Error when trying to write to xNT with NFC TagWriter by NXP

Good evening all, hopefully this is a simple answer and my google-fu just proved weak tonight:

I got my DT xNT implanted at DEFCON BioHacking village last weekend and then using someone else’s phone we were able run the Dangerous NFC app to put on a password (which I do remember) and then write an initial vCard to the chip using NCP TagWrite.

Fast forward 4 days and I have procured myself a Samsung Note8 and am trying to do some modifications. The phone recognizes the tag and the existing data but every time I try to write with NXP TagWrite the result is “Read only, can not store.” I have confirmed a similar status with NFC Tools stating “Writable = No”.

I am assuming I need to put the password in somewhere in the NXP app but the places I have looked seem to indicate they are doing to do more than just authenticate for the duration of the write.

The ask is just a pointer in the right direction of where to put the password in NXP or if there is another process that is appropriate.

Of note, I also tried finding/downloading the DT Support Tool mentioned in posts from late 2017 to try blanking it out the data but all the links I can find are dead and search in the Play Store doesn’t seem to find it.

Noob here so maybe I’m wrong. Noticed the Nfc tools has also the option Others/Remove password. Maybe try that, do your modifications and after try to set passwd again…? :thinking:

1 Like

Thanks @Dan that was one of the options I had considered but @Amal has commented previously that NFC Tools team has made some choices that didn’t align well with the xNT and they were not particularly motivated to fix things based on feedback from the DT team. I am holding that in my back pocket as I still have an irrational fear that I am going to brick the xNT.

@oSPANNERo Yeah I get you, need to be sure 100% before messing with your implant.
I bought for fun some tags to learn on and already messed one up. Tried nfc tools on a ntag213 cheap ring (including the password thing) and worked.
But yes, let’s get some real Intel :slightly_smiling_face::+1:

1 Like

Well I was going to say:

Grab the Dangerous Things Support Tool and do a scan and email me the result with notes that you are “oSPANNERo” from the forum.

However it appears Google has removed it from the play store because I needed to update something on the listing. I have done so, but now it will take several hours to days to restore the app to the play store.

In the mean time, grab NXP’s TagInfo app and scan the tag… go to the FULL tab and post a screen shot of the values. You can send me the screenshot directly if you don’t want to share your details publicly.

One thing you can rest assured of is that if you protected the tag with the Dangerous NFC app, you cannot brick the xNT… that’s the whole point. The password feature is simply a tiny little bonus on the back end, but the primary purpose of DNFC is to disable lock bits and protect the config pages.

Let me know if this is what you needed (its pretty much just my business card):

** TagInfo scan (version 4.23) 2018-08-16 23:10:11 **
Report Type: External

– IC INFO ------------------------------

IC manufacturer:

NXP Semiconductors

IC type:

NTAG216

NFC Forum NDEF-compliant tag:

Type 2 Tag

– NDEF ------------------------------

NFC data set information:

NDEF message containing 1 record
Current message size: 321 bytes
Maximum message size: 321 bytes
NFC data set access: Read-Only

Record #1: vCard record:

Type Name Format: MIME type (RFC 2046)

type: “text/x-vCard”
BEGIN: VCARD
VERSION: 2.1
N: Kolakowski;Derek;;;
FN: Derek Kolakowski
TEL;WORK: +15403824234;128
EMAIL;WORK: dkolakowski@foxguardsolutions.com
ORG: FoxGuard Solutions
TITLE: Senior Manager, Security Engineering
URL: https://FoxGuardSolutions.com/
URL: https://linkedin.com/in/derekkolakowski
END: VCARD
Payload length: 303 bytes
Payload data:

[000] 42 45 47 49 4E 3A 56 43 41 52 44 0D 0A 56 45 52 |BEGIN:VCARD…VER|
[010] 53 49 4F 4E 3A 32 2E 31 0D 0A 4E 3A 4B 6F 6C 61 |SION:2.1…N:Kola|
[020] 6B 6F 77 73 6B 69 3B 44 65 72 65 6B 3B 3B 3B 0D |kowski;Derek;;;.|
[030] 0A 46 4E 3A 44 65 72 65 6B 20 4B 6F 6C 61 6B 6F |.FN:Derek Kolako|
[040] 77 73 6B 69 0D 0A 54 45 4C 3B 57 4F 52 4B 3A 2B |wski…TEL;WORK:+|
[050] 31 35 34 30 33 38 32 34 32 33 34 3B 31 32 38 0D |15403824234;128.|
[060] 0A 45 4D 41 49 4C 3B 57 4F 52 4B 3A 64 6B 6F 6C |.EMAIL;WORK:dkol|
[070] 61 6B 6F 77 73 6B 69 40 66 6F 78 67 75 61 72 64 |akowski@foxguard|
[080] 73 6F 6C 75 74 69 6F 6E 73 2E 63 6F 6D 0D 0A 4F |solutions.com…O|
[090] 52 47 3A 46 6F 78 47 75 61 72 64 20 53 6F 6C 75 |RG:FoxGuard Solu|
[0A0] 74 69 6F 6E 73 0D 0A 54 49 54 4C 45 3A 53 65 6E |tions…TITLE:Sen|
[0B0] 69 6F 72 20 4D 61 6E 61 67 65 72 2C 20 53 65 63 |ior Manager, Sec|
[0C0] 75 72 69 74 79 20 45 6E 67 69 6E 65 65 72 69 6E |urity Engineerin|
[0D0] 67 0D 0A 55 52 4C 3A 68 74 74 70 73 3A 2F 2F 46 |g…URL:https://F|
[0E0] 6F 78 47 75 61 72 64 53 6F 6C 75 74 69 6F 6E 73 |oxGuardSolutions|
[0F0] 2E 63 6F 6D 2F 0D 0A 55 52 4C 3A 68 74 74 70 73 |.com/…URL:https|
[100] 3A 2F 2F 6C 69 6E 6B 65 64 69 6E 2E 63 6F 6D 2F |://linkedin.com/|
[110] 69 6E 2F 64 65 72 65 6B 6B 6F 6C 61 6B 6F 77 73 |in/derekkolakows|
[120] 6B 69 0D 0A 45 4E 44 3A 56 43 41 52 44 0D 0A |ki…END:VCARD… |

NDEF message:

[000] C2 0C 00 00 01 2F 74 65 78 74 2F 78 2D 76 43 61 |…/text/x-vCa|
[010] 72 64 42 45 47 49 4E 3A 56 43 41 52 44 0D 0A 56 |rdBEGIN:VCARD…V|
[020] 45 52 53 49 4F 4E 3A 32 2E 31 0D 0A 4E 3A 4B 6F |ERSION:2.1…N:Ko|
[030] 6C 61 6B 6F 77 73 6B 69 3B 44 65 72 65 6B 3B 3B |lakowski;Derek;;|
[040] 3B 0D 0A 46 4E 3A 44 65 72 65 6B 20 4B 6F 6C 61 |;…FN:Derek Kola|
[050] 6B 6F 77 73 6B 69 0D 0A 54 45 4C 3B 57 4F 52 4B |kowski…TEL;WORK|
[060] 3A 2B 31 35 34 30 33 38 32 34 32 33 34 3B 31 32 |:+15403824234;12|
[070] 38 0D 0A 45 4D 41 49 4C 3B 57 4F 52 4B 3A 64 6B |8…EMAIL;WORK:dk|
[080] 6F 6C 61 6B 6F 77 73 6B 69 40 66 6F 78 67 75 61 |olakowski@foxgua|
[090] 72 64 73 6F 6C 75 74 69 6F 6E 73 2E 63 6F 6D 0D |rdsolutions.com.|
[0A0] 0A 4F 52 47 3A 46 6F 78 47 75 61 72 64 20 53 6F |.ORG:FoxGuard So|
[0B0] 6C 75 74 69 6F 6E 73 0D 0A 54 49 54 4C 45 3A 53 |lutions…TITLE:S|
[0C0] 65 6E 69 6F 72 20 4D 61 6E 61 67 65 72 2C 20 53 |enior Manager, S|
[0D0] 65 63 75 72 69 74 79 20 45 6E 67 69 6E 65 65 72 |ecurity Engineer|
[0E0] 69 6E 67 0D 0A 55 52 4C 3A 68 74 74 70 73 3A 2F |ing…URL:https:/|
[0F0] 2F 46 6F 78 47 75 61 72 64 53 6F 6C 75 74 69 6F |/FoxGuardSolutio|
[100] 6E 73 2E 63 6F 6D 2F 0D 0A 55 52 4C 3A 68 74 74 |ns.com/..URL:htt|
[110] 70 73 3A 2F 2F 6C 69 6E 6B 65 64 69 6E 2E 63 6F |ps://linkedin.co|
[120] 6D 2F 69 6E 2F 64 65 72 65 6B 6B 6F 6C 61 6B 6F |m/in/derekkolako|
[130] 77 73 6B 69 0D 0A 45 4E 44 3A 56 43 41 52 44 0D |wski…END:VCARD.|
[140] 0A |. |

NDEF Capability Container (CC):

Mapping version: 1.2
Maximum NDEF data size: 872 bytes
NDEF access: Read & Write
E1 12 6D 00 |…m. |

– EXTRA ------------------------------

Memory size:

888 bytes user memory

  • 222 pages, with 4 bytes per page

IC detailed information:

Full product name: NT2H1611G0DUx
Capacitance: 50 pF

Version information:

Vendor ID: NXP
Type: NTAG
Subtype: 50 pF
Major version: 1
Minor version: V0
Storage size: 888 bytes
Protocol: ISO/IEC 14443-3

Configuration information:

ASCII mirror disabled
NFC counter: disabled
No limit on wrong password attempts
Strong load modulation enabled

Originality check:

Signature verified with NXP public key

– FULL SCAN ------------------------------

Technologies supported:

ISO/IEC 14443-3 (Type A) compatible
ISO/IEC 14443-2 (Type A) compatible

Android technology information:

Tag description:

  • TAG: Tech [android.nfc.tech.NfcA, android.nfc.tech.MifareUltralight, android.nfc.tech.Ndef]
  • Maximum transceive length: 253 bytes
  • Default maximum transceive time-out: 618 ms

Detailed protocol information:

ID: 04:D6:05:12:FF:38:84
ATQA: 0x4400
SAK: 0x00

Memory content:

[00] * 04:D6:05 5F (UID0-UID2, BCC0)
[01] * 12:FF:38:84 (UID3-UID6)
[02] * 51 48 0F 00 (BCC1, INT, LOCK0-LOCK1)
[03] * E1:12:6D:00 (OTP0-OTP3)
[04] + 03 FF 01 41 |…A|
[05] + C2 0C 00 00 |…|
[06] + 01 2F 74 65 |./te|
[07] + 78 74 2F 78 |xt/x|
[08] + 2D 76 43 61 |-vCa|
[09] + 72 64 42 45 |rdBE|
[0A] + 47 49 4E 3A |GIN:|
[0B] + 56 43 41 52 |VCAR|
[0C] + 44 0D 0A 56 |D…V|
[0D] + 45 52 53 49 |ERSI|
[0E] + 4F 4E 3A 32 |ON:2|
[0F] + 2E 31 0D 0A |.1…|
[10] + 4E 3A 4B 6F |N:Ko|
[11] + 6C 61 6B 6F |lako|
[12] + 77 73 6B 69 |wski|
[13] + 3B 44 65 72 |;Der|
[14] + 65 6B 3B 3B |ek;;|
[15] + 3B 0D 0A 46 |;…F|
[16] + 4E 3A 44 65 |N:De|
[17] + 72 65 6B 20 |rek |
[18] + 4B 6F 6C 61 |Kola|
[19] + 6B 6F 77 73 |kows|
[1A] + 6B 69 0D 0A |ki…|
[1B] + 54 45 4C 3B |TEL;|
[1C] + 57 4F 52 4B |WORK|
[1D] + 3A 2B 31 35 |:+15|
[1E] + 34 30 33 38 |4038|
[1F] + 32 34 32 33 |2423|
[20] + 34 3B 31 32 |4;12|
[21] + 38 0D 0A 45 |8…E|
[22] + 4D 41 49 4C |MAIL|
[23] + 3B 57 4F 52 |;WOR|
[24] + 4B 3A 64 6B |K:dk|
[25] + 6F 6C 61 6B |olak|
[26] + 6F 77 73 6B |owsk|
[27] + 69 40 66 6F |i@fo|
[28] + 78 67 75 61 |xgua|
[29] + 72 64 73 6F |rdso|
[2A] + 6C 75 74 69 |luti|
[2B] + 6F 6E 73 2E |ons.|
[2C] + 63 6F 6D 0D |com.|
[2D] + 0A 4F 52 47 |.ORG|
[2E] + 3A 46 6F 78 |:Fox|
[2F] + 47 75 61 72 |Guar|
[30] + 64 20 53 6F |d So|
[31] + 6C 75 74 69 |luti|
[32] + 6F 6E 73 0D |ons.|
[33] + 0A 54 49 54 |.TIT|
[34] + 4C 45 3A 53 |LE:S|
[35] + 65 6E 69 6F |enio|
[36] + 72 20 4D 61 |r Ma|
[37] + 6E 61 67 65 |nage|
[38] + 72 2C 20 53 |r, S|
[39] + 65 63 75 72 |ecur|
[3A] + 69 74 79 20 |ity |
[3B] + 45 6E 67 69 |Engi|
[3C] + 6E 65 65 72 |neer|
[3D] + 69 6E 67 0D |ing.|
[3E] + 0A 55 52 4C |.URL|
[3F] + 3A 68 74 74 |:htt|
[40] + 70 73 3A 2F |ps:/|
[41] + 2F 46 6F 78 |/Fox|
[42] + 47 75 61 72 |Guar|
[43] + 64 53 6F 6C |dSol|
[44] + 75 74 69 6F |utio|
[45] + 6E 73 2E 63 |ns.c|
[46] + 6F 6D 2F 0D |om/.|
[47] + 0A 55 52 4C |.URL|
[48] + 3A 68 74 74 |:htt|
[49] + 70 73 3A 2F |ps:/|
[4A] + 2F 6C 69 6E |/lin|
[4B] + 6B 65 64 69 |kedi|
[4C] + 6E 2E 63 6F |n.co|
[4D] + 6D 2F 69 6E |m/in|
[4E] + 2F 64 65 72 |/der|
[4F] + 65 6B 6B 6F |ekko|
[50] + 6C 61 6B 6F |lako|
[51] + 77 73 6B 69 |wski|
[52] + 0D 0A 45 4E |…EN|
[53] + 44 3A 56 43 |D:VC|
[54] + 41 52 44 0D |ARD.|
[55] + 0A FE 00 00 |…|
[56] + 00 00 00 00 |…|
[57] + 00 00 00 00 |…|
[58] + 00 00 00 00 |…|
[59] + 00 00 00 00 |…|
[5A] + 00 00 00 00 |…|
[5B] + 00 00 00 00 |…|
[5C] + 00 00 00 00 |…|
[5D] + 00 00 00 00 |…|
[5E] + 00 00 00 00 |…|
[5F] + 00 00 00 00 |…|
[60] + 00 00 00 00 |…|
[61] + 00 00 00 00 |…|
[62] + 00 00 00 00 |…|
[63] + 00 00 00 00 |…|
[64] + 00 00 00 00 |…|
[65] + 00 00 00 00 |…|
[66] + 00 00 00 00 |…|
[67] + 00 00 00 00 |…|
[68] + 00 00 00 00 |…|
[69] + 00 00 00 00 |…|
[6A] + 00 00 00 00 |…|
[6B] + 00 00 00 00 |…|
[6C] + 00 00 00 00 |…|
[6D] + 00 00 00 00 |…|
[6E] + 00 00 00 00 |…|
[6F] + 00 00 00 00 |…|
[70] + 00 00 00 00 |…|
[71] + 00 00 00 00 |…|
[72] + 00 00 00 00 |…|
[73] + 00 00 00 00 |…|
[74] + 00 00 00 00 |…|
[75] + 00 00 00 00 |…|
[76] + 00 00 00 00 |…|
[77] + 00 00 00 00 |…|
[78] + 00 00 00 00 |…|
[79] + 00 00 00 00 |…|
[7A] + 00 00 00 00 |…|
[7B] + 00 00 00 00 |…|
[7C] + 00 00 00 00 |…|
[7D] + 00 00 00 00 |…|
[7E] + 00 00 00 00 |…|
[7F] + 00 00 00 00 |…|
[80] + 00 00 00 00 |…|
[81] + 00 00 00 00 |…|
[82] + 00 00 00 00 |…|
[83] + 00 00 00 00 |…|
[84] + 00 00 00 00 |…|
[85] + 00 00 00 00 |…|
[86] + 00 00 00 00 |…|
[87] + 00 00 00 00 |…|
[88] + 00 00 00 00 |…|
[89] + 00 00 00 00 |…|
[8A] + 00 00 00 00 |…|
[8B] + 00 00 00 00 |…|
[8C] + 00 00 00 00 |…|
[8D] + 00 00 00 00 |…|
[8E] + 00 00 00 00 |…|
[8F] + 00 00 00 00 |…|
[90] + 00 00 00 00 |…|
[91] + 00 00 00 00 |…|
[92] + 00 00 00 00 |…|
[93] + 00 00 00 00 |…|
[94] + 00 00 00 00 |…|
[95] + 00 00 00 00 |…|
[96] + 00 00 00 00 |…|
[97] + 00 00 00 00 |…|
[98] + 00 00 00 00 |…|
[99] + 00 00 00 00 |…|
[9A] + 00 00 00 00 |…|
[9B] + 00 00 00 00 |…|
[9C] + 00 00 00 00 |…|
[9D] + 55 55 55 55 |UUUU|
[9E] + 55 55 55 55 |UUUU|
[9F] + 55 55 55 55 |UUUU|
[A0] + 55 55 55 55 |UUUU|
[A1] + 55 55 55 55 |UUUU|
[A2] + 55 55 55 55 |UUUU|
[A3] + 55 55 55 55 |UUUU|
[A4] + 55 55 55 55 |UUUU|
[A5] + 55 55 55 55 |UUUU|
[A6] + 55 55 55 55 |UUUU|
[A7] + 55 55 55 55 |UUUU|
[A8] + 55 55 55 55 |UUUU|
[A9] + 55 55 55 55 |UUUU|
[AA] + 55 55 55 55 |UUUU|
[AB] + 55 55 55 55 |UUUU|
[AC] + 55 55 55 55 |UUUU|
[AD] + 55 55 55 55 |UUUU|
[AE] + 55 55 55 55 |UUUU|
[AF] + 55 55 55 55 |UUUU|
[B0] + 55 55 55 55 |UUUU|
[B1] + 55 55 55 55 |UUUU|
[B2] + 55 55 55 55 |UUUU|
[B3] + 55 55 55 55 |UUUU|
[B4] + 55 55 55 55 |UUUU|
[B5] + 55 55 55 55 |UUUU|
[B6] + 55 55 55 55 |UUUU|
[B7] + 55 55 55 55 |UUUU|
[B8] + 55 55 55 55 |UUUU|
[B9] + 55 55 55 55 |UUUU|
[BA] + 55 55 55 55 |UUUU|
[BB] + 55 55 55 55 |UUUU|
[BC] + 55 55 55 55 |UUUU|
[BD] + 55 55 55 55 |UUUU|
[BE] + 55 55 55 55 |UUUU|
[BF] + 55 55 55 55 |UUUU|
[C0] + 55 55 55 55 |UUUU|
[C1] + 55 55 55 55 |UUUU|
[C2] + 55 55 55 55 |UUUU|
[C3] + 55 55 55 55 |UUUU|
[C4] + 55 55 55 55 |UUUU|
[C5] + 55 55 55 55 |UUUU|
[C6] + 55 55 55 55 |UUUU|
[C7] + 55 55 55 55 |UUUU|
[C8] + 55 55 55 55 |UUUU|
[C9] + 55 55 55 55 |UUUU|
[CA] + 55 55 55 55 |UUUU|
[CB] + 55 55 55 55 |UUUU|
[CC] + 55 55 55 55 |UUUU|
[CD] + 55 55 55 55 |UUUU|
[CE] + 55 55 55 55 |UUUU|
[CF] + 55 55 55 55 |UUUU|
[D0] + 55 55 55 55 |UUUU|
[D1] + 55 55 55 55 |UUUU|
[D2] + 55 55 55 55 |UUUU|
[D3] + 55 55 55 55 |UUUU|
[D4] + 55 55 55 55 |UUUU|
[D5] + 55 55 55 55 |UUUU|
[D6] + 55 55 55 55 |UUUU|
[D7] + 55 55 55 55 |UUUU|
[D8] + 55 55 55 55 |UUUU|
[D9] + 55 55 55 55 |UUUU|
[DA] + 55 55 55 55 |UUUU|
[DB] + 55 55 55 55 |UUUU|
[DC] + 55 55 55 55 |UUUU|
[DD] + 55 55 55 55 |UUUU|
[DE] + 55 55 55 55 |UUUU|
[DF] + 55 55 55 55 |UUUU|
[E0] + 55 55 55 55 |UUUU|
[E1] + 55 55 55 55 |UUUU|
[E2] *r 00 00 7F BD (LOCK2-LOCK4, CHK)
[E3] .r 04 00 00 E2 (CFG, MIRROR, AUTH0)
[E4] .r 00 05 – -- (ACCESS)
[E5] +P XX XX XX XX (PWD0-PWD3)
[E6] +P XX XX – -- (PACK0-PACK1)

*:locked & blocked, x:locked,
+:blocked, .:un(b)locked, ?:unknown
r:readable (write-protected),
p:password protected, -:write-only
P:password protected write-only


Ok… “Good News, Bad News” time:

@amal is sent you TWO emails from the DT Support Tool. (It was back up on the Play Store this morning.)

The first one was BEFORE I accidentally hit the “blank” button instead of the “scan” button, the second one was AFTER.

That said… I can now write to my tag but a MUCH smaller size. When I re-ran the NXP Read tool it LOOKS like only the first few pages (am I using that right?) were blanked and the rest of my data is sitting there. Here is the dump as I am not sure what to do next without breaking stuff further:

** TagInfo scan (version 4.23) 2018-08-17 08:54:52 **
Report Type: External

– IC INFO ------------------------------

IC manufacturer:

NXP Semiconductors

IC type:

NTAG216

NFC Forum NDEF-compliant tag:

Type 2 Tag

– NDEF ------------------------------

NFC data set information:

NDEF message containing 1 record
Current message size: 26 bytes
Maximum message size: 46 bytes
NFC data set access: Read & Write
Can be made Read-Only

Record #1: URI record:

Type Name Format: NFC Forum well-known type
Short Record
type: “U”
protocol field: https://
URI field: foxguardsolutions.com
Payload length: 22 bytes
Payload data:

[00] 04 66 6F 78 67 75 61 72 64 73 6F 6C 75 74 69 6F |.foxguardsolutio|
[10] 6E 73 2E 63 6F 6D |ns.com |

NDEF message:

[00] D1 01 16 55 04 66 6F 78 67 75 61 72 64 73 6F 6C |…U.foxguardsol|
[10] 75 74 69 6F 6E 73 2E 63 6F 6D |utions.com |

NDEF Capability Container (CC):

Mapping version: 1.2
Maximum NDEF data size: 872 bytes
NDEF access: Read & Write
E1 12 6D 00 |…m. |

– EXTRA ------------------------------

Memory size:

888 bytes user memory

  • 222 pages, with 4 bytes per page

IC detailed information:

Full product name: NT2H1611G0DUx
Capacitance: 50 pF

Version information:

Vendor ID: NXP
Type: NTAG
Subtype: 50 pF
Major version: 1
Minor version: V0
Storage size: 888 bytes
Protocol: ISO/IEC 14443-3

Configuration information:

ASCII mirror disabled
NFC counter: disabled
No limit on wrong password attempts
Strong load modulation enabled

Originality check:

Signature verified with NXP public key

– FULL SCAN ------------------------------

Technologies supported:

ISO/IEC 14443-3 (Type A) compatible
ISO/IEC 14443-2 (Type A) compatible

Android technology information:

Tag description:

  • TAG: Tech [android.nfc.tech.NfcA, android.nfc.tech.MifareUltralight, android.nfc.tech.Ndef]
  • Maximum transceive length: 253 bytes
  • Default maximum transceive time-out: 618 ms

Detailed protocol information:

ID: 04:D6:05:12:FF:38:84
ATQA: 0x4400
SAK: 0x00

Memory content:

[00] * 04:D6:05 5F (UID0-UID2, BCC0)
[01] * 12:FF:38:84 (UID3-UID6)
[02] * 51 48 0F 00 (BCC1, INT, LOCK0-LOCK1)
[03] * E1:12:6D:00 (OTP0-OTP3)
[04] + 03 1A D1 01 |…|
[05] + 16 55 04 66 |.U.f|
[06] + 6F 78 67 75 |oxgu|
[07] + 61 72 64 73 |ards|
[08] + 6F 6C 75 74 |olut|
[09] + 69 6F 6E 73 |ions|
[0A] + 2E 63 6F 6D |.com|
[0B] + FE 00 00 00 |…|
[0C] + 00 00 00 00 |…|
[0D] + 00 00 00 00 |…|
[0E] + 00 00 00 00 |…|
[0F] + 00 00 00 00 |…|
[10] + 00 00 00 00 |…|
[11] + 6C 61 6B 6F |lako|
[12] + 77 73 6B 69 |wski|
[13] + 3B 44 65 72 |;Der|
[14] + 65 6B 3B 3B |ek;;|
[15] + 3B 0D 0A 46 |;…F|
[16] + 4E 3A 44 65 |N:De|
[17] + 72 65 6B 20 |rek |
[18] + 4B 6F 6C 61 |Kola|
[19] + 6B 6F 77 73 |kows|
[1A] + 6B 69 0D 0A |ki…|
[1B] + 54 45 4C 3B |TEL;|
[1C] + 57 4F 52 4B |WORK|
[1D] + 3A 2B 31 35 |:+15|
[1E] + 34 30 33 38 |4038|
[1F] + 32 34 32 33 |2423|
[20] + 34 3B 31 32 |4;12|
[21] + 38 0D 0A 45 |8…E|
[22] + 4D 41 49 4C |MAIL|
[23] + 3B 57 4F 52 |;WOR|
[24] + 4B 3A 64 6B |K:dk|
[25] + 6F 6C 61 6B |olak|
[26] + 6F 77 73 6B |owsk|
[27] + 69 40 66 6F |i@fo|
[28] + 78 67 75 61 |xgua|
[29] + 72 64 73 6F |rdso|
[2A] + 6C 75 74 69 |luti|
[2B] + 6F 6E 73 2E |ons.|
[2C] + 63 6F 6D 0D |com.|
[2D] + 0A 4F 52 47 |.ORG|
[2E] + 3A 46 6F 78 |:Fox|
[2F] + 47 75 61 72 |Guar|
[30] + 64 20 53 6F |d So|
[31] + 6C 75 74 69 |luti|
[32] + 6F 6E 73 0D |ons.|
[33] + 0A 54 49 54 |.TIT|
[34] + 4C 45 3A 53 |LE:S|
[35] + 65 6E 69 6F |enio|
[36] + 72 20 4D 61 |r Ma|
[37] + 6E 61 67 65 |nage|
[38] + 72 2C 20 53 |r, S|
[39] + 65 63 75 72 |ecur|
[3A] + 69 74 79 20 |ity |
[3B] + 45 6E 67 69 |Engi|
[3C] + 6E 65 65 72 |neer|
[3D] + 69 6E 67 0D |ing.|
[3E] + 0A 55 52 4C |.URL|
[3F] + 3A 68 74 74 |:htt|
[40] + 70 73 3A 2F |ps:/|
[41] + 2F 46 6F 78 |/Fox|
[42] + 47 75 61 72 |Guar|
[43] + 64 53 6F 6C |dSol|
[44] + 75 74 69 6F |utio|
[45] + 6E 73 2E 63 |ns.c|
[46] + 6F 6D 2F 0D |om/.|
[47] + 0A 55 52 4C |.URL|
[48] + 3A 68 74 74 |:htt|
[49] + 70 73 3A 2F |ps:/|
[4A] + 2F 6C 69 6E |/lin|
[4B] + 6B 65 64 69 |kedi|
[4C] + 6E 2E 63 6F |n.co|
[4D] + 6D 2F 69 6E |m/in|
[4E] + 2F 64 65 72 |/der|
[4F] + 65 6B 6B 6F |ekko|
[50] + 6C 61 6B 6F |lako|
[51] + 77 73 6B 69 |wski|
[52] + 0D 0A 45 4E |…EN|
[53] + 44 3A 56 43 |D:VC|
[54] + 41 52 44 0D |ARD.|
[55] + 0A FE 00 00 |…|
[56] + 00 00 00 00 |…|
[57] + 00 00 00 00 |…|
[58] + 00 00 00 00 |…|
[59] + 00 00 00 00 |…|
[5A] + 00 00 00 00 |…|
[5B] + 00 00 00 00 |…|
[5C] + 00 00 00 00 |…|
[5D] + 00 00 00 00 |…|
[5E] + 00 00 00 00 |…|
[5F] + 00 00 00 00 |…|
[60] + 00 00 00 00 |…|
[61] + 00 00 00 00 |…|
[62] + 00 00 00 00 |…|
[63] + 00 00 00 00 |…|
[64] + 00 00 00 00 |…|
[65] + 00 00 00 00 |…|
[66] + 00 00 00 00 |…|
[67] + 00 00 00 00 |…|
[68] + 00 00 00 00 |…|
[69] + 00 00 00 00 |…|
[6A] + 00 00 00 00 |…|
[6B] + 00 00 00 00 |…|
[6C] + 00 00 00 00 |…|
[6D] + 00 00 00 00 |…|
[6E] + 00 00 00 00 |…|
[6F] + 00 00 00 00 |…|
[70] + 00 00 00 00 |…|
[71] + 00 00 00 00 |…|
[72] + 00 00 00 00 |…|
[73] + 00 00 00 00 |…|
[74] + 00 00 00 00 |…|
[75] + 00 00 00 00 |…|
[76] + 00 00 00 00 |…|
[77] + 00 00 00 00 |…|
[78] + 00 00 00 00 |…|
[79] + 00 00 00 00 |…|
[7A] + 00 00 00 00 |…|
[7B] + 00 00 00 00 |…|
[7C] + 00 00 00 00 |…|
[7D] + 00 00 00 00 |…|
[7E] + 00 00 00 00 |…|
[7F] + 00 00 00 00 |…|
[80] + 00 00 00 00 |…|
[81] + 00 00 00 00 |…|
[82] + 00 00 00 00 |…|
[83] + 00 00 00 00 |…|
[84] + 00 00 00 00 |…|
[85] + 00 00 00 00 |…|
[86] + 00 00 00 00 |…|
[87] + 00 00 00 00 |…|
[88] + 00 00 00 00 |…|
[89] + 00 00 00 00 |…|
[8A] + 00 00 00 00 |…|
[8B] + 00 00 00 00 |…|
[8C] + 00 00 00 00 |…|
[8D] + 00 00 00 00 |…|
[8E] + 00 00 00 00 |…|
[8F] + 00 00 00 00 |…|
[90] + 00 00 00 00 |…|
[91] + 00 00 00 00 |…|
[92] + 00 00 00 00 |…|
[93] + 00 00 00 00 |…|
[94] + 00 00 00 00 |…|
[95] + 00 00 00 00 |…|
[96] + 00 00 00 00 |…|
[97] + 00 00 00 00 |…|
[98] + 00 00 00 00 |…|
[99] + 00 00 00 00 |…|
[9A] + 00 00 00 00 |…|
[9B] + 00 00 00 00 |…|
[9C] + 00 00 00 00 |…|
[9D] + 55 55 55 55 |UUUU|
[9E] + 55 55 55 55 |UUUU|
[9F] + 55 55 55 55 |UUUU|
[A0] + 55 55 55 55 |UUUU|
[A1] + 55 55 55 55 |UUUU|
[A2] + 55 55 55 55 |UUUU|
[A3] + 55 55 55 55 |UUUU|
[A4] + 55 55 55 55 |UUUU|
[A5] + 55 55 55 55 |UUUU|
[A6] + 55 55 55 55 |UUUU|
[A7] + 55 55 55 55 |UUUU|
[A8] + 55 55 55 55 |UUUU|
[A9] + 55 55 55 55 |UUUU|
[AA] + 55 55 55 55 |UUUU|
[AB] + 55 55 55 55 |UUUU|
[AC] + 55 55 55 55 |UUUU|
[AD] + 55 55 55 55 |UUUU|
[AE] + 55 55 55 55 |UUUU|
[AF] + 55 55 55 55 |UUUU|
[B0] + 55 55 55 55 |UUUU|
[B1] + 55 55 55 55 |UUUU|
[B2] + 55 55 55 55 |UUUU|
[B3] + 55 55 55 55 |UUUU|
[B4] + 55 55 55 55 |UUUU|
[B5] + 55 55 55 55 |UUUU|
[B6] + 55 55 55 55 |UUUU|
[B7] + 55 55 55 55 |UUUU|
[B8] + 55 55 55 55 |UUUU|
[B9] + 55 55 55 55 |UUUU|
[BA] + 55 55 55 55 |UUUU|
[BB] + 55 55 55 55 |UUUU|
[BC] + 55 55 55 55 |UUUU|
[BD] + 55 55 55 55 |UUUU|
[BE] + 55 55 55 55 |UUUU|
[BF] + 55 55 55 55 |UUUU|
[C0] + 55 55 55 55 |UUUU|
[C1] + 55 55 55 55 |UUUU|
[C2] + 55 55 55 55 |UUUU|
[C3] + 55 55 55 55 |UUUU|
[C4] + 55 55 55 55 |UUUU|
[C5] + 55 55 55 55 |UUUU|
[C6] + 55 55 55 55 |UUUU|
[C7] + 55 55 55 55 |UUUU|
[C8] + 55 55 55 55 |UUUU|
[C9] + 55 55 55 55 |UUUU|
[CA] + 55 55 55 55 |UUUU|
[CB] + 55 55 55 55 |UUUU|
[CC] + 55 55 55 55 |UUUU|
[CD] + 55 55 55 55 |UUUU|
[CE] + 55 55 55 55 |UUUU|
[CF] + 55 55 55 55 |UUUU|
[D0] + 55 55 55 55 |UUUU|
[D1] + 55 55 55 55 |UUUU|
[D2] + 55 55 55 55 |UUUU|
[D3] + 55 55 55 55 |UUUU|
[D4] + 55 55 55 55 |UUUU|
[D5] + 55 55 55 55 |UUUU|
[D6] + 55 55 55 55 |UUUU|
[D7] + 55 55 55 55 |UUUU|
[D8] + 55 55 55 55 |UUUU|
[D9] + 55 55 55 55 |UUUU|
[DA] + 55 55 55 55 |UUUU|
[DB] + 55 55 55 55 |UUUU|
[DC] + 55 55 55 55 |UUUU|
[DD] + 55 55 55 55 |UUUU|
[DE] + 55 55 55 55 |UUUU|
[DF] + 55 55 55 55 |UUUU|
[E0] + 55 55 55 55 |UUUU|
[E1] + 55 55 55 55 |UUUU|
[E2] *r 00 00 7F BD (LOCK2-LOCK4, CHK)
[E3] .r 04 00 00 E2 (CFG, MIRROR, AUTH0)
[E4] .r 00 05 – -- (ACCESS)
[E5] +P XX XX XX XX (PWD0-PWD3)
[E6] +P XX XX – -- (PACK0-PACK1)

*:locked & blocked, x:locked,
+:blocked, .:un(b)locked, ?:unknown
r:readable (write-protected),
p:password protected, -:write-only
P:password protected write-only


This was the primary line I wanted to see… it indicates the “static lock bits” are locked while no other pages have been locked… this effectively disables those lock bits.

This is the other line I wanted to see… the “dynamic lock bits” are also “disabled”.

What I did not expect to see was a boatload of binary data from page 9D to E1… those “UUUU” pages are not encapsulated within an NDEF record, so my bet is that most Android apps will not know how to deal with that data. How did this data appear? What else have you been tinkering with?

Definitely check out this post; The xNT and the mysterious 46/48 byte problem

We will be updating the Dangerous NFC app soon to incorporate support tool function and enhance its capabilities to include full blanking, resetting NDEF records, changing the password, and some other things… for now though the tools were kind of built to deal with particular issues that were pressing at the moment.

2 Likes

Ok… So… I read the 46/48 post and did the following:

  1. Restarted the Phone
  2. Used DT Support App and did a “Blank NDEF”
  3. Restarted the phone again
  4. Used NXP TagWriter App and “Erase Tags” trying “Factory Default” and “Format as NDEF” and got “This tag can’t be erased (Parts of) Tag protected” for both
  5. Restarted the phone again
  6. Used NFC tools “Erase Tag” and it supposedly succeeded but still didn’t fully wipe.
  7. Used NFC tools “Format memory” and it APPEARS to fully have wiped all data (including the “UUUU” data)
  8. I went back to DT Support App and did a “Blank NDEF”
  9. I was able to write a full sized vCard
  10. Went back to TagInfo and it appears its correct and confirmed no “UUUU” data added.

So… “maybe” its fixed as a result of NFC Tools “Format Memory” action? I’ll post the snippets below for your perusal. The only other thing I have personally used was the Proxmark3 RDV4 to try reading my xNT but I don’t think I tried to do any writing. I did hang out a Defcon (including the Wireless Village) so who knows if someone else was doing something that could have written the binary? (I realize NFC is a close proximity read/write but who knows what the attendees were attempting.)

2 Likes

TagInfo POST NFC Tools “Format Memory”:

** TagInfo scan (version 4.23) 2018-08-17 11:01:30 **
Report Type: External

– IC INFO ------------------------------

IC manufacturer:

NXP Semiconductors

IC type:

NTAG216

– NDEF ------------------------------

No NDEF Message present:

– EXTRA ------------------------------

Memory size:

888 bytes user memory

  • 222 pages, with 4 bytes per page

IC detailed information:

Full product name: NT2H1611G0DUx
Capacitance: 50 pF

Version information:

Vendor ID: NXP
Type: NTAG
Subtype: 50 pF
Major version: 1
Minor version: V0
Storage size: 888 bytes
Protocol: ISO/IEC 14443-3

Configuration information:

ASCII mirror disabled
NFC counter: disabled
No limit on wrong password attempts
Strong load modulation enabled

Originality check:

Signature verified with NXP public key

– FULL SCAN ------------------------------

Technologies supported:

ISO/IEC 14443-3 (Type A) compatible
ISO/IEC 14443-2 (Type A) compatible

Android technology information:

Tag description:

  • TAG: Tech [android.nfc.tech.NfcA, android.nfc.tech.MifareUltralight, android.nfc.tech.Ndef]
  • Maximum transceive length: 253 bytes
  • Default maximum transceive time-out: 618 ms

Detailed protocol information:

ID: 04:D6:05:12:FF:38:84
ATQA: 0x4400
SAK: 0x00

Memory content:

[00] * 04:D6:05 5F (UID0-UID2, BCC0)
[01] * 12:FF:38:84 (UID3-UID6)
[02] * 51 48 0F 00 (BCC1, INT, LOCK0-LOCK1)
[03] * E1:12:6D:00 (OTP0-OTP3)
[04] + 03 00 FE 00 |…|
[05] + 00 00 00 00 |…|
[06] + 00 00 00 00 |…|
[07] + 00 00 00 00 |…|
[08] + 00 00 00 00 |…|
[09] + 00 00 00 00 |…|
[0A] + 00 00 00 00 |…|
[0B] + 00 00 00 00 |…|
[0C] + 00 00 00 00 |…|
[0D] + 00 00 00 00 |…|
[0E] + 00 00 00 00 |…|
[0F] + 00 00 00 00 |…|
[10] + 00 00 00 00 |…|
[11] + 00 00 00 00 |…|
[12] + 00 00 00 00 |…|
[13] + 00 00 00 00 |…|
[14] + 00 00 00 00 |…|
[15] + 00 00 00 00 |…|
[16] + 00 00 00 00 |…|
[17] + 00 00 00 00 |…|
[18] + 00 00 00 00 |…|
[19] + 00 00 00 00 |…|
[1A] + 00 00 00 00 |…|
[1B] + 00 00 00 00 |…|
[1C] + 00 00 00 00 |…|
[1D] + 00 00 00 00 |…|
[1E] + 00 00 00 00 |…|
[1F] + 00 00 00 00 |…|
[20] + 00 00 00 00 |…|
[21] + 00 00 00 00 |…|
[22] + 00 00 00 00 |…|
[23] + 00 00 00 00 |…|
[24] + 00 00 00 00 |…|
[25] + 00 00 00 00 |…|
[26] + 00 00 00 00 |…|
[27] + 00 00 00 00 |…|
[28] + 00 00 00 00 |…|
[29] + 00 00 00 00 |…|
[2A] + 00 00 00 00 |…|
[2B] + 00 00 00 00 |…|
[2C] + 00 00 00 00 |…|
[2D] + 00 00 00 00 |…|
[2E] + 00 00 00 00 |…|
[2F] + 00 00 00 00 |…|
[30] + 00 00 00 00 |…|
[31] + 00 00 00 00 |…|
[32] + 00 00 00 00 |…|
[33] + 00 00 00 00 |…|
[34] + 00 00 00 00 |…|
[35] + 00 00 00 00 |…|
[36] + 00 00 00 00 |…|
[37] + 00 00 00 00 |…|
[38] + 00 00 00 00 |…|
[39] + 00 00 00 00 |…|
[3A] + 00 00 00 00 |…|
[3B] + 00 00 00 00 |…|
[3C] + 00 00 00 00 |…|
[3D] + 00 00 00 00 |…|
[3E] + 00 00 00 00 |…|
[3F] + 00 00 00 00 |…|
[40] + 00 00 00 00 |…|
[41] + 00 00 00 00 |…|
[42] + 00 00 00 00 |…|
[43] + 00 00 00 00 |…|
[44] + 00 00 00 00 |…|
[45] + 00 00 00 00 |…|
[46] + 00 00 00 00 |…|
[47] + 00 00 00 00 |…|
[48] + 00 00 00 00 |…|
[49] + 00 00 00 00 |…|
[4A] + 00 00 00 00 |…|
[4B] + 00 00 00 00 |…|
[4C] + 00 00 00 00 |…|
[4D] + 00 00 00 00 |…|
[4E] + 00 00 00 00 |…|
[4F] + 00 00 00 00 |…|
[50] + 00 00 00 00 |…|
[51] + 00 00 00 00 |…|
[52] + 00 00 00 00 |…|
[53] + 00 00 00 00 |…|
[54] + 00 00 00 00 |…|
[55] + 00 00 00 00 |…|
[56] + 00 00 00 00 |…|
[57] + 00 00 00 00 |…|
[58] + 00 00 00 00 |…|
[59] + 00 00 00 00 |…|
[5A] + 00 00 00 00 |…|
[5B] + 00 00 00 00 |…|
[5C] + 00 00 00 00 |…|
[5D] + 00 00 00 00 |…|
[5E] + 00 00 00 00 |…|
[5F] + 00 00 00 00 |…|
[60] + 00 00 00 00 |…|
[61] + 00 00 00 00 |…|
[62] + 00 00 00 00 |…|
[63] + 00 00 00 00 |…|
[64] + 00 00 00 00 |…|
[65] + 00 00 00 00 |…|
[66] + 00 00 00 00 |…|
[67] + 00 00 00 00 |…|
[68] + 00 00 00 00 |…|
[69] + 00 00 00 00 |…|
[6A] + 00 00 00 00 |…|
[6B] + 00 00 00 00 |…|
[6C] + 00 00 00 00 |…|
[6D] + 00 00 00 00 |…|
[6E] + 00 00 00 00 |…|
[6F] + 00 00 00 00 |…|
[70] + 00 00 00 00 |…|
[71] + 00 00 00 00 |…|
[72] + 00 00 00 00 |…|
[73] + 00 00 00 00 |…|
[74] + 00 00 00 00 |…|
[75] + 00 00 00 00 |…|
[76] + 00 00 00 00 |…|
[77] + 00 00 00 00 |…|
[78] + 00 00 00 00 |…|
[79] + 00 00 00 00 |…|
[7A] + 00 00 00 00 |…|
[7B] + 00 00 00 00 |…|
[7C] + 00 00 00 00 |…|
[7D] + 00 00 00 00 |…|
[7E] + 00 00 00 00 |…|
[7F] + 00 00 00 00 |…|
[80] + 00 00 00 00 |…|
[81] + 00 00 00 00 |…|
[82] + 00 00 00 00 |…|
[83] + 00 00 00 00 |…|
[84] + 00 00 00 00 |…|
[85] + 00 00 00 00 |…|
[86] + 00 00 00 00 |…|
[87] + 00 00 00 00 |…|
[88] + 00 00 00 00 |…|
[89] + 00 00 00 00 |…|
[8A] + 00 00 00 00 |…|
[8B] + 00 00 00 00 |…|
[8C] + 00 00 00 00 |…|
[8D] + 00 00 00 00 |…|
[8E] + 00 00 00 00 |…|
[8F] + 00 00 00 00 |…|
[90] + 00 00 00 00 |…|
[91] + 00 00 00 00 |…|
[92] + 00 00 00 00 |…|
[93] + 00 00 00 00 |…|
[94] + 00 00 00 00 |…|
[95] + 00 00 00 00 |…|
[96] + 00 00 00 00 |…|
[97] + 00 00 00 00 |…|
[98] + 00 00 00 00 |…|
[99] + 00 00 00 00 |…|
[9A] + 00 00 00 00 |…|
[9B] + 00 00 00 00 |…|
[9C] + 00 00 00 00 |…|
[9D] + 00 00 00 00 |…|
[9E] + 00 00 00 00 |…|
[9F] + 00 00 00 00 |…|
[A0] + 00 00 00 00 |…|
[A1] + 00 00 00 00 |…|
[A2] + 00 00 00 00 |…|
[A3] + 00 00 00 00 |…|
[A4] + 00 00 00 00 |…|
[A5] + 00 00 00 00 |…|
[A6] + 00 00 00 00 |…|
[A7] + 00 00 00 00 |…|
[A8] + 00 00 00 00 |…|
[A9] + 00 00 00 00 |…|
[AA] + 00 00 00 00 |…|
[AB] + 00 00 00 00 |…|
[AC] + 00 00 00 00 |…|
[AD] + 00 00 00 00 |…|
[AE] + 00 00 00 00 |…|
[AF] + 00 00 00 00 |…|
[B0] + 00 00 00 00 |…|
[B1] + 00 00 00 00 |…|
[B2] + 00 00 00 00 |…|
[B3] + 00 00 00 00 |…|
[B4] + 00 00 00 00 |…|
[B5] + 00 00 00 00 |…|
[B6] + 00 00 00 00 |…|
[B7] + 00 00 00 00 |…|
[B8] + 00 00 00 00 |…|
[B9] + 00 00 00 00 |…|
[BA] + 00 00 00 00 |…|
[BB] + 00 00 00 00 |…|
[BC] + 00 00 00 00 |…|
[BD] + 00 00 00 00 |…|
[BE] + 00 00 00 00 |…|
[BF] + 00 00 00 00 |…|
[C0] + 00 00 00 00 |…|
[C1] + 00 00 00 00 |…|
[C2] + 00 00 00 00 |…|
[C3] + 00 00 00 00 |…|
[C4] + 00 00 00 00 |…|
[C5] + 00 00 00 00 |…|
[C6] + 00 00 00 00 |…|
[C7] + 00 00 00 00 |…|
[C8] + 00 00 00 00 |…|
[C9] + 00 00 00 00 |…|
[CA] + 00 00 00 00 |…|
[CB] + 00 00 00 00 |…|
[CC] + 00 00 00 00 |…|
[CD] + 00 00 00 00 |…|
[CE] + 00 00 00 00 |…|
[CF] + 00 00 00 00 |…|
[D0] + 00 00 00 00 |…|
[D1] + 00 00 00 00 |…|
[D2] + 00 00 00 00 |…|
[D3] + 00 00 00 00 |…|
[D4] + 00 00 00 00 |…|
[D5] + 00 00 00 00 |…|
[D6] + 00 00 00 00 |…|
[D7] + 00 00 00 00 |…|
[D8] + 00 00 00 00 |…|
[D9] + 00 00 00 00 |…|
[DA] + 00 00 00 00 |…|
[DB] + 00 00 00 00 |…|
[DC] + 00 00 00 00 |…|
[DD] + 00 00 00 00 |…|
[DE] + 00 00 00 00 |…|
[DF] + 00 00 00 00 |…|
[E0] + 00 00 00 00 |…|
[E1] + 00 00 00 00 |…|
[E2] *r 00 00 7F BD (LOCK2-LOCK4, CHK)
[E3] .r 04 00 00 E2 (CFG, MIRROR, AUTH0)
[E4] .r 00 05 – -- (ACCESS)
[E5] +P XX XX XX XX (PWD0-PWD3)
[E6] +P XX XX – -- (PACK0-PACK1)

*:locked & blocked, x:locked,
+:blocked, .:un(b)locked, ?:unknown
r:readable (write-protected),
p:password protected, -:write-only
P:password protected write-only

TagInfo scan AFTER writing vCard using TagWriter

** TagInfo scan (version 4.23) 2018-08-17 11:07:53 **
Report Type: External

– IC INFO ------------------------------

IC manufacturer:

NXP Semiconductors

IC type:

NTAG216

NFC Forum NDEF-compliant tag:

Type 2 Tag

– NDEF ------------------------------

NFC data set information:

NDEF message containing 1 record
Current message size: 321 bytes
Maximum message size: 868 bytes
NFC data set access: Read & Write
Can be made Read-Only

Record #1: vCard record:

Type Name Format: MIME type (RFC 2046)

type: “text/x-vCard”
BEGIN: VCARD
VERSION: 2.1
N: Kolakowski;Derek;;;
FN: Derek Kolakowski
TEL;WORK: +15403824234,128
EMAIL;WORK: dkolakowski@foxguardsolutions.com
ORG: FoxGuard Solutions
TITLE: Senior Manager, Security Engineering
URL: https://FoxGuardSolutions.com/
URL: https://linkedin.com/in/derekkolakowski
END: VCARD
Payload length: 303 bytes
Payload data:

[000] 42 45 47 49 4E 3A 56 43 41 52 44 0D 0A 56 45 52 |BEGIN:VCARD…VER|
[010] 53 49 4F 4E 3A 32 2E 31 0D 0A 4E 3A 4B 6F 6C 61 |SION:2.1…N:Kola|
[020] 6B 6F 77 73 6B 69 3B 44 65 72 65 6B 3B 3B 3B 0D |kowski;Derek;;;.|
[030] 0A 46 4E 3A 44 65 72 65 6B 20 4B 6F 6C 61 6B 6F |.FN:Derek Kolako|
[040] 77 73 6B 69 0D 0A 54 45 4C 3B 57 4F 52 4B 3A 2B |wski…TEL;WORK:+|
[050] 31 35 34 30 33 38 32 34 32 33 34 2C 31 32 38 0D |15403824234,128.|
[060] 0A 45 4D 41 49 4C 3B 57 4F 52 4B 3A 64 6B 6F 6C |.EMAIL;WORK:dkol|
[070] 61 6B 6F 77 73 6B 69 40 66 6F 78 67 75 61 72 64 |akowski@foxguard|
[080] 73 6F 6C 75 74 69 6F 6E 73 2E 63 6F 6D 0D 0A 4F |solutions.com…O|
[090] 52 47 3A 46 6F 78 47 75 61 72 64 20 53 6F 6C 75 |RG:FoxGuard Solu|
[0A0] 74 69 6F 6E 73 0D 0A 54 49 54 4C 45 3A 53 65 6E |tions…TITLE:Sen|
[0B0] 69 6F 72 20 4D 61 6E 61 67 65 72 2C 20 53 65 63 |ior Manager, Sec|
[0C0] 75 72 69 74 79 20 45 6E 67 69 6E 65 65 72 69 6E |urity Engineerin|
[0D0] 67 0D 0A 55 52 4C 3A 68 74 74 70 73 3A 2F 2F 46 |g…URL:https://F|
[0E0] 6F 78 47 75 61 72 64 53 6F 6C 75 74 69 6F 6E 73 |oxGuardSolutions|
[0F0] 2E 63 6F 6D 2F 0D 0A 55 52 4C 3A 68 74 74 70 73 |.com/…URL:https|
[100] 3A 2F 2F 6C 69 6E 6B 65 64 69 6E 2E 63 6F 6D 2F |://linkedin.com/|
[110] 69 6E 2F 64 65 72 65 6B 6B 6F 6C 61 6B 6F 77 73 |in/derekkolakows|
[120] 6B 69 0D 0A 45 4E 44 3A 56 43 41 52 44 0D 0A |ki…END:VCARD… |

NDEF message:

[000] C2 0C 00 00 01 2F 74 65 78 74 2F 78 2D 76 43 61 |…/text/x-vCa|
[010] 72 64 42 45 47 49 4E 3A 56 43 41 52 44 0D 0A 56 |rdBEGIN:VCARD…V|
[020] 45 52 53 49 4F 4E 3A 32 2E 31 0D 0A 4E 3A 4B 6F |ERSION:2.1…N:Ko|
[030] 6C 61 6B 6F 77 73 6B 69 3B 44 65 72 65 6B 3B 3B |lakowski;Derek;;|
[040] 3B 0D 0A 46 4E 3A 44 65 72 65 6B 20 4B 6F 6C 61 |;…FN:Derek Kola|
[050] 6B 6F 77 73 6B 69 0D 0A 54 45 4C 3B 57 4F 52 4B |kowski…TEL;WORK|
[060] 3A 2B 31 35 34 30 33 38 32 34 32 33 34 2C 31 32 |:+15403824234,12|
[070] 38 0D 0A 45 4D 41 49 4C 3B 57 4F 52 4B 3A 64 6B |8…EMAIL;WORK:dk|
[080] 6F 6C 61 6B 6F 77 73 6B 69 40 66 6F 78 67 75 61 |olakowski@foxgua|
[090] 72 64 73 6F 6C 75 74 69 6F 6E 73 2E 63 6F 6D 0D |rdsolutions.com.|
[0A0] 0A 4F 52 47 3A 46 6F 78 47 75 61 72 64 20 53 6F |.ORG:FoxGuard So|
[0B0] 6C 75 74 69 6F 6E 73 0D 0A 54 49 54 4C 45 3A 53 |lutions…TITLE:S|
[0C0] 65 6E 69 6F 72 20 4D 61 6E 61 67 65 72 2C 20 53 |enior Manager, S|
[0D0] 65 63 75 72 69 74 79 20 45 6E 67 69 6E 65 65 72 |ecurity Engineer|
[0E0] 69 6E 67 0D 0A 55 52 4C 3A 68 74 74 70 73 3A 2F |ing…URL:https:/|
[0F0] 2F 46 6F 78 47 75 61 72 64 53 6F 6C 75 74 69 6F |/FoxGuardSolutio|
[100] 6E 73 2E 63 6F 6D 2F 0D 0A 55 52 4C 3A 68 74 74 |ns.com/..URL:htt|
[110] 70 73 3A 2F 2F 6C 69 6E 6B 65 64 69 6E 2E 63 6F |ps://linkedin.co|
[120] 6D 2F 69 6E 2F 64 65 72 65 6B 6B 6F 6C 61 6B 6F |m/in/derekkolako|
[130] 77 73 6B 69 0D 0A 45 4E 44 3A 56 43 41 52 44 0D |wski…END:VCARD.|
[140] 0A |. |

NDEF Capability Container (CC):

Mapping version: 1.2
Maximum NDEF data size: 872 bytes
NDEF access: Read & Write
E1 12 6D 00 |…m. |

– EXTRA ------------------------------

Memory size:

888 bytes user memory

  • 222 pages, with 4 bytes per page

IC detailed information:

Full product name: NT2H1611G0DUx
Capacitance: 50 pF

Version information:

Vendor ID: NXP
Type: NTAG
Subtype: 50 pF
Major version: 1
Minor version: V0
Storage size: 888 bytes
Protocol: ISO/IEC 14443-3

Configuration information:

ASCII mirror disabled
NFC counter: disabled
No limit on wrong password attempts
Strong load modulation enabled

Originality check:

Signature verified with NXP public key

– FULL SCAN ------------------------------

Technologies supported:

ISO/IEC 14443-3 (Type A) compatible
ISO/IEC 14443-2 (Type A) compatible

Android technology information:

Tag description:

  • TAG: Tech [android.nfc.tech.NfcA, android.nfc.tech.MifareUltralight, android.nfc.tech.Ndef]
  • Maximum transceive length: 253 bytes
  • Default maximum transceive time-out: 618 ms

Detailed protocol information:

ID: 04:D6:05:12:FF:38:84
ATQA: 0x4400
SAK: 0x00

Memory content:

[00] * 04:D6:05 5F (UID0-UID2, BCC0)
[01] * 12:FF:38:84 (UID3-UID6)
[02] * 51 48 0F 00 (BCC1, INT, LOCK0-LOCK1)
[03] * E1:12:6D:00 (OTP0-OTP3)
[04] + 03 FF 01 41 |…A|
[05] + C2 0C 00 00 |…|
[06] + 01 2F 74 65 |./te|
[07] + 78 74 2F 78 |xt/x|
[08] + 2D 76 43 61 |-vCa|
[09] + 72 64 42 45 |rdBE|
[0A] + 47 49 4E 3A |GIN:|
[0B] + 56 43 41 52 |VCAR|
[0C] + 44 0D 0A 56 |D…V|
[0D] + 45 52 53 49 |ERSI|
[0E] + 4F 4E 3A 32 |ON:2|
[0F] + 2E 31 0D 0A |.1…|
[10] + 4E 3A 4B 6F |N:Ko|
[11] + 6C 61 6B 6F |lako|
[12] + 77 73 6B 69 |wski|
[13] + 3B 44 65 72 |;Der|
[14] + 65 6B 3B 3B |ek;;|
[15] + 3B 0D 0A 46 |;…F|
[16] + 4E 3A 44 65 |N:De|
[17] + 72 65 6B 20 |rek |
[18] + 4B 6F 6C 61 |Kola|
[19] + 6B 6F 77 73 |kows|
[1A] + 6B 69 0D 0A |ki…|
[1B] + 54 45 4C 3B |TEL;|
[1C] + 57 4F 52 4B |WORK|
[1D] + 3A 2B 31 35 |:+15|
[1E] + 34 30 33 38 |4038|
[1F] + 32 34 32 33 |2423|
[20] + 34 2C 31 32 |4,12|
[21] + 38 0D 0A 45 |8…E|
[22] + 4D 41 49 4C |MAIL|
[23] + 3B 57 4F 52 |;WOR|
[24] + 4B 3A 64 6B |K:dk|
[25] + 6F 6C 61 6B |olak|
[26] + 6F 77 73 6B |owsk|
[27] + 69 40 66 6F |i@fo|
[28] + 78 67 75 61 |xgua|
[29] + 72 64 73 6F |rdso|
[2A] + 6C 75 74 69 |luti|
[2B] + 6F 6E 73 2E |ons.|
[2C] + 63 6F 6D 0D |com.|
[2D] + 0A 4F 52 47 |.ORG|
[2E] + 3A 46 6F 78 |:Fox|
[2F] + 47 75 61 72 |Guar|
[30] + 64 20 53 6F |d So|
[31] + 6C 75 74 69 |luti|
[32] + 6F 6E 73 0D |ons.|
[33] + 0A 54 49 54 |.TIT|
[34] + 4C 45 3A 53 |LE:S|
[35] + 65 6E 69 6F |enio|
[36] + 72 20 4D 61 |r Ma|
[37] + 6E 61 67 65 |nage|
[38] + 72 2C 20 53 |r, S|
[39] + 65 63 75 72 |ecur|
[3A] + 69 74 79 20 |ity |
[3B] + 45 6E 67 69 |Engi|
[3C] + 6E 65 65 72 |neer|
[3D] + 69 6E 67 0D |ing.|
[3E] + 0A 55 52 4C |.URL|
[3F] + 3A 68 74 74 |:htt|
[40] + 70 73 3A 2F |ps:/|
[41] + 2F 46 6F 78 |/Fox|
[42] + 47 75 61 72 |Guar|
[43] + 64 53 6F 6C |dSol|
[44] + 75 74 69 6F |utio|
[45] + 6E 73 2E 63 |ns.c|
[46] + 6F 6D 2F 0D |om/.|
[47] + 0A 55 52 4C |.URL|
[48] + 3A 68 74 74 |:htt|
[49] + 70 73 3A 2F |ps:/|
[4A] + 2F 6C 69 6E |/lin|
[4B] + 6B 65 64 69 |kedi|
[4C] + 6E 2E 63 6F |n.co|
[4D] + 6D 2F 69 6E |m/in|
[4E] + 2F 64 65 72 |/der|
[4F] + 65 6B 6B 6F |ekko|
[50] + 6C 61 6B 6F |lako|
[51] + 77 73 6B 69 |wski|
[52] + 0D 0A 45 4E |…EN|
[53] + 44 3A 56 43 |D:VC|
[54] + 41 52 44 0D |ARD.|
[55] + 0A FE 00 00 |…|
[56] + 00 00 00 00 |…|
[57] + 00 00 00 00 |…|
[58] + 00 00 00 00 |…|
[59] + 00 00 00 00 |…|
[5A] + 00 00 00 00 |…|
[5B] + 00 00 00 00 |…|
[5C] + 00 00 00 00 |…|
[5D] + 00 00 00 00 |…|
[5E] + 00 00 00 00 |…|
[5F] + 00 00 00 00 |…|
[60] + 00 00 00 00 |…|
[61] + 00 00 00 00 |…|
[62] + 00 00 00 00 |…|
[63] + 00 00 00 00 |…|
[64] + 00 00 00 00 |…|
[65] + 00 00 00 00 |…|
[66] + 00 00 00 00 |…|
[67] + 00 00 00 00 |…|
[68] + 00 00 00 00 |…|
[69] + 00 00 00 00 |…|
[6A] + 00 00 00 00 |…|
[6B] + 00 00 00 00 |…|
[6C] + 00 00 00 00 |…|
[6D] + 00 00 00 00 |…|
[6E] + 00 00 00 00 |…|
[6F] + 00 00 00 00 |…|
[70] + 00 00 00 00 |…|
[71] + 00 00 00 00 |…|
[72] + 00 00 00 00 |…|
[73] + 00 00 00 00 |…|
[74] + 00 00 00 00 |…|
[75] + 00 00 00 00 |…|
[76] + 00 00 00 00 |…|
[77] + 00 00 00 00 |…|
[78] + 00 00 00 00 |…|
[79] + 00 00 00 00 |…|
[7A] + 00 00 00 00 |…|
[7B] + 00 00 00 00 |…|
[7C] + 00 00 00 00 |…|
[7D] + 00 00 00 00 |…|
[7E] + 00 00 00 00 |…|
[7F] + 00 00 00 00 |…|
[80] + 00 00 00 00 |…|
[81] + 00 00 00 00 |…|
[82] + 00 00 00 00 |…|
[83] + 00 00 00 00 |…|
[84] + 00 00 00 00 |…|
[85] + 00 00 00 00 |…|
[86] + 00 00 00 00 |…|
[87] + 00 00 00 00 |…|
[88] + 00 00 00 00 |…|
[89] + 00 00 00 00 |…|
[8A] + 00 00 00 00 |…|
[8B] + 00 00 00 00 |…|
[8C] + 00 00 00 00 |…|
[8D] + 00 00 00 00 |…|
[8E] + 00 00 00 00 |…|
[8F] + 00 00 00 00 |…|
[90] + 00 00 00 00 |…|
[91] + 00 00 00 00 |…|
[92] + 00 00 00 00 |…|
[93] + 00 00 00 00 |…|
[94] + 00 00 00 00 |…|
[95] + 00 00 00 00 |…|
[96] + 00 00 00 00 |…|
[97] + 00 00 00 00 |…|
[98] + 00 00 00 00 |…|
[99] + 00 00 00 00 |…|
[9A] + 00 00 00 00 |…|
[9B] + 00 00 00 00 |…|
[9C] + 00 00 00 00 |…|
[9D] + 00 00 00 00 |…|
[9E] + 00 00 00 00 |…|
[9F] + 00 00 00 00 |…|
[A0] + 00 00 00 00 |…|
[A1] + 00 00 00 00 |…|
[A2] + 00 00 00 00 |…|
[A3] + 00 00 00 00 |…|
[A4] + 00 00 00 00 |…|
[A5] + 00 00 00 00 |…|
[A6] + 00 00 00 00 |…|
[A7] + 00 00 00 00 |…|
[A8] + 00 00 00 00 |…|
[A9] + 00 00 00 00 |…|
[AA] + 00 00 00 00 |…|
[AB] + 00 00 00 00 |…|
[AC] + 00 00 00 00 |…|
[AD] + 00 00 00 00 |…|
[AE] + 00 00 00 00 |…|
[AF] + 00 00 00 00 |…|
[B0] + 00 00 00 00 |…|
[B1] + 00 00 00 00 |…|
[B2] + 00 00 00 00 |…|
[B3] + 00 00 00 00 |…|
[B4] + 00 00 00 00 |…|
[B5] + 00 00 00 00 |…|
[B6] + 00 00 00 00 |…|
[B7] + 00 00 00 00 |…|
[B8] + 00 00 00 00 |…|
[B9] + 00 00 00 00 |…|
[BA] + 00 00 00 00 |…|
[BB] + 00 00 00 00 |…|
[BC] + 00 00 00 00 |…|
[BD] + 00 00 00 00 |…|
[BE] + 00 00 00 00 |…|
[BF] + 00 00 00 00 |…|
[C0] + 00 00 00 00 |…|
[C1] + 00 00 00 00 |…|
[C2] + 00 00 00 00 |…|
[C3] + 00 00 00 00 |…|
[C4] + 00 00 00 00 |…|
[C5] + 00 00 00 00 |…|
[C6] + 00 00 00 00 |…|
[C7] + 00 00 00 00 |…|
[C8] + 00 00 00 00 |…|
[C9] + 00 00 00 00 |…|
[CA] + 00 00 00 00 |…|
[CB] + 00 00 00 00 |…|
[CC] + 00 00 00 00 |…|
[CD] + 00 00 00 00 |…|
[CE] + 00 00 00 00 |…|
[CF] + 00 00 00 00 |…|
[D0] + 00 00 00 00 |…|
[D1] + 00 00 00 00 |…|
[D2] + 00 00 00 00 |…|
[D3] + 00 00 00 00 |…|
[D4] + 00 00 00 00 |…|
[D5] + 00 00 00 00 |…|
[D6] + 00 00 00 00 |…|
[D7] + 00 00 00 00 |…|
[D8] + 00 00 00 00 |…|
[D9] + 00 00 00 00 |…|
[DA] + 00 00 00 00 |…|
[DB] + 00 00 00 00 |…|
[DC] + 00 00 00 00 |…|
[DD] + 00 00 00 00 |…|
[DE] + 00 00 00 00 |…|
[DF] + 00 00 00 00 |…|
[E0] + 00 00 00 00 |…|
[E1] + 00 00 00 00 |…|
[E2] *r 00 00 7F BD (LOCK2-LOCK4, CHK)
[E3] .r 04 00 00 E2 (CFG, MIRROR, AUTH0)
[E4] .r 00 05 – -- (ACCESS)
[E5] +P XX XX XX XX (PWD0-PWD3)
[E6] +P XX XX – -- (PACK0-PACK1)

*:locked & blocked, x:locked,
+:blocked, .:un(b)locked, ?:unknown
r:readable (write-protected),
p:password protected, -:write-only
P:password protected write-only

1 Like

Uh, that’d be a great idea! Could boost publicity, help solving issues “by ourselves”, plus could generate profit like Nfc Tools Pro - free for DT customers. Just a thought… :slightly_smiling_face::+1:

1 Like