Research, development and trades concerning the powerful Proxmark3 device.
Remember; sharing is caring. Bring something back to the community.
"Learn the tools of the trade the hard way." +Fravia
You are not logged in.
Time changes and with it the technology
Proxmark3 @ discord
Users of this forum, please be aware that information stored on this site is not private.
Pages: 1
1. commands changed from "hf 14a" to "hf mf"
2. some code cleaning and small bugfixes
3. alpha version hf mf sim
4. added internal function GetTickCount() for time measuring
-------------------------------------------------------------------------------------
please, test:
1. commands with new prefix hf mf
2. hf mf sim.
there is a new anticollision scheme....
ledA - reader field is ON
ledB - anticollision completed
ledC - authentication completed
authentication not implemented (
but....
please test anticollision scheme w/o prepairing replies.
as i see it must be OK. it takes 2-4ms - as in the ISO
Last edited by merlok (2011-06-10 14:44:26)
Offline
proxmark3> hf mf sim
uid:00 00 00 00
#db# --> WORK. anticol1 time: 22
but when i tried hf 14a list after proxmark3 windows says that proxmark3 has an error and it´s closed.
Also i don´t know if this is right, but when i put proxmark3 over the reader (omnikey 5321) and with it own software omnikey diagnotics tool DOSEN´T SHOW ATR OR UID of the card, is like there isn´t any card over the reader.
i like save to file commands, could you developed this for command dump a card or write a hole card like nfc-mfclassic.
Also this could be great for nested after finish nested, dump the hold card to a file.
thanks
Offline
proxmark3> hf mf sim
uid:00 00 00 00
#db# --> WORK. anticol1 time: 22but when i tried hf 14a list after proxmark3 windows says that proxmark3 has an error and it´s closed.
Also i don´t know if this is right, but when i put proxmark3 over the reader (omnikey 5321) and with it own software omnikey diagnotics tool DOSEN´T SHOW ATR OR UID of the card, is like there isn´t any card over the reader.
22ms( its too much(
on my reader there is only 2-4(
this is not a good news(
ok....
maybe another reader work?
and another question: "hf 14a sim" works with your reader?
i like save to file commands, could you developed this for command dump a card or write a hole card like nfc-mfclassic.
Also this could be great for nested after finish nested, dump the hold card to a file.
thanks
I plain to do that in a next release.
Last edited by merlok (2011-06-10 16:43:01)
Offline
22ms( its too much(
on my reader there is only 2-4(
this is not a good news(
ok....
maybe another reader work?and another question: "hf 14a sim" works with your reader?
hf 14a sim don´t work with omnikey 5321 i´m goin to try with two more readers i have a acr122u and another one that i don´t know, i will try tomorrow and let you know
i remenber that omnikey used ping-pong if you want read this article it could help you
http://crypto.hyperlink.cz/picnic.htm
i forget to say: may be you could developed in mifare and nested command to change the delay
Last edited by thefkboss (2011-06-10 19:15:28)
Offline
with acr122u
proxmark3> hf mf sim
uid:00 00 00 00
#db# --> WORK. anticol1 time: 52
Connected to NFC reader: ACS ACR 38U-CCID 00 00 / ACR122U102 - PN532 v1.4 (0x07)
Sent bits: 26 (7 bits)
Received bits: 04 00
Sent bits: 93 20
Received bits: de ad be af 62
Sent bits: 93 70 de ad be af 62 db 98
Received bits: 08 b6 dd
Sent bits: 50 00 57 cd
Found tag with
UID: deadbeaf
ATQA: 0004
SAK: 08
so it works
Last edited by thefkboss (2011-06-11 12:48:34)
Offline
with acr122u
proxmark3> hf mf sim
so it works
ok, thanks)
can you get 2-3 traces of anticollision with omnikey 5321? i try to make some changes to code to make sim works
Offline
hi Member:
my proxmark3 version is pm3-20090905-r216
i use nfc-auth program(my friend wrote small program)
i modify iso14443a.c can authentication with acr122C:\libnfc-1.3.4-winsdk\win32>nfc-auth b1215c8938f5 38
R : 60 38 3e c6
T : 3b fc 53 e3
R : c6! 98 76! e8 d3 5a! cc! 39!
T : 55 a5 44 2e
Authentication Succesful
Authentication Succesful
C:\libnfc-1.3.4-winsdk\win32>
hi,
can you publish your changes here?
Offline
there is an interesting information:
http://www.nxp.com/documents/data_sheet/MF1S50YYX.pdf
page 22
so.... minimal timeout 71mks, maximal 1ms..
i should just to meassure timings )
Last edited by merlok (2011-06-12 11:47:41)
Offline
thefkboss wrote:with acr122u
proxmark3> hf mf sim
so it works
ok, thanks)
can you get 2-3 traces of anticollision with omnikey 5321? i try to make some changes to code to make sim works
i don´t know how to get traces. the omnikey software doesn´t show traces.
i tried with hf 14a list afeter doing sim, but proxmark3 close client because it get this error: write failed:usb_reap: timeout_error
may be is you solved this error i could make list and get the traces you need
Offline
no,
if you put card on omnikey reader and put proxmark on card
and execute command hf 14a snoop
and then on reader make anticollision - select - authenticate - halt
and then push button on proxmark and exec the command hf 14a list
you will see a sniffed session between card and reader
Offline
i tried with hf 14a list afeter doing sim, but proxmark3 close client because it get this error: write failed:usb_reap: timeout_error
may be is you solved this error i could make list and get the traces you need
to end sim command you shoul press the button on the proxmark
and then exec commands
BTW, the hf mf sim command dont store logs to command hf 14a sim... so you will see nothing...
Offline
proxmark3> hf 14a snoop
#db# cancelled_a
#db# 2 0 0
#db# 20 be 26
proxmark3> hf 14a list
proxmark3> recorded activity:
ETU :rssi: who bytes
---------+----+----+-----------
+ 0: 0: TAG 00!
+ 275170: : 26
+ 295763: : 26
+ 289011: : 26
+ 288114: : 26
+ 288164: : 26
+ 288147: : 26
+ 287299: : 26
+ 290706: : 26
+ 285587: : 26
+ 288147: : 26
+ 288138: : 26
+ 288164: : 26
+ 288147: : 26
+ 290555: : 26
+ 13144: 0: TAG 00!
+ 271730: : 26
+ 288163: : 26
+ 288347: : 26
proxmark3>
Offline
hi,
strange situation... i dont see any anticollision sequence
may you rearrange the proxmark antenna?
Offline
i have the card too near to the antenna and that was the problem
here are the traces:
frist try
proxmark3> hf 14a snoop
#db# cancelled_a
#db# 3 0 0
#db# 20 c2 26
proxmark3> hf 14a list
proxmark3> recorded activity:
ETU :rssi: who bytes
---------+----+----+-----------
+ 0: 0: TAG 04 00
+ 7614: : 93 20
+ 66: 0: TAG db 8c c2 96 03
+ 10710: : 93 70 db 8c c2 96 03 29 1b
+ 4632: : e0 81 b8 62
+ 7616: : 50 00 57 cd
+ 12528: : 52
+ 7696: : 93 20
+ 10744: : 93 70 db 8c c2 96 03 29 1b
+ 66: 0: TAG 08 b6 dd
+ 940250: : 30 00 02 a8
+ 125176: : 26
+ 290716: : 26
+ 304252: : 26
+ 285587: : 26
+ 287307: : 26
proxmark3>
second try:
proxmark3> hf 14a snoop
#db# cancelled_a
#db# 3 0 0
#db# 20 0 26
proxmark3> hf 14a list
proxmark3> recorded activity:
ETU :rssi: who bytes
---------+----+----+-----------
proxmark3> hf 14a snoop
unrecognized command 003cecae
unrecognized command 00201c64
proxmark3> hf 14a snoop
#db# cancelled_a
#db# 3 0 0
#db# 20 0 26
proxmark3> hf 14a list
proxmark3> recorded activity:
ETU :rssi: who bytes
---------+----+----+-----------
proxmark3> hf 14a snoop
#db# cancelled_a
#db# 4 0 1
#db# 20 2f7 26
proxmark3> hf 14a list
proxmark3> recorded activity:
ETU :rssi: who bytes
---------+----+----+-----------
+ 0: 0: TAG 0a!
+ 170733: : 26
+ 287307: : 26
+ 288154: : 26
+ 13002: 0: TAG 02
+ 275154: : 26
+ 289020: : 26
+ 288123: : 26
+ 288164: : 26
+ 7776: : 93 20
+ 10672: : 93 70 db 8c c2 96 03 29 1b
+ 4616: : e0 81 b8 62
+ 7632: : 50 00 57 cd
+ 12576: : 52
+ 7624: : 93 20
+ 10752: : 93 70 db 8c c2 96 03 29 1b
+ 940331: : 30 00 02 a8
+ 124346: : 26
+ 288147: : 26
+ 287283: : 26
+ 7688: : 93 20
+ 10776: : 93 70 db 8c c2 96 03 29 1b
+ 4624: : e0 81 b8 62
+ 7736: : 50 00 57 cd
+ 12401: : 52
+ 7696: : 93 20
+ 10760: : 93 70 db 8c c2 96 03 29 1b
+1062932: : 26
+ 289851: : 26
+ 296620: : 26
+ 7712: : 93 20
+ 10776: : 93 70 db 8c c2 96 03 29 1b
+ 4624: : e0 81 b8 62
+ 7608: : 50 00 57 cd
+ 12528: : 52
+ 7696: : 93 20
+ 10728: : 93 70 db 8c c2 96 03 29 1b
+ 939458: : 30 00 02 a8
+ 124338: : 26
+ 289020: : 26
+ 288994: : 26
+ 7704: : 93 20
+ 10728: : 93 70 db 8c c2 96 03 29 1b
+ 4656: : e0 81 b8 62
+ 7608: : 50 00 57 cd
+ 12506: : 52
+ 7712: : 93 20
+ 10752: : 93 70 db 8c c2 96 03 29 1b
+ 940314: : 30 00 02 a8
+ 123490: : 26
+ 288146: : 26
+ 7704: : 93 20
+ 16426: : 93 70 db 8c c2 96 03 29 1b
+ 4048: : e0 81 b8 62
+ 7632: : 50 00 57 cd
+ 12488: : 52
+ 7696: : 93 20
+ 10776: : 93 70 db 8c c2 96 03 29 1b
+ 280698: : 26
+ 288164: : 26
+ 288124: : 26
+ 290683: : 26
+ 285667: : 26
Last edited by thefkboss (2011-06-13 10:42:26)
Offline
your trace almost didnt have any card's responses....
i sniff cards this way:
on the table there is my reader
then in 1cm proxmark antena
and then in 1cm there is a card
it works perfect by me.
Offline
here are correct traces with omnikey
proxmark3> hf 14a snoop
#db# COMMAND FINISHED
#db# 4 0 9
#db# 20 bba 93
#db# 4 0 9
#db# 20 bba 93
proxmark3> hf 14a list
proxmark3> recorded activity:
ETU :rssi: who bytes
---------+----+----+-----------
+ 0: 0: TAG 01
+ 7534: : 50 00 57 cd
+ 12488: : 52
+ 7720: : 93 20
+ 10752: : 93 70 22 b4 a9 04 3b 0c c7
+ 939451: : 30 00 02 a8
+ 7624: : 50 00 57 cd
+ 12481: : 52
+ 64: 0: TAG 04 00
+ 7664: : 93 20
+ 402: 0: TAG 07
+ 10414: : 93 70 22 b4 a9 04 3b 0c c7
+ 92224: : 30 00 02 a8
+ 7232: : 50 00 57 cd
+ 12504: : 52
+ 7736: : 93 20
+ 10768: : 93 70 22 b4 a9 04 3b 0c c7
+ 91090: : 30 00 02 a8
+ 7577: : 50 00 57 cd
+ 12504: : 52
+ 64: 0: TAG 04 00
+ 7648: : 93 20
+ 10768: : 93 70 22 b4 a9 04 3b 0c c7
+ 91097: : 30 00 02 a8
+ 8400: : 50 00 57 cd
+ 13384: : 52
+ 7736: : 93 20
+ 10744: : 93 70 22 b4 a9 04 3b 0c c7
+ 162: 0: TAG 56 3b
+ 90912: : 30 00 02 a8
+ 7608: : 50 00 57 cd
+ 12496: : 52
+ 7760: : 93 20
+ 10728: : 93 70 22 b4 a9 04 3b 0c c7
+ 91929: : 30 00 02 a8
+ 7600: : 50 00 57 cd
+ 13352: : 52
+ 7737: : 93 20
+ 402: 0: TAG 07
+ 10342: : 93 70 22 b4 a9 04 3b 0c c7
+ 64: 0: TAG 08 b6 dd
+ 91024: : 30 00 02 a8
+ 7600: : 50 00 57 cd
+ 12504: : 52
+ 7712: : 93 20
+ 10768: : 93 70 22 b4 a9 04 3b 0c c7
+ 91074: : 30 00 02 a8
+ 7592: : 50 00 57 cd
+ 15921: : 52
+ 7744: : 93 20
+ 402: 0: TAG 07
+ 10318: : 93 70 22 b4 a9 04 3b 0c c7
+ 91105: : 30 00 02 a8
+ 7568: : 50 00 57 cd
+ 12504: : 52
+ 7736: : 93 20
+ 10760: : 93 70 22 b4 a9 04 3b 0c c7
+ 91082: : 30 00 02 a8
+ 7592: : 50 00 57 cd
+ 12496: : 52
+ 7736: : 93 20
+ 10736: : 93 70 22 b4 a9 04 3b 0c c7
+ 91113: : 30 00 02 a8
+ 7600: : 50 00 57 cd
+ 12480: : 52
+ 7736: : 93 20
+ 10761: : 93 70 22 b4 a9 04 3b 0c c7
+ 91096: : 30 00 02 a8
+ 66: 0: TAG 04
+ 7518: : 50 00 57 cd
+ 12504: : 52
+ 8872: : 93 20
+ 10464: : 93 70 22 b4 a9 04 3b 0c c7
+ 91074: : 30 00 02 a8
+ 7616: : 50 00 57 cd
+ 12480: : 52
+ 7737: : 93 20
+ 402: 0: TAG 07
+ 10342: : 93 70 22 b4 a9 04 3b 0c c7
+ 64: 0: TAG 08 b6 dd
+ 91049: : 30 00 02 a8
+ 7576: : 50 00 57 cd
+ 12480: : 52
+ 7736: : 93 20
+ 11640: : 93 70 22 b4 a9 04 3b 0c c7
+ 92760: : 30 00 02 a8
+ 7592: : 50 00 57 cd
+ 12498: : 52
+ 7728: : 93 20
+ 184: 0: TAG 4e 26 d8 00!
+ 10584: : 93 70 22 b4 a9 04 3b 0c c7
+ 160: 0: TAG 56 3b
+ 90921: : 30 00 02 a8
+ 7592: : 50 00 57 cd
+ 12504: : 52
+ 7728: : 93 20
+ 10744: : 93 70 22 b4 a9 04 3b 0c c7
+ 91953: : 30 00 02 a8
+ 7592: : 50 00 57 cd
+ 12504: : 52
+ 7736: : 93 20
+ 10728: : 93 70 22 b4 a9 04 3b 0c c7
+ 91106: : 30 00 02 a8
+ 7568: : 50 00 57 cd
+ 12504: : 52
+ 7736: : 93 20
+ 10769: : 93 70 22 b4 a9 04 3b 0c c7
+ 91929: : 30 00 02 a8
+ 64: 0: TAG 04
+ 9232: : 50 00 57 cd
+ 12480: : 52
+ 7760: : 93 20
+ 10744: : 93 70 22 b4 a9 04 3b 0c c7
+ 91096: : 30 00 02 a8
+ 7584: : 50 00 57 cd
+ 12496: : 52
+ 7714: : 93 20
+ 184: 0: TAG 4e 26 d8 00!
+ 10600: : 93 70 22 b4 a9 04 3b 0c c7
+ 64: 0: TAG 08 b6 dd
+ 91025: : 30 00 02 a8
+ 7576: : 50 00 57 cd
+ 13360: : 52
+ 7736: : 93 20
+ 10760: : 93 70 22 b4 a9 04 3b 0c c7
+ 91081: : 30 00 02 a8
+ 7568: : 50 00 57 cd
+ 12504: : 52
+ 7760: : 93 20
+ 186: 0: TAG 4e 26 d8 00!
+ 10558: : 93 70 22 b4 a9 04 3b 0c c7
+ 162: 0: TAG 56 3b
+ 90920: : 30 00 02 a8
+ 7568: : 50 00 57 cd
+ 12528: : 52
+ 7744: : 93 20
+ 10720: : 93 70 22 b4 a9 04 3b 0c c7
+ 91114: : 30 00 02 a8
+ 7576: : 50 00 57 cd
+ 13360: : 52
+ 7728: : 93 20
+ 402: 0: TAG 07
+ 10366: : 93 70 22 b4 a9 04 3b 0c c7
+ 91064: : 30 00 02 a8
+ 7600: : 50 00 57 cd
+ 12504: : 52
+ 7720: : 93 20
+ 10778: : 93 70 22 b4 a9 04 3b 0c c7
+ 160: 0: TAG 56 3b
proxmark3>
i was looking the flashing led and i take off the card before it had finished, i think now is correct?
Offline
i think is the card, here is another log.
i´m triying with different cards and some of then i can´t see traces from the card to the reader and other i see its
i put the cards all in the same position and the same rule of distance between reader and card
proxmark3> hf 14a snoop
#db# COMMAND FINISHED
#db# 4 0 9
#db# 20 bbb 93
#db# 4 0 9
#db# 20 bbb 93
proxmark3> hf 14a list
proxmark3> recorded activity:
ETU :rssi: who bytes
---------+----+----+-----------
+ 0: 0: TAG 04
+ 7504: : 50 00 57 cd
+ 13360: : 52
+ 64: 0: TAG 04 00
+ 7672: : 93 20
+ 64: 0: TAG fe e7 f2 ae 45
+ 10704: : 93 70 fe e7 f2 ae 45 e3 dd
+ 64: 0: TAG 08 b6 dd
+ 91009: : 30 00 02 a8
+ 72: 0: TAG 04
+ 7512: : 50 00 57 cd
+ 12496: : 52
+ 66: 0: TAG 04 00
+ 7670: : 93 20
+ 66: 0: TAG fe e7 f2 ae 45
+ 10678: : 93 70 fe e7 f2 ae 45 e3 dd
+ 66: 0: TAG 08 b6 dd
+ 91040: : 30 00 02 a8
+ 72: 0: TAG 04
+ 7512: : 50 00 57 cd
+ 12504: : 52
+ 64: 0: TAG 04 00
+ 11088: : 93 20
+ 64: 0: TAG fe e7 f2 ae 45
+ 10656: : 93 70 fe e7 f2 ae 45 e3 dd
+ 64: 0: TAG 08 b6 dd
+ 91033: : 30 00 02 a8
+ 73: 0: TAG 04
+ 7519: : 50 00 57 cd
+ 12505: : 52
+ 64: 0: TAG 04 00
+ 7680: : 93 20
+ 64: 0: TAG fe e7 f2 ae 45
+ 10656: : 93 70 fe e7 f2 ae 45 e3 dd
+ 64: 0: TAG 08 b6 dd
+ 91048: : 30 00 02 a8
+ 74: 0: TAG 04
+ 7510: : 50 00 57 cd
+ 12504: : 52
+ 66: 0: TAG 04 00
+ 7670: : 93 20
+ 66: 0: TAG fe e7 f2 ae 45
+ 11518: : 93 70 fe e7 f2 ae 45 e3 dd
+ 66: 0: TAG 08 b6 dd
+ 91048: : 30 00 02 a8
+ 73: 0: TAG 04
+ 7496: : 50 00 57 cd
+ 12504: : 52
+ 64: 0: TAG 04 00
+ 7680: : 93 20
+ 64: 0: TAG fe e7 f2 ae 45
+ 10680: : 93 70 fe e7 f2 ae 45 e3 dd
+ 64: 0: TAG 08 b6 dd
+ 91033: : 30 00 02 a8
+ 72: 0: TAG 04
+ 7496: : 50 00 57 cd
+ 12528: : 52
+ 64: 0: TAG 04 00
+ 7664: : 93 20
+ 410: 0: TAG 03!
+ 11190: : 93 70 fe e7 f2 ae 45 e3 dd
+ 66: 0: TAG 08 b6 dd
+ 92720: : 30 00 02 a8
+ 72: 0: TAG 04
+ 7520: : 50 00 57 cd
+ 12480: : 52
+ 64: 0: TAG 04 00
+ 7688: : 93 20
+ 64: 0: TAG fe e7 f2 ae 45
+ 10672: : 93 70 fe e7 f2 ae 45 e3 dd
+ 64: 0: TAG 08 b6 dd
+ 91049: : 30 00 02 a8
+ 72: 0: TAG 04
+ 7528: : 50 00 57 cd
+ 12480: : 52
+ 65: 0: TAG 04 00
+ 7671: : 93 20
+ 65: 0: TAG fe e7 f2 ae 45
+ 10704: : 93 70 fe e7 f2 ae 45 e3 dd
+ 64: 0: TAG 08 b6 dd
+ 91056: : 30 00 02 a8
+ 74: 0: TAG 04
+ 7462: : 50 00 57 cd
+ 12496: : 52
+ 66: 0: TAG 04 00
+ 7702: : 93 20
+ 66: 0: TAG fe e7 f2 ae 45
+ 10654: : 93 70 fe e7 f2 ae 45 e3 dd
+ 66: 0: TAG 08 b6 dd
+ 91032: : 30 00 02 a8
+ 72: 0: TAG 04
+ 7536: : 50 00 57 cd
+ 12480: : 52
+ 65: 0: TAG 04 00
+ 7672: : 93 20
+ 64: 0: TAG fe e7 f2 ae 45
+ 10688: : 93 70 fe e7 f2 ae 45 e3 dd
+ 64: 0: TAG 08 b6 dd
+ 91025: : 30 00 02 a8
+ 72: 0: TAG 04
+ 7504: : 50 00 57 cd
+ 13360: : 52
+ 64: 0: TAG 04 00
+ 7672: : 93 20
+ 64: 0: TAG fe e7 f2 ae 45
+ 10704: : 93 70 fe e7 f2 ae 45 e3 dd
+ 64: 0: TAG 08 b6 dd
+ 91008: : 30 00 02 a8
+ 74: 0: TAG 04
+ 7518: : 50 00 57 cd
+ 12482: : 52
+ 64: 0: TAG 04 00
+ 7696: : 93 20
+ 64: 0: TAG fe e7 f2 ae 45
+ 10688: : 93 70 fe e7 f2 ae 45 e3 dd
+ 64: 0: TAG 08 b6 dd
+ 91017: : 30 00 02 a8
+ 72: 0: TAG 04
+ 7528: : 50 00 57 cd
+ 13336: : 52
+ 64: 0: TAG 04 00
+ 7672: : 93 20
+ 64: 0: TAG fe e7 f2 ae 45
+ 10688: : 93 70 fe e7 f2 ae 45 e3 dd
+ 65: 0: TAG 08 b6 dd
+ 91880: : 30 00 02 a8
+ 74: 0: TAG 04
+ 7510: : 50 00 57 cd
+ 12496: : 52
+ 66: 0: TAG 04 00
+ 7670: : 93 20
+ 66: 0: TAG fe e7 f2 ae 45
+ 10678: : 93 70 fe e7 f2 ae 45 e3 dd
+ 66: 0: TAG 08 b6 dd
+ 91008: : 30 00 02 a8
+ 72: 0: TAG 04
+ 7544: : 50 00 57 cd
+ 13432: : 52
+ 64: 0: TAG 04 00
+ 7576: : 93 20
+ 65: 0: TAG fe e7 f2 ae 45
+ 10695: : 93 70 fe e7 f2 ae 45 e3 dd
+ 65: 0: TAG 08 b6 dd
+ 91080: : 30 00 02 a8
+ 73: 0: TAG 04
+ 7464: : 50 00 57 cd
+ 12520: : 52
+ 64: 0: TAG 04 00
+ 7656: : 93 20
+ 64: 0: TAG fe e7 f2 ae 45
+ 10680: : 93 70 fe e7 f2 ae 45 e3 dd
+ 64: 0: TAG 08 b6 dd
+ 91040: : 30 00 02 a8
proxmark3>
Offline
another one with the same problem (wrong log)
proxmark3> hf 14a snoop
#db# COMMAND FINISHED
#db# 4 0 1
#db# 20 bb9 26
#db# 4 0 1
#db# 20 bb9 26
proxmark3> hf 14a list
proxmark3> recorded activity:
ETU :rssi: who bytes
---------+----+----+-----------
+ 0: 0: TAG 02
+ 275138: : 26
+ 288148: : 26
+ 7704: : 93 20
+ 11912: : 93 70 da 3a 42 e0 42 1e c1
+ 4328: : e0 81 b8 62
+ 7616: : 50 00 57 cd
+ 12504: : 52
+ 7712: : 93 20
+ 10744: : 93 70 da 3a 42 e0 42 1e c1
+ 940316: : 30 00 02 a8
+ 7576: : 50 00 57 cd
+ 12504: : 52
+ 96626: : 26
+ 286458: : 26
+ 12986: 0: TAG 02
+ 275138: : 26
+ 290708: : 26
+ 13025: 0: TAG 02
+ 272595: : 26
+ 288139: : 26
+ 288148: : 26
+ 288163: : 26
+ 7704: : 93 20
+ 10737: : 93 70 da 3a 42 e0 42 1e c1
+ 4656: : e0 81 b8 62
+ 8152: : 50 00 57 cd
+ 11952: : 52
+ 7712: : 93 20
+ 10768: : 93 70 da 3a 42 e0 42 1e c1
+ 940299: : 30 00 02 a8
+ 124322: : 26
+ 287315: : 26
+ 7704: : 93 20
+ 14409: : 93 70 da 3a 42 e0 42 1e c1
+ 4360: : e0 81 b8 62
+ 7624: : 50 00 57 cd
+ 12520: : 52
+ 7688: : 93 20
+ 10744: : 93 70 da 3a 42 e0 42 1e c1
+ 939459: : 30 00 02 a8
+ 7625: : 50 00 57 cd
+ 12480: : 52
+ 7720: : 93 20
+ 10760: : 93 70 da 3a 42 e0 42 1e c1
+ 91080: : 30 00 02 a8
+ 138755: : 26
+ 285619: : 26
+ 288148: : 26
+ 7680: : 93 20
+ 10752: : 93 70 da 3a 42 e0 42 1e c1
+ 4656: : e0 81 b8 62
+ 7616: : 50 00 57 cd
+ 12512: : 52
+ 7688: : 93 20
+ 10744: : 93 70 da 3a 42 e0 42 1e c1
+ 939484: : 30 00 02 a8
+ 123497: : 26
+ 290716: : 26
+ 287259: : 26
+ 288156: : 26
+ 11296: 0: TAG 02
+ 276842: : 26
+ 7704: : 93 20
+ 10760: : 93 70 da 3a 42 e0 42 1e c1
+ 4640: : e0 81 b8 62
+ 7632: : 50 00 57 cd
+ 12490: : 52
+ 7712: : 93 20
+ 10736: : 93 70 da 3a 42 e0 42 1e c1
+ 939466: : 30 00 02 a8
+ 7608: : 50 00 57 cd
+ 12480: : 52
+ 7728: : 93 20
+ 10770: : 93 70 da 3a 42 e0 42 1e c1
+ 91097: : 30 00 02 a8
+ 7576: : 50 00 57 cd
+ 13352: : 52
+ 97473: : 26
+ 292388: : 26
+ 289819: : 26
+ 7704: : 93 20
+ 10760: : 93 70 da 3a 42 e0 42 1e c1
+ 4648: : e0 81 b8 62
+ 7617: : 50 00 57 cd
+ 12504: : 52
+ 7696: : 93 20
+ 10760: : 93 70 da 3a 42 e0 42 1e c1
+ 940291: : 30 00 02 a8
+ 123505: : 26
+ 287324: : 26
+ 288124: : 26
+ 7712: : 93 20
+ 11576: : 93 70 da 3a 42 e0 42 1e c1
+ 4656: : e0 81 b8 62
+ 7624: : 50 00 57 cd
+ 12488: : 52
+ 7696: : 93 20
+ 10776: : 93 70 da 3a 42 e0 42 1e c1
+ 939484: : 30 00 02 a8
+ 123448: : 26
+ 289852: : 26
+ 7704: : 93 20
+ 10744: : 93 70 da 3a 42 e0 42 1e c1
+ 4656: : e0 81 b8 62
+ 7608: : 50 00 57 cd
+ 12512: : 52
+ 7696: : 93 20
+ 10752: : 93 70 da 3a 42 e0 42 1e c1
+ 941156: : 30 00 02 a8
+ 7608: : 50 00 57 cd
+ 12504: : 52
+ 7712: : 93 20
+ 10768: : 93 70 da 3a 42 e0 42 1e c1
+ 91074: : 30 00 02 a8
+ 7608: : 50 00 57 cd
+ 12496: : 52
+ 7737: : 93 20
+ 10736: : 93 70 da 3a 42 e0 42 1e c1
+ 91113: : 30 00 02 a8
+ 8432: : 50 00 57 cd
+ 12504: : 52
+ 7704: : 93 20
+ 10792: : 93 70 da 3a 42 e0 42 1e c1
+ 91064: : 30 00 02 a8
+ 7576: : 50 00 57 cd
+ 12522: : 52
+ 7784: : 93 20
+ 10688: : 93 70 da 3a 42 e0 42 1e c1
+ 91937: : 30 00 02 a8
+ 7608: : 50 00 57 cd
+ 13352: : 52
+ 7728: : 93 20
+ 10744: : 93 70 da 3a 42 e0 42 1e c1
+ 91105: : 30 00 02 a8
+ 7584: : 50 00 57 cd
+ 12504: : 52
+ 7712: : 93 20
+ 10768: : 93 70 da 3a 42 e0 42 1e c1
+ 91098: : 30 00 02 a8
+ 7576: : 50 00 57 cd
+ 12504: : 52
+ 8576: : 93 20
+ 10777: : 93 70 da 3a 42 e0 42 1e c1
+ 91073: : 30 00 02 a8
+ 7600: : 50 00 57 cd
+ 12504: : 52
+ 7736: : 93 20
+ 10744: : 93 70 da 3a 42 e0 42 1e c1
+ 91080: : 30 00 02 a8
+ 7576: : 50 00 57 cd
+ 12504: : 52
+ 7738: : 93 20
proxmark3>
Offline
different card right log
proxmark3> hf 14a snoop
#db# COMMAND FINISHED
#db# 4 0 1
#db# 20 bba 52
#db# 4 0 1
#db# 20 bba 52
proxmark3> hf 14a list
proxmark3> recorded activity:
ETU :rssi: who bytes
---------+----+----+-----------
+ 0: 0: TAG 2a db 65 54 c0
+ 10696: : 93 70 2a db 65 54 c0 a3 83
+ 64: 0: TAG 08 b6 dd
+ 4544: : e0 81 b8 62
+ 64: 0: TAG 04
+ 7560: : 50 00 57 cd
+ 12504: : 52
+ 64: 0: TAG 04 00
+ 7648: : 93 20
+ 64: 0: TAG 2a db 65 54 c0
+ 10688: : 93 70 2a db 65 54 c0 a3 83
+ 64: 0: TAG 08 b6 dd
+ 939395: : 30 00 02 a8
+ 72: 0: TAG 04
+ 7536: : 50 00 57 cd
+ 12480: : 52
+ 65: 0: TAG 04 00
+ 7664: : 93 20
+ 64: 0: TAG 2a db 65 54 c0
+ 10696: : 93 70 2a db 65 54 c0 a3 83
+ 64: 0: TAG 08 b6 dd
+ 91033: : 30 00 02 a8
+ 72: 0: TAG 04
+ 7528: : 50 00 57 cd
+ 12504: : 52
+ 64: 0: TAG 04 00
+ 7664: : 93 20
+ 64: 0: TAG 2a db 65 54 c0
+ 10768: : 93 70 2a db 65 54 c0 a3 83
+ 64: 0: TAG 08 b6 dd
+ 92632: : 30 00 02 a8
+ 74: 0: TAG 04
+ 7502: : 50 00 57 cd
+ 12514: : 52
+ 64: 0: TAG 04 00
+ 7696: : 93 20
+ 64: 0: TAG 2a db 65 54 c0
+ 10680: : 93 70 2a db 65 54 c0 a3 83
+ 64: 0: TAG 08 b6 dd
+ 91009: : 30 00 02 a8
+ 72: 0: TAG 04
+ 7536: : 50 00 57 cd
+ 12504: : 52
+ 64: 0: TAG 04 00
+ 7648: : 93 20
+ 64: 0: TAG 2a db 65 54 c0
+ 10704: : 93 70 2a db 65 54 c0 a3 83
+ 65: 0: TAG 08 b6 dd
+ 91824: : 30 00 02 a8
+ 74: 0: TAG 04
+ 7574: : 50 00 57 cd
+ 12472: : 52
+ 66: 0: TAG 04 00
+ 7662: : 93 20
+ 66: 0: TAG 2a db 65 54 c0
+ 11558: : 93 70 2a db 65 54 c0 a3 83
+ 66: 0: TAG 08 b6 dd
+ 91016: : 30 00 02 a8
+ 72: 0: TAG 04
+ 7504: : 50 00 57 cd
+ 12504: : 52
+ 64: 0: TAG 04 00
+ 8512: : 93 20
+ 64: 0: TAG 2a db 65 54 c0
+ 10680: : 93 70 2a db 65 54 c0 a3 83
+ 65: 0: TAG 08 b6 dd
+ 91064: : 30 00 02 a8
+ 73: 0: TAG 04
+ 14616: : 50 00 57 cd
+ 12168: : 52
+ 64: 0: TAG 04 00
+ 7744: : 93 20
+ 64: 0: TAG 2a db 65 54 c0
+ 23328: : 93 70 2a db 65 54 c0 a3 83
+ 64: 0: TAG 08 b6 dd
+ 91016: : 30 00 02 a8
+ 74: 0: TAG 04
+ 7526: : 50 00 57 cd
+ 12528: : 52
+ 66: 0: TAG 04 00
+ 7640: : 93 20
+ 64: 0: TAG 2a db 65 54 c0
+ 10680: : 93 70 2a db 65 54 c0 a3 83
+ 64: 0: TAG 08 b6 dd
+ 91873: : 30 00 02 a8
+ 72: 0: TAG 04
+ 7536: : 50 00 57 cd
+ 12496: : 52
+ 64: 0: TAG 04 00
+ 7640: : 93 20
+ 64: 0: TAG 2a db 65 54 c0
+ 10704: : 93 70 2a db 65 54 c0 a3 83
+ 64: 0: TAG 08 b6 dd
+ 91889: : 30 00 02 a8
+ 74: 0: TAG 04
+ 7486: : 50 00 57 cd
+ 12520: : 52
+ 66: 0: TAG 04 00
+ 7662: : 93 20
+ 66: 0: TAG 2a db 65 54 c0
+ 10686: : 93 70 2a db 65 54 c0 a3 83
+ 66: 0: TAG 08 b6 dd
+ 91032: : 30 00 02 a8
+ 72: 0: TAG 04
+ 7536: : 50 00 57 cd
+ 12496: : 52
+ 64: 0: TAG 04 00
+ 7664: : 93 20
+ 64: 0: TAG 2a db 65 54 c0
+ 10672: : 93 70 2a db 65 54 c0 a3 83
+ 65: 0: TAG 08 b6 dd
+ 91048: : 30 00 02 a8
+ 73: 0: TAG 04
+ 7503: : 50 00 57 cd
+ 12505: : 52
+ 64: 0: TAG 04 00
+ 7648: : 93 20
+ 64: 0: TAG 2a db 65 54 c0
+ 10704: : 93 70 2a db 65 54 c0 a3 83
+ 64: 0: TAG 08 b6 dd
+ 91032: : 30 00 02 a8
+ 74: 0: TAG 04
+ 7502: : 50 00 57 cd
+ 12520: : 52
+ 66: 0: TAG 04 00
+ 7670: : 93 20
+ 66: 0: TAG 2a db 65 54 c0
+ 10662: : 93 70 2a db 65 54 c0 a3 83
+ 66: 0: TAG 08 b6 dd
+ 91040: : 30 00 02 a8
+ 73: 0: TAG 04
+ 7512: : 50 00 57 cd
+ 12504: : 52
+ 64: 0: TAG 04 00
+ 7664: : 93 20
+ 64: 0: TAG 2a db 65 54 c0
+ 10704: : 93 70 2a db 65 54 c0 a3 83
+ 64: 0: TAG 08 b6 dd
+ 91017: : 30 00 02 a8
+ 72: 0: TAG 04
+ 7496: : 50 00 57 cd
+ 12528: : 52
+ 64: 0: TAG 04 00
+ 7976: : 93 20
+ 66: 0: TAG 2a db 65 54 c0
+ 11230: : 93 70 2a db 65 54 c0 a3 83
+ 66: 0: TAG 08 b6 dd
+ 90992: : 30 00 02 a8
+ 72: 0: TAG 04
+ 7552: : 50 00 57 cd
+ 12496: : 52
+ 64: 0: TAG 04 00
+ 7672: : 93 20
proxmark3>
Offline
another different card
proxmark3> hf 14a snoop
#db# COMMAND FINISHED
#db# 4 0 2
#db# 20 bbc 93
#db# 4 0 2
#db# 20 bbc 93
proxmark3> hf 14a list
proxmark3> recorded activity:
ETU :rssi: who bytes
---------+----+----+-----------
+ 0: 0: TAG da 1d 13 2c f8
+ 10704: : 93 70 da 1d 13 2c f8 88 b9
+ 64: 0: TAG 08 b6 dd
+ 95249: : 30 00 02 a8
+ 72: 0: TAG 04
+ 7520: : 50 00 57 cd
+ 12504: : 52
+ 7720: : 93 20
+ 10744: : 93 70 da 1d 13 2c f8 88 b9
+ 91944: : 30 00 02 a8
+ 7624: : 50 00 57 cd
+ 12482: : 52
+ 64: 0: TAG 04 00
+ 7664: : 93 20
+ 64: 0: TAG da 1d 13 2c f8
+ 10672: : 93 70 da 1d 13 2c f8 88 b9
+ 64: 0: TAG 08 b6 dd
+ 97817: : 30 00 02 a8
+ 7584: : 50 00 57 cd
+ 12504: : 52
+ 7760: : 93 20
+ 10728: : 93 70 da 1d 13 2c f8 88 b9
+ 65: 0: TAG 08 b6 dd
+ 91040: : 30 00 02 a8
+ 74: 0: TAG 04
+ 7510: : 50 00 57 cd
+ 12496: : 52
+ 66: 0: TAG 04 00
+ 7646: : 93 20
+ 66: 0: TAG da 1d 13 2c f8
+ 10710: : 93 70 da 1d 13 2c f8 88 b9
+ 162: 0: TAG 56 3b
+ 90920: : 30 00 02 a8
+ 7616: : 50 00 57 cd
+ 12480: : 52
+ 7728: : 93 20
+ 419: 0: TAG 01
+ 10350: : 93 70 da 1d 13 2c f8 88 b9
+ 64: 0: TAG 08 b6 dd
+ 91017: : 30 00 02 a8
+ 72: 0: TAG 04
+ 7512: : 50 00 57 cd
+ 12528: : 52
+ 64: 0: TAG 04 00
+ 7648: : 93 20
+ 418: 0: TAG 01
+ 12046: : 93 70 da 1d 13 2c f8 88 b9
+ 92784: : 30 00 02 a8
+ 7576: : 50 00 57 cd
+ 12520: : 52
+ 66: 0: TAG 04 00
+ 12728: : 93 20
+ 64: 0: TAG da 1d 13 2c f8
+ 13232: : 93 70 da 1d 13 2c f8 88 b9
+ 64: 0: TAG 08 b6 dd
+ 91041: : 30 00 02 a8
+ 72: 0: TAG 04
+ 7504: : 50 00 57 cd
+ 12480: : 52
+ 7752: : 93 20
+ 12312: : 93 70 da 1d 13 2c f8 88 b9
+ 90369: : 30 00 02 a8
+ 74: 0: TAG 04
+ 7518: : 50 00 57 cd
+ 12496: : 52
+ 66: 0: TAG 04 00
+ 7670: : 93 20
+ 66: 0: TAG da 1d 13 2c f8
+ 10694: : 93 70 da 1d 13 2c f8 88 b9
+ 66: 0: TAG 08 b6 dd
+ 91048: : 30 00 02 a8
+ 7576: : 50 00 57 cd
+ 12504: : 52
+ 7736: : 93 20
+ 10744: : 93 70 da 1d 13 2c f8 88 b9
+ 65: 0: TAG 08 b6 dd
+ 91009: : 30 00 02 a8
+ 72: 0: TAG 04
+ 7552: : 50 00 57 cd
+ 13312: : 52
+ 64: 0: TAG 04 00
+ 7672: : 93 20
+ 418: 0: TAG 01
+ 10350: : 93 70 da 1d 13 2c f8 88 b9
+ 91080: : 30 00 02 a8
+ 7592: : 50 00 57 cd
+ 12496: : 52
+ 7736: : 93 20
+ 66: 0: TAG da 1d 13 2c f8
+ 10696: : 93 70 da 1d 13 2c f8 88 b9
+ 64: 0: TAG 08 b6 dd
+ 91025: : 30 00 02 a8
+ 72: 0: TAG 04
+ 7504: : 50 00 57 cd
+ 12504: : 52
+ 8872: : 93 20
+ 10464: : 93 70 da 1d 13 2c f8 88 b9
+ 91097: : 30 00 02 a8
+ 7576: : 50 00 57 cd
+ 12504: : 52
+ 66: 0: TAG 04 00
+ 7670: : 93 20
+ 66: 0: TAG da 1d 13 2c f8
+ 10702: : 93 70 da 1d 13 2c f8 88 b9
+ 66: 0: TAG 08 b6 dd
+ 91864: : 30 00 02 a8
+ 72: 0: TAG 04
+ 7528: : 50 00 57 cd
+ 12496: : 52
+ 7736: : 93 20
+ 10752: : 93 70 da 1d 13 2c f8 88 b9
+ 92785: : 30 00 02 a8
+ 7576: : 50 00 57 cd
+ 12513: : 52
+ 64: 0: TAG 04 00
+ 7680: : 93 20
+ 64: 0: TAG da 1d 13 2c f8
+ 10656: : 93 70 da 1d 13 2c f8 88 b9
+ 64: 0: TAG 08 b6 dd
+ 91048: : 30 00 02 a8
+ 7584: : 50 00 57 cd
+ 15792: : 52
+ 6992: : 93 20
+ 10744: : 93 70 da 1d 13 2c f8 88 b9
+ 66: 0: TAG 08 b6 dd
+ 91025: : 30 00 02 a8
+ 72: 0: TAG 04
+ 9920: : 50 00 57 cd
+ 11816: : 52
+ 64: 0: TAG 04 00
+ 7640: : 93 20
+ 64: 0: TAG da 1d 13 2c f8
+ 10704: : 93 70 da 1d 13 2c f8 88 b9
+ 91081: : 30 00 02 a8
+ 7608: : 50 00 57 cd
+ 12496: : 52
+ 7712: : 93 20
+ 66: 0: TAG da 1d 13 2c f8
+ 10702: : 93 70 da 1d 13 2c f8 88 b9
+ 66: 0: TAG 08 b6 dd
+ 91008: : 30 00 02 a8
+ 72: 0: TAG 04
+ 7528: : 50 00 57 cd
+ 12496: : 52
+ 64: 0: TAG 04 00
+ 8536: : 93 20
+ 10720: : 93 70 da 1d 13 2c f8 88 b9
+ 91121: : 30 00 02 a8
+ 7576: : 50 00 57 cd
+ 12504: : 52
+ 65: 0: TAG 04 00
proxmark3>
Offline
i think this problems are related with the inside situation of the chip, the plastic thickness, and aslo the paint of the card that make the field more hard to capture
Offline
As I see there is no additional testing if card in field
so... maybe some commands uses too many time for answering...
new release http://www.proxmark.org/forum/viewtopic.php?id=860
Offline
Pages: 1