Proxmark3 community

bretzd

Contributor

Registered: 2021-03-28

Posts: 10

loclass failing with 15 obtained macs?!

Hi,

I'm getting the following failure with loclass:

CSN   = 000b0ffff7ff12e0
HASH1 = 0101000045014545
Bruteforcing byte 1
Bruteforcing byte 0
Bruteforcing byte 69

Failed to recover 3 bytes
CSN   = 00040e08f7ff12e0
HASH1 = 7802000045014545
The CSN requires > 3 byte bruteforce, not supported
CSN   = 00090d05f7ff12e0
HASH1 = 7b03000045014545
The CSN requires > 3 byte bruteforce, not supported
CSN   = 000a0c06f7ff12e0
HASH1 = 7a04000045014545
The CSN requires > 3 byte bruteforce, not supported
CSN   = 000f0b03f7ff12e0
HASH1 = 7d05000045014545
The CSN requires > 3 byte bruteforce, not supported
CSN   = 00080a0cf7ff12e0
HASH1 = 7406000045014545
The CSN requires > 3 byte bruteforce, not supported
CSN   = 000d0909f7ff12e0
HASH1 = 7707000045014545
The CSN requires > 3 byte bruteforce, not supported
CSN   = 000e080af7ff12e0
HASH1 = 7608000045014545
The CSN requires > 3 byte bruteforce, not supported
CSN   = 00030717f7ff12e0
HASH1 = 6909000045014545
The CSN requires > 3 byte bruteforce, not supported
CSN   = 003c06e0f7ff12e0
HASH1 = 200a000045014545
The CSN requires > 3 byte bruteforce, not supported
CSN   = 0001051df7ff12e0
HASH1 = 630b000045014545
The CSN requires > 3 byte bruteforce, not supported
CSN   = 0002041ef7ff12e0
HASH1 = 620c000045014545
The CSN requires > 3 byte bruteforce, not supported
CSN   = 0007031bf7ff12e0
HASH1 = 650d000045014545
The CSN requires > 3 byte bruteforce, not supported
CSN   = 00000224f7ff12e0
HASH1 = 5c0e000045014545
The CSN requires > 3 byte bruteforce, not supported
CSN   = 00050121f7ff12e0
HASH1 = 5f0f000045014545
The CSN requires > 3 byte bruteforce, not supported

Performed full crack in 142.940002 seconds
Error, we are missing byte 0, cannot calculate custom key.

With the command:

hf iclass sim 2

I got the response:

 Mac responses: 15 MACs obtained (should be 15) 

The corresponding card gives the following response to hf search:

   CSN: xx xx xx xx xx xx xx xx
    CC: xx xx xx xx xx xx xx xx
  Mode: Application [Locked]
Coding: ISO 14443-2 B/ISO 15693
 Crypt: Secured page, keys not locked
    RA: Read access not enabled
   Mem: 2 KBits/2 App Areas (32 * 8 bytes) [1F]
   AA1: blocks 06-FF
   AA2: blocks 100-1F
 AppIA: 47 49 46 4c 41 53 48 31
      : Possible iClass (NOT legacy tag)

Valid iClass Tag (or PicoPass Tag) Found - Quiting Search

How can I get loclass to succed?
PS: It might fail because the card is not a Elite card? How could I proceed then? wanted to try to write to blk 02, permuated the key but it doesn't work.
thanks

Last edited by bretzd (2021-05-30 13:11:22)

yukihama

Contributor

Registered: 2018-05-13

Posts: 133

Re: loclass failing with 15 obtained macs?!

NOT legacy tag=give up forever

iceman

Administrator

Registered: 2013-04-25

Posts: 9,537

Website

Re: loclass failing with 15 obtained macs?!

You can always try RRG/Iceman repo instead and see if it works better for loclass.