Proxmark3 community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

Announcement

Time changes and with it the technology
Proxmark3 @ discord

Users of this forum, please be aware that information stored on this site is not private.

Pages: 1

#1 2014-03-04 16:36:11

hheile
Contributor
Registered: 2014-03-03
Posts: 35

Introducing and Question

Hello all,

first, i want to introduce myself:
i am a student at the university and doing my first steps with rfid research.
i come around the proxmark3 and someone here ordered it at proxmark3.com webpage including antennas and sample cards.

first of all, i havent got it running with kali latest.
a was not able with the documentation.
for now, i got it running within windows 7, but was quite difficult. it would be great if someone review the ubuntu-document and correct it, for example in linux is no proxmark3.exe ;-)

so with windows i was able to update to the latest firmware:
proxmark3> hw version
#db# Stopped
#db# Prox/RFID mark3 RFID instrument
#db# bootrom: svn 848 2014-03-04 10:53:39
#db# os: svn 848 2014-03-04 10:53:41
#db# FPGA image built on 2014/02/25 at 07:43:59

for now i run the precompiled 756 client package.

My question, i've played around with the tags and read a em410x tag. i would like to store every tag to a file (doesnt matter if mifare or whatever tag) so, how can i do this?

i have one mifare classic card with the following data:

this one is completly empty:
proxmark3> hf 14a read
ATQA : 04 00
UID : b2 d3 3c 6b
SAK : 08 [2]
TYPE : NXP MIFARE CLASSIC 1k | Plus 2k
proprietary non iso14443a-4 card found, RATS not supported

proxmark3> hf mf chk *2 ? t
No key specified,try default keys
chk default key[0] ffffffffffff
chk default key[1] 000000000000
chk default key[2] a0a1a2a3a4a5
chk default key[3] b0b1b2b3b4b5
chk default key[4] aabbccddeeff
chk default key[5] 4d3a99c351dd
chk default key[6] 1a982c7e459a
chk default key[7] d3f7d3f7d3f7
chk default key[8] 714c5c886e97
chk default key[9] 587ee5f9350f
chk default key[10] a0478cc39091
chk default key[11] 533cb6c723f6
chk default key[12] 8fd0a4f256e9
--SectorsCnt:0 block no:0x03 key type:A key count:13
Found valid key:[ffffffffffff]
--SectorsCnt:1 block no:0x07 key type:A key count:13
Found valid key:[ffffffffffff]
--SectorsCnt:2 block no:0x0b key type:A key count:13
Found valid key:[ffffffffffff]
--SectorsCnt:3 block no:0x0f key type:A key count:13
Found valid key:[ffffffffffff]
--SectorsCnt:4 block no:0x13 key type:A key count:13
Found valid key:[ffffffffffff]
--SectorsCnt:5 block no:0x17 key type:A key count:13
Found valid key:[ffffffffffff]
--SectorsCnt:6 block no:0x1b key type:A key count:13
Found valid key:[ffffffffffff]
--SectorsCnt:7 block no:0x1f key type:A key count:13
Found valid key:[ffffffffffff]
--SectorsCnt:8 block no:0x23 key type:A key count:13
Found valid key:[ffffffffffff]
--SectorsCnt:9 block no:0x27 key type:A key count:13
Found valid key:[ffffffffffff]
--SectorsCnt:10 block no:0x2b key type:A key count:13
Found valid key:[ffffffffffff]
--SectorsCnt:11 block no:0x2f key type:A key count:13
Found valid key:[ffffffffffff]
--SectorsCnt:12 block no:0x33 key type:A key count:13
Found valid key:[ffffffffffff]
--SectorsCnt:13 block no:0x37 key type:A key count:13
Found valid key:[ffffffffffff]
--SectorsCnt:14 block no:0x3b key type:A key count:13
Found valid key:[ffffffffffff]
--SectorsCnt:15 block no:0x3f key type:A key count:13
Found valid key:[ffffffffffff]
--SectorsCnt:16 block no:0x43 key type:A key count:13
--SectorsCnt:17 block no:0x47 key type:A key count:13
--SectorsCnt:18 block no:0x4b key type:A key count:13
--SectorsCnt:19 block no:0x4f key type:A key count:13
--SectorsCnt:20 block no:0x53 key type:A key count:13
--SectorsCnt:21 block no:0x57 key type:A key count:13
--SectorsCnt:22 block no:0x5b key type:A key count:13
--SectorsCnt:23 block no:0x5f key type:A key count:13
--SectorsCnt:24 block no:0x63 key type:A key count:13
--SectorsCnt:25 block no:0x67 key type:A key count:13
--SectorsCnt:26 block no:0x6b key type:A key count:13
--SectorsCnt:27 block no:0x6f key type:A key count:13
--SectorsCnt:28 block no:0x73 key type:A key count:13
--SectorsCnt:29 block no:0x77 key type:A key count:13
--SectorsCnt:30 block no:0x7b key type:A key count:13
--SectorsCnt:31 block no:0x7f key type:A key count:13
--SectorsCnt:0 block no:0x03 key type:B key count:13
Found valid key:[ffffffffffff]
--SectorsCnt:1 block no:0x07 key type:B key count:13
Found valid key:[ffffffffffff]
--SectorsCnt:2 block no:0x0b key type:B key count:13
Found valid key:[ffffffffffff]
--SectorsCnt:3 block no:0x0f key type:B key count:13
Found valid key:[ffffffffffff]
--SectorsCnt:4 block no:0x13 key type:B key count:13
Found valid key:[ffffffffffff]
--SectorsCnt:5 block no:0x17 key type:B key count:13
Found valid key:[ffffffffffff]
--SectorsCnt:6 block no:0x1b key type:B key count:13
Found valid key:[ffffffffffff]
--SectorsCnt:7 block no:0x1f key type:B key count:13
Found valid key:[ffffffffffff]
--SectorsCnt:8 block no:0x23 key type:B key count:13
Found valid key:[ffffffffffff]
--SectorsCnt:9 block no:0x27 key type:B key count:13
Found valid key:[ffffffffffff]
--SectorsCnt:10 block no:0x2b key type:B key count:13
Found valid key:[ffffffffffff]
--SectorsCnt:11 block no:0x2f key type:B key count:13
Found valid key:[ffffffffffff]
--SectorsCnt:12 block no:0x33 key type:B key count:13
Found valid key:[ffffffffffff]
--SectorsCnt:13 block no:0x37 key type:B key count:13
Found valid key:[ffffffffffff]
--SectorsCnt:14 block no:0x3b key type:B key count:13
Found valid key:[ffffffffffff]
--SectorsCnt:15 block no:0x3f key type:B key count:13
Found valid key:[ffffffffffff]
--SectorsCnt:16 block no:0x43 key type:B key count:13
--SectorsCnt:17 block no:0x47 key type:B key count:13
--SectorsCnt:18 block no:0x4b key type:B key count:13
--SectorsCnt:19 block no:0x4f key type:B key count:13
--SectorsCnt:20 block no:0x53 key type:B key count:13
--SectorsCnt:21 block no:0x57 key type:B key count:13
--SectorsCnt:22 block no:0x5b key type:B key count:13
--SectorsCnt:23 block no:0x5f key type:B key count:13
--SectorsCnt:24 block no:0x63 key type:B key count:13
--SectorsCnt:25 block no:0x67 key type:B key count:13
--SectorsCnt:26 block no:0x6b key type:B key count:13
--SectorsCnt:27 block no:0x6f key type:B key count:13
--SectorsCnt:28 block no:0x73 key type:B key count:13
--SectorsCnt:29 block no:0x77 key type:B key count:13
--SectorsCnt:30 block no:0x7b key type:B key count:13
--SectorsCnt:31 block no:0x7f key type:B key count:13

so far so good, i got the keys.

now, a card which is not empty:
proxmark3> hf 14a read
ATQA : 04 00
UID : 22 48 ab 4e
SAK : 08 [2]
TYPE : NXP MIFARE CLASSIC 1k | Plus 2k
proprietary non iso14443a-4 card found, RATS not supported
proxmark3>

and when i try to get the keys, it fails:

proxmark3> hf mf chk *2 ? t
No key specified,try default keys
chk default key[0] ffffffffffff
chk default key[1] 000000000000
chk default key[2] a0a1a2a3a4a5
chk default key[3] b0b1b2b3b4b5
chk default key[4] aabbccddeeff
chk default key[5] 4d3a99c351dd
chk default key[6] 1a982c7e459a
chk default key[7] d3f7d3f7d3f7
chk default key[8] 714c5c886e97
chk default key[9] 587ee5f9350f
chk default key[10] a0478cc39091
chk default key[11] 533cb6c723f6
chk default key[12] 8fd0a4f256e9
--SectorsCnt:0 block no:0x03 key type:A key count:13
--SectorsCnt:1 block no:0x07 key type:A key count:13
--SectorsCnt:2 block no:0x0b key type:A key count:13
--SectorsCnt:3 block no:0x0f key type:A key count:13
--SectorsCnt:4 block no:0x13 key type:A key count:13
--SectorsCnt:5 block no:0x17 key type:A key count:13
--SectorsCnt:6 block no:0x1b key type:A key count:13
--SectorsCnt:7 block no:0x1f key type:A key count:13
--SectorsCnt:8 block no:0x23 key type:A key count:13
--SectorsCnt:9 block no:0x27 key type:A key count:13
--SectorsCnt:10 block no:0x2b key type:A key count:13
--SectorsCnt:11 block no:0x2f key type:A key count:13
--SectorsCnt:12 block no:0x33 key type:A key count:13
--SectorsCnt:13 block no:0x37 key type:A key count:13
--SectorsCnt:14 block no:0x3b key type:A key count:13
--SectorsCnt:15 block no:0x3f key type:A key count:13
--SectorsCnt:16 block no:0x43 key type:A key count:13
--SectorsCnt:17 block no:0x47 key type:A key count:13
--SectorsCnt:18 block no:0x4b key type:A key count:13
--SectorsCnt:19 block no:0x4f key type:A key count:13
--SectorsCnt:20 block no:0x53 key type:A key count:13
--SectorsCnt:21 block no:0x57 key type:A key count:13
--SectorsCnt:22 block no:0x5b key type:A key count:13
--SectorsCnt:23 block no:0x5f key type:A key count:13
--SectorsCnt:24 block no:0x63 key type:A key count:13
--SectorsCnt:25 block no:0x67 key type:A key count:13
--SectorsCnt:26 block no:0x6b key type:A key count:13
--SectorsCnt:27 block no:0x6f key type:A key count:13
--SectorsCnt:28 block no:0x73 key type:A key count:13
--SectorsCnt:29 block no:0x77 key type:A key count:13
--SectorsCnt:30 block no:0x7b key type:A key count:13
--SectorsCnt:31 block no:0x7f key type:A key count:13
--SectorsCnt:0 block no:0x03 key type:B key count:13
--SectorsCnt:1 block no:0x07 key type:B key count:13
--SectorsCnt:2 block no:0x0b key type:B key count:13
--SectorsCnt:3 block no:0x0f key type:B key count:13
--SectorsCnt:4 block no:0x13 key type:B key count:13
--SectorsCnt:5 block no:0x17 key type:B key count:13
--SectorsCnt:6 block no:0x1b key type:B key count:13
--SectorsCnt:7 block no:0x1f key type:B key count:13
--SectorsCnt:8 block no:0x23 key type:B key count:13
--SectorsCnt:9 block no:0x27 key type:B key count:13
--SectorsCnt:10 block no:0x2b key type:B key count:13
--SectorsCnt:11 block no:0x2f key type:B key count:13
--SectorsCnt:12 block no:0x33 key type:B key count:13
--SectorsCnt:13 block no:0x37 key type:B key count:13
--SectorsCnt:14 block no:0x3b key type:B key count:13
--SectorsCnt:15 block no:0x3f key type:B key count:13
--SectorsCnt:16 block no:0x43 key type:B key count:13
--SectorsCnt:17 block no:0x47 key type:B key count:13
--SectorsCnt:18 block no:0x4b key type:B key count:13
--SectorsCnt:19 block no:0x4f key type:B key count:13
--SectorsCnt:20 block no:0x53 key type:B key count:13
--SectorsCnt:21 block no:0x57 key type:B key count:13
--SectorsCnt:22 block no:0x5b key type:B key count:13
--SectorsCnt:23 block no:0x5f key type:B key count:13
--SectorsCnt:24 block no:0x63 key type:B key count:13
--SectorsCnt:25 block no:0x67 key type:B key count:13
--SectorsCnt:26 block no:0x6b key type:B key count:13
--SectorsCnt:27 block no:0x6f key type:B key count:13
--SectorsCnt:28 block no:0x73 key type:B key count:13
--SectorsCnt:29 block no:0x77 key type:B key count:13
--SectorsCnt:30 block no:0x7b key type:B key count:13
--SectorsCnt:31 block no:0x7f key type:B key count:13

so my first question: whats wrong?
my second, what can i do to get the key?
my third question: how can i add more default keys when i found one?
my last question: how can i load a file with default keys?

thanks in advance

hheile

Offline

#2 2014-03-04 16:42:13

hheile
Contributor
Registered: 2014-03-03
Posts: 35

Re: Introducing and Question

some additional: maybe its not needed to crack the key if simply cloning works, is this possible?

regards

Offline

#3 2014-03-04 21:42:02

FireFart
Contributor
From: Vienna
Registered: 2014-02-24
Posts: 15

Re: Introducing and Question

hf mf chk is only checking for default keys. It's likely the programmed tag has some custom keys. You can try to get them via hf mf mifare or hf mf nested command. For me the tool mfoc https://code.google.com/p/mfoc/ with an adafruit nfc breakout board worked the best (not proxymark related), the proxymark commands failed on my side. You should also use the latest svn version because there are some fixes for the client.

Offline

#4 2014-03-05 07:36:34

hheile
Contributor
Registered: 2014-03-03
Posts: 35

Re: Introducing and Question

Hello FireFart,

i think the latest version for the client is revision 848? am i right?
how can i save the dump of a tag (em410x) or mifare classic to a disc?

thanks in advance

Offline

#5 2014-03-06 13:02:35

FireFart
Contributor
From: Vienna
Registered: 2014-02-24
Posts: 15

Re: Introducing and Question

The WIKI is your friend:

https://code.google.com/p/proxmark3/wiki/Mifare
https://code.google.com/p/proxmark3/wiki/MifareHOWTO
https://code.google.com/p/proxmark3/wiki/ISO14443

Offline

#6 2014-03-07 08:28:29

hheile
Contributor
Registered: 2014-03-03
Posts: 35

Re: Introducing and Question

Hello Firefart,

thanks for your reply. what means "where XXXXXXXX - Nt from previous run?"
or what means Nt?

>>if it dont found a key: 'hf mf mifare XXXXXXXX' , where XXXXXXXX - Nt from previous run from the wiki?

thanks for your help

hheile

Offline

#7 2014-03-07 14:41:53

piwi
Contributor
Registered: 2013-06-04
Posts: 704

Re: Introducing and Question

The additional parameter (Nt = tag nonce) to hf mf mifare is not required (and not supported) any more. hf mf mifare will automatically try again if not successful.

Offline

#8 2014-03-07 15:12:26

hheile
Contributor
Registered: 2014-03-03
Posts: 35

Re: Introducing and Question

Hi wiwi,

really thank you for your informations. i really appriciate it

thank you thank you.

Offline

Pages: 1

Board footer

Powered by FluxBB