Proxmark3 community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

Announcement

Time changes and with it the technology
Proxmark3 @ discord

Users of this forum, please be aware that information stored on this site is not private.

#1 2020-03-15 09:52:58

foryouever
Contributor
Registered: 2020-03-08
Posts: 8

[solved]Horrible 01 20 01 45

I have some "NXP MIFARE CLASSIC 1k | Plus 2k SL1 | 1k Ev1" card, and response 01 20 01 45 nt, what can I do next? Thanks a lot.

[usb] pm3 --> hw ver
[ Proxmark3 RFID instrument ]
[ CLIENT ]
  client: RRG/Iceman
  compiled with MinGW-w64 9.2.0 OS:Windows (64b) ARCH:x86_64
[ PROXMARK3 ]
[ ARM ]
  bootrom: RRG/Iceman/master/f1314982 2020-03-13 14:04:12
       os: RRG/Iceman/master/f1314982 2020-03-13 14:04:23
  compiled with GCC 8.3.1 20190703 (release) [gcc-8-branch revision 273027]
[ FPGA ]
  LF image built for 2s30vq100 on 2020-02-22 at 12:51:14
  HF image built for 2s30vq100 on 2020-01-12 at 15:31:16
[ Hardware ]
  --= uC: AT91SAM7S512 Rev B
  --= Embedded Processor: ARM7TDMI
  --= Nonvolatile Program Memory Size: 512K bytes, Used: 246582 bytes (47%) Free: 277706 bytes (53%)
  --= Second Nonvolatile Program Memory Size: None
  --= Internal SRAM Size: 64K bytes
  --= Architecture Identifier: AT91SAM7Sxx Series
  --= Nonvolatile Program Memory Type: Embedded Flash Memory

[usb] pm3 --> hf sea
[+]  UID : C9 9A F3 86
[+] ATQA : 00 04
[+]  SAK : 08 [2]
[+] TYPE : NXP MIFARE CLASSIC 1k | Plus 2k SL1 | 1k Ev1
[=] proprietary non iso14443-4 card found, RATS not supported
[+] Prng detection: WEAK
[+] Static nonce detected
[+] Valid ISO14443-A tag found

[usb] pm3 --> hf mf chk *1 ?
[=] No key specified, trying default keys
[ 0] ffffffffffff
[+] Time in checkkeys: 7 seconds
[=] testing to read key B...
[=] found keys:
|---|----------------|---|----------------|---|
|sec| key A          |res| key B          |res|
|---|----------------|---|----------------|---|
|000|  ffffffffffff  | 1 |  ffffffffffff  | 1 |
|001|  ffffffffffff  | 1 |  ffffffffffff  | 1 |
|002|  ffffffffffff  | 1 |  ffffffffffff  | 1 |
|003|  ffffffffffff  | 1 |  ffffffffffff  | 1 |
|004|  ffffffffffff  | 1 |  ffffffffffff  | 1 |
|005|  ffffffffffff  | 1 |  ffffffffffff  | 1 |
|006|  ffffffffffff  | 1 |  ffffffffffff  | 1 |
|007|  ffffffffffff  | 1 |  ffffffffffff  | 1 |
|008|  ffffffffffff  | 1 |  ffffffffffff  | 1 |
|009|  ffffffffffff  | 1 |  ffffffffffff  | 1 |
|010|  ------------  | 0 |  ffffffffffff  | 1 |
|011|  ------------  | 0 |  ffffffffffff  | 1 |
|012|  ------------  | 0 |  ffffffffffff  | 1 |

|013|  ffffffffffff  | 1 |  ffffffffffff  | 1 |
|014|  ffffffffffff  | 1 |  ffffffffffff  | 1 |
|015|  ffffffffffff  | 1 |  ffffffffffff  | 1 |
|---|----------------|---|----------------|---|
[=] ( 0 :Failed / 1 :Success)

usb] pm3 --> hf list
[+] Recorded activity (trace len = 103 bytes)
[=] Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer
[=] ISO14443A - All times are in carrier periods (1/13.56MHz)

      Start |        End | Src | Data (! denotes parity error)                                           | CRC | Annotation
------------+------------+-----+-------------------------------------------------------------------------+-----+--------------------
          0 |        992 | Rdr |52                                                                       |     | WUPA
       2116 |       4484 | Tag |04  00                                                                   |     |
       7040 |       9504 | Rdr |93  20                                                                   |     | ANTICOLL
      10564 |      16452 | Tag |c9  9a  f3  86  26                                                       |     |
      18944 |      29472 | Rdr |93  70  c9  9a  f3  86  26  96  0e                                       |  ok | SELECT_UID
      30532 |      34052 | Tag |08  b6  dd                                                               |     |
      43392 |      48096 | Rdr |60  00  f5  7b                                                           |  ok | AUTH-A(0)
      49988 |      54724 | Tag |01  20  01  45

[usb] pm3 --> hf mf static 1 0 a ffffffffffff
[+] Testing known keys. Sector count 16

[+] Chunk: 0.8s | found 29/32 keys (24)

[+] Time to check 23 known keys: 1 seconds

[+] enter static nested key recovery
[+] Found 95377 key candidates
[=]      0/95377 keys | 131.0 keys/sec | worst case  727.8 seconds remaining
...(ellipsis)
[=]  95340/95377 keys | 131.7 keys/sec | worst case    0.3 seconds remaining
[+] target block: 40 key type: A
[+] Found 95377 key candidates
[=]      0/95377 keys | 130.8 keys/sec | worst case  729.0 seconds remaining
...(ellipsis)
[=]  95340/95377 keys | 133.4 keys/sec | worst case    0.3 seconds remaining
[+] target block: 44 key type: A
[+] Found 95377 key candidates
[=]      0/95377 keys | 134.6 keys/sec | worst case  708.5 seconds remaining
...(ellipsis)
[=]  95340/95377 keys | 133.5 keys/sec | worst case    0.3 seconds remaining
[+] target block: 48 key type: A
[+] time in static nested: 2157 seconds

[=] trying to read key B...

[=] found keys:
|---|----------------|---|----------------|---|
|sec| key A          |res| key B          |res|
|---|----------------|---|----------------|---|
|000|  ffffffffffff  | 1 |  ffffffffffff  | 1 |
|001|  ffffffffffff  | 1 |  ffffffffffff  | 1 |
|002|  ffffffffffff  | 1 |  ffffffffffff  | 1 |
|003|  ffffffffffff  | 1 |  ffffffffffff  | 1 |
|004|  ffffffffffff  | 1 |  ffffffffffff  | 1 |
|005|  ffffffffffff  | 1 |  ffffffffffff  | 1 |
|006|  ffffffffffff  | 1 |  ffffffffffff  | 1 |
|007|  ffffffffffff  | 1 |  ffffffffffff  | 1 |
|008|  ffffffffffff  | 1 |  ffffffffffff  | 1 |
|009|  ffffffffffff  | 1 |  ffffffffffff  | 1 |
|010|  ------------  | 0 |  ffffffffffff  | 1 |
|011|  ------------  | 0 |  ffffffffffff  | 1 |
|012|  ------------  | 0 |  ffffffffffff  | 1 |
|013|  ffffffffffff  | 1 |  ffffffffffff  | 1 |
|014|  ffffffffffff  | 1 |  ffffffffffff  | 1 |
|015|  ffffffffffff  | 1 |  ffffffffffff  | 1 |
|---|----------------|---|----------------|---|
[=] ( 0 :Failed / 1 :Success)

Last edited by foryouever (2020-03-18 16:11:41)

Offline

#2 2020-03-15 10:15:46

iceman
Administrator
Registered: 2013-04-25
Posts: 9,497
Website

Re: [solved]Horrible 01 20 01 45

What is your device?   Icarus had some issues with his Proxmark3 Easy running the static nonce key recovery,  but it worked fine on his RDV4.
And you can always test offical repo.  It has the static nonce recovery included in the "nested" command.

Offline

#3 2020-03-15 10:27:52

foryouever
Contributor
Registered: 2020-03-08
Posts: 8

Re: [solved]Horrible 01 20 01 45

iceman wrote:

What is your device?   Icarus had some issues with his Proxmark3 Easy running the static nonce key recovery,  but it worked fine on his RDV4.
And you can always test offical repo.  It has the static nonce recovery included in the "nested" command.

My device is Proxmark3 Easy. I'll try the offical repo, thanks for your help.

Offline

#4 2020-03-18 16:13:09

foryouever
Contributor
Registered: 2020-03-08
Posts: 8

Re: [solved]Horrible 01 20 01 45

The offical repo works, great!
thanks Iceman, best regards.

https://drive.google.com/drive/folders/ … 7dMvs1e8OI

Last edited by foryouever (2020-03-18 16:15:42)

Offline

Board footer

Powered by FluxBB