Proxmark 3 MIFARE Classic 1K Cloning Issue

Support
1

Tag that I want to clone

[usb] pm3 → hf search
[-] Searching for ISO14443-A tag…
[=] ---------- ISO14443-A Information ----------
[+] UID: 25 DC FC CD ( ONUID, re-used )
[+] ATQA: 00 04
[+] SAK: 08 [2]
[+] Possible types:
[+] MIFARE Classic 1K
[=] proprietary non iso14443-4 card found, RATS not supported
[=]
[+] Prng detection… weak

[?] Hint: try hf mf commands

Blank tag that I bought from Amazon

[+] Valid ISO 14443-A tag found

[/] Searching for ISO14443-A tag…
[=] ---------- ISO14443-A Information ----------
[+] UID: 04 C4 6E 67 BC 2A 81 ( double )
[+] ATQA: 00 44
[+] SAK: 00 [2]
[+] MANUFACTURER: NXP Semiconductors Germany
[+] Possible types:
[+] MIFARE Ultralight
[+] MIFARE Ultralight C
[+] MIFARE Ultralight EV1
[+] MIFARE Ultralight Nano
[+] MIFARE Ultralight AES
[+] MIFARE Hospitality
[+] NTAG 2xx
[=] proprietary non iso14443-4 card found, RATS not supported
[=]

[?] Hint: try hf mfu info

[+] Valid ISO 14443-A tag found

I tried follow the help but I ran into this issue

[usb] pm3 → hf mf csetuid -w -u 25DCFCCD --atqa 0004 --sak 08
[#] wupC1 error
[=] couldn’t get old data. Will write over the last bytes of block 0
[+] new block 0… 25DCFCCDC80804000000000000000000
[#] wupC1 error
[!!] Can’t set UID. error -1

I tried to follow this video - https://www.youtube.com/watch?v=4NTus5ZpybM but it didn’t work

[usb] pm3 → hf mf csetuid 25DCFCCD 0004 08
hf mf csetuid: unexpected argument “25DCFCCD”
hf mf csetuid: unexpected argument “0004”
hf mf csetuid: unexpected argument “08”
[!] Try ‘hf mf csetuid --help’ for more information.

Any help would be appreciated! Thank you :slight_smile:

1 Like
2

The big problem is that the card you bought on amazon isn’t the correct chip:

You need a Mifare Classic. Additionally, this doesn’t appear to be a magic card anyways

I would recommend picking up a Gen1a Mifare Classic blank, or perhaps a test card pack

Is the correct format for the command, the other one is outdated. However, this command will only change the UID, and you may also need/wish to copy over the rest of the contents of the chip depending on the system

5 Likes
3

4 byte UID vs 7 byte UID …

3 Likes
4

Thank you! I will look into getting the right card. At the time, I thought the blank would cover most of the MF card types lol.

1 Like
5

Lots to learn but it’s exciting :slight_smile:

3 Likes
6

Did you ever get your card copied? If so what one did you go for off amazon?

7

It is coming in the mail right now. I don’t subscribe to Amazon prime so it takes a while lol

I will post an update once I get it!

8

what was it that you purchased off amazon?

9

I got this off of amazon, it was 4 bit.

https://www.amazon.com/dp/B081C3F9X2/?coliid=I3U5MF5JPS6NEL&colid=27SIPKHE36V3A&psc=1&ref_=list_c_wl_lv_ov_lig_dp_it

I tried to copy my card over to the blank and it didn’t work. I tried to dump and load it but it was having an error.

[usb] pm3 → hf mf cload -f hf-mf-25DCFCCD-dump-001.bin
[+] Loaded 1024 bytes from binary file hf-mf-25DCFCCD-dump-001.bin
[=] Copying to magic gen1a card
[=] .[#] wupC1 error
[!] Can’t set magic card block: 0
[usb] pm3 → hf mf restore
[-] Error - can’t find hf-mf-A1D32AA3-key.bin

Fortunately my card reader software can read a card and then add it to the database. So there was no need for me to copy an existing fob.

1 Like
10

That’s good to hear

If you were wondering why cload didn’t work, those don’t appear to be magic tags. You can double check by running hf mf info and seeing if it shows any magic capabilities

As for restore, you have to supply a dump file with the -f flag, otherwise I think it tries to find one that matches your current tag, which it couldn’t find. It also wouldn’t clone the UID since the target tag doesn’t seem to be magic

11

[=] — ISO14443-a Information ---------------------
[+] UID: 91 D5 2A A3
[+] ATQA: 00 04
[+] SAK: 08 [2]

[=] — Keys Information
[+] loaded 2 user keys
[+] loaded 61 hardcoded keys
[+] Sector 0 key A… FFFFFFFFFFFF
[+] Sector 0 key B… FFFFFFFFFFFF
[+] Sector 1 key A… FFFFFFFFFFFF
[+] Backdoor key… A31667A8CEC1
[+] Block 0… 91D52AA3CD08040004E70AABCC297098 | …)p.

[=] — Fingerprint
[+] Fudan FM11RF08S **98

[=] — Magic Tag Information
[=] <n/a>

[=] — PRNG Information
[+] Prng… weak
[+] Static enc nonce… yes

It looks like the blank that I got from Amazon (again) does not have magic card capabilities. But the blank does work for smart door lock. =)

1 Like