Research, development and trades concerning the powerful Proxmark3 device.
Remember; sharing is caring. Bring something back to the community.
"Learn the tools of the trade the hard way." +Fravia
You are not logged in.
Time changes and with it the technology
Proxmark3 @ discord
Users of this forum, please be aware that information stored on this site is not private.
Hi,
I have all the A/B keys from my Mifare Classic Cards, that i got, first with "hf mf chk *1 ? default_keys.dic", and then with a harnested attack: "hf mf hardnested 0 A FFFFFFFFFFFF 0 B" ... I obtained the rest of the block's keys. FInally, I filled a found_keys dictionary and did a dump of the keys: "hf mf chk *1 ? d found_keys.dic". The problem arrived when I executed "hf mf dump". This is the information about my Proxmark3 Easy and the Mifare Classic 1 K:
pm3 --> hw ver
[[[ Cached information ]]]
Proxmark3 RFID instrument
[ ARM ]
bootrom: iceman/master/ice_v3.1.0-787-g192aa9a-dirty-unclean 2018-04-11 00:36:05
os: iceman/master/ice_v3.1.0-789-gd4c0de0c-dirty-unclean 2018-04-16 15:32:45
[ FPGA ]
LF image built for 2s30vq100 on 2017/10/25 at 19:50:50
HF image built for 2s30vq100 on 2017/11/10 at 19:24:16
[ Hardware ]
--= uC: AT91SAM7S256 Rev D
--= Embedded Processor: ARM7TDMI
--= Nonvolatile Program Memory Size: 256K bytes, Used: 234657 bytes (90%) Free: 27487 bytes (10%)
--= Second Nonvolatile Program Memory Size: None
--= Internal SRAM Size: 64K bytes
--= Architecture Identifier: AT91SAM7Sxx Series
--= Nonvolatile Program Memory Type: Embedded Flash Memory
___________________________________________________________________________________________________
pm3 --> hf 14a i
UID : 8C 08 51 BC
ATQA : 00 04
SAK : 08 [2]
TYPE : NXP MIFARE CLASSIC 1k | Plus 2k SL1 | 1k Ev1
proprietary non iso14443-4 card found, RATS not supported
Answers to magic commands: NO
Prng detection: WEAK
Whan I Execute the command "hf mf dump" I get the output:
|-----------------------------------------|
|------ Reading sector access bits...-----|
|-----------------------------------------|
|-----------------------------------------|
|----- Dumping all blocks to file... -----|
|-----------------------------------------|
access rights do not allow reading of sector 0 block 0
command execute timeout when trying to read block 0 of sector 0.
This is the trailer's 0 sector (maybe the access conditions dont't allow to read the sector):
000000000000E69871CB000000000000
There is a way (command, script) of build a partial dump without the need of read the three readable 0 sectors and the blocks 1-15 and copy in a text file to convert to hex?
Thank you for your help.
Last edited by breakscutum (2018-04-20 22:01:02)
Offline
My solution: I used the app Mifare Classic Tool for Android with my Google Pixel 2 XL and with the dump keys file generated with my proxmark3 and transferred inside the phone and I could make a "partial dump" that allow me make a partial clone of the original Mifare card inside a magic card. Then I set the ID from the original card and the block3 (sector 0's trailer) with the proxmark3. The clone functioned without problems.
Last edited by breakscutum (2018-04-20 22:00:38)
Offline