Disney MagicBand puck conversion service is now available!

Ok, so some good news / bad news.

Bad news: It seems that all my old Key to the Kingdom cards have been thrown out.

Good news: I have active tickets that are on cards.

So Disney is pushing for all digital tickets sold through their website/app but you can still buy card tickets from some other outlets. These come on a card with a mag stripe, NFC, and a QR code on them. They also offer the Key to the Kingdom cards to anyone who has bought a ticket digitally online but doesn’t want to pay for a magicband. I bet these cards are the same. Looking at their website it seems the ticket cards have the same capabilities as the magicbands in key areas:

Here is a picture of the new Key to the Kingdom cards:

And here is a picture of the ticket cards:

And the back side with the QR code, serial #, and my name blanked out (this is still valid admission):

I did some candling to find the chip and it looks like other transit cards that @amal has done with a chip and obvious antenna lines attached and looping around the cards perimeter:

In fact I scanned it with NXP TagInfo and found it not to be a DESfire but a MiFare Ultralight:

So I plopped it on the proxmark and found this:

Also tried to dump the contents but it failed after block 21. Is this a possible encryption issue?

So unfortunately I can’t come through with sending you the card because I still need it until the fall. I can however do any more scans that would be of use. Also, is it possible that it is only looking at the UID and this could be cloned by the flexMN?? I might get a magic card and bring it with me on my next trip just to see if it will let me in my room.

3 Likes