Proxmark3 community

darrencs

Contributor

Registered: 2017-10-23

Posts: 3

Special Mifare Classic 1K card that cannot be accesed with Key Bs

After acquiring all the keys of this card using hardnested. I found out that all blocks are not accessible with Key B. Only Key A can be used to read the datas.
This card is used for some kind of access control system and has all sectors encrypted.
I've tried to gain access with a CUID card filled with the dumped data and that did not work.
Have any encounted this kind of issue before?

====================================================================
[usb|script] pm3 --> hf 14a info

[+]  UID: 75 A9 7C 4A 
[+] ATQA: 00 04
[+]  SAK: 08 [2]
[+] Possible types:
[+]    MIFARE Classic 1K
[=] proprietary non iso14443-4 card found, RATS not supported
[+] Prng detection: hard
[=] 
[=] --- Tag Signature
[=]  IC signature public key name: NXP Mifare Classic MFC1C14_x
[=] IC signature public key value: 044F6D3F294DEA5737F0F46FFEE88A356EED95695DD7E0C27A591E6F6F65962BAF
[=]     Elliptic curve parameters: NID_secp128r1
[=]              TAG IC Signature: ABEE1DD133EA205E2435D52EA0A75E5FF532D6535643AB8EFA40AC90FC95EEFC
[+]        Signature verification: successful
====================================================================
Reading with Key A:
pm3 --> hf mf rdbl --blk 3 -a -k 090500010108

[=]   # | sector 00 / 0x00                                | ascii
[=] ----+-------------------------------------------------+-----------------
[=]   3 | 00 00 00 00 00 00 FF 07 80 69 A7 DE AA 46 AB 6E | .........i...F.n
======================================================================
However, reading with Key B
[usb|script] pm3 --> hf mf rdbl --blk 3 -b -k A7DEAA46AB6E
[#] Block   3 Cmd 0x30 Cmd Error 04
[#] Read block error
======================================================================

darrencs

Contributor

Registered: 2017-10-23

Posts: 3

Re: Special Mifare Classic 1K card that cannot be accesed with Key Bs

Well I just found out that it is caused by the access bit of the card.
The real problem seems like that the access bit of my CUID card isn't working properly.