Salto card clone to dUG4T

Support
1

I would like to write this Salto card to my dUG4T, however, I cannot read it using the command: hf mf autopwn ?

Can anyone help?

[-] Searching for ISO14443-A tag…
[+] UID: 06 A6 D4 CA FF 52 80
[+] ATQA: 00 44

+\] SAK: 00 \[2

[+] MANUFACTURER: NXP Semiconductors Germany
[+] Possible types:
[+] MIFARE Ultralight
[+] MIFARE Ultralight C
[+] MIFARE Ultralight EV1
[+] MIFARE Ultralight Nano
[+] MIFARE Ultralight AES
[+] MIFARE Hospitality
[+] NTAG 2xx
[=] proprietary non iso14443-4 card found, RATS not supported

[?] Hint: try hf mfu info

[+] Valid ISO 14443-A tag found

[=] — Tag Information --------------------------
[+] TYPE: MIFARE Ultralight C (MF0ULC)
[+] UID: 04 A5 D4 CA FF 52 80
[+] UID[0]: 04, NXP Semiconductors Germany
[+] BCC0: FD ( ok )
[+] BCC1: E7 ( ok )
[+] Internal: 48 ( default )
[+] Lock: 0F 00 - 0000111100000000
[+] OTP: 53 4C 54 4F - 01010011010011000101010001001111

=

[=] — Fingerprint
[+] SALTO Systems card

=

[+] — Known UL-C 3DES keys
[=] n/a

2

hf mf autopwn is only for Mifare Classic

1 Like
3

How could I store these in a bin file to write to the dUG4T?

4

you would need the

hf mfu dump -k {key}

command.

but you don’t have the key, I can generate the key for you if you’d like, but you cannot put it on your dUG4t, you can upload the bin but the UMC cannot handle customised key authentication for Ultralight C so you will not be able to use it on the Salto system.

2 Likes
Ultralight C cloning
5

Is this the issue I was encountering? If so, it may be solved if the dUG4t uses a newer UMC version since you said it worked for you with the newer chip version.

1 Like
6

The problem is that I don’t really know exactly how to clone this type of card on my dUG4t.

Can someone explain this to me?

hf mfu dump -k already works, and writing back works too, but suppose it doesn’t work on the dUG4t yet, what else needs to be done?

7

nothing can be done, the password emulation simply does not work on the UMC.

8

I think I got a fluke with that because I can’t recreate it on saflok readers. I have my ul USCUID that work fine but my UMC doesn’t.

1 Like