Cloning an HID iClass credential to your flexClass

DT Info
1

Steps to clone an HID iClass legacy / standard credential

  1. Put enrolled iClass credential on HF antenna of Proxmark3

  2. hf ic dump --ki 0

  3. hf ic wrbl --ki 0 -b 6 -d 030303030003E017

  4. hf ic wrbl --ki 0 -b 7 -d 10A145919ED16F50

Proxmark3 cheat sheet for iClass commands

Technical details

flexClass block 1 content

[=] -------------------- card configuration --------------------
[=]     Raw: FF FF FF FF 7F 1F FF BC 
[=]          FF.....................  app limit
[=]             FFFF ( 65535 )......  OTP
[=]                   FF............  block write lock
[=]                      7F.........  chip
[=]                         1F......  mem
[=]                            FF...  EAS
[=]                               BC  fuses

hf ic info

[=]   Fuses:
[+]     mode......... Personalization (programmable)
6 Likes