Proxmark3 community

slmann101

Contributor

Registered: 2017-03-30

Posts: 33

Dodgy aliexpress uid changable fobs

Hello Proxmark users.

I recently got some uid changeable fobs off aliexpress (Yes shame on me) and they don't respond to magic commands and I can't write block 0 but I used the remagic script on one it had some errors but managet to set the uid to 01 02 03 04. I think I may be gen 2 but I'm not sure can you please help. Also I expected as much as they were so cheap and the sellers name is "pisword"

Regards Slmann101.

Last edited by slmann101 (2017-04-06 07:45:46)

Dot.Com

Contributor

From: Hong Kong

Registered: 2016-10-05

Posts: 180

Website

Re: Dodgy aliexpress uid changable fobs

Hello Proxmark users.

I recently got some uid changeable fobs off aliexpress (Yes shame on me) and they don't respond to magic commands and I can't write block 0 but I used the remagic script on one it had some errors but managet to set the uid to 01 02 03 04. I think I may be gen 2 but I'm not sure can you please help. Also I expected as much as they were so cheap and the sellers name is "pisword"

Regards Slmann101.

Why buy from there when you can buy from me ?

I am in China now. I can do quality check for you and teamviewer before sending them

slmann101

Contributor

Registered: 2017-03-30

Posts: 33

Re: Dodgy aliexpress uid changable fobs

Hey Dot.Com

That would be great. Would we be able to do a good deal on assorted uid changeable cards of different types?

Regards Slmann101.

slmann101

Contributor

Registered: 2017-03-30

Posts: 33

Re: Dodgy aliexpress uid changable fobs

More came in the mail just now and I ran hf 14a reader and got this

pm3 --> hf 14a reader
 UID : D9 AB 9E 10           
ATQA : 00 04          
 SAK : 08 [2]          
TYPE : NXP MIFARE CLASSIC 1k | Plus 2k SL1          
proprietary non iso14443-4 card found, RATS not supported          
Answers to magic commands (GEN 1a): YES     

And write a uid and get this

 
pm3 --> hf mf cgetblk 1
--block number: 1           
data: D9 AB 9E 10 FC 08 04 00 12 13 14 15 16 17 18 19           
pm3 --> 
pm3 --> hf mf cgetblk 1
--block number: 1           
#db# wupC1 error          
Can't read block. error=2          
pm3 --> 
pm3 --> hf mf cgetblk 1
--block number: 1           
data: D9 AB 9E 10 FC 08 04 00 12 13 14 15 16 17 18 19           
pm3 --> 
pm3 --> hf mf cgetblk 0
--block number: 0           
data: D9 AB 9E 10 FC 08 04 00 12 13 14 15 16 17 18 19           
pm3 --> 
pm3 --> hf mf cgetblk 0
--block number: 0           
#db# wupC1 error          
Can't read block. error=2          
pm3 --> 
pm3 --> hf mf cgetblk 0
--block number: 0           
#db# wupC1 error          
Can't read block. error=2          
pm3 --> 

And then the proxmark hf 14a reader wont work on it.

Dot.Com

Contributor

From: Hong Kong

Registered: 2016-10-05

Posts: 180

Website

Re: Dodgy aliexpress uid changable fobs

Hey Dot.Com

That would be great. Would we be able to do a good deal on assorted uid changeable cards of different types?

Regards Slmann101.

Why not ? Drop me a mail.

tristanik

Contributor

Registered: 2014-11-25

Posts: 96

Re: Dodgy aliexpress uid changable fobs

Dot. Com, do you have mifare ultralight ev1 Uid changeable?

slmann101

Contributor

Registered: 2017-03-30

Posts: 33

Re: Dodgy aliexpress uid changable fobs

I believe he does his site is http://www.rfxsecure.com/.

iceman

Administrator

Registered: 2013-04-25

Posts: 9,538

Website

Re: Dodgy aliexpress uid changable fobs

I dont want to ruin anyones party, but I havent seen some magic UL ev1...  And I've been looking.  Consider all claims on magic Ul-Ev1 to be fakes.

Dot.Com

Contributor

From: Hong Kong

Registered: 2016-10-05

Posts: 180

Website

Re: Dodgy aliexpress uid changable fobs

Dot. Com, do you have mifare ultralight ev1 Uid changeable?

I could try to make one. Give me some time.

UL and UL-C yes though.