Proxmark3 community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

Announcement

Time changes and with it the technology
Proxmark3 @ discord

Users of this forum, please be aware that information stored on this site is not private.

#1 2021-04-02 15:29:18

LaserByte
Contributor
Registered: 2014-05-18
Posts: 46

Help, read block 0, Mifare 1k

Hi, I can't read block 0, I can't write block 1 and 2
but, I have key A and B.
I can read block 1 and 2.
I can write block 3.

what I'm looking for is to be able to read block 0.

this is the reading.

-------------------------------------------
[+]  UID: 56 BF 68 8F
[+] ATQA: 00 04
[+]  SAK: 08 [2]
[+] Possible types:
[+]    MIFARE Classic 1K
[=] proprietary non iso14443-4 card found, RATS not supported
[+] Prng detection: hard
[=]
[=] --- Tag Signature
[=]  IC signature public key name: NXP Mifare Classic MFC1C14_x
[=] IC signature public key value: 044F6D3F294DEA5737F0F46FFEE88A356EED95695DD7E0C27A591E6F6F65962BAF
[=]     Elliptic curve parameters: NID_secp128r1
[=]              TAG IC Signature: 3BF24654C73F25D86762511285C3ADB4B06B529A1267439CBDA5E6EA57159AAE
[+]        Signature verification: successful
[?] Hint: try `hf mf` commands
--------------------------------------------

if anyone can help me, any way to read block 0.

I have searched the forum, but I can't find how

thanks.

read block 0, Mifare 1k

Last edited by LaserByte (2021-04-02 15:30:23)

Offline

#2 2021-04-02 20:09:20

myhdh10
Contributor
Registered: 2021-04-02
Posts: 2

Re: Help, read block 0, Mifare 1k

Did you try nested attack?
If you cannot access the block 0, you can try another one that you know the other block keys for the nested.

Offline

#3 2021-04-03 17:56:07

iceman
Administrator
Registered: 2013-04-25
Posts: 9,537
Website

Re: Help, read block 0, Mifare 1k

check the access rights for sector 0 to see what you can or can't do.

Offline

#4 2021-04-03 18:29:01

LaserByte
Contributor
Registered: 2014-05-18
Posts: 46

Re: Help, read block 0, Mifare 1k

Thanks iceman

this is the trailer reading ....

---------------------------------------------------------------------
[+] data: 00 00 00 00 00 00 E6 98 71 CB 00 00 00 00 00 00

[=] --------- Sector trailer -------------
[=] key A........ 000000000000
[=] acr.......... E69871
[=] user / gdb... cb
[=] key B........ 000000000000
[=] Access rights decoded
[=]   block 0  none
[=]   block 1  rdAB dectrAB
[=]   block 2  rdAB dectrAB
[=]   block 3  wrAbyB rdCbyAB wrBbyB
[=] --------------------------------------

I have tried to change the value, but it still does not allow me to see it,
this is the value that changes
old: E6 98 71 CB  new: 7C 37 88 00

As I already said, I know the keys and can write block 3, but I can't write block 1 and 2
and i can't see the whole block 0

Offline

#5 2021-04-04 06:19:17

iceman
Administrator
Registered: 2013-04-25
Posts: 9,537
Website

Re: Help, read block 0, Mifare 1k

good, good, so if you can write a new sector trailer (block3) ... what values would be good ones to write?

Hint;  If you compare with other sector trailers on your card

Offline

#6 2021-04-04 13:56:31

LaserByte
Contributor
Registered: 2014-05-18
Posts: 46

Re: Help, read block 0, Mifare 1k

sorry, it was an error of appreciation.
the line of code says it was written ...

----------------------------------------------------------------------------------------------

[usb] pm3 --> hf mf wrbl 3 b A0A1A2A3A4A5 FFFFFFFFFFFF787788CBA0A1A2A3A4A5
--block no 3, key B - A0 A1 A2 A3 A4 A5
--data: FF FF FF FF FF FF 78 77 88 CB A0 A1 A2 A3 A4 A5
isOk:01   

----------------------------------------------------------------------------------------------

but when reading block (3) again, it appears that nothing has been written, it is the same as before.
the line of code was not written, but it says   (-> isOk: 01 <-)

----------------------------------------------------------------------------------------------

[usb] pm3 --> hf mf rdbl 3 b A0A1A2A3A4A5
--block no 3, key B - A0 A1 A2 A3 A4 A5
[+] data: 00 00 00 00 00 00 E6 98 71 CB 00 00 00 00 00 00

[=] --------- Sector trailer -------------
[=] key A........ 000000000000
[=] acr.......... E69871
[=] user / gdb... cb
[=] key B........ 000000000000
[=] Access rights decoded
[=]   block 0  none
[=]   block 1  rdAB dectrAB
[=]   block 2  rdAB dectrAB
[=]   block 3  wrAbyB rdCbyAB wrBbyB
[=] --------------------------------------


Can't change read permissions?
Can't read block zero (0), no way?

I use proxmark easy ..
maybe another hardware?
maybe another way?

sorry for my error....

Offline

Board footer

Powered by FluxBB