Proxmark3 community

Sentinel

Contributor

Registered: 2012-11-26

Posts: 191

Hotel check in, check out, Mifare1k

Wanted cards with this data structure
Brown - Room Number
Yellow - check in time
Green - check out time
Red - CRC8 (Maxim)

Json50

Contributor

Registered: 2018-08-30

Posts: 21

Re: Hotel check in, check out, Mifare1k

vingcard

Ollibolli

Contributor

Registered: 2019-04-27

Posts: 51

Re: Hotel check in, check out, Mifare1k

Red - CRC8 (Maxim), 65, is the checksum of which numbers?

Sentinel

Contributor

Registered: 2012-11-26

Posts: 191

Re: Hotel check in, check out, Mifare1k

crc8(47 21 2C BD E7 21 2C BD E7 00 01 00 06 08 00 00 00 00 00 00 00 08 21 20 08 17 30 12 22 08 17)=65

Ollibolli

Contributor

Registered: 2019-04-27

Posts: 51

Re: Hotel check in, check out, Mifare1k

Thank you for your answer!

I just asked, because i try to find out how to calculate the checksum/crc for the following dump for a very long time!

B80B is the associated hex-value of 30,00€ (0BB8) and 0932 is the corresponding checksum/crc!

Maybe someone can help...

Many thanks in advance!

Last edited by Ollibolli (2020-03-10 15:16:33)

Sentinel

Contributor

Registered: 2012-11-26

Posts: 191

Re: Hotel check in, check out, Mifare1k

CRC-16/MODBUS(B8 0B 00 00 00 00 00 00 00 00 00 00 00 00) = 0x3209

Ollibolli

Contributor

Registered: 2019-04-27

Posts: 51

Re: Hotel check in, check out, Mifare1k

You are my hero!

Thank you very, very much!

Sentinel

Contributor

Registered: 2012-11-26

Posts: 191

Re: Hotel check in, check out, Mifare1k

You are welcome ))

Ollibolli

Contributor

Registered: 2019-04-27

Posts: 51

Re: Hotel check in, check out, Mifare1k

Thank you for your answer!

I just asked, because i try to find out how to calculate the checksum/crc for the following dump for a very long time!

B80B is the associated hex-value of 30,00€ (0BB8) and 0932 is the corresponding checksum/crc!

Maybe someone can help...

Many thanks in advance!

https://abload.de/img/dumpvbjmt.jpg

Hmm, it seems there is another number nessesary for validate the card above!

I think "D4 B6" somehow belongs to the value "B8 0B"...

Can you see/find some coherences?

Sentinel

Contributor

Registered: 2012-11-26

Posts: 191

Re: Hotel check in, check out, Mifare1k

need more samples ...

Ollibolli

Contributor

Registered: 2019-04-27

Posts: 51

Re: Hotel check in, check out, Mifare1k

Okay!

Last edited by Ollibolli (2020-03-23 09:15:00)

iceman

Administrator

Registered: 2013-04-25

Posts: 9,537

Website

Re: Hotel check in, check out, Mifare1k

Don't post pictures of dumps.  That is useless to work with.

Sentinel

Contributor

Registered: 2012-11-26

Posts: 191

Re: Hotel check in, check out, Mifare1k

Iceman is right as always! it takes a lot of time to translate this dump into text....

Ollibolli

Contributor

Registered: 2019-04-27

Posts: 51

Re: Hotel check in, check out, Mifare1k

Sorry guys!

How can i insert a (black and white colored) dump?

Last edited by Ollibolli (2020-03-19 20:22:20)

mwalker

Moderator

Registered: 2019-05-11

Posts: 318

Re: Hotel check in, check out, Mifare1k

To format text check out the guide at http://www.proxmark.org/forum/help.php#bbcode (which can be found by clicking on the BBCode link.
To have a code/aligned text box, I would recommend the code /code options (wrapped in square brackets)
e.g.
Copy the list into the clipboard

pasted between code /code sections.

Ollibolli

Contributor

Registered: 2019-04-27

Posts: 51

Re: Hotel check in, check out, Mifare1k

Thank you, but this do not work very well with me!

Here you can download the affected dups:

https://c.1und1.de/@626831653653715951/ … jNgpwMPFow

Sentinel, hopefully you find a solution for this...;-)

Sentinel

Contributor

Registered: 2012-11-26

Posts: 191

Re: Hotel check in, check out, Mifare1k

1.Remove passwords from file
2.Сount CRC-16/MODBUS 14 lines
dump example 05.00

================================
01 00 00 00 00 00 8A 4F A6 5C 00 00 00 00 00 00
00 00 00 00 01 01 5A 00 02 00 00 00 00 00 00 01
78 01 00 00 00 00 00 00 00 00 F4 01 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 20 20 20 20 20 20 20 20 20 20 20 20 20 20
20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
20 20 20 20 20 20 20 20 20 20 00 00 00 00 8A 4F
00 00 00 00 00 00 00 00 00 00 00 00 00 00
================================
CRC-16/MODBUS = 0x7C31

Ollibolli

Contributor

Registered: 2019-04-27

Posts: 51

Re: Hotel check in, check out, Mifare1k

Thank you very, very much my friend!

Sentinel

Contributor

Registered: 2012-11-26

Posts: 191

Re: Hotel check in, check out, Mifare1k

You are welcome, bro )
note, that the block is repeated 2 times

stbob

Contributor

Registered: 2018-08-06

Posts: 7

Re: Hotel check in, check out, Mifare1k

Forgive me for being stupid. Are dates and rooms stored in a predictable place?  Or do I need to know what I'm looking for to find it? 

I have dumped my entire hotel key collection, over 60 cards, now I have a shit-ton of hotel key dumps, would love to be able to read useful data from them reliably.

The vast majority of them are Hilton cards.  I put the dumps up on github if anyone needs some fresh data to play with.

If there's a tutorial to get me up to speed, please point me there.

iceman

Administrator

Registered: 2013-04-25

Posts: 9,537

Website

Re: Hotel check in, check out, Mifare1k

There are some old blogs on how someone did map different parts of vingcards,   you can follow his idea for methodology.
Otherwise, its comparing and guessing,  and see if you can verify what you guess to make any sense on a different card. Speaking of broad terms.

Head over to the discord server,   and yes, I take a copy of those dumps of yours