Proxmark3 community

JohnDoePM

Contributor

Registered: 2018-07-08

Posts: 49

Unknown hf 14 a tag

Dear community,

I'm dealing with a hf tag that get 's me a bit confused.
This is the PM version I'm using;

[usb] pm3 --> hw version

 [ Proxmark3 RFID instrument ]

 [ CLIENT ]
  Iceman/master/v4.16191-110-g93d7d4677 2023-02-27 11:31:22 a91874452
  compiled with............. GCC 9.4.0
  platform.................. Linux / x86_64
  Readline support.......... present
  QT GUI support............ present
  native BT support......... absent
  Python script support..... absent
  Lua SWIG support.......... present
  Python SWIG support....... absent

 [ PROXMARK3 ]
  firmware.................. PM3 GENERIC

 [ ARM ]
  bootrom: Iceman/master/v4.16191-109-g02a801f66 2023-02-24 09:19:32 a91874452
       os: Iceman/master/v4.16191-109-g02a801f66 2023-02-24 09:19:54 a91874452
  compiled with GCC 10.2.1 20201103 (release)

 [ FPGA ] 
  LF image 2s30vq100 2022-03-23 17:21:05
  HF image 2s30vq100 2022-03-23 17:21:16
  HF FeliCa image 2s30vq100 2022-03-23 17:21:27
  HF 15 image 2s30vq100 2022-03-23 17:21:38

 [ Hardware ]
  --= uC: AT91SAM7S512 Rev B
  --= Embedded Processor: ARM7TDMI
  --= Internal SRAM size: 64K bytes
  --= Architecture identifier: AT91SAM7Sxx Series
  --= Embedded flash memory 512K bytes ( 60% used )

I've started with a hf search:

[usb] pm3 --> hf sea
 ?  Searching for ISO14443-A tag...          
[+]  UID: 04 * * * * 6E * 
[+] ATQA: 00 48
[+]  SAK: 20 [1]
[+] MANUFACTURER: NXP Semiconductors Germany
[+] Possible types:
[+]    MIFARE Plus EV1 2K/4K CL2 in SL3
[+]    MIFARE Plus S 2K/4K CL2 in SL3
[+]    MIFARE Plus X 2K/4K CL2 in SL3
[+]    MIFARE Plus SE 1K CL2
[+]    NTAG 4xx
[=] -------------------------- ATS --------------------------
[+] ATS: 0E 78 77 91 02 4D 54 43 4F 53 73 02 05 04 [ F1 00 ]
[=]      0E...............  TL    length is 14 bytes
[=]         78............  T0    TA1 is present, TB1 is present, TC1 is present, FSCI is 8 (FSC = 256)
[=]            77.........  TA1   different divisors are supported, DR: [2, 4, 8], DS: [2, 4, 8]
[=]               91......  TB1   SFGI = 1 (SFGT = 8192/fc), FWI = 9 (FWT = 2097152/fc)
[=]                  02...  TC1   NAD is NOT supported, CID is supported

[=] -------------------- Historical bytes --------------------
[+]   4D54434F5373020504

Advised by the output above I'm getting

[usb] pm3 --> hf mfp info

[=] --- Tag Information ---------------------------
[=] -------------------------------------------------------------
[!!] ? iso14443-4 framing error. Card send fa must be  a

[+]  UID: 04 * * * * 6E * 
[+] ATQA: 00 48
[+]  SAK: 20 [1]
[+] MANUFACTURER: NXP Semiconductors Germany
[+] Possible types:
[+]    MIFARE Plus EV1 2K/4K CL2 in SL3
[+]    MIFARE Plus S 2K/4K CL2 in SL3
[+]    MIFARE Plus X 2K/4K CL2 in SL3
[+]    MIFARE Plus SE 1K CL2
[+]    NTAG 4xx
[=] -------------------------- ATS --------------------------
[+] ATS: 0E 78 77 91 02 4D 54 43 4F 53 73 02 05 04 [ F1 00 ]
[=]      0E...............  TL    length is 14 bytes
[=]         78............  T0    TA1 is present, TB1 is present, TC1 is present, FSCI is 8 (FSC = 256)
[=]            77.........  TA1   different divisors are supported, DR: [2, 4, 8], DS: [2, 4, 8]
[=]               91......  TB1   SFGI = 1 (SFGT = 8192/fc), FWI = 9 (FWT = 2097152/fc)
[=]                  02...  TC1   NAD is NOT supported, CID is supported

[=] -------------------- Historical bytes --------------------
[+]   4D54434F5373020504


[!!] ? iso14443-4 framing error. Card send fa must be  a
[=] --- Fingerprint
[=]            SAK: MIFARE Plus SL0/SL3 or MIFARE DESFire
[!!] ? iso14443-4 framing error. Card send fa must be  a
[=] Send copy to iceman of this command output!
[=] data: 00 00 00 
[=]         result: MIFARE Plus SL0/SL3

But this site tells that ATQA 0048 and SAK 20 belongs to a IBM card ...

So I'm a bit confused how to handle that card further.
Any hints?

Best regards

JD.