Salto card clone to dUG4T

Support
1

I would like to write this Salto card to my dUG4T, however, I cannot read it using the command: hf mf autopwn ?

Can anyone help?

[-] Searching for ISO14443-A tag…
[+] UID: 06 A6 D4 CA FF 52 80
[+] ATQA: 00 44

+\] SAK: 00 \[2

[+] MANUFACTURER: NXP Semiconductors Germany
[+] Possible types:
[+] MIFARE Ultralight
[+] MIFARE Ultralight C
[+] MIFARE Ultralight EV1
[+] MIFARE Ultralight Nano
[+] MIFARE Ultralight AES
[+] MIFARE Hospitality
[+] NTAG 2xx
[=] proprietary non iso14443-4 card found, RATS not supported

[?] Hint: try hf mfu info

[+] Valid ISO 14443-A tag found

[=] — Tag Information --------------------------
[+] TYPE: MIFARE Ultralight C (MF0ULC)
[+] UID: 04 A5 D4 CA FF 52 80
[+] UID[0]: 04, NXP Semiconductors Germany
[+] BCC0: FD ( ok )
[+] BCC1: E7 ( ok )
[+] Internal: 48 ( default )
[+] Lock: 0F 00 - 0000111100000000
[+] OTP: 53 4C 54 4F - 01010011010011000101010001001111

=

[=] — Fingerprint
[+] SALTO Systems card

=

[+] — Known UL-C 3DES keys
[=] n/a

2

hf mf autopwn is only for Mifare Classic

1 Like
3

How could I store these in a bin file to write to the dUG4T?

4

you would need the

hf mfu dump -k {key}

command.

but you don’t have the key, I can generate the key for you if you’d like, but you cannot put it on your dUG4t, you can upload the bin but the UMC cannot handle customised key authentication for Ultralight C so you will not be able to use it on the Salto system.

2 Likes