Tag |f5! b5  78  ca! 73! d9  25  6e  64  cf! c0  f6  22  bd! c1! 69! 04! 86   | !crc|        
  107398752 |  107403488 | Tag |05  69! 21  38                                                           |     |        
  107415392 |  107420128 | Tag |83  61  3d! 7a                                                           |     |        
  107439184 |  107459984 | Tag |82  5c! 22  c8  f2! 75  9d  38! c2  e7  8d! 75! e0! f3! d7! ac! 03! 08!  | !crc|        
  107479744 |  107480320 | Tag |0d                                                                       |     |        
  107576384 |  107577024 | Tag |06!                                                                      |     |        
  107596080 |  107616880 | Tag |c8! e2! d4! bf  2e  89  c1! eb  68  dd! ba! be  0a  e5  7f  b2! db  6d!  | !crc|        
  107647520 |  107652192 | Tag |6f  da  4b  c2!                                                          |     |        
  107664160 |  107668832 | Tag |de  52! 69  49!                                                          |     |        
  107686672 |  107707472 | Tag |20! ee  03  6a  1a! 67  25  a8! d1! 43  f2  db! f3! 5e  63! 4e! 78! 1f!  | !crc| 

Okay now how do i find the key? Glad if you could help

Offline

#6 2018-04-08 15:49:12

piwi
Moderator
Registered: 2013-06-04
Posts: 526

Re: No Key Found NXP Mifare Classic 4k

Your trace shows only Tag answers but not the Reader commands. You need to try again with another antenna position. Try different distances and both Reader-Antenna-Tag and Reader-Tag-Antenna.

Then use hf list mf to see if you got some keys.

Offline

#7 2018-04-11 10:27:08

falio
Contributor
Registered: 2018-04-04
Posts: 8

Re: No Key Found NXP Mifare Classic 4k

So i retry the command with different reader and this is what i get

pm3 --> hf 14a sniff
#db# Starting to sniff
#db# maxDataLen=145, Uart.state=0, Uart.len=0
#db# traceLen=2783, Uart.output[0]=00000052
pm3 --> hf 14a list
Recorded Activity (TraceLen = 2783 bytes)

Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer
iso14443a - All times are in carrier periods (1/13.56Mhz)

      Start |        End | Src | Data (! denotes parity error)                                           | CRC | Annotation
------------+------------+-----+-------------------------------------------------------------------------+-----+--------------------
          0 |        992 | Rdr |52                                                                       |     | WUPA
     104944 |     105936 | Rdr |52                                                                       |     | WUPA
     209888 |     210880 | Rdr |52                                                                       |     | WUPA
     314320 |     315312 | Rdr |52                                                                       |     | WUPA
     418752 |     419744 | Rdr |52                                                                       |     | WUPA
     523312 |     524304 | Rdr |52                                                                       |     | WUPA
     627872 |     628864 | Rdr |52                                                                       |     | WUPA
    9123376 |    9124368 | Rdr |52                                                                       |     | WUPA
    9228448 |    9229440 | Rdr |52                                                                       |     | WUPA
    9333520 |    9334512 | Rdr |52                                                                       |     | WUPA
    9417088 |    9418080 | Rdr |52                                                                       |     | WUPA
    9521136 |    9522128 | Rdr |52                                                                       |     | WUPA
    9626464 |    9627456 | Rdr |52                                                                       |     | WUPA
    9731024 |    9732016 | Rdr |52                                                                       |     | WUPA
   17246848 |   17247840 | Rdr |52                                                                       |     | WUPA
   17351280 |   17352272 | Rdr |52                                                                       |     | WUPA
   17456480 |   17457472 | Rdr |52                                                                       |     | WUPA
   17560784 |   17561776 | Rdr |52                                                                       |     | WUPA
   17665344 |   17666336 | Rdr |52                                                                       |     | WUPA
   17770032 |   17771024 | Rdr |52                                                                       |     | WUPA
   17875104 |   17876096 | Rdr |52                                                                       |     | WUPA
   25397968 |   25398960 | Rdr |52                                                                       |     | WUPA
   25481280 |   25482272 | Rdr |52                                                                       |     | WUPA
   25586224 |   25587216 | Rdr |52                                                                       |     | WUPA
   25690656 |   25691648 | Rdr |52                                                                       |     | WUPA
   25795216 |   25796208 | Rdr |52                                                                       |     | WUPA
   25899904 |   25900896 | Rdr |52                                                                       |     | WUPA
   26004464 |   26005456 | Rdr |52                                                                       |     | WUPA
   67086948 |   67089316 | Tag |02  00                                                                   |     |
   67107684 |   67113572 | Tag |ef  d5  2f  b7  a2                                                       |     |
   67144036 |   67147620 | Tag |18  37  cd                                                               |     |
   69398772 |   69401140 | Tag |02  00                                                                   |     |
   69419364 |   69425252 | Tag |ef  d5  2f  b7  a2                                                       |     |
   69455844 |   69459428 | Tag |18  37  cd                                                               |     |
   69667012 |   69669380 | Tag |02  00                                                                   |     |
   69696052 |   69699636 | Tag |18  37  cd                                                               |     |
   69739188 |   69743860 | Tag |e7  b5  7e  93                                                           |     |
   69762356 |   69767028 | Tag |da! ff! 80! f0                                                           |     |
   69785780 |   69806580 | Tag |e2  bd  65! 0d! 4e  56  d6! 4d  e3  cf  60! 02! 35! 6e  02  51  7e! fc   | !crc|
   69835556 |   69856420 | Tag |e8  5c! 30! cf  f6  1a! 0b! 42  84  7e! c4! 90  66! de  2f  87  c3! d1!  | !crc|
   69913108 |   69915476 | Tag |02  00                                                                   |     |
   69942164 |   69945748 | Tag |18  37  cd                                                               |     |
   69985924 |   69990596 | Tag |13  e3  bd  9c                                                           |     |
   70008964 |   70013636 | Tag |60  91  d7  e5!                                                          |     |
   70032516 |   70053380 | Tag |55! 52  f0  d5  3c! c0  59! 59  28! 87! 31  d5! e4  aa  58! ca! 57! 47!  | !crc|
   70355412 |   70357780 | Tag |02  00                                                                   |     |
   70384324 |   70387908 | Tag |18  37  cd                                                               |     |
   70428228 |   70432964 | Tag |fd  96  2a  31                                                           |     |
   70451268 |   70455940 | Tag |ed  75  e4  aa                                                           |     |
   75645428 |   75647796 | Tag |02  00                                                                   |     |
   75666020 |   75671908 | Tag |ef  d5  2f  b7  a2                                                       |     |
   75701988 |   75705572 | Tag |18  37  cd                                                               |     |
   75891140 |   75893508 | Tag |02  00                                                                   |     |
   75920708 |   75924292 | Tag |18  37  cd                                                               |     |
   75964340 |   75969012 | Tag |29  ab  64  af                                                           |     |
   75988148 |   75992884 | Tag |28  6c  86! 9b                                                           |     |
   76012724 |   76033588 | Tag |d3! 05  63! 67  47  06! 37! d7  d7! f5  da  8c! 57  3c  ed  12  25! 87!  | !crc|
   76063140 |   76084004 | Tag |d1  80  44! e3! e6! 90  23  3f! 47  26! ed! 8d! 97  10  f4! 5c! 48! 93!  | !crc|
   76139812 |   76142180 | Tag |02  00                                                                   |     |
   76168468 |   76172052 | Tag |18  37  cd                                                               |     |
   76212372 |   76217044 | Tag |ca  d4  04  99                                                           |     |
   76235412 |   76240148 | Tag |69  34  b1! c2                                                           |     |
   76259204 |   76280004 | Tag |76! 1f  de  99  57  1a! 3f! 8d! dd! 0f  dc  d9! 66! c5  c6! 3b! 8c  f0   | !crc|
   76601428 |   76603796 | Tag |02  00                                                                   |     |
   76630996 |   76634580 | Tag |18  37  cd                                                               |     |
   76674772 |   76679444 | Tag |35  f8  25  77                                                           |     |
   76699348 |   76704084 | Tag |a3! 88! 66! aa!                                                          |     |
   76723652 |   76744452 | Tag |35  6a! 59! 3f! 1d  a3  6e  e2! 49! 14  de  39! 12  f9  6a! e9  06  d5!  | !crc|
   76855476 |   76876276 | Tag |63! 2d! c7! 82  b8  5b  3f! 9a! 15  fd! c6  a1! c3! 8e! 0d  89! 27! ac   | !crc|
   78892260 |   78913124 | Tag |52  49  72  36  66  e0  56  9a! 71  f6! 54! dc  3b  2c  56  a8! 65! 87!  | !crc|
   79067844 |   79070212 | Tag |02  00                                                                   |     |
   79088324 |   79094212 | Tag |ef  d5  2f  b7  a2                                                       |     |
   79124292 |   79127876 | Tag |18  37  cd                                                               |     |
   79333780 |   79336148 | Tag |02  00                                                                   |     |
   79362708 |   79366292 | Tag |18  37  cd                                                               |     |
   79406868 |   79411540 | Tag |44  52  a1  a5                                                           |     |
   79429892 |   79434628 | Tag |d8  33! af  4c                                                           |     |
   79453572 |   79474372 | Tag |91  bc! c9  80  b3! 84  e6! b3! ab  8f! 3c  a3  9d! 1b  ed! ad  c4! 91!  | !crc|
   79504004 |   79524804 | Tag |2e  0a! 9c  da! 74  a6! 0a  14! ab  05! be! ad  0d! 4d! ec! 86  78! ab!  | !crc|
   79580788 |   79583156 | Tag |02  00                                                                   |     |
   79610484 |   79614068 | Tag |18  37  cd                                                               |     |
   79654244 |   79658980 | Tag |c5  c2  ec  ea                                                           |     |
   79678052 |   79682788 | Tag |d0  5b! 44! 40                                                           |     |
   79701604 |   79722468 | Tag |24! cc  c1  c6  af  4f  c4  bd! c5! 39  ba  ab  b9  7b  8c! ac  22! 14!  | !crc|
   79999796 |   80002164 | Tag |02  00                                                                   |     |
   80029476 |   80033060 | Tag |18  37  cd                                                               |     |
   80073124 |   80077796 | Tag |85  c9  bb  0f                                                           |     |
   80096164 |   80100900 | Tag |fb  7f! 01! 4e!                                                          |     |
   80120468 |   80141268 | Tag |8a  9a! 4c  af! 43! 3e! b6! 3b  c4! 38  1d  51! 6d! 4b! 08! 4c! f1! ff   | !crc|
   80288644 |   80291012 | Tag |02  00                                                                   |     |
   80317556 |   80321140 | Tag |18  37  cd                                                               |     |
   80361588 |   80366260 | Tag |95  4e  b4  b7                                                           |     |
   80384628 |   80389300 | Tag |c4! 3d  26! 77                                                           |     |
   80408420 |   80429284 | Tag |db! a0! 2c! 57  1b  6d  c6  79  ab! a6! 78! 16  16  f6! 7b! 95  48! 16   | !crc|
   80552020 |   80554388 | Tag |02  00                                                                   |     |
   80581076 |   80584660 | Tag |18  37  cd                                                               |     |
   80624964 |   80629636 | Tag |6f  48  22  e2                                                           |     |
   80648004 |   80652676 | Tag |d2  48  61  87                                                           |     |
   80671812 |   80692676 | Tag |1e  4d! 66! 88  a7! 43  c2! b0  05! 1f! 30  7a  83  ff! b9  b9! e2  e1!  | !crc|
   80793892 |   80814756 | Tag |9a  05  4d! 27  9e  6a! 5c  0c  66! c3  4c  87! 02  20! d7! ef  f9  9c!  | !crc|
   80956564 |   80958932 | Tag |02  00                                                                   |     |
   80985620 |   80989204 | Tag |18  37  cd                                                               |     |
   81028868 |   81033540 | Tag |e0  f3  8d  b7                                                           |     |
   81052420 |   81057092 | Tag |8a  02  0c! 1c!                                                          |     |
   81076100 |   81096964 | Tag |b7! 21! 24  a6  79! 71! df! 45  0f! 97  42! 13  75! 5d  b9! 0b! ec! e1!  | !crc|
   81125620 |   81146484 | Tag |18  06  af  04! 45! 91! a0  3f! 6b! f0  c9! d5  01  d8! 65! 2e  c6! 76   | !crc|
   81371588 |   81373956 | Tag |02  00                                                                   |     |
   81392196 |   81398084 | Tag |ef  d5  2f  b7  a2                                                       |     |
   81428148 |   81431732 | Tag |18  37  cd                                                               |     |
   81637780 |   81640148 | Tag |02  00                                                                   |     |
   81666708 |   81670292 | Tag |18  37  cd                                                               |     |
   81710740 |   81715412 | Tag |1f  a2  15  7b                                                           |     |
   81733764 |   81738500 | Tag |de! 00! 00  8c                                                           |     |
   81757316 |   81778180 | Tag |f7! 63! 0e! 40! 5a  60  28  79  64! 24  d2! 44! e0  dc  02  2f! 67! 4b!  | !crc|
   81807748 |   81828548 | Tag |f7! be  05! 49! 18! cd  ae! bc  a5! c9! 42! 8d  f4  fa  f1! ac  61  53   | !crc|
   81884660 |   81887028 | Tag |02  00                                                                   |     |
   81914212 |   81917796 | Tag |18  37  cd                                                               |     |
   81957988 |   81962724 | Tag |80  a4  ba  3e                                                           |     |
   81981796 |   81986532 | Tag |31! bb  2d  ba                                                           |     |
   82005348 |   82026212 | Tag |10  a6! fa! ea  de  33  4d! 2b  0c  a8  65  ce  a1! 9e! 9a  e2  ba  50!  | !crc|
   82304932 |   82307300 | Tag |02  00                                                                   |     |
   82334628 |   82338212 | Tag |18  37  cd                                                               |     |
   82378404 |   82383140 | Tag |a2  2b  5d  dc                                                           |     |
   82401572 |   82406244 | Tag |3c! 98  0d  fb!                                                          |     |
   82426004 |   82446868 | Tag |58  12! 4a  78  e2! 30! 56! 86! 56  94  e2! 74! a0! e2  aa! 19! 56  1b!  | !crc|
   82578948 |   82581316 | Tag |02  00                                                                   |     |
   82607988 |   82611572 | Tag |18  37  cd                                                               |     |
   82651764 |   82656436 | Tag |a8  bc  4d  5a                                                           |     |
   82675060 |   82679732 | Tag |e3  1f! 22  2d                                                           |     |
   82699508 |   82720308 | Tag |95! b0  5c! 57  db! 2c! 5b! 94  87! 5b  75! f6  b1  97  70! 8c  8f! 54!  | !crc|
   82848340 |   82850708 | Tag |02  00                                                                   |     |
   82877396 |   82880980 | Tag |18  37  cd                                                               |     |
   82921028 |   82925700 | Tag |21  71  34  f6                                                           |     |
   82944324 |   82948996 | Tag |8f! 6a! 2b  f2!                                                          |     |
   82968644 |   82989444 | Tag |73! a5  ce! 1e! 33! 9b! 14  8d! 33! e9! 8b  a0! da  2b! 07  01! e3  f6   | !crc|
   83102628 |   83123428 | Tag |a9  ac! a9  6e! 9c  99  76! f9! 67  d1  f8! 86  27  72  1c  25  24  e2   | !crc|
   83258644 |   83261012 | Tag |02  00                                                                   |     |
   83287700 |   83291284 | Tag |18  37  cd                                                               |     |
   83330820 |   83335492 | Tag |da  1b  c3  7d                                                           |     |
   83354500 |   83359172 | Tag |97! f7  74! 77                                                           |     |
   83378180 |   83398980 | Tag |be  82! 14  3e! 20! de! 60  36! af  e6  7c  4b! 3f  4f! c7! 58! 8d  78   | !crc|
   83538276 |   83540644 | Tag |02  00                                                                   |     |
   83567204 |   83570788 | Tag |18  37  cd                                                               |     |
   83611092 |   83615828 | Tag |9a  1a  bc  40                                                           |     |
   83634132 |   83638804 | Tag |87  15  f4  b2                                                           |     |
   83657812 |   83678612 | Tag |66  c6! 34  b1  98! cd! 78  69  1b  4a! 37! 06! 3f! 6e  0b! 19  32! bc!  | !crc|
   83707844 |   83728644 | Tag |85  4f  28! e9! be! 88! 03  f3! 7a  d5  44! 2d! 7f! 73! 30  0d! db  5a   | !crc|
   83931940 |   83934308 | Tag |02  00                                                                   |     |
   83961636 |   83965220 | Tag |18  37  cd                                                               |     |
   84005268 |   84010004 | Tag |bb  2d  49  73                                                           |     |
   84028436 |   84033172 | Tag |7c! 18! c6! 99!                                                          |     |
   84052756 |   84073620 | Tag |7b  e6  78! 87  27! 60! 0d  82  3a! 5b! 75! e4! 45  22  e0  ba  bd  cb   | !crc|
   84102276 |   84123140 | Tag |be  d0  76! 8a! 4b  15  5d  82! ad  49! c5  ba  d9  8a! 36! d2  28  e5   | !crc|
   84186228 |   84207092 | Tag |08! 9c  bd! a1  c8! 1b! d3  ce! 96! fd  3a  00  28! 5a  86! 91! 9a! c4   | !crc|
   84235636 |   84256436 | Tag |3d! 6e  88! 13  32! 4d  f6  9d! 88! f5! 6a! 81  0e! bb! 91  38! 6c! 24   | !crc|
   84331364 |   84352164 | Tag |c0  98! 7f  97! a5  21! 37! 5f! 0f  b0! 07  57! f6  13! 6c  79  43! 8f!  | !crc|
   84380756 |   84401620 | Tag |e5! a2  e6! 56  95  39  8e! d0  23  c1  4c  43  8f  f0! bb! 3a! 11  e1!  | !crc|
   84432340 |   84432980 | Tag |03!                                                                      |     |
   84506836 |   84507412 | Tag |0f!                                                                      |     |
   84527428 |   84528068 | Tag |05!                                                                      |     |
   84601412 |   84602052 | Tag |00!                                                                      |     |
   84729636 |   84750436 | Tag |5b  ec  50  1a  e9! 30  26  f8  fc  9b  9c  a2  99  db! 2b! 4e! aa  e4   | !crc|
   84779156 |   84799956 | Tag |2f  8e  81! 0d! 70! fa  80  c8! e7  a7  62! 36! 27! f0! 0f! 12  e3! f8!  | !crc|
   84914308 |   84916676 | Tag |02  00                                                                   |     |
   84943876 |   84947460 | Tag |18  37  cd                                                               |     |
   84987636 |   84992372 | Tag |9d  ea  e5  16                                                           |     |
   85010804 |   85015476 | Tag |c8  ed  5e  c7!                                                          |     |
   85034740 |   85035380 | Tag |06!                                                                      |     |
   85108852 |   85109428 | Tag |09!                                                                      |     |
   85300420 |   85300996 | Tag |0c!                                                                      |     |
   85374404 |   85374980 | Tag |08                                                                       |     |
   85569700 |   85572068 | Tag |02  00                                                                   |     |
   85598740 |   85602324 | Tag |18  37  cd                                                               |     |
   85642516 |   85647252 | Tag |b7  52  b6  c2                                                           |     |
   85665684 |   85670420 | Tag |2a  fe! d9  8a                                                           |     |
   85689348 |   85710212 | Tag |18  58  24! 6f  f4! dd  c4! 3f  6d! 08  64  99  7c! d7! a5! e6! 1f  4b!  | !crc|
   85738884 |   85759684 | Tag |9d! 5c  c9  d4  c4  4c! 3e! 0d! a7! 7e! 2a! 24  7c  ba! 86  c4  7a! 9a   | !crc|
   85955044 |   85975844 | Tag |1e! 59! 8e! 2d! 17  8b  ba! 55  1f! aa  7b! 1d  3a  81  38! ed  19! 84   | !crc|
   86004436 |   86025236 | Tag |ef  4d  81  bc  57! 63! 5f  05! 5a! 81  79! b4! 25  0a! b5! e9  14! 93   | !crc|

then i use hf list mf

pm3 --> hf list mf
Recorded Activity (TraceLen = 2783 bytes)

Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer
iso14443a - All times are in carrier periods (1/13.56Mhz)

      Start |        End | Src | Data (! denotes parity error)                                           | CRC | Annotation
------------+------------+-----+-------------------------------------------------------------------------+-----+--------------------
          0 |        992 | Rdr |52                                                                       |     | WUPA
     104944 |     105936 | Rdr |52                                                                       |     | WUPA
     209888 |     210880 | Rdr |52                                                                       |     | WUPA
     314320 |     315312 | Rdr |52                                                                       |     | WUPA
     418752 |     419744 | Rdr |52                                                                       |     | WUPA
     523312 |     524304 | Rdr |52                                                                       |     | WUPA
     627872 |     628864 | Rdr |52                                                                       |     | WUPA
    9123376 |    9124368 | Rdr |52                                                                       |     | WUPA
    9228448 |    9229440 | Rdr |52                                                                       |     | WUPA
    9333520 |    9334512 | Rdr |52                                                                       |     | WUPA
    9417088 |    9418080 | Rdr |52                                                                       |     | WUPA
    9521136 |    9522128 | Rdr |52                                                                       |     | WUPA
    9626464 |    9627456 | Rdr |52                                                                       |     | WUPA
    9731024 |    9732016 | Rdr |52                                                                       |     | WUPA
   17246848 |   17247840 | Rdr |52                                                                       |     | WUPA
   17351280 |   17352272 | Rdr |52                                                                       |     | WUPA
   17456480 |   17457472 | Rdr |52                                                                       |     | WUPA
   17560784 |   17561776 | Rdr |52                                                                       |     | WUPA
   17665344 |   17666336 | Rdr |52                                                                       |     | WUPA
   17770032 |   17771024 | Rdr |52                                                                       |     | WUPA
   17875104 |   17876096 | Rdr |52                                                                       |     | WUPA
   25397968 |   25398960 | Rdr |52                                                                       |     | WUPA
   25481280 |   25482272 | Rdr |52                                                                       |     | WUPA
   25586224 |   25587216 | Rdr |52                                                                       |     | WUPA
   25690656 |   25691648 | Rdr |52                                                                       |     | WUPA
   25795216 |   25796208 | Rdr |52                                                                       |     | WUPA
   25899904 |   25900896 | Rdr |52                                                                       |     | WUPA
   26004464 |   26005456 | Rdr |52                                                                       |     | WUPA
   67086948 |   67089316 | Tag |02  00                                                                   |     |
   67107684 |   67113572 | Tag |ef  d5  2f  b7  a2                                                       |     |
   67144036 |   67147620 | Tag |18  37  cd                                                               |     |
   69398772 |   69401140 | Tag |02  00                                                                   |     |
   69419364 |   69425252 | Tag |ef  d5  2f  b7  a2                                                       |     |
   69455844 |   69459428 | Tag |18  37  cd                                                               |     |
   69667012 |   69669380 | Tag |02  00                                                                   |     |
   69696052 |   69699636 | Tag |18  37  cd                                                               |     |
   69739188 |   69743860 | Tag |e7  b5  7e  93                                                           |     |
   69762356 |   69767028 | Tag |da! ff! 80! f0                                                           |     |
   69785780 |   69806580 | Tag |e2  bd  65! 0d! 4e  56  d6! 4d  e3  cf  60! 02! 35! 6e  02  51  7e! fc   | !crc|
   69835556 |   69856420 | Tag |e8  5c! 30! cf  f6  1a! 0b! 42  84  7e! c4! 90  66! de  2f  87  c3! d1!  | !crc|
   69913108 |   69915476 | Tag |02  00                                                                   |     |
   69942164 |   69945748 | Tag |18  37  cd                                                               |     |
   69985924 |   69990596 | Tag |13  e3  bd  9c                                                           |     |
   70008964 |   70013636 | Tag |60  91  d7  e5!                                                          |     |
   70032516 |   70053380 | Tag |55! 52  f0  d5  3c! c0  59! 59  28! 87! 31  d5! e4  aa  58! ca! 57! 47!  | !crc|
   70355412 |   70357780 | Tag |02  00                                                                   |     |
   70384324 |   70387908 | Tag |18  37  cd                                                               |     |
   70428228 |   70432964 | Tag |fd  96  2a  31                                                           |     |
   70451268 |   70455940 | Tag |ed  75  e4  aa                                                           |     |
   75645428 |   75647796 | Tag |02  00                                                                   |     |
   75666020 |   75671908 | Tag |ef  d5  2f  b7  a2                                                       |     |
   75701988 |   75705572 | Tag |18  37  cd                                                               |     |
   75891140 |   75893508 | Tag |02  00                                                                   |     |
   75920708 |   75924292 | Tag |18  37  cd                                                               |     |
   75964340 |   75969012 | Tag |29  ab  64  af                                                           |     |
   75988148 |   75992884 | Tag |28  6c  86! 9b                                                           |     |
   76012724 |   76033588 | Tag |d3! 05  63! 67  47  06! 37! d7  d7! f5  da  8c! 57  3c  ed  12  25! 87!  | !crc|
   76063140 |   76084004 | Tag |d1  80  44! e3! e6! 90  23  3f! 47  26! ed! 8d! 97  10  f4! 5c! 48! 93!  | !crc|
   76139812 |   76142180 | Tag |02  00                                                                   |     |
   76168468 |   76172052 | Tag |18  37  cd                                                               |     |
   76212372 |   76217044 | Tag |ca  d4  04  99                                                           |     |
   76235412 |   76240148 | Tag |69  34  b1! c2                                                           |     |
   76259204 |   76280004 | Tag |76! 1f  de  99  57  1a! 3f! 8d! dd! 0f  dc  d9! 66! c5  c6! 3b! 8c  f0   | !crc|
   76601428 |   76603796 | Tag |02  00                                                                   |     |
   76630996 |   76634580 | Tag |18  37  cd                                                               |     |
   76674772 |   76679444 | Tag |35  f8  25  77                                                           |     |
   76699348 |   76704084 | Tag |a3! 88! 66! aa!                                                          |     |
   76723652 |   76744452 | Tag |35  6a! 59! 3f! 1d  a3  6e  e2! 49! 14  de  39! 12  f9  6a! e9  06  d5!  | !crc|
   76855476 |   76876276 | Tag |63! 2d! c7! 82  b8  5b  3f! 9a! 15  fd! c6  a1! c3! 8e! 0d  89! 27! ac   | !crc|
   78892260 |   78913124 | Tag |52  49  72  36  66  e0  56  9a! 71  f6! 54! dc  3b  2c  56  a8! 65! 87!  | !crc|
   79067844 |   79070212 | Tag |02  00                                                                   |     |
   79088324 |   79094212 | Tag |ef  d5  2f  b7  a2                                                       |     |
   79124292 |   79127876 | Tag |18  37  cd                                                               |     |
   79333780 |   79336148 | Tag |02  00                                                                   |     |
   79362708 |   79366292 | Tag |18  37  cd                                                               |     |
   79406868 |   79411540 | Tag |44  52  a1  a5                                                           |     |
   79429892 |   79434628 | Tag |d8  33! af  4c                                                           |     |
   79453572 |   79474372 | Tag |91  bc! c9  80  b3! 84  e6! b3! ab  8f! 3c  a3  9d! 1b  ed! ad  c4! 91!  | !crc|
   79504004 |   79524804 | Tag |2e  0a! 9c  da! 74  a6! 0a  14! ab  05! be! ad  0d! 4d! ec! 86  78! ab!  | !crc|
   79580788 |   79583156 | Tag |02  00                                                                   |     |
   79610484 |   79614068 | Tag |18  37  cd                                                               |     |
   79654244 |   79658980 | Tag |c5  c2  ec  ea                                                           |     |
   79678052 |   79682788 | Tag |d0  5b! 44! 40                                                           |     |
   79701604 |   79722468 | Tag |24! cc  c1  c6  af  4f  c4  bd! c5! 39  ba  ab  b9  7b  8c! ac  22! 14!  | !crc|
   79999796 |   80002164 | Tag |02  00                                                                   |     |
   80029476 |   80033060 | Tag |18  37  cd                                                               |     |
   80073124 |   80077796 | Tag |85  c9  bb  0f                                                           |     |
   80096164 |   80100900 | Tag |fb  7f! 01! 4e!                                                          |     |
   80120468 |   80141268 | Tag |8a  9a! 4c  af! 43! 3e! b6! 3b  c4! 38  1d  51! 6d! 4b! 08! 4c! f1! ff   | !crc|
   80288644 |   80291012 | Tag |02  00                                                                   |     |
   80317556 |   80321140 | Tag |18  37  cd                                                               |     |
   80361588 |   80366260 | Tag |95  4e  b4  b7                                                           |     |
   80384628 |   80389300 | Tag |c4! 3d  26! 77                                                           |     |
   80408420 |   80429284 | Tag |db! a0! 2c! 57  1b  6d  c6  79  ab! a6! 78! 16  16  f6! 7b! 95  48! 16   | !crc|
   80552020 |   80554388 | Tag |02  00                                                                   |     |
   80581076 |   80584660 | Tag |18  37  cd                                                               |     |
   80624964 |   80629636 | Tag |6f  48  22  e2                                                           |     |
   80648004 |   80652676 | Tag |d2  48  61  87                                                           |     |
   80671812 |   80692676 | Tag |1e  4d! 66! 88  a7! 43  c2! b0  05! 1f! 30  7a  83  ff! b9  b9! e2  e1!  | !crc|
   80793892 |   80814756 | Tag |9a  05  4d! 27  9e  6a! 5c  0c  66! c3  4c  87! 02  20! d7! ef  f9  9c!  | !crc|
   80956564 |   80958932 | Tag |02  00                                                                   |     |
   80985620 |   80989204 | Tag |18  37  cd                                                               |     |
   81028868 |   81033540 | Tag |e0  f3  8d  b7                                                           |     |
   81052420 |   81057092 | Tag |8a  02  0c! 1c!                                                          |     |
   81076100 |   81096964 | Tag |b7! 21! 24  a6  79! 71! df! 45  0f! 97  42! 13  75! 5d  b9! 0b! ec! e1!  | !crc|
   81125620 |   81146484 | Tag |18  06  af  04! 45! 91! a0  3f! 6b! f0  c9! d5  01  d8! 65! 2e  c6! 76   | !crc|
   81371588 |   81373956 | Tag |02  00                                                                   |     |
   81392196 |   81398084 | Tag |ef  d5  2f  b7  a2                                                       |     |
   81428148 |   81431732 | Tag |18  37  cd                                                               |     |
   81637780 |   81640148 | Tag |02  00                                                                   |     |
   81666708 |   81670292 | Tag |18  37  cd                                                               |     |
   81710740 |   81715412 | Tag |1f  a2  15  7b                                                           |     |
   81733764 |   81738500 | Tag |de! 00! 00  8c                                                           |     |
   81757316 |   81778180 | Tag |f7! 63! 0e! 40! 5a  60  28  79  64! 24  d2! 44! e0  dc  02  2f! 67! 4b!  | !crc|
   81807748 |   81828548 | Tag |f7! be  05! 49! 18! cd  ae! bc  a5! c9! 42! 8d  f4  fa  f1! ac  61  53   | !crc|
   81884660 |   81887028 | Tag |02  00                                                                   |     |
   81914212 |   81917796 | Tag |18  37  cd                                                               |     |
   81957988 |   81962724 | Tag |80  a4  ba  3e                                                           |     |
   81981796 |   81986532 | Tag |31! bb  2d  ba                                                           |     |
   82005348 |   82026212 | Tag |10  a6! fa! ea  de  33  4d! 2b  0c  a8  65  ce  a1! 9e! 9a  e2  ba  50!  | !crc|
   82304932 |   82307300 | Tag |02  00                                                                   |     |
   82334628 |   82338212 | Tag |18  37  cd                                                               |     |
   82378404 |   82383140 | Tag |a2  2b  5d  dc                                                           |     |
   82401572 |   82406244 | Tag |3c! 98  0d  fb!                                                          |     |
   82426004 |   82446868 | Tag |58  12! 4a  78  e2! 30! 56! 86! 56  94  e2! 74! a0! e2  aa! 19! 56  1b!  | !crc|
   82578948 |   82581316 | Tag |02  00                                                                   |     |
   82607988 |   82611572 | Tag |18  37  cd                                                               |     |
   82651764 |   82656436 | Tag |a8  bc  4d  5a                                                           |     |
   82675060 |   82679732 | Tag |e3  1f! 22  2d                                                           |     |
   82699508 |   82720308 | Tag |95! b0  5c! 57  db! 2c! 5b! 94  87! 5b  75! f6  b1  97  70! 8c  8f! 54!  | !crc|
   82848340 |   82850708 | Tag |02  00                                                                   |     |
   82877396 |   82880980 | Tag |18  37  cd                                                               |     |
   82921028 |   82925700 | Tag |21  71  34  f6                                                           |     |
   82944324 |   82948996 | Tag |8f! 6a! 2b  f2!                                                          |     |
   82968644 |   82989444 | Tag |73! a5  ce! 1e! 33! 9b! 14  8d! 33! e9! 8b  a0! da  2b! 07  01! e3  f6   | !crc|
   83102628 |   83123428 | Tag |a9  ac! a9  6e! 9c  99  76! f9! 67  d1  f8! 86  27  72  1c  25  24  e2   | !crc|
   83258644 |   83261012 | Tag |02  00                                                                   |     |
   83287700 |   83291284 | Tag |18  37  cd                                                               |     |
   83330820 |   83335492 | Tag |da  1b  c3  7d                                                           |     |
   83354500 |   83359172 | Tag |97! f7  74! 77                                                           |     |
   83378180 |   83398980 | Tag |be  82! 14  3e! 20! de! 60  36! af  e6  7c  4b! 3f  4f! c7! 58! 8d  78   | !crc|
   83538276 |   83540644 | Tag |02  00                                                                   |     |
   83567204 |   83570788 | Tag |18  37  cd                                                               |     |
   83611092 |   83615828 | Tag |9a  1a  bc  40                                                           |     |
   83634132 |   83638804 | Tag |87  15  f4  b2                                                           |     |
   83657812 |   83678612 | Tag |66  c6! 34  b1  98! cd! 78  69  1b  4a! 37! 06! 3f! 6e  0b! 19  32! bc!  | !crc|
   83707844 |   83728644 | Tag |85  4f  28! e9! be! 88! 03  f3! 7a  d5  44! 2d! 7f! 73! 30  0d! db  5a   | !crc|
   83931940 |   83934308 | Tag |02  00                                                                   |     |
   83961636 |   83965220 | Tag |18  37  cd                                                               |     |
   84005268 |   84010004 | Tag |bb  2d  49  73                                                           |     |
   84028436 |   84033172 | Tag |7c! 18! c6! 99!                                                          |     |
   84052756 |   84073620 | Tag |7b  e6  78! 87  27! 60! 0d  82  3a! 5b! 75! e4! 45  22  e0  ba  bd  cb   | !crc|
   84102276 |   84123140 | Tag |be  d0  76! 8a! 4b  15  5d  82! ad  49! c5  ba  d9  8a! 36! d2  28  e5   | !crc|
   84186228 |   84207092 | Tag |08! 9c  bd! a1  c8! 1b! d3  ce! 96! fd  3a  00  28! 5a  86! 91! 9a! c4   | !crc|
   84235636 |   84256436 | Tag |3d! 6e  88! 13  32! 4d  f6  9d! 88! f5! 6a! 81  0e! bb! 91  38! 6c! 24   | !crc|
   84331364 |   84352164 | Tag |c0  98! 7f  97! a5  21! 37! 5f! 0f  b0! 07  57! f6  13! 6c  79  43! 8f!  | !crc|
   84380756 |   84401620 | Tag |e5! a2  e6! 56  95  39  8e! d0  23  c1  4c  43  8f  f0! bb! 3a! 11  e1!  | !crc|
   84432340 |   84432980 | Tag |03!                                                                      |     |
   84506836 |   84507412 | Tag |0f!                                                                      |     |
   84527428 |   84528068 | Tag |05!                                                                      |     |
   84601412 |   84602052 | Tag |00!                                                                      |     |
   84729636 |   84750436 | Tag |5b  ec  50  1a  e9! 30  26  f8  fc  9b  9c  a2  99  db! 2b! 4e! aa  e4   | !crc|
   84779156 |   84799956 | Tag |2f  8e  81! 0d! 70! fa  80  c8! e7  a7  62! 36! 27! f0! 0f! 12  e3! f8!  | !crc|
   84914308 |   84916676 | Tag |02  00                                                                   |     |
   84943876 |   84947460 | Tag |18  37  cd                                                               |     |
   84987636 |   84992372 | Tag |9d  ea  e5  16                                                           |     |
   85010804 |   85015476 | Tag |c8  ed  5e  c7!                                                          |     |
   85034740 |   85035380 | Tag |06!                                                                      |     |
   85108852 |   85109428 | Tag |09!                                                                      |     |
   85300420 |   85300996 | Tag |0c!                                                                      |     |
   85374404 |   85374980 | Tag |08                                                                       |     |
   85569700 |   85572068 | Tag |02  00                                                                   |     |
   85598740 |   85602324 | Tag |18  37  cd                                                               |     |
   85642516 |   85647252 | Tag |b7  52  b6  c2                                                           |     |
   85665684 |   85670420 | Tag |2a  fe! d9  8a                                                           |     |
   85689348 |   85710212 | Tag |18  58  24! 6f  f4! dd  c4! 3f  6d! 08  64  99  7c! d7! a5! e6! 1f  4b!  | !crc|
   85738884 |   85759684 | Tag |9d! 5c  c9  d4  c4  4c! 3e! 0d! a7! 7e! 2a! 24  7c  ba! 86  c4  7a! 9a   | !crc|
   85955044 |   85975844 | Tag |1e! 59! 8e! 2d! 17  8b  ba! 55  1f! aa  7b! 1d  3a  81  38! ed  19! 84   | !crc|
   86004436 |   86025236 | Tag |ef  4d  81  bc  57! 63! 5f  05! 5a! 81  79! b4! 25  0a! b5! e9  14! 93   | !crc|

i still confuse on how to extract this list to get the key yikes
Does this means i still havent got any key yet?

Offline

#8 2018-04-12 07:20:21

piwi
Moderator
Registered: 2013-06-04
Posts: 526

Re: No Key Found NXP Mifare Classic 4k

Your trace still shows tag answers only and no reader commands. The tag never sends on its own. Therefore there must be a reader command before every tag answer.

hf list mf needs both reader commands and tag answers to derive a key. You need to play with antenna and card positions and distances until you get a proper trace.

Is your antenna OK? What is your antenna voltage (output of hw tune)?

Offline

#9 2018-04-12 17:57:07

falio
Contributor
Registered: 2018-04-04
Posts: 8

Re: No Key Found NXP Mifare Classic 4k

hi this is the output oh hw tune.

pm3 --> hw tune

measuring antenna characteristics, please wait...
...
LF antenna: 26.34 V - 125.00 kHz
LF antenna: 21.38 V - 134.00 kHz
LF optimal: 25.92 V - 123.71 kHz
[+] LF antenna is OK

HF antenna: 19.31 V - 13.56 MHz
[+] HF antenna is OK

[+] Displaying LF tuning graph. Divisor 89 is 134khz, 95 is 125khz.

is it ok?

Offline

#10 2018-04-13 07:45:17

piwi
Moderator
Registered: 2013-06-04
Posts: 526

Re: No Key Found NXP Mifare Classic 4k

It is not very good but OK. Try different antenna positions and distances. For me it works best to keep the antenna and card close together and hold the pack at a distance of 1 - 2cm to the reader. Try turning the pack as well.

Offline

#11 2018-04-13 07:48:30

falio
Contributor
Registered: 2018-04-04
Posts: 8

Re: No Key Found NXP Mifare Classic 4k

Alright then. Will try again and keep your tips in mind. Thank you. Will update later

Offline

Board footer

Powered by FluxBB