Proxmark developers community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

#1 2015-10-26 17:16:45

Go_tus
Contributor
Registered: 2015-06-03
Posts: 81

how to set chinese magic card s50 to 7 bytes UID

Hi, does any one know how to set uid in s50 magic to 7 bytes uid?

CT UID0 UID1 UID2 UID3 BCC0    UID3 UID4 UID5 UID6 BBC1

CT x88
BCC0 UID0 ^ UID1 ^ UID2 ^ UID3

by using mf wrbl cmd? so far 10 bytes, what I have to do with other 6 bytes?

Thank you

Last edited by Go_tus (2015-10-26 17:23:54)

Offline

#2 2015-10-26 20:38:12

iceman
Administrator
Registered: 2013-04-25
Posts: 3,861
Website

Re: how to set chinese magic card s50 to 7 bytes UID

not that this post belongs under "desfire" but,  anyway,  I don't think you can change a  S50 magic gen1 from 4bytes into a 7bytes uid...  That is stipulated in the tag design,  but I could be wrong.


modhex(hkhehghthbhudcfcdchkigiehgduiehg)

Offline

#3 2015-10-27 05:26:08

Go_tus
Contributor
Registered: 2015-06-03
Posts: 81

Re: how to set chinese magic card s50 to 7 bytes UID

Thank you, for sharing

Offline

#4 2015-10-27 06:46:10

Danz
Contributor
From: Dubai
Registered: 2015-10-24
Posts: 71

Re: how to set chinese magic card s50 to 7 bytes UID

I think you need magic ultra light for that   neutral


ModHex(hfdudthbfchtiehuduhehvht)

Offline

#5 2017-07-10 11:58:26

brantz
Contributor
Registered: 2014-03-19
Posts: 22

Re: how to set chinese magic card s50 to 7 bytes UID

there are customized S50 card can support 7 bytes UID now.  I just happened to get one recently. here is what it looks like

 UID : 0c 12 b1 74 db 08 04
ATQA : 00 44
 SAK : 08 [2]
TYPE : NXP MIFARE CLASSIC 1k | Plus 2k SL1
MANUFACTURER : Toshiba Corp. Japan
SAK incorrectly claims that card doesn't support RATS
 ATS : 0d 78 00 71 02 88 49 a1 30 20 15 06 08 56 3d
       -  TL : length is 13 bytes
       -  T0 : TA1 is present, TB1 is present, TC1 is present, FSCI is 8 (FSC = 256)
       - TA1 : different divisors are supported, DR: [], DS: []
       - TB1 : SFGI = 1 (SFGT = 8192/fc), FWI = 7 (FWT = 524288/fc)
       - TC1 : NAD is NOT supported, CID is supported
       -  HB : 88 49 a1 30 20 15 06 08
Answers to chinese magic backdoor commands: NO

Valid ISO14443A Tag Found - Quiting Search

Offline

#6 2017-07-10 15:42:43

iceman
Administrator
Registered: 2013-04-25
Posts: 3,861
Website

Re: how to set chinese magic card s50 to 7 bytes UID

All you ever wanted to know about magic tags?   I did some youtube videos, talking about the different kinds.

https://www.youtube.com/playlist?list=P … 9sPWUthRas


modhex(hkhehghthbhudcfcdchkigiehgduiehg)

Offline

#7 2017-07-10 18:03:47

Dot.Com
Contributor
From: Hong Kong
Registered: 2016-10-05
Posts: 135
Website

Re: how to set chinese magic card s50 to 7 bytes UID

brantz wrote:

there are customized S50 card can support 7 bytes UID now.  I just happened to get one recently. here is what it looks like

 UID : 0c 12 b1 74 db 08 04
ATQA : 00 44
 SAK : 08 [2]
TYPE : NXP MIFARE CLASSIC 1k | Plus 2k SL1
MANUFACTURER : Toshiba Corp. Japan
SAK incorrectly claims that card doesn't support RATS
 ATS : 0d 78 00 71 02 88 49 a1 30 20 15 06 08 56 3d
       -  TL : length is 13 bytes
       -  T0 : TA1 is present, TB1 is present, TC1 is present, FSCI is 8 (FSC = 256)
       - TA1 : different divisors are supported, DR: [], DS: []
       - TB1 : SFGI = 1 (SFGT = 8192/fc), FWI = 7 (FWT = 524288/fc)
       - TC1 : NAD is NOT supported, CID is supported
       -  HB : 88 49 a1 30 20 15 06 08
Answers to chinese magic backdoor commands: NO

Valid ISO14443A Tag Found - Quiting Search

Looks like the tags are similar to my 7 byte UID Changeable s50 on my shop.


You live, you learn.
You give, you take.
You win, you lose.

Offline

Board footer

Powered by FluxBB