Research, development and trades concerning the powerful Proxmark3 device.
Remember; sharing is caring. Bring something back to the community.
"Learn the tools of the trade the hard way." +Fravia
You are not logged in.
Time changes and with it the technology
Proxmark3 @ discord
Users of this forum, please be aware that information stored on this site is not private.
SAK of NXP M1 can't change.
why?
Garage door system can distinguish between NXP M1 and Infineon M1.
And NXP M1 didn't work.
why,because of SAK different?
Thanks everyone.
proxmark3> hf 14a reader
UID : 9c c3 34 84
ATQA : 00 04
SAK : 08 [2]
TYPE : NXP MIFARE CLASSIC 1k | Plus 2k SL1
proprietary non iso14443-4 card found, RATS not supported
Answers to chinese magic backdoor commands: YES
proxmark3> hf list 14a
Recorded Activity (TraceLen = 153 bytes)
Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer
iso14443a - All times are in carrier periods (1/13.56Mhz)
iClass - Timings are not as accurate
Start | End | Src | Data (! denotes parity error) | CRC | Annotation |
------------|------------|-----|-----------------------------------------------------------------|-----|--------------------|
0 | 992 | Rdr | 52 | | WUPA
2244 | 4612 | Tag | 04 00 | |
7040 | 9504 | Rdr | 93 20 | | ANTICOLL
10692 | 16580 | Tag | 9c c3 34 84 ef | |
18560 | 29024 | Rdr | 93 70 9c c3 34 84 ef 37 9f | ok | SELECT_UID
30276 | 33796 | Tag | 08 b6 dd | |
477440 | 482208 | Rdr | e0 80 31 73 | ok | RATS
483396 | 484036 | Tag | 04 | |
951680 | 952672 | Rdr | 40 | | MAGIC WUPC1
953924 | 954500 | Tag |0a! | |
958720 | 960032 | Rdr | 43 | | MAGIC WUPC2
961220 | 961796 | Tag |0a! | |
965760 | 970528 | Rdr | 50 00 57 cd | ok | HALT
proxmark3> hf 14a reader
UID : 9c c3 34 84
ATQA : 00 04
SAK : 88 [2]
TYPE : Infineon MIFARE CLASSIC 1K
proprietary non iso14443-4 card found, RATS not supported
#db# halt error. response len: 1
Answers to chinese magic backdoor commands: NO
proxmark3> hf 14a reader
UID : 9c c3 34 84
ATQA : 00 04
SAK : 88 [2]
TYPE : Infineon MIFARE CLASSIC 1K
proprietary non iso14443-4 card found, RATS not supported
#db# halt error. response len: 1
Answers to chinese magic backdoor commands: NO
proxmark3> hf list 14a
Recorded Activity (TraceLen = 163 bytes)
Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer
iso14443a - All times are in carrier periods (1/13.56Mhz)
iClass - Timings are not as accurate
Start | End | Src | Data (! denotes parity error) | CRC | Annotation |
------------|------------|-----|-----------------------------------------------------------------|-----|--------------------|
0 | 992 | Rdr | 52 | | WUPA
2244 | 4612 | Tag | 04 00 | |
7040 | 9504 | Rdr | 93 20 | | ANTICOLL
10692 | 16580 | Tag | 9c c3 34 84 ef | |
18560 | 29024 | Rdr | 93 70 9c c3 34 84 ef 37 9f | ok | SELECT_UID
30276 | 33796 | Tag | 88 be 59 | |
491136 | 495904 | Rdr | e0 80 31 73 | ok | RATS
497092 | 497732 | Tag | 04 | |
964608 | 965600 | Rdr | 40 | | MAGIC WUPC1
966852 | 967428 | Tag |0a! | |
971648 | 972960 | Rdr | 43 | | MAGIC WUPC2
974148 | 974724 | Tag |0a! | |
978688 | 983456 | Rdr | 50 00 57 cd | ok | HALT
984644 | 985284 | Tag | 04 | |
proxmark3> hf 14a reader
UID : 9c c3 34 84
ATQA : 00 04
SAK : 08 [2]
TYPE : NXP MIFARE CLASSIC 1k | Plus 2k SL1
proprietary non iso14443-4 card found, RATS not supported
Answers to chinese magic backdoor commands: YES
Offline
Now,NXP M1 also do work.
Why,garage door system update?
Offline
Magic card generation 1 SAK didn't change.
And generation 2 can change.
Is that it?
Offline
you can change sak on a magic gen1...
Offline
you can change sak on a magic gen1...
SAK == 88 is gen1 or SAK == 08 is gen1?
In my example.
Offline
I have no idea what you are trying to say. SAK has nothing to do with magic generation 1.
have a look at "hf mf csetuid h" read the help, and you can test.
Offline
I have no idea what you are trying to say. SAK has nothing to do with magic generation 1.
have a look at "hf mf csetuid h" read the help, and you can test.
thanks
Offline
I have no idea what you are trying to say. SAK has nothing to do with magic generation 1.
have a look at "hf mf csetuid h" read the help, and you can test.
why?
proxmark3> hf mf csetuid 01020304 0002 88
--wipe card:NO uid:01 02 03 04
old block 0: dc 7f 92 69 58 08 04 00 01 12 b6 92 3b 84 a7 1d
new block 0: 01 02 03 04 04 88 02 00 01 12 b6 92 3b 84 a7 1d
old UID:dc 7f 92 69
new UID:01 02 03 04
proxmark3> hf 14a reader
UID : 01 02 03 04
ATQA : 00 02
SAK : 08 [2]
TYPE : NXP MIFARE CLASSIC 1k | Plus 2k SL1
proprietary non iso14443-4 card found, RATS not supported
Answers to chinese magic backdoor commands: YES
Is not gen1?
Offline
proxmark3> hf 14a reader
iso14443a card select failed
proxmark3> hf 14a reader
UID : 01 02 03 04
ATQA : 00 02
SAK : 88 [2]
TYPE : Infineon MIFARE CLASSIC 1K
proprietary non iso14443-4 card found, RATS not supported
#db# halt error. response len: 1
Answers to chinese magic backdoor commands: NO
proxmark3> hf mf csetuid 01020304 0002 08
--wipe card:NO uid:01 02 03 04
#db# halt error. response len: 1
#db# Halt error
Couldn't get old data. Will write over the last bytes of Block 0.
new block 0: 01 02 03 04 04 08 02 00 00 00 00 00 00 00 00 00
#db# halt error. response len: 1
#db# Halt error
Can't set UID. error=2
proxmark3> hf 14a reader
UID : 01 02 03 04
ATQA : 00 02
SAK : 08 [2]
TYPE : NXP MIFARE CLASSIC 1k | Plus 2k SL1
proprietary non iso14443-4 card found, RATS not supported
#db# halt error. response len: 1
Answers to chinese magic backdoor commands: NO
gen1?
Offline
Writing a new block 0 worked in yr post #8 & #9, definitly gen1.
Question is why you use atqa 0002, compared with post #1.
Offline
Writing a new block 0 worked in yr post #8 & #9, definitly gen1.
Question is why you use atqa 0002, compared with post #1.
thanks very much.
I was wrong in my example.
Offline