Cloning MiFare 1k Tag

[BananaPie]

Hi there,

I am having troubles cloning a MiFare Classic 1k. I have tried to autopwned both fobs, and have gotten a dump file each. I have a original MiFare Classic 1k fob, and using a Mifare Classic 1k Gen 2 / CUID as a new fob.

When i try to restore the file onto the new fob using the following command:

hf mf restore --1k -f hf-mf-8E01AC0D-key.bin -k hf-mf-AA7B6F66-key.bin --force

I have a bunch of failed status. I attached the command log below for your reference. Anyone able to tell me what I am doing wrong? Thanksss!!

The original fob I have info I have is

[usb] pm3 → hf search
[-] Searching for ISO14443-A tag…
[+] UID: 8E 01 AC 0D
[+] ATQA: 00 04
[+] SAK: 08 [2]
[+] Possible types:
[+] MIFARE Classic 1K
[=] proprietary non iso14443-4 card found, RATS not supported
[+] Prng detection… weak

The fob im trying to copy to is

[usb] pm3 → hf search
[/] Searching for ISO14443-A tag…
[+] UID: AA 7B 6F 66
[+] ATQA: 00 04
[+] SAK: 08 [2]
[+] Possible types:
[+] MIFARE Classic 1K
[=] proprietary non iso14443-4 card found, RATS not supported
[+] Magic capabilities… Gen 2 / CUID
[+] Prng detection… weak

[=] Session log C:\Users\User\Desktop\rrg_other-20240522-2b8ae4079cf869eaa6a01a2ecafa5ebeb03fb05f\client\/.proxmark3/logs/log_20240525001100.txt
[+] loaded `C:\Users\User\Desktop\rrg_other-20240522-2b8ae4079cf869eaa6a01a2ecafa5ebeb03fb05f\client\/.proxmark3/preferences.json`
[+] Using UART port COM4
[+] Communicating with PM3 over USB-CDC


  8888888b.  888b     d888  .d8888b.
  888   Y88b 8888b   d8888 d88P  Y88b
  888    888 88888b.d88888      .d88P
  888   d88P 888Y88888P888     8888"
  8888888P"  888 Y888P 888      "Y8b.
  888        888  Y8P  888 888    888
  888        888   "   888 Y88b  d88P
  888        888       888  "Y8888P"    [  ]



  [ Fund creativity, empower dreams! ]
     Patreon - https://www.patreon.com/iceman1001/
     Paypal  - https://www.paypal.me/iceman1001/


  [ Proxmark3 RFID instrument ]

    MCU....... AT91SAM7S512 Rev B
    Memory.... 512 KB ( 63% used )

    Client.... Iceman/master/v4.18341-232-g2b8ae4079 2024-05-22 20:34:03
    Bootrom... Iceman/master/v4.18341-232-g2b8ae4079-suspect 2024-05-22 20:33:41
    OS........ Iceman/master/v4.18341-232-g2b8ae4079-suspect 2024-05-22 20:33:52
    Target.... PM3 GENERIC


[=] No previous history could be loaded
[usb] pm3 --> hf search
[-] Searching for ISO14443-A tag...
[+]  UID: 8E 01 AC 0D
[+] ATQA: 00 04
[+]  SAK: 08 [2]
[+] Possible types:
[+]    MIFARE Classic 1K
[=] proprietary non iso14443-4 card found, RATS not supported
[+] Prng detection....... weak

[?] Hint: try `hf mf` commands


[+] Valid ISO 14443-A tag found

[usb] pm3 --> hf search
[/] Searching for ISO14443-A tag...
[+]  UID: AA 7B 6F 66
[+] ATQA: 00 04
[+]  SAK: 08 [2]
[+] Possible types:
[+]    MIFARE Classic 1K
[=] proprietary non iso14443-4 card found, RATS not supported
[+] Magic capabilities... Gen 2 / CUID
[+] Prng detection....... weak

[?] Hint: use `hf mf` commands


[+] Valid ISO 14443-A tag found

[usb] pm3 --> hf mf autopwn --1k -f mfc_default_keys.dic
[!] no known key was supplied, key recovery might fail
[+] loaded  5 user keys
[+] loaded 61 keys from hardcoded default array
[+] Loaded 1794 keys from dictionary file `C:\Users\User\Desktop\rrg_other-20240522-2b8ae4079cf869eaa6a01a2ecafa5ebeb03fb05f\client\dictionaries/mfc_default_keys.dic`
[=] running strategy 1
[+] target sector   0 key type A -- found valid key [ 8829DA9DAF76 ] (used for nested / hardnested attack)
[+] target sector   0 key type B -- found valid key [ 8829DA9DAF76 ]
[+] target sector   1 key type A -- found valid key [ 8829DA9DAF76 ]
[+] target sector   1 key type B -- found valid key [ 8829DA9DAF76 ]
[+] target sector   2 key type A -- found valid key [ 8829DA9DAF76 ]
[+] target sector   2 key type B -- found valid key [ 8829DA9DAF76 ]
[+] target sector   3 key type A -- found valid key [ 8829DA9DAF76 ]
[+] target sector   3 key type B -- found valid key [ 8829DA9DAF76 ]
[+] target sector   4 key type A -- found valid key [ 8829DA9DAF76 ]
[+] target sector   4 key type B -- found valid key [ 8829DA9DAF76 ]
[+] target sector   5 key type A -- found valid key [ 8829DA9DAF76 ]
[+] target sector   5 key type B -- found valid key [ 8829DA9DAF76 ]
[+] target sector   6 key type A -- found valid key [ 8829DA9DAF76 ]
[+] target sector   6 key type B -- found valid key [ 8829DA9DAF76 ]
[+] target sector   7 key type A -- found valid key [ 8829DA9DAF76 ]
[+] target sector   7 key type B -- found valid key [ 8829DA9DAF76 ]
[+] target sector   8 key type A -- found valid key [ 8829DA9DAF76 ]
[+] target sector   8 key type B -- found valid key [ 8829DA9DAF76 ]
[+] target sector   9 key type A -- found valid key [ 8829DA9DAF76 ]
[+] target sector   9 key type B -- found valid key [ 8829DA9DAF76 ]
[+] target sector  10 key type A -- found valid key [ 8829DA9DAF76 ]
[+] target sector  10 key type B -- found valid key [ 8829DA9DAF76 ]
[+] target sector  11 key type A -- found valid key [ 8829DA9DAF76 ]
[+] target sector  11 key type B -- found valid key [ 8829DA9DAF76 ]
[+] target sector  12 key type A -- found valid key [ 8829DA9DAF76 ]
[+] target sector  12 key type B -- found valid key [ 8829DA9DAF76 ]
[+] target sector  13 key type A -- found valid key [ 8829DA9DAF76 ]
[+] target sector  13 key type B -- found valid key [ 8829DA9DAF76 ]
[+] target sector  14 key type A -- found valid key [ 8829DA9DAF76 ]
[+] target sector  14 key type B -- found valid key [ 8829DA9DAF76 ]
[+] target sector  15 key type A -- found valid key [ 8829DA9DAF76 ]
[+] target sector  15 key type B -- found valid key [ 8829DA9DAF76 ]

[+] found keys:

[+] -----+-----+--------------+---+--------------+----
[+]  Sec | Blk | key A        |res| key B        |res
[+] -----+-----+--------------+---+--------------+----
[+]  000 | 003 | 8829DA9DAF76 | D | 8829DA9DAF76 | D
[+]  001 | 007 | 8829DA9DAF76 | D | 8829DA9DAF76 | D
[+]  002 | 011 | 8829DA9DAF76 | D | 8829DA9DAF76 | D
[+]  003 | 015 | 8829DA9DAF76 | D | 8829DA9DAF76 | D
[+]  004 | 019 | 8829DA9DAF76 | D | 8829DA9DAF76 | D
[+]  005 | 023 | 8829DA9DAF76 | D | 8829DA9DAF76 | D
[+]  006 | 027 | 8829DA9DAF76 | D | 8829DA9DAF76 | D
[+]  007 | 031 | 8829DA9DAF76 | D | 8829DA9DAF76 | D
[+]  008 | 035 | 8829DA9DAF76 | D | 8829DA9DAF76 | D
[+]  009 | 039 | 8829DA9DAF76 | D | 8829DA9DAF76 | D
[+]  010 | 043 | 8829DA9DAF76 | D | 8829DA9DAF76 | D
[+]  011 | 047 | 8829DA9DAF76 | D | 8829DA9DAF76 | D
[+]  012 | 051 | 8829DA9DAF76 | D | 8829DA9DAF76 | D
[+]  013 | 055 | 8829DA9DAF76 | D | 8829DA9DAF76 | D
[+]  014 | 059 | 8829DA9DAF76 | D | 8829DA9DAF76 | D
[+]  015 | 063 | 8829DA9DAF76 | D | 8829DA9DAF76 | D
[+] -----+-----+--------------+---+--------------+----
[=] ( D:Dictionary / S:darkSide / U:User / R:Reused / N:Nested / H:Hardnested / C:statiCnested / A:keyA  )


[+] Generating binary key file
[+] Found keys have been dumped to `C:\Users\User\Desktop\rrg_other-20240522-2b8ae4079cf869eaa6a01a2ecafa5ebeb03fb05f\client\/hf-mf-8E01AC0D-key.bin`
[=] --[ FFFFFFFFFFFF ]-- has been inserted for unknown keys where res is 0
[=] transferring keys to simulator memory ( ok )
[=] dumping card content to emulator memory (Cmd Error: 04 can occur)
[=] downloading card content from emulator memory
[+] Saved 1024 bytes to binary file `C:\Users\User\Desktop\rrg_other-20240522-2b8ae4079cf869eaa6a01a2ecafa5ebeb03fb05f\client\/hf-mf-8E01AC0D-dump.bin`
[+] Saved to json file `C:\Users\User\Desktop\rrg_other-20240522-2b8ae4079cf869eaa6a01a2ecafa5ebeb03fb05f\client\/hf-mf-8E01AC0D-dump.json`
[=] autopwn execution time: 10 seconds
[usb] pm3 --> hf mf autopwn
[!] no known key was supplied, key recovery might fail
[+] loaded  5 user keys
[+] loaded 61 keys from hardcoded default array
[=] running strategy 1
[+] target sector   0 key type A -- found valid key [ FFFFFFFFFFFF ] (used for nested / hardnested attack)
[+] target sector   0 key type B -- found valid key [ FFFFFFFFFFFF ]
[+] target sector   1 key type A -- found valid key [ FFFFFFFFFFFF ]
[+] target sector   1 key type B -- found valid key [ FFFFFFFFFFFF ]
[+] target sector   2 key type A -- found valid key [ FFFFFFFFFFFF ]
[+] target sector   2 key type B -- found valid key [ FFFFFFFFFFFF ]
[+] target sector   3 key type A -- found valid key [ FFFFFFFFFFFF ]
[+] target sector   3 key type B -- found valid key [ FFFFFFFFFFFF ]
[+] target sector   4 key type A -- found valid key [ FFFFFFFFFFFF ]
[+] target sector   4 key type B -- found valid key [ FFFFFFFFFFFF ]
[+] target sector   5 key type A -- found valid key [ FFFFFFFFFFFF ]
[+] target sector   5 key type B -- found valid key [ FFFFFFFFFFFF ]
[+] target sector   6 key type A -- found valid key [ FFFFFFFFFFFF ]
[+] target sector   6 key type B -- found valid key [ FFFFFFFFFFFF ]
[+] target sector   7 key type A -- found valid key [ FFFFFFFFFFFF ]
[+] target sector   7 key type B -- found valid key [ FFFFFFFFFFFF ]
[+] target sector   8 key type A -- found valid key [ FFFFFFFFFFFF ]
[+] target sector   8 key type B -- found valid key [ FFFFFFFFFFFF ]
[+] target sector   9 key type A -- found valid key [ FFFFFFFFFFFF ]
[+] target sector   9 key type B -- found valid key [ FFFFFFFFFFFF ]
[+] target sector  10 key type A -- found valid key [ FFFFFFFFFFFF ]
[+] target sector  10 key type B -- found valid key [ FFFFFFFFFFFF ]
[+] target sector  11 key type A -- found valid key [ FFFFFFFFFFFF ]
[+] target sector  11 key type B -- found valid key [ FFFFFFFFFFFF ]
[+] target sector  12 key type A -- found valid key [ FFFFFFFFFFFF ]
[+] target sector  12 key type B -- found valid key [ FFFFFFFFFFFF ]
[+] target sector  13 key type A -- found valid key [ FFFFFFFFFFFF ]
[+] target sector  13 key type B -- found valid key [ FFFFFFFFFFFF ]
[+] target sector  14 key type A -- found valid key [ FFFFFFFFFFFF ]
[+] target sector  14 key type B -- found valid key [ FFFFFFFFFFFF ]
[+] target sector  15 key type A -- found valid key [ FFFFFFFFFFFF ]
[+] target sector  15 key type B -- found valid key [ FFFFFFFFFFFF ]

[+] found keys:

[+] -----+-----+--------------+---+--------------+----
[+]  Sec | Blk | key A        |res| key B        |res
[+] -----+-----+--------------+---+--------------+----
[+]  000 | 003 | FFFFFFFFFFFF | D | FFFFFFFFFFFF | D
[+]  001 | 007 | FFFFFFFFFFFF | D | FFFFFFFFFFFF | D
[+]  002 | 011 | FFFFFFFFFFFF | D | FFFFFFFFFFFF | D
[+]  003 | 015 | FFFFFFFFFFFF | D | FFFFFFFFFFFF | D
[+]  004 | 019 | FFFFFFFFFFFF | D | FFFFFFFFFFFF | D
[+]  005 | 023 | FFFFFFFFFFFF | D | FFFFFFFFFFFF | D
[+]  006 | 027 | FFFFFFFFFFFF | D | FFFFFFFFFFFF | D
[+]  007 | 031 | FFFFFFFFFFFF | D | FFFFFFFFFFFF | D
[+]  008 | 035 | FFFFFFFFFFFF | D | FFFFFFFFFFFF | D
[+]  009 | 039 | FFFFFFFFFFFF | D | FFFFFFFFFFFF | D
[+]  010 | 043 | FFFFFFFFFFFF | D | FFFFFFFFFFFF | D
[+]  011 | 047 | FFFFFFFFFFFF | D | FFFFFFFFFFFF | D
[+]  012 | 051 | FFFFFFFFFFFF | D | FFFFFFFFFFFF | D
[+]  013 | 055 | FFFFFFFFFFFF | D | FFFFFFFFFFFF | D
[+]  014 | 059 | FFFFFFFFFFFF | D | FFFFFFFFFFFF | D
[+]  015 | 063 | FFFFFFFFFFFF | D | FFFFFFFFFFFF | D
[+] -----+-----+--------------+---+--------------+----
[=] ( D:Dictionary / S:darkSide / U:User / R:Reused / N:Nested / H:Hardnested / C:statiCnested / A:keyA  )


[+] Generating binary key file
[+] Found keys have been dumped to `C:\Users\User\Desktop\rrg_other-20240522-2b8ae4079cf869eaa6a01a2ecafa5ebeb03fb05f\client\/hf-mf-AA7B6F66-key.bin`
[=] --[ FFFFFFFFFFFF ]-- has been inserted for unknown keys where res is 0
[=] transferring keys to simulator memory ( ok )
[=] dumping card content to emulator memory (Cmd Error: 04 can occur)
[=] downloading card content from emulator memory
[+] Saved 1024 bytes to binary file `C:\Users\User\Desktop\rrg_other-20240522-2b8ae4079cf869eaa6a01a2ecafa5ebeb03fb05f\client\/hf-mf-AA7B6F66-dump.bin`
[+] Saved to json file `C:\Users\User\Desktop\rrg_other-20240522-2b8ae4079cf869eaa6a01a2ecafa5ebeb03fb05f\client\/hf-mf-AA7B6F66-dump.json`
[=] autopwn execution time: 2 seconds
[usb] pm3 --> hf mf restore --1k -f hf-mf-8E01AC0D-key -k hf-mf-AA7B6F66-key --force
[-] Error - can't find `hf-mf-AA7B6F66-key`
[usb] pm3 --> hf mf restore --1k -f hf-mf-8E01AC0D-key.bin -k hf-mf-AA7B6F66-key.bin --force
[+] Loaded binary key file `hf-mf-AA7B6F66-key.bin`
[=] Using key file `hf-mf-AA7B6F66-key.bin`
[+] Loaded 192 bytes from binary file `hf-mf-8E01AC0D-key.bin`

[=]  blk | data                                            | status
[=] -----+-------------------------------------------------+----------------
[=]    0 | 88 29 DA 9D AF 76 88 29 DA 9D AF 76 88 29 DA 9D | ( ok )
[#] Can't select card
[=]    1 | AF 76 88 29 DA 9D AF 76 88 29 DA 9D AF 76 88 29 | ( fail ) key B
[#] Can't select card
[=]    1 | AF 76 88 29 DA 9D AF 76 88 29 DA 9D AF 76 88 29 | ( fail ) key A
[#] Can't select card
[=]    2 | DA 9D AF 76 88 29 DA 9D AF 76 88 29 DA 9D AF 76 | ( fail ) key B
[#] Can't select card
[=]    2 | DA 9D AF 76 88 29 DA 9D AF 76 88 29 DA 9D AF 76 | ( fail ) key A
[!] Invalid Access Conditions on sector 0, replacing with default values
[#] Can't select card
[=]    3 | FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF | ( fail ) key B
[#] Can't select card
[=]    3 | FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF | ( fail ) key A
[#] Can't select card
[=]    4 | AF 76 88 29 DA 9D AF 76 88 29 DA 9D AF 76 88 29 | ( fail ) key B
[#] Can't select card
[=]    4 | AF 76 88 29 DA 9D AF 76 88 29 DA 9D AF 76 88 29 | ( fail ) key A
[#] Can't select card
[=]    5 | DA 9D AF 76 88 29 DA 9D AF 76 88 29 DA 9D AF 76 | ( fail ) key B
[#] Can't select card
[=]    5 | DA 9D AF 76 88 29 DA 9D AF 76 88 29 DA 9D AF 76 | ( fail ) key A
[#] Can't select card
[=]    6 | 88 29 DA 9D AF 76 88 29 DA 9D AF 76 88 29 DA 9D | ( fail ) key B
[#] Can't select card
[=]    6 | 88 29 DA 9D AF 76 88 29 DA 9D AF 76 88 29 DA 9D | ( fail ) key A
[!] Invalid Access Conditions on sector 1, replacing with default values
[#] Can't select card
[=]    7 | FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF | ( fail ) key B
[#] Can't select card
[=]    7 | FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF | ( fail ) key A
[#] Can't select card
[=]    8 | DA 9D AF 76 88 29 DA 9D AF 76 88 29 DA 9D AF 76 | ( fail ) key B
[#] Can't select card
[=]    8 | DA 9D AF 76 88 29 DA 9D AF 76 88 29 DA 9D AF 76 | ( fail ) key A
[#] Can't select card
[=]    9 | 88 29 DA 9D AF 76 88 29 DA 9D AF 76 88 29 DA 9D | ( fail ) key B
[#] Can't select card
[=]    9 | 88 29 DA 9D AF 76 88 29 DA 9D AF 76 88 29 DA 9D | ( fail ) key A
[#] Can't select card
[=]   10 | AF 76 88 29 DA 9D AF 76 88 29 DA 9D AF 76 88 29 | ( fail ) key B
[#] Can't select card
[=]   10 | AF 76 88 29 DA 9D AF 76 88 29 DA 9D AF 76 88 29 | ( fail ) key A
[!] Invalid Access Conditions on sector 2, replacing with default values
[#] Can't select card
[=]   11 | FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF | ( fail ) key B
[#] Can't select card
[=]   11 | FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF | ( fail ) key A
[#] Can't select card
[=]   12 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key B
[#] Can't select card
[=]   12 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key A
[#] Can't select card
[=]   13 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key B
[#] Can't select card
[=]   13 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key A
[#] Can't select card
[=]   14 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key B
[#] Can't select card
[=]   14 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key A
[!] Invalid Access Conditions on sector 3, replacing with default values
[#] Can't select card
[=]   15 | FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF | ( fail ) key B
[#] Can't select card
[=]   15 | FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF | ( fail ) key A
[#] Can't select card
[=]   16 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key B
[#] Can't select card
[=]   16 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key A
[#] Can't select card
[=]   17 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key B
[#] Can't select card
[=]   17 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key A
[#] Can't select card
[=]   18 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key B
[#] Can't select card
[=]   18 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key A
[!] Invalid Access Conditions on sector 4, replacing with default values
[#] Can't select card
[=]   19 | FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF | ( fail ) key B
[#] Can't select card
[=]   19 | FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF | ( fail ) key A
[#] Can't select card
[=]   20 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key B
[#] Can't select card
[=]   20 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key A
[#] Can't select card
[=]   21 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key B
[#] Multiple tags detected. Collision after Bit 1
[#] Can't select card
[=]   21 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key A
[#] Can't select card
[=]   22 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key B
[#] Can't select card
[=]   22 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key A
[!] Invalid Access Conditions on sector 5, replacing with default values
[#] Can't select card
[=]   23 | FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF | ( fail ) key B
[#] Can't select card
[=]   23 | FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF | ( fail ) key A
[#] Can't select card
[=]   24 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key B
[#] Can't select card
[=]   24 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key A
[#] Can't select card
[=]   25 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key B
[#] Can't select card
[=]   25 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key A
[#] Can't select card
[=]   26 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key B
[#] Can't select card
[=]   26 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key A
[!] Invalid Access Conditions on sector 6, replacing with default values
[#] Can't select card
[=]   27 | FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF | ( fail ) key B
[#] Can't select card
[=]   27 | FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF | ( fail ) key A
[#] Can't select card
[=]   28 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key B
[#] Can't select card
[=]   28 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key A
[#] Can't select card
[=]   29 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key B
[#] Can't select card
[=]   29 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key A
[#] Can't select card
[=]   30 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key B
[#] Can't select card
[=]   30 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key A
[!] Invalid Access Conditions on sector 7, replacing with default values
[#] Can't select card
[=]   31 | FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF | ( fail ) key B
[#] Can't select card
[=]   31 | FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF | ( fail ) key A
[#] Can't select card
[=]   32 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key B
[#] Can't select card
[=]   32 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key A
[#] Can't select card
[=]   33 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key B
[#] Can't select card
[=]   33 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key A
[#] Can't select card
[=]   34 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key B
[#] Can't select card
[=]   34 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key A
[!] Invalid Access Conditions on sector 8, replacing with default values
[#] Can't select card
[=]   35 | FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF | ( fail ) key B
[#] Can't select card
[=]   35 | FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF | ( fail ) key A
[#] Can't select card
[=]   36 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key B
[#] Can't select card
[=]   36 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key A
[#] Can't select card
[=]   37 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key B
[#] Can't select card
[=]   37 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key A
[#] Can't select card
[=]   38 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key B
[#] Can't select card
[=]   38 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key A
[!] Invalid Access Conditions on sector 9, replacing with default values
[#] Can't select card
[=]   39 | FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF | ( fail ) key B
[#] Can't select card
[=]   39 | FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF | ( fail ) key A
[#] Can't select card
[=]   40 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key B
[#] Can't select card
[=]   40 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key A
[#] Can't select card
[=]   41 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key B
[#] Can't select card
[=]   41 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key A
[#] Can't select card
[=]   42 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key B
[#] Can't select card
[=]   42 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key A
[!] Invalid Access Conditions on sector 10, replacing with default values
[#] Can't select card
[=]   43 | FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF | ( fail ) key B
[#] Can't select card
[=]   43 | FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF | ( fail ) key A
[#] Can't select card
[=]   44 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key B
[#] Can't select card
[=]   44 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key A
[#] Can't select card
[=]   45 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key B
[#] Can't select card
[=]   45 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key A
[#] Can't select card
[=]   46 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key B
[#] Can't select card
[=]   46 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key A
[!] Invalid Access Conditions on sector 11, replacing with default values
[#] Can't select card
[=]   47 | FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF | ( fail ) key B
[#] Can't select card
[=]   47 | FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF | ( fail ) key A
[#] Can't select card
[=]   48 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key B
[#] Can't select card
[=]   48 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key A
[#] Can't select card
[=]   49 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key B
[#] Can't select card
[=]   49 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key A
[#] Can't select card
[=]   50 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key B
[#] Can't select card
[=]   50 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key A
[!] Invalid Access Conditions on sector 12, replacing with default values
[#] Can't select card
[=]   51 | FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF | ( fail ) key B
[#] Can't select card
[=]   51 | FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF | ( fail ) key A
[#] Can't select card
[=]   52 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key B
[#] Can't select card
[=]   52 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key A
[#] Can't select card
[=]   53 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key B
[#] Can't select card
[=]   53 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key A
[#] Can't select card
[=]   54 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key B
[#] Can't select card
[=]   54 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key A
[!] Invalid Access Conditions on sector 13, replacing with default values
[#] Can't select card
[=]   55 | FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF | ( fail ) key B
[#] Can't select card
[=]   55 | FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF | ( fail ) key A
[#] Can't select card
[=]   56 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key B
[#] Can't select card
[=]   56 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key A
[#] Can't select card
[=]   57 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key B
[#] Can't select card
[=]   57 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key A
[#] Can't select card
[=]   58 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key B
[#] Can't select card
[=]   58 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key A
[!] Invalid Access Conditions on sector 14, replacing with default values
[#] Can't select card
[=]   59 | FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF | ( fail ) key B
[#] Can't select card
[=]   59 | FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF | ( fail ) key A
[#] Can't select card
[=]   60 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key B
[#] Can't select card
[=]   60 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key A
[#] Can't select card
[=]   61 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key B
[#] Can't select card
[=]   61 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key A
[#] Can't select card
[=]   62 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key B
[#] Can't select card
[=]   62 | 00 00 00 00 00 00 00 00 7D F6 60 77 D1 02 00 80 | ( fail ) key A
[!] Invalid Access Conditions on sector 15, replacing with default values
[#] Can't select card
[=]   63 | FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF | ( fail ) key B
[#] Can't select card
[=]   63 | FF FF FF FF FF FF FF 07 80 69 FF FF FF FF FF FF | ( fail ) key A
[=] -----+-------------------------------------------------+----------------

[?] try `hf mf dump --ns` to verify
[=] Done!
[usb] pm3 -->

[Aoxhwjfoavdlhsvfpzha]

I would guess it was a coupling issue with the restore command, you could try shifting the tag around a little on the PM3, different positions couple differently

You should also make sure that the PM3 isn’t on a conductive surface, as this can cause some interference

It also mentions detecting multiple tags, so just in case, make sure only one tag is presented to the PM3 at once, though that was probably just an error

[BananaPie]

I’m doing it on a wooden table, but I can try it on a new fob again.

Everytime after I restore it, it bricks the fob, and it does not appear to be readable by the Proxmark 3. Is there a way to wipe it? (its not a magic card)

[Aoxhwjfoavdlhsvfpzha]

@BananaPie

Mifare Classic 1k Gen 2 / CUID as a new fob.

@BananaPie

(its not a magic card)

Is it a gen2 or not magic?

It may possible that the lock bytes on the source tag are locking the target cards too, or something about the coupling issue perhaps

I’d recommend waiting for someone with more experience with gen2 cards to chip in.

Or you could consider picking up a gen1 card to try out

Either way I’d probably try one of the new tags you’ve already tried restoring onto with whatever reader these are supposed to go to, see if you get lucky and they work

[Pilgrimsmaster]

@BananaPie

Is there a way to wipe it?

Handy Dandy Tips and Tricks Proxmark3

RECOVERY FROM A “BRICKED” HF MAGIC MIFARE GEN-2 If you can’t use or modify your hf magic mifare Gen 2 chip or card (or in my case Magic Ring that I thought I’d killed) because you’ve written bad data to block zero (such as mis-typing data that doesn’t match the checksum) and you get a “BCC0 incorrect” error with “No known/supported 13.56 MHz tags found”, there’s hope! Using your Proxmark3, try this for a 4-byte UID: hf 14a config --atqa force --bcc ignore --cl2 skip --rats skip or this for a…

@Aoxhwjfoavdlhsvfpzha

chip in.

@BananaPie

Mifare Classic 1k Gen 2

My go to with any gen2 is MCT

[BananaPie]

@Aoxhwjfoavdlhsvfpzha

Or you could consider picking up a gen1 card to try out

Would the restore method that i’m using above work with the Gen 1 MF? I am willing to try it out but it takes 2-3 weeks for it to be shipped to me.

[BananaPie]

@Pilgrimsmaster

My go to with any gen2 is MCT

I downloaded it, and tried. It’s able to read the same block code from my original code. When i try to dump it onto the new MF Gen 2, at least the reader is able to recognise and beep. But it appears that the code is still incorrect. On the brighter side, at least it beeps now hahahhaa. Any idea why?

[Aoxhwjfoavdlhsvfpzha]

@BananaPie

Would the restore method that i’m using above work with the Gen 1

It probably would, but Gen1’s have a special command that really simplifies the whole process

hf mf cload -f <Your dump file here>
is what you’d want for that type of card. This only works on Gen1 cards though

[BananaPie]

That way I dont have to autopwn the new fob that I’m trying to copy to? I will buy some of it to try then…

[Aoxhwjfoavdlhsvfpzha]

Yep, the gen1 uses a pre-programmed backdoor command

[BananaPie]

Is there a way to determine which Gen it is?

RFID Key Fobs | MIFARE Classic 1K S50 ISO 14443A 13.56 MHz NFC Key Tag Fob | Everything ID

Looking to buy this, but unsure which Gen it is

[Aoxhwjfoavdlhsvfpzha]

That doesn’t seem to be a magic tag to me

[BananaPie]

@Aoxhwjfoavdlhsvfpzha

That doesn’t seem to be a magic tag to me

RFID Key Fobs | UID Changeable M1 S50 Block 0 Changeable Writable CUID FUID GEN1 GEN2 Key Tag Fob | Everything ID

Oh never mind, I found some Gen 1 already. Will buy it and try! Thanks so much for your help! Will update the forum when I receive it, hopefully help some newbies like me!

[Pilgrimsmaster]

@BananaPie

On the brighter side, at least it beeps now hahahhaa. Any idea why?

Use MCT again
Try using Diff Tool

Example

If you tick
“Hide identical Sectors”

It shows only what you need to focus on

You’ll see in my example above, there are only 4 sectors (of 16) so I have already filtered out 75% of the data I dont need to deal with.

[BananaPie]

That’s the only difference at 2%. Do i edit the blocks manually?

Should i be using the Clone UID instead of Write Dump (Clone) function when writing?