Proxmark3 community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

Announcement

Time changes and with it the technology
Proxmark3 @ discord

Users of this forum, please be aware that information stored on this site is not private.

#1 2018-04-18 22:48:27

breakscutum
Contributor
From: The Cloud
Registered: 2018-04-18
Posts: 4

[Solved] Problem dumping - sector 0 block 0

Hi,

I have all the A/B keys from my Mifare Classic Cards, that i got, first with "hf mf chk *1 ? default_keys.dic", and then with a harnested attack: "hf mf hardnested 0 A FFFFFFFFFFFF 0 B" ...  I obtained the rest of the block's keys.  FInally, I filled a found_keys dictionary and did a dump of the keys:  "hf mf chk *1 ? d found_keys.dic".  The problem arrived when I executed "hf mf dump".  This is the information about my Proxmark3 Easy and the Mifare Classic 1 K:

pm3 --> hw ver
[[[ Cached information ]]]

Proxmark3 RFID instrument

[ ARM ]
bootrom: iceman/master/ice_v3.1.0-787-g192aa9a-dirty-unclean 2018-04-11 00:36:05
      os: iceman/master/ice_v3.1.0-789-gd4c0de0c-dirty-unclean 2018-04-16 15:32:45
[ FPGA ]
LF image built for 2s30vq100 on 2017/10/25 at 19:50:50
HF image built for 2s30vq100 on 2017/11/10 at 19:24:16

[ Hardware ]
  --= uC: AT91SAM7S256 Rev D
  --= Embedded Processor: ARM7TDMI
  --= Nonvolatile Program Memory Size: 256K bytes, Used: 234657 bytes (90%) Free: 27487 bytes (10%)
  --= Second Nonvolatile Program Memory Size: None
  --= Internal SRAM Size: 64K bytes
  --= Architecture Identifier: AT91SAM7Sxx Series
  --= Nonvolatile Program Memory Type: Embedded Flash Memory

___________________________________________________________________________________________________

pm3 --> hf 14a i
UID : 8C 08 51 BC
ATQA : 00 04
SAK : 08 [2]
TYPE : NXP MIFARE CLASSIC 1k | Plus 2k SL1 | 1k Ev1
proprietary non iso14443-4 card found, RATS not supported
Answers to magic commands: NO
Prng detection: WEAK


Whan I Execute the command "hf mf dump" I get the output:

|-----------------------------------------|
|------ Reading sector access bits...-----|
|-----------------------------------------|
|-----------------------------------------|
|----- Dumping all blocks to file... -----|
|-----------------------------------------|
access rights do not allow reading of sector  0 block   0
command execute timeout when trying to read block  0 of sector  0.

This is the trailer's 0 sector (maybe the access conditions dont't allow to read the sector):
000000000000E69871CB000000000000

There is a way (command, script) of build a partial dump without the need of read the three readable 0 sectors and the blocks 1-15 and copy in a text file to convert to hex?

Thank you for your help.

Last edited by breakscutum (2018-04-20 22:01:02)

Offline

#2 2018-04-20 22:00:10

breakscutum
Contributor
From: The Cloud
Registered: 2018-04-18
Posts: 4

Re: [Solved] Problem dumping - sector 0 block 0

My solution: I used the app Mifare Classic Tool for Android with my Google Pixel 2 XL and with the dump keys file generated with my proxmark3 and transferred inside the phone and I could make a "partial dump" that allow me make a partial clone of the original Mifare card inside a  magic card.  Then I set  the ID from the original card and the block3 (sector 0's trailer) with the proxmark3.  The clone functioned without problems.

Last edited by breakscutum (2018-04-20 22:00:38)

Offline

Board footer

Powered by FluxBB