Proxmark3 developers community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

#1 2020-02-10 13:02:01

zorks56
Contributor
Registered: 2020-02-02
Posts: 14

Study for decodification DUMP (Help or suggest :) )

Hello guys,
thank you first of all ..
I hope someone can help me ..

I have a 1K Mifare classic
with keys A and B of the two protected sectors 01 and 02.

This card stores an integer without a comma.

After several attempts I managed to understand that UID is involved in the calculation.
in fact same DUMP but different uid generates an error in the reader.
DAta for two cards:


the key A|B sect 01:
060504030201|280492231195
the key A|B sect 02:
043028239295 | 280492231195

see todheter the details of Cards: CARD N°1:

UID: A9451E78 credit : = 44

+Sector: 0

A9451E788A0804006263646566676869
00000000000000000000000000000000
00000000000000000000000000000000
FFFFFFFFFFFFFF078069FFFFFFFFFFFF


+Sector: 1

0EF1EFFCE0972B5AAA3A4682538D538E
00000000000000000000000000000000
00000000000000000000000000000000
060504030201FF078069280492231195


+Sector: 2

C6E33923209E641B1B3CC6B5E39B53C3<-----changed--->Credit CrYpted!
571520572F4DC0D3C661397634EBA707------->DOn'T Change each time i charge or decharge the CREDIT!(but is fix only for thiCARd uid)
00000000000000000000000000000000
043028239295FF078069280492231195


------------------------------
UID: A9451E78 credit : = 45

+Sector: 1

(don't change)

+Sector: 2

C6E33923209E641B1B3CC6B5E39B53C3<-----changed--->Credit CrYpted!
571520572F4DC0D3C661397634EBA707------->DOn'T Change each time i charge or decharge the CREDIT!(but is fix only for thiCARd uid)
00000000000000000000000000000000
043028239295FF078069280492231195


------------------------------
UID: A9451E78 credit : = 21

+Sector: 1

(don't change)

+Sector: 2

F3B8F89D7AA900ACDE1B510BA7D906EE<-----changed--->Credit CrYpted!
571520572F4DC0D3C661397634EBA707------->DOn'T Change each time i charge or decharge the CREDIT!(but is fix only for thiCARd uid)
00000000000000000000000000000000
043028239295FF078069280492231195



------------------------------
UID: A9451E78 credit : = 22

+Sector: 1

(don't change)

+Sector: 2
3EF6D2EC0AF1DAD0F1072C5E56CBAF44<-----changed--->Credit CrYpted!
571520572F4DC0D3C661397634EBA707------->DOn'T Change each time i charge or decharge the CREDIT!(but is fix only for thiCARd uid)
00000000000000000000000000000000
043028239295FF078069280492231195



------------------------------
UID: A9451E78 credit : = 23

+Sector: 1

(don't change)

+Sector: 2
F85A2B0ABA4EDDC6547829AB90381E7D<-----changed--->Credit CrYpted!
571520572F4DC0D3C661397634EBA707------->DOn'T Change each time i charge or decharge the CREDIT!(but is fix only for thiCARd uid)
00000000000000000000000000000000
043028239295FF078069280492231195


------------------------------
UID: A9451E78 credit : = 24

+Sector: 1

(don't change)

+Sector: 2
ECDE34F05944D9E0044E141858EAA11C<-----changed --->Credit CrYpted!
571520572F4DC0D3C661397634EBA707------->DOn'T Change each time i charge or decharge the CREDIT!(but is fix only for thiCARd uid)
00000000000000000000000000000000
043028239295FF078069280492231195


------------------------------
UID: A9451E78 credit : = 14

+Sector: 1

(don't change)

+Sector: 2
743FFA1FFECE9D63F9F960568CD87F36<-----changed --->Credit CrYpted!
571520572F4DC0D3C661397634EBA707------->DOn'T Change each time i charge or decharge the CREDIT!(but is fix only for thiCARd uid)
00000000000000000000000000000000
043028239295FF078069280492231195


-----------------------------------------------------
CARd N°2 Activate in the same days and same houres:

UID: C95E1878 credit: 14

+Sector: 0

A9451E788A0804006263646566676869
00000000000000000000000000000000
00000000000000000000000000000000
FFFFFFFFFFFFFF078069FFFFFFFFFFFF



+Sector: 1

0EF1EFFCE0972B5AAA3A4682538D538E
00000000000000000000000000000000
00000000000000000000000000000000
060504030201FF078069280492231195


+Sector: 2

93c40b4c98404a8228d4f149d33cd989--->Credit CrYpted!
307f5840ebe33f9e3a6653c9d0f20558<---Changed respect Card N°1 but is fix for this card N°2 everytime i change the credit
00000000000000000000000000000000
043028239295FF078069280492231195



I tried to 3DES and AES decoding algo  other algo decodification with all three kays but i don't found an result intresting!
I resolved with uploading the dump that intrested me but for study reason i want understand how crypt the Integer number in HEx filed.

thank you guys!

Offline

#2 2020-02-10 13:04:28

zorks56
Contributor
Registered: 2020-02-02
Posts: 14

Re: Study for decodification DUMP (Help or suggest :) )

sorry Credit : 44 is incorrect:

the correct data for credit 44 : is
+Sector: 2

68C594F803983E87C2702ECB7E9D4CE0<-----changed--->Credit CrYpted!
571520572F4DC0D3C661397634EBA707------->DOn'T Change each time i charge or decharge the CREDIT!(but is fix only for thiCARd uid)
00000000000000000000000000000000
043028239295FF078069280492231195

Offline

#3 2020-02-10 13:09:14

zorks56
Contributor
Registered: 2020-02-02
Posts: 14

Re: Study for decodification DUMP (Help or suggest :) )

for all variationes: sector 2 block 0

ED66CE38    2059A14C    7BF104A1    7E39CC61        credit    5
EF87EB4C    786B5BAA    88A10E0D    9FC23A93        credit    6                                                                                                                       
D4677410    D688BDED 65ED6781 1E9DBFF8        credit    12                       
743FFA1F    FECE9D63    F9F96056    8CD87F36        credit    14                                               
A929A999    29A0F173    6705C153    CC952D46        credit    17                                                                       
F3B8F89D    7AA900AC    DE1B510B    A7D906EE        credit    21
3EF6D2EC    0AF1DAD0    F1072C5E    56CBAF44        credit    22
F85A2B0A    BA4EDDC6 547829AB    90381E7D        credit    23
ECDE34F0    5944D9E0    044E1418    58EAA11C        credit    24
A5F7C5BD    33F8CE64    8FE0FF5A    30434C7F        credit    25                                               
EE691013    5E0D5D50    749741D2    922AA0A9        credit    28                       
68C594F8    03983E87    C2702ECB    7E9D4CE0        credit    44
C6E33923    209E641B    1B3CC6B5    E39B53C3        credit    45                       
18420700    f485f741    ae2a2fcc    451feb8e        credit    47

Offline

#4 2020-02-12 17:18:11

zorks56
Contributor
Registered: 2020-02-02
Posts: 14

Re: Study for decodification DUMP (Help or suggest :) )

Hi guys! An idea ?
Someone has suggest or solution?

Offline

Board footer

Powered by FluxBB