Proxmark3 community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

Announcement

Time changes and with it the technology
Proxmark3 @ discord

Users of this forum, please be aware that information stored on this site is not private.

#1 2014-11-09 15:47:14

alexeybar200
Contributor
Registered: 2014-05-16
Posts: 17

Can't test block keys and authenticate

I have a card:

ATQA : 04 00         
UID : xx xx xx xx           
SAK : 28 [1]         
TYPE : JCOP31 or JCOP41 v2.3.1         
ATS : 11 78 80 70 02 80 64 11 65 01 90 73 00 00 00 81 07 6d ad           
       -  TL : length is 17 bytes         
       -  T0 : TA1 is present, TB1 is present, TC1 is present, FSCI is 8         
       - TA1 : different divisors are NOT supported, DR: [], DS: []         
       - TB1 : SFGI = 0, FWI = 0         
       - TC1 : NAD is NOT supported, CID is supported         
       -  HB : 80 64 11 65 01 90 73 00 00 00 81 07

I trying to test keys  on proxmark3 then get the error "Mifare: Can't select card".

Other reader work correctly
Sniff other reader :

proxmark3>
proxmark3> hf 14a snoop
proxmark3>
proxmark3> #db# cancelled by button                 
proxmark3> #db# COMMAND FINISHED                 
proxmark3> #db# maxDataLen=3, Uart.state=0, Uart.len=0                 
proxmark3> #db# traceLen=1299, Uart.output[0]=00000050                 
proxmark3> hf 14a list
Recorded Activity         
Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer         
All times are in carrier periods (1/13.56Mhz)         
     Start |       End | Src | Data         
-----------|-----------|-----|--------

     Start |       End | Src | Data         
-----------|-----------|-----|--------         
         0 |      1056 | Rdr | 26             
      2228 |      4596 | Tag | 04  00             
     12160 |     14624 | Rdr | 93  20             
     15796 |     21684 | Tag | xx xx xx xx  yy             
     30192 |     40656 | Rdr | 93  70 xx xx xx xx  yy  13  0a             
     41908 |     45428 | Tag | 28  b4  fc             
    872176 |    876944 | Rdr | 60  04  d1  3d             
    881444 |    886180 | Tag | a9  85  6d  61             
    893040 |    902352 | Rdr | ee  f9  5b  cd  fa  bc  d0  c0     !crc         
   ...     

if i use  acr122 selection correct but the tag challenge is not recieving.

why this card does not work with proxmark3 and acr122?

Offline

#2 2014-11-09 16:03:50

iceman
Administrator
Registered: 2013-04-25
Posts: 9,506
Website

Re: Can't test block keys and authenticate

the error "can't select card" indicates the tag is not in a good position over the antenna.  try different hights and move it.

Offline

#3 2014-11-09 19:23:39

alexeybar200
Contributor
Registered: 2014-05-16
Posts: 17

Re: Can't test block keys and authenticate

iceman wrote:

the error "can't select card" indicates the tag is not in a good position over the antenna.  try different hights and move it.

May be..

Acr122/cardman 5321 why not work with this card ?

Offline

#4 2015-07-01 09:28:26

roman921
Contributor
Registered: 2015-06-21
Posts: 48

Re: Can't test block keys and authenticate

alexeybar200 wrote:
iceman wrote:

the error "can't select card" indicates the tag is not in a good position over the antenna.  try different hights and move it.

May be..

Acr122/cardman 5321 why not work with this card ?

ACR122 work with this card. I try sniff such card.

Offline

#5 2016-05-22 08:15:30

dimvia
Contributor
From: rf
Registered: 2016-01-13
Posts: 13

Re: Can't test block keys and authenticate

Same problem.

Offline

#6 2016-05-22 13:17:03

dimvia
Contributor
From: rf
Registered: 2016-01-13
Posts: 13

Re: Can't test block keys and authenticate

What teams it is possible to read the map. From her I have pulled out keys libnfc_crypto1_crack.

Offline

#7 2016-05-22 13:26:13

dimvia
Contributor
From: rf
Registered: 2016-01-13
Posts: 13

Re: Can't test block keys and authenticate

UID : xx xx xx xx         
ATQA : 00 04         
SAK : 28 [1]         
TYPE : JCOP31 or JCOP41 v2.3.1         
ATS : 10 78 80 70 02 00 31 C0 64 08 04 61 00 00 90 00 47 0D           
       -  TL : length is 16 bytes         
       -  T0 : TA1 is present, TB1 is present, TC1 is present, FSCI is 8 (FSC = 256)         
       - TA1 : different divisors are NOT supported, DR: [], DS: []         
       - TB1 : SFGI = 0 (SFGT = (not needed) 0/fc), FWI = 7 (FWT = 524288/fc)         
       - TC1 : NAD is NOT supported, CID is supported         
       -  HB : 00 31 C0 64 08 04 61 00 00 90 00           
Answers to magic commands (GEN1): NO         

Valid ISO14443-A Tag Found - Quiting Search

hf mf hardnested not work. libnfc_crypto1_ crack work.

Offline

#8 2016-05-22 14:53:48

iceman
Administrator
Registered: 2013-04-25
Posts: 9,506
Website

Re: Can't test block keys and authenticate

its a jcop card, I doubt the hardnested attack will work.

Offline

#9 2016-05-22 14:58:52

dimvia
Contributor
From: rf
Registered: 2016-01-13
Posts: 13

Re: Can't test block keys and authenticate

hf mf hardnested not work. libnfc_crypto1_ crack work.

Offline

#10 2016-05-22 15:02:33

iceman
Administrator
Registered: 2013-04-25
Posts: 9,506
Website

Re: Can't test block keys and authenticate

Then you have a solution.

Offline

#11 2016-05-22 15:04:26

dimvia
Contributor
From: rf
Registered: 2016-01-13
Posts: 13

Re: Can't test block keys and authenticate

Как с ней работать зная ключи?

Offline

#12 2016-05-22 15:05:31

dimvia
Contributor
From: rf
Registered: 2016-01-13
Posts: 13

Re: Can't test block keys and authenticate

How to work with her knowing keys?

Offline

#13 2016-05-22 15:31:38

dimvia
Contributor
From: rf
Registered: 2016-01-13
Posts: 13

Re: Can't test block keys and authenticate

Proxmark not read her.

Offline

#14 2016-06-09 07:00:18

lohcm88
Contributor
Registered: 2016-02-05
Posts: 59

Re: Can't test block keys and authenticate

iceman wrote:

its a jcop card, I doubt the hardnested attack will work.


hi iceman, can a jcop card be duplicated using a proxmark3? It look like a mifare classic with 4 byte UID..

Offline

#15 2016-06-12 18:12:14

iceman
Administrator
Registered: 2013-04-25
Posts: 9,506
Website

Re: Can't test block keys and authenticate

jcop cards the rfid part which it emulates can be duplicated if you get the keys.
the java application on the card is most likely protected with triple-des keys.

Offline

#16 2016-07-14 04:10:09

lohcm88
Contributor
Registered: 2016-02-05
Posts: 59

Re: Can't test block keys and authenticate

Hi Iceman, I came across this card with 4 byte UID and how do I determine what type of card is this?  And as an end user, I am just interested in whether this card can be duplicated?  Thx!

UID : f6 b1 23 df
ATQA : 00 08
SAK : 20 [1]
TYPE : NXP MIFARE DESFire 4k | DESFire EV1 2k/4k/8k | Plus 2k/4k SL3 | JCOP 31/41
ATS : 10 78 80 a0 02 20 90 00 00 00 00 00 f6 b1 23 df 05 63
       -  TL : length is 16 bytes
       -  T0 : TA1 is present, TB1 is present, TC1 is present, FSCI is 8 (FSC = 256)
       - TA1 : different divisors are NOT supported, DR: [], DS: []
       - TB1 : SFGI = 0 (SFGT = (not needed) 0/fc), FWI = 10 (FWT = 4194304/fc)
       - TC1 : NAD is NOT supported, CID is supported
       -  HB : 20 90 00 00 00 00 00 f6 b1 23 df
Answers to chinese magic backdoor commands: NO

Valid ISO14443A Tag Found - Quiting Search

Offline

#17 2016-07-14 08:07:47

iceman
Administrator
Registered: 2013-04-25
Posts: 9,506
Website

Re: Can't test block keys and authenticate

The answer, is that it depends. 
You first single out if its a Desfire card or not.  In my fork you have some desfire commands impl.  Try the "info", as see your  card is a Desfire or not.

Offline

Board footer

Powered by FluxBB