Research, development and trades concerning the powerful Proxmark3 device.
Remember; sharing is caring. Bring something back to the community.
"Learn the tools of the trade the hard way." +Fravia
You are not logged in.
Time changes and with it the technology
Proxmark3 @ discord
Users of this forum, please be aware that information stored on this site is not private.
Hello friends, I have a card to travel by bus but I can not find a valid password, so I can not use nested attack or hardnested attack. So what you read can only be sniffer?
Thank yours!
Offline
What keys have you tried so far? Have you tried the examples given in hardnested?
Offline
checked all known default keys?
Offline
Hello friends! the hardnested examles:
pm3 --> hf mf hardnested 0 A FFFFFFFFFFFF 4 A
Key is wrong. Can't authenticate to block: 0 key type:A
pm3 --> hf mf hardnested 0 A FFFFFFFFFFFF 4 A w
Key is wrong. Can't authenticate to block: 0 key type:A
pm3 --> hf mf hardnested 0 A FFFFFFFFFFFF 4 A w s
Key is wrong. Can't authenticate to block: 0 key type:A
pm3 --> hf mf hardnested r
Key is wrong. Can't authenticate to block: 0 key type:A
pm3 --> hf mf hardnested r
Key is wrong. Can't authenticate to block: 0 key type:A
pm3 --> hf mf hardnested r a0a1a2a3a4a5
--target block no: 0, target key type:A, known target key: 0xa0a1a2a3a4a5, file
action: read, Slow: No, Tests: 0
time | #nonces | Activity | e
xpected to brute force
| | | #
states | time
--------------------------------------------------------------------------------
----------------------
0 | 0 | Start using 4 threads and SSE2 SIMD core |
|
0 | 0 | Brute force benchmark: 256 million (2^27.9) keys/s | 1
40737488355328 | 6d
1 | 0 | Using 235 precalculated bitflip state tables | 1
40737488355328 | 6d
Could not open file nonces.bin
pm3 -->
and this command:
pm3 --> hf mf hardnested 0 A A0A1A2A3A4A5 4 A FFFFFFFFFFFF
--target block no: 4, target key type:A, known target key: 0xffffffffffff, file
action: none, Slow: No, Tests: 0
time | #nonces | Activity | e
xpected to brute force
| | | #
states | time
--------------------------------------------------------------------------------
----------------------
0 | 0 | Start using 4 threads and SSE2 SIMD core |
|
0 | 0 | Brute force benchmark: 281 million (2^28.1) keys/s | 1
40737488355328 | 6d
1 | 0 | Using 235 precalculated bitflip state tables | 1
40737488355328 | 6d
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
#db# Authentication failed. Card timeout.
#db# AcquireNonces: Auth1 error
^C¿Desea terminar el trabajo por lotes (S/N)?
Offline
e tried with a file nonces.bin and I find a password but it is the same password as my old card, I try to read some sector but none I can read with this password, I think it is not the correct one
Last edited by oscuro (2017-12-05 22:29:04)
Offline
I also used the hf mf chk command and used the default password file and did not find a valid password. What I can do?
pm3 --> hf mf chk 0 A FFFFFFFFFFFF default_keys.dic
key[ 0] ffffffffffff
Loaded 416 keys from default_keys.dic
.....
Time in checkkeys: 7 seconds
|---|----------------|---|----------------|---|
|sec|key A |res|key B |res|
|---|----------------|---|----------------|---|
|000| ffffffffffff | 0 | ffffffffffff | 0 |
|---|----------------|---|----------------|---|
pm3 --> hf mf chk * A a0a1a2a3a4a5 default_keys.dic
key[ 0] a0a1a2a3a4a5
Loaded 416 keys from default_keys.dic
.........................................................................
Time in checkkeys: 111 seconds
|---|----------------|---|----------------|---|
|sec|key A |res|key B |res|
|---|----------------|---|----------------|---|
|000| ffffffffffff | 0 | ffffffffffff | 0 |
|001| ffffffffffff | 0 | ffffffffffff | 0 |
|002| ffffffffffff | 0 | ffffffffffff | 0 |
|003| ffffffffffff | 0 | ffffffffffff | 0 |
|004| ffffffffffff | 0 | ffffffffffff | 0 |
|005| ffffffffffff | 0 | ffffffffffff | 0 |
|006| ffffffffffff | 0 | ffffffffffff | 0 |
|007| ffffffffffff | 0 | ffffffffffff | 0 |
|008| ffffffffffff | 0 | ffffffffffff | 0 |
|009| ffffffffffff | 0 | ffffffffffff | 0 |
|010| ffffffffffff | 0 | ffffffffffff | 0 |
|011| ffffffffffff | 0 | ffffffffffff | 0 |
|012| ffffffffffff | 0 | ffffffffffff | 0 |
|013| ffffffffffff | 0 | ffffffffffff | 0 |
|014| ffffffffffff | 0 | ffffffffffff | 0 |
|015| ffffffffffff | 0 | ffffffffffff | 0 |
|---|----------------|---|----------------|---|
pm3 -->
my chip is a infineon mifare classic!
Last edited by oscuro (2017-12-08 20:44:52)
Offline
Maybe you should read the datasheet of a mifare 1k so you know what the number zero (0) on the command would be.
Offline
the second command I put * in the place of 0
I also tried the same command with 1, 2, 3, 4, 5, .....
Last edited by oscuro (2017-12-09 16:56:00)
Offline