Cloning MIFARE Ultralight

Support
1

Is it possible to clone this tag to an implant?

– IC INFO ------------------------------

IC manufacturer:

NXP Semiconductors

IC type:

MIFARE Ultralight (unknown type) (MF0ICU1)

– NDEF ------------------------------

No NDEF data storage present:

Maximum NDEF storage size after format: 46 bytes

– EXTRA ------------------------------

Memory size:

64 bytes total memory

  • 16 pages, with 4 bytes per page

  • 48 bytes user memory (12 pages)

– FULL SCAN ------------------------------

Technologies supported:

ISO/IEC 14443-3 (Type A) compatible

ISO/IEC 14443-2 (Type A) compatible

Android technology information:

Tag description:

  • TAG: Tech [android.nfc.tech.NfcA, android.nfc.tech.MifareUltralight, android.nfc.tech.NdefFormatable]

  • Maximum transceive length: 253 bytes

  • Default maximum transceive time-out: 618 ms

Detailed protocol information:

ID: 04:9A:B1:82:9B:4C:80

ATQA: 0x4400

SAK: 0x00

Memory content:

[00] * 04:9A:B1 A7 (UID0-UID2, BCC0)

[01] * 82:9B:4C:80 (UID3-UID6)

[02] x D5 48 F0 00 (BCC1, INT, LOCK0-LOCK1)

[03] . 00:00:00:00 (OTP0-OTP3)

[04] x 89 13 D8 62 |…b|

[05] x 86 E6 C4 31 |…1|

[06] x D9 AE 59 41 |…YA|

[07] x AF 79 3D 7F |.y=.|

[08] . 00 00 00 00 |…|

[09] . 00 00 00 00 |…|

[0A] . 00 00 00 00 |…|

[0B] . 00 00 00 00 |…|

[0C] . 00 00 00 00 |…|

[0D] . 00 00 00 00 |…|

[0E] . 00 00 00 00 |…|

[0F] . 00 00 00 00 |…|

*:locked & blocked, x:locked,

+:blocked, .:un(b)locked

2

AFAIK you cannot clone a MIFARE ultralight. The M1 series of implants are intended for MIFARE Classic 1k (4 byte UID). Since your UID is 7 bytes, that leads me to believe it’s not cloneable.

Normally I would suggest you use another HF implant like the xNT or the xDF2 and approach the administrator to ask about enrolling your implant, but I don’t think they can emulate ultralight (at least not simply) and it’s unlikely the administrator would know enough/be willing to help you

1 Like