Proxmark3 community

costivl

Contributor

Registered: 2021-11-26

Posts: 2

Cannot find sector 1 key a, knowing all other keys on the card

Hello,

I know all keys on the card except key a of sector 1, here is my hf mf autopwn results:

[usb] pm3 --> hf mf autopwn --1k -s 0 -a -k a0a1a2a3a4a5 -f mfc_default_keys
[#] Multiple tags detected. Collision after Bit 8
[!] No tag found.
[+] loaded 6 dynamic keys
[+] loaded 61 keys from hardcoded default array
[+] Loaded 1797 keys from dictionary file `C:\ProxSpace\pm3\proxmark3\client\dictionaries/mfc_default_keys.dic`
[=] running strategy 1
[#] ChkKeys_fast: Can't select card (ALL)
[=] ....
[=] ....
[=] ....
[=] ....
[=] ....
[=] ....
[=] ....
[=] ....
[=] ....
[=] ....
[=] ....
[=] ....
[=] ....
[=] ....
[=] ....
[=] ....
[=] ....
[=] ....
[=] ....
[=] ....
[=] ....
[=] running strategy 2
[=] ...
[+] target sector   0 key type A -- found valid key [ A0A1A2A3A4A5 ]
[+] target sector   0 key type B -- found valid key [ 010155010100 ]
[+] target sector   1 key type B -- found valid key [ FFFFFFFFFFFF ]
[+] target sector   2 key type A -- found valid key [ C78A3D0E0000 ]
[+] target sector   2 key type B -- found valid key [ FFFFFFFFFFFF ]
[+] target sector   3 key type A -- found valid key [ C78A3D0E0000 ]
[+] target sector   3 key type B -- found valid key [ FFFFFFFFFFFF ]
[+] target sector   4 key type A -- found valid key [ C78A3D0E0000 ]
[+] target sector   4 key type B -- found valid key [ FFFFFFFFFFFF ]
[+] target sector   5 key type A -- found valid key [ C78A3D0E0000 ]
[+] target sector   5 key type B -- found valid key [ FFFFFFFFFFFF ]
[+] target sector   6 key type A -- found valid key [ C78A3D0E0000 ]
[+] target sector   6 key type B -- found valid key [ FFFFFFFFFFFF ]
[+] target sector   7 key type A -- found valid key [ C78A3D0E0000 ]
[+] target sector   7 key type B -- found valid key [ FFFFFFFFFFFF ]
[+] target sector   8 key type A -- found valid key [ C78A3D0E0000 ]
[+] target sector   8 key type B -- found valid key [ FFFFFFFFFFFF ]
[+] target sector   9 key type A -- found valid key [ 010155010100 ]
[+] target sector   9 key type B -- found valid key [ FFFFFFFFFFFF ]
[+] target sector  10 key type A -- found valid key [ 010155010100 ]
[+] target sector  10 key type B -- found valid key [ FFFFFFFFFFFF ]
[+] target sector  11 key type A -- found valid key [ 010155010100 ]
[+] target sector  11 key type B -- found valid key [ FFFFFFFFFFFF ]
[+] target sector  12 key type A -- found valid key [ 010155010100 ]
[+] target sector  12 key type B -- found valid key [ FFFFFFFFFFFF ]
[+] target sector  13 key type A -- found valid key [ 010155010100 ]
[+] target sector  13 key type B -- found valid key [ FFFFFFFFFFFF ]
[+] target sector  14 key type A -- found valid key [ 010155010100 ]
[+] target sector  14 key type B -- found valid key [ FFFFFFFFFFFF ]
[+] target sector  15 key type A -- found valid key [ 010155010100 ]
[+] target sector  15 key type B -- found valid key [ FFFFFFFFFFFF ]
[-] Tag isn't vulnerable to Nested Attack (PRNG is probably not predictable).
[-] Nested attack failed --> try hardnested
[=] Hardnested attack starting...
[=] ---------+---------+---------------------------------------------------------+-----------------+-------
[=]          |         |                                                         | Expected to brute force
[=]  Time    | #nonces | Activity                                                | #states         | time
[=] ---------+---------+---------------------------------------------------------+-----------------+-------
[=]        0 |       0 | Start using 12 threads and AVX2 SIMD core               |                 |
[=]        0 |       0 | Brute force benchmark: 1694 million (2^30.7) keys/s     | 140737488355328 |   23h
[=]        2 |       0 | Loaded 0 RAW / 351 LZ4 / 0 BZ2 in 1832 ms               | 140737488355328 |   23h
[=]        2 |       0 | Using 239 precalculated bitflip state tables            | 140737488355328 |   23h

[!!] Error: Static encrypted nonce detected. Aborted

[+] found keys:

[+] -----+-----+--------------+---+--------------+----
[+]  Sec | Blk | key A        |res| key B        |res
[+] -----+-----+--------------+---+--------------+----
[+]  000 | 003 | A0A1A2A3A4A5 | D | 010155010100 | D
[+]  001 | 007 | ------------ | 0 | FFFFFFFFFFFF | D
[+]  002 | 011 | C78A3D0E0000 | D | FFFFFFFFFFFF | D
[+]  003 | 015 | C78A3D0E0000 | D | FFFFFFFFFFFF | D
[+]  004 | 019 | C78A3D0E0000 | D | FFFFFFFFFFFF | D
[+]  005 | 023 | C78A3D0E0000 | D | FFFFFFFFFFFF | D
[+]  006 | 027 | C78A3D0E0000 | D | FFFFFFFFFFFF | D
[+]  007 | 031 | C78A3D0E0000 | D | FFFFFFFFFFFF | D
[+]  008 | 035 | C78A3D0E0000 | D | FFFFFFFFFFFF | D
[+]  009 | 039 | 010155010100 | D | FFFFFFFFFFFF | D
[+]  010 | 043 | 010155010100 | D | FFFFFFFFFFFF | D
[+]  011 | 047 | 010155010100 | D | FFFFFFFFFFFF | D
[+]  012 | 051 | 010155010100 | D | FFFFFFFFFFFF | D
[+]  013 | 055 | 010155010100 | D | FFFFFFFFFFFF | D
[+]  014 | 059 | 010155010100 | D | FFFFFFFFFFFF | D
[+]  015 | 063 | 010155010100 | D | FFFFFFFFFFFF | D
[+] -----+-----+--------------+---+--------------+----
[=] ( D:Dictionary / S:darkSide / U:User / R:Reused / N:Nested / H:Hardnested / C:statiCnested / A:keyA  )
[?] MAD key detected. Try `hf mf mad` for more details

iceman

Administrator

Registered: 2013-04-25

Posts: 9,537

Website

Re: Cannot find sector 1 key a, knowing all other keys on the card

From which system is this card?

Sentinel

Contributor

Registered: 2012-11-26

Posts: 191

Re: Cannot find sector 1 key a, knowing all other keys on the card

Hi costivl)   https://www.markitaly.com )?

iceman

Administrator

Registered: 2013-04-25

Posts: 9,537

Website

Re: Cannot find sector 1 key a, knowing all other keys on the card

Cool,  looks like static keys.  You got more keys from them?