Is this possible? I have a PM3 RDV4, which I can’t figure out how to clone a UL EV1 card with data to a blank UL EV1. Is there any information on this? I tried a dark side and nested attack but nothing happens
What do you mean by blank UL EV1? Does NXP make an ultralight ev1 that is “blank”?
You do get blank-ish MFU Ev1 cards. They of course have the UID and internal bytes written in the first 3 blocks, plus the configuration blocks at the end. The remaining space in the middle is blank with only 0s.
Darkside and Nested attacks are Mifare Classic exploits, not Mifare Ultralight.
You should be able to dump the card, understand what data has been written and the configuration blocks. To completely copy it you would need a magic MFU card which can change its UID to be the same as the original.
This isnt something Ive dont too much with so Id be happy to hear any findings you have.
1 Like