Proxmark3 community

skappy

Contributor

Registered: 2014-01-13

Posts: 91

wupC1 error ...

Dear all,

I'm working under the Iceman docker system and iI'm encountering difficulties from changing the SAK of a magic chinese mifare tag by using the hf mf csetuid command.

I have a PM3 from Elechouse with the following characterisitics :

pm3 --> hw version
[[[ Cached information ]]]

Prox/RFID mark3 RFID instrument
bootrom: /-suspect 2015-11-19 10:08:02
os: /-suspect 2015-11-19 10:08:09
LF FPGA image built for 2s30vq100 on 2015/03/06 at 07:38:04
HF FPGA image built for 2s30vq100 on 2015/11/ 2 at  9: 8: 8

uC: AT91SAM7S512 Rev B
Embedded Processor: ARM7TDMI
Nonvolatile Program Memory Size: 512K bytes. Used: 169916 bytes (32%). Free: 354
372 bytes (68%).
Second Nonvolatile Program Memory Size: None
Internal SRAM Size: 64K bytes
Architecture Identifier: AT91SAM7Sxx Series
Nonvolatile Program Memory Type: Embedded Flash Memory

When putting the tag near the antenna ,

pm3 --> hf 14a reader
UID : AB FF 5B 93
ATQA : 00 04
SAK : 08 [2]
TYPE : NXP MIFARE CLASSIC 1k | Plus 2k SL1
proprietary non iso14443-4 card found, RATS not supported
Answers to magic commands (GEN1): YES

And finally, when i try to set a new SAK value,

pm3 --> hf mf csetuid ABFF5B93 0004 09 w
--wipe card:YES  uid:AB FF 5B 93
old block 0:  AB FF 5B 93 9C 08 04 00 46 59 25 58 49 10 23 02
new block 0:  AB FF 5B 93 9C 09 04 00 46 59 25 58 49 10 23 02
#db# wupC1 error
Can't set UID. error=2
pm3 -->

I have try to put some space between tag and antenna but error persists ..

May I ask you help please ?

Thank you very much

Have a great day

iceman

Administrator

Registered: 2013-04-25

Posts: 9,538

Website

Re: wupC1 error ...

Did you run update script to get the latest commits from github?  I was inside the chinese cmds just a week ago

./start.sh

skappy

Contributor

Registered: 2014-01-13

Posts: 91

Re: wupC1 error ...

Hi iceman,
Yes, i have just updated the system but it still answer the same ...

I do not have idea about what is going wrong ....

iceman

Administrator

Registered: 2013-04-25

Posts: 9,538

Website

Re: wupC1 error ...

hm,  maybe you should not use the "w" wipe parameter.
Anyway,  its says your tag doesn't understand 0x40 command..  try a "hf list 14a"  and post here.

skappy

Contributor

Registered: 2014-01-13

Posts: 91

Re: wupC1 error ...

Iceman,
i have already try without the 'w' but :-(

Here is the 'hf list 14a' return

pm3 --> hf list 14a
Recorded Activity (TraceLen = 105 bytes)

Start = Start of Start Bit, End = End of last modulation. Src = Source of Trans
er
iso14443a - All times are in carrier periods (1/13.56Mhz)
iClass    - Timings are not as accurate

      Start |        End | Src | Data (! denotes parity error)
                 | CRC | Annotation         |
------------|------------|-----|-----------------------------------------------
-----------------|-----|--------------------|
          0 |        992 | Rdr |40
                 |     | MAGIC WUPC1
       2484 |       3060 | Tag |0a!
                 |     |
       7040 |       8352 | Rdr |43
                 |     | MAGIC WUPC2
       9524 |      10100 | Tag |0a!
                 |     |
      14080 |      18848 | Rdr |30  00  02  a8
                 |  ok | READBLOCK(0)
      20020 |      40820 | Tag |ab  ff  5b  93  9c  08  04  00  46  59  25  58
49  10  23  02   |     |
            |            |     |46  60
                 |  ok |
      42368 |      47136 | Rdr |50  00  57  cd
                 |  ok | HALT
     198400 |     199392 | Rdr |40
                 |     | MAGIC WUPC1
pm3 -->

ps. I have the same behaviour with a other magic chinese tag ...

Last edited by skappy (2016-11-16 19:26:05)

gator96100

Contributor

From: Austria

Registered: 2016-03-25

Posts: 177

Re: wupC1 error ...

I tested the exact same commands on my pm3 and it worked, using the latest iceman commit.
If you are using Windows you can try my compiled iceman build (you can find it in the windows section).

Last edited by gator96100 (2016-11-16 19:52:36)