Super card for Mifare 1K cracking

cracking.mifare1k · 2013-06-17 11:45:53

We developed out a super card.

The card can record mifare classic authentication data offline and conveniently figure out accordingly uid passord with the software

The card can sniff mfclassic card with passord and tool with one card one passord system.

The card do not need maintanence and carry power which can be used offline ,low cost and use conveniently and easy to operate.

If you have interest to the super card,please contact with me.

My email: cracking.mifare1k@hotmail.com

0xFFFF · 2013-06-17 12:05:01

Why email?
Wouldn't it be easier to answer questions here?

Can you show some product images?
What are you charging?
How much is delivery?

No offence but I'm thinking I should listen to Admiral Ackbar on this one.

RadioWar · 2013-06-18 17:21:06

--------- ---- ----~~----------------- ---- ------！！！！

you know?! 0xFFFF

Last edited by 0xFFFF (2013-06-19 02:12:14)

cracking.mifare1k · 2013-06-19 02:05:35

--------,--- --- ----???~~--- --- ------???

Last edited by 0xFFFF (2013-06-19 02:12:35)

0xFFFF · 2013-06-19 02:13:21

Keep it civilized people.

RadioWar · 2013-06-19 05:39:45

just want people know!

cracking.mifare1k · 2013-06-19 06:26:53

You'd better get our card first, check by yourself, then you have right to say: good or not. I see you are from China, you can easily check for other people, contact with me:cracking.mifare1k@hotmail.com

Thanks.

dogfriend · 2013-06-19 11:06:40

so what can this "super card" do for us ??? would u pls explain it here detailed !

thanks in advance

cracking.mifare1k · 2013-06-20 01:17:18

Hi Dogfriend, Good question. the super card can intead of PM3 to detect the keys from acess system.For example, there is a acess system using Miare 1K cards which with 16 sector keys,you may use Proxmark3 to deteck the system, it is complex, now if you have the super card: 1. put the super card on the acess reader(1 second) 2. go back to your computer, then you can get the keys(at least one secoter),am i clearly?

0xFFFF · 2013-06-20 01:44:53

cracking.mifare1k wrote:

...,am i clearly?

Kind of.
BTW - I sent you an email.

0xFFFF · 2013-06-20 04:44:31

82 USD per card.

dogfriend · 2013-06-21 14:23:37

cracking.mifare1k wrote:

Hi Dogfriend, Good question. the super card can intead of PM3 to detect the keys from acess system.For example, there is a acess system using Miare 1K cards which with 16 sector keys,you may use Proxmark3 to deteck the system, it is complex, now if you have the super card: 1. put the super card on the acess reader(1 second) 2. go back to your computer, then you can get the keys(at least one secoter),am i clearly?

well, proxmark3 IS working ... how can YOU proof that the so called "super card" IS working as u described ???? ^^

cracking.mifare1k · 2013-06-21 15:35:57

Dogfriend, buy one card, then you can proof by youself.

Dijkstra · 2013-06-22 10:04:43

I can feel the smell of SCAM...
Please provide a PoC and its related video. Otherwise I suggest the mods to take actions.

dogfriend · 2013-06-22 11:30:07

cracking.mifare1k wrote:

Dogfriend, buy one card, then you can proof by youself.

hahahaha .... good joke my "friend" .... send me one for free to proof the cards are real

dogfriend · 2013-06-22 11:31:18

dogfriend wrote:

cracking.mifare1k wrote:
Dogfriend, buy one card, then you can proof by youself.

hahahaha .... good joke my "friend" .... send me one for free to proof the cards are real

otherwise go and f*** yourself with this scam !!

dogfriend · 2013-06-22 11:36:37

one more thing, cracking.mifare1k

if u're cards would work you would provide one for free because all other guys would buy them after that proof .... so easy !!

cracking.mifare1k · 2013-06-24 04:35:05

Dog friend, I think so other ones will inform you very fast, because they already ge the super card.thanks.

djrevmoon · 2013-06-29 11:19:20

Has anyone received an answer from this guy, or maybe even a card? I sent him an email order but he has not responded.

0xFFFF · 2013-06-30 00:10:25

I have one sitting on my desk. I have not tested it yet.
This person is not at all professional but the response times were exceptional. I would try sending another email.
The software supplied is 'required' to read/write the card and will only connect to an ACR122U.

* Once I have got around to testing it I will report back here.

RadioWar · 2013-06-30 19:29:25

this is the Program file https://www.dropbox.com/s/18xmh2an4s2t64n/Sniffer_Card.exe

0xFFFF · 2013-06-30 21:59:05

Here is Sniffer_Card.exe disassembled... In C.

dogfriend · 2013-07-01 14:54:22

@ RadioWar

u sent me a message that he is a scammer !! so it does not seem to be or do u still have the same opinion on this guy ????

dogfriend · 2013-07-01 14:55:54

anyone who ordered a card from this guy and can confirm the card is working????

0xFFFF · 2013-07-02 04:50:17

dogfriend, As soon as the card is tested I will post the results here. I have some information though...

Memory size 1 kB (16 sectors, with 4 blocks per sector)
ID: 00:00:00:00
ATQA: 0x0400
SAK: 0x08
4th block of each sector is FF:FF:FF:FF:FF:FF FF:07:80 69 FF:FF:FF:FF:FF:FF
All other blocks are empty.
...so far it just looks like an ordinary UID changeable card.

dogfriend · 2013-07-02 11:24:54

@0xFFFF

so u bought the card for 82 us $ from him w/o knowing if the card works or not ?

0xFFFF · 2013-07-02 12:12:43

Sort of. I wouldn't spend my own money on something like this.
To get it to my office it was $108.00 USD... bargain.

moebius · 2013-07-02 20:04:37

I also bought the card and a magic ultralight to test them. A few months ago, this same guy came here selling the magic mifare card, and I also bought it with real success... so... I believe it will work... I'm still waiting it, so 0xFFFF please, share all you know about it please

Also, dogfriend, please, try to be less aggressive while posting here thank you!

thefkboss · 2013-07-02 23:29:13

moebius have you got a magic ultralight?? i was looking for one, tell us how it work? you could change the uid and rewrite it several times? ( i mean the trailer block) is like the oneś with backdoor or only change uid??
how much money have you payed for it?
cracking.mifare1k sold you the ultralight?

thanks

moebius · 2013-07-03 02:15:17

thefkboss wrote:

moebius have you got a magic ultralight?? i was looking for one, tell us how it work? you could change the uid and rewrite it several times? ( i mean the trailer block) is like the oneś with backdoor or only change uid??
how much money have you payed for it?
cracking.mifare1k sold you the ultralight?
thanks

hey!

I'm still waiting for the stuff... it's 10usd per ultralight + 82 per "super mifare card"...

I'll let the forum know my results as soon as I put my hands on them

Be good!

RadioWar · 2013-07-03 05:31:17

0xFFFF wrote:

dogfriend, As soon as the card is tested I will post the results here. I have some information though...
Memory size 1 kB (16 sectors, with 4 blocks per sector)
ID: 00:00:00:00
ATQA: 0x0400
SAK: 0x08
4th block of each sector is FF:FF:FF:FF:FF:FF FF:07:80 69 FF:FF:FF:FF:FF:FF
All other blocks are empty.
...so far it just looks like an ordinary UID changeable card.

what can i say~this card have not got sniff function~it just some normal function ~ anyone know about Java Card Log function?

0xFFFF · 2013-07-03 05:36:23

RadioWar wrote:

0xFFFF wrote:
...so far it just looks like an ordinary UID changeable card.
what can i say~this card have not got sniff function~it just some normal function ~ anyone know about Java Card Log function?

I wouldn't jump to conclusions just because I said it just looks like an ordinary UID changeable card.

Don't hijack the thread.

RadioWar · 2013-07-03 05:41:31

0xFFFF wrote:

RadioWar wrote:
0xFFFF wrote:
...so far it just looks like an ordinary UID changeable card.
what can i say~this card have not got sniff function~it just some normal function ~ anyone know about Java Card Log function?
I wouldn't jump to conclusions just because I said it just looks like an ordinary UID changeable card.
Don't hijack the thread.

hijack what?i dont know what you mean~
that card have UID Changeable function~but have not sniff function~that is not a sniff~
these card is made in china~so i know how "super" for these card

0xFFFF · 2013-07-03 06:11:45

RadioWar wrote:

anyone know about Java Card Log function?

This question is not related to the topic. Start a new thread.

RadioWar wrote:

that card have UID Changeable function~but have not sniff function~that is not a sniff~
these card is made in china~so i know how "super" for these card

You're speculating. I have only presented the facts I have on hand. I have not tested the card (nor anyone else on this forum i believe).

dogfriend · 2013-07-03 13:06:41

moebius wrote:

Also, dogfriend, please, try to be less aggressive while posting here thank you!

i am sorry but everything is so confusing right now.....

moebius · 2013-07-05 18:28:03

As soon as I put my hands on it, I'll share my results too. The card should be in my country in two weeks....

thefkboss · 2013-07-05 20:38:37

There are some cards basiccards www.basiccard.com may be some one could make a mifare card, logger.....if some one have skills in basic

Last edited by thefkboss (2013-07-05 20:40:08)

m6sig · 2013-07-05 21:08:39

I just got a twit from radiowar said there are a lot of fun in this thread.

So as he said. As a Moderator I thought 0xFFFF know a lot of different kind of manufacturing process of RFID tag, at least those tag under 14a standard, but once Radiowar mention the logging function of a Java emulated Mifare Classic 1K tag... Well I think we all see what 0xFFFF said.

As a common approach to make a MC1K tag in China that the Manufacturer claims their card is "hf mf mifare proof", they use Java tag to emulate a MC1K tag. If you do some research on the Internet, you will see what it is.

As Radiowar mentioned in the first page, this logging function on Java card will log the key send from the reader. But I think we all know how a PM3's sniff function work. This logging card cannot log the ATQA request from the reader, nor the SAK nor anything except the key from the reader. This make me think how an offline reader know a tag's key and there is no same key for same sector for any two card. In this kind of system. What could this logging tag do? So a Java card that the sector 0 is unlocked and the logging function is enabled sell eighty something $. How much is a sector 0 unlocked card again?

m6sig · 2013-07-05 21:19:13

m6sig wrote:

I just got a twit from radiowar said there are a lot of fun in this thread.
So as he said. As a Moderator I thought 0xFFFF know a lot of different kind of manufacturing process of RFID tag, at least those tag under 14a standard, but once Radiowar mention the logging function of a Java emulated Mifare Classic 1K tag... Well I think we all see what 0xFFFF said.
As a common approach to make a MC1K tag in China that the Manufacturer claims their card is "hf mf mifare proof", they use Java tag to emulate a MC1K tag. If you do some research on the Internet, you will see what it is.
As Radiowar mentioned in the first page, this logging function on Java card will log the key send from the reader. But I think we all know how a PM3's sniff function work. This logging card cannot log the ATQA request from the reader, nor the SAK nor anything except the key from the reader. This make me think how an offline reader know a tag's key and there is no same key for same sector for any two card. In this kind of system. What could this logging tag do? So a Java card that the sector 0 is unlocked and the logging function is enabled sell eighty something $. How much is a sector 0 unlocked card again?

As cracking.mifare1k said. This kind of tag is very easy to carry.

Is it really good enough to replace the pm3 with sniff on? I don't think so.

Is it a special card that worth for getting one for being researched? That's a different story!

0xFFFF · 2013-07-09 10:04:08

I managed to find some time to test the Chinese super card.

First of all the software is buggy and unusable without some hacks.
The UID field will only accept 7 characters
If you alternate between commands (Set UID and Get Key), the software will occasionally crash.

The card works. It will only retrieve one key at a time. The transaction must be successful in order for the card to capture the key.

In my opinion, this is overpriced and under featured. No surprises there.

As far as cracking.mifare1k is concerned.

He/she is very unprofessional. I still do not know who I have been dealing with.
Most of the answers to my questions were ambiguous.
The invoice I received was for a total of $1 USD. With a product description of 'Member card'
The packaging was fine but the only item shipped was the card.
I had ask cracking.mifare1k to send the software to me.

For reasons I can not understand, the software source and/or commands were not disclosed.

Details on the invoice...
Name: Global Card Systems Co. Ltd.
Contact person: Wilson Wang
Address: Room 601, Building 18, Huafa Xincheng, No.1 of Zhuhai Avenue, Xiangzhou District, Zhuhai City, 519000, Guangdong Province, China
Tel: 0086-15786932194

thefkboss · 2013-07-09 10:29:56

Only 7 characters UID? What happens if you need only 4 characters UID, the regulars mifare cards?
What do you mean with 'The transaction must be successful in order for the card to capture the key.'
That you must know what information is in that sector to write it on the card. I mean can i recover a key without knowing what is inside of the sector, block.....or i have to know it ?

0xFFFF · 2013-07-09 10:49:40

thefkboss wrote:

Only 7 characters UID? What happens if you need only 4 characters UID, the regulars mifare cards?

Entry is hexadecimal only. So for a 4 byte UID you should have 8 characters. That is all this card supports.
If you enter less than 8 hexadecimal characters the UID is padded with 0's.

thefkboss wrote:

What do you mean with 'The transaction must be successful in order for the card to capture the key.'

The transaction between the reader and a known working card must complete successfully...
Select, Authenticate, Read.

thefkboss wrote:

That you must know what information is in that sector to write it on the card. I mean can i recover a key without knowing what is inside of the sector, block.....or i have to know it ?

If you wanted to clone a card, then yes.
Once you have the key you can use it to authenticate with a known working card. You can then read data from the appropriate sector(s) and create a clone.

thefkboss · 2013-07-09 18:45:23

0xFFFF wrote:

The transaction between the reader and a known working card must complete successfully...
Select, Authenticate, Read.

what you mean? that you need a working card??
this card is a sniffer that you put it between the reader and a working card??

may be i was wrong i thought that this card works alone

for example i have a working card and i know the keys and what is inside, but every card has a different key based on the uid.
i have for example uid 00001 and i want to now the keys from the card uid 00002 but i don´t have that card, can i used to get the keys from card 00002 if i write the uid 00002 in the magic card without having that card?? the reader knows the keys and it send the keys based in the uid.
or i have to have the working card?

moebius · 2013-07-09 20:33:01

Hey... I'm still waiting for my cards, but I believe I know what's 0xFFFF is trying to explain...

thefkboss, you'll need to approach to a real reader with the card you're trying to get the keys from. This "magic card" will sniff the tx/rx like the proxmark snooping function, and then, using the nonces, and the crapto1 soft, you'll get the key from the first sector being read. That's all. I'll confirm this as soon as the card arrives to my place.

Be good!

thefkboss · 2013-07-09 21:53:42

so it's only a sniffer.
thanks for the replay moebius.
i don´t understand why you need the uid it´s is only a sniffer?????????? it could sniff the hole frames.
that could be done with a pn553.......or some ic, also if some one knows javacard or basicard it could be done with that kind of cards.

if that is the only used of that card i think is too expensive.

moebius · 2013-07-09 22:42:34

thefkboss wrote:

so it's only a sniffer.
thanks for the replay moebius.
i don´t understand why you need the uid it´s is only a sniffer?????????? it could sniff the hole frames.
that could be done with a pn553.......or some ic, also if some one knows javacard or basicard it could be done with that kind of cards.
if that is the only used of that card i think is too expensive.

The UID is used while trying to obtain the key... that's what I also believe... in a couple of weeks I'll post everything related this card here

0xFFFF · 2013-07-09 22:42:59

I have not tested it extensively but from what I can gather, this is how it works...

Present the "magic card" to the reader. The reader will select the card and attempt to read it like any other block 0 writeable 1K card.

While keeping the "magic card" at the reader, present another card that is known to work with this reader.
The "magic card" will sniff the transaction between the reader the card. If the transaction between the reader and the card is successful, the key will be stored on the "magic card".

moebius · 2013-07-09 22:47:59

0xFFFF wrote:

Present the "magic card" to the reader. The reader will select the card and read it like any other block 0 writeable 1K card.

when you say "read it"... how is that possible with no shared keys between the reader and the MagicCard?

0xFFFF · 2013-07-09 23:40:56

moebius wrote:

when you say "read it"... how is that possible with no shared keys between the reader and the MagicCard?

I made a mistake. I've corrected the post.
The reader selects the card but fails the authentication step.

moebius · 2013-07-09 23:45:50

0xFFFF wrote:

moebius wrote:
when you say "read it"... how is that possible with no shared keys between the reader and the MagicCard?
I made a mistake. I've corrected the post.
The reader selects the card but fails the authentication step.

thanks!

Proxmark3 community

Announcement

#1 2013-06-17 11:45:53

Super card for Mifare 1K cracking

#2 2013-06-17 12:05:01

Re: Super card for Mifare 1K cracking

#3 2013-06-18 17:21:06

Re: Super card for Mifare 1K cracking

#4 2013-06-19 02:05:35

Re: Super card for Mifare 1K cracking

#5 2013-06-19 02:13:21

Re: Super card for Mifare 1K cracking

#6 2013-06-19 05:39:45

Re: Super card for Mifare 1K cracking

#7 2013-06-19 06:26:53

Re: Super card for Mifare 1K cracking

#8 2013-06-19 11:06:40

Re: Super card for Mifare 1K cracking

#9 2013-06-20 01:17:18

Re: Super card for Mifare 1K cracking

#10 2013-06-20 01:44:53

Re: Super card for Mifare 1K cracking

#11 2013-06-20 04:44:31

Re: Super card for Mifare 1K cracking

#12 2013-06-21 14:23:37

Re: Super card for Mifare 1K cracking

#13 2013-06-21 15:35:57

Re: Super card for Mifare 1K cracking

#14 2013-06-22 10:04:43

Re: Super card for Mifare 1K cracking

#15 2013-06-22 11:30:07

Re: Super card for Mifare 1K cracking

#16 2013-06-22 11:31:18

Re: Super card for Mifare 1K cracking

#17 2013-06-22 11:36:37

Re: Super card for Mifare 1K cracking

#18 2013-06-24 04:35:05

Re: Super card for Mifare 1K cracking

#19 2013-06-29 11:19:20

Re: Super card for Mifare 1K cracking

#20 2013-06-30 00:10:25

Re: Super card for Mifare 1K cracking

#21 2013-06-30 19:29:25

Re: Super card for Mifare 1K cracking

#22 2013-06-30 21:59:05

Re: Super card for Mifare 1K cracking

#23 2013-07-01 14:54:22

Re: Super card for Mifare 1K cracking

#24 2013-07-01 14:55:54

Re: Super card for Mifare 1K cracking

#25 2013-07-02 04:50:17

Re: Super card for Mifare 1K cracking

#26 2013-07-02 11:24:54

Re: Super card for Mifare 1K cracking

#27 2013-07-02 12:12:43

Re: Super card for Mifare 1K cracking

#28 2013-07-02 20:04:37

Re: Super card for Mifare 1K cracking

#29 2013-07-02 23:29:13

Re: Super card for Mifare 1K cracking

#30 2013-07-03 02:15:17

Re: Super card for Mifare 1K cracking

#31 2013-07-03 05:31:17

Re: Super card for Mifare 1K cracking

#32 2013-07-03 05:36:23

Re: Super card for Mifare 1K cracking

#33 2013-07-03 05:41:31

Re: Super card for Mifare 1K cracking

#34 2013-07-03 06:11:45

Re: Super card for Mifare 1K cracking

#35 2013-07-03 13:06:41

Re: Super card for Mifare 1K cracking

#36 2013-07-05 18:28:03

Re: Super card for Mifare 1K cracking

#37 2013-07-05 20:38:37

Re: Super card for Mifare 1K cracking

#38 2013-07-05 21:08:39

Re: Super card for Mifare 1K cracking

#39 2013-07-05 21:19:13

Re: Super card for Mifare 1K cracking