Writing a dump on a non magic mifare classic v1

hi i dumped a card an now i need to write the dump on a non magic card. i used proxmark3 easy. i read in another post that this is possible but i need the key file of the new non magic card. i found the new card keys always with proxmark but i don’t know how to use that. are you sure the uid is writable with new card keyfile?
tnx

1 Like

You’d use the hf mf restore command
https://siliconbased.us/pm3/ref/hf-mf-restore-help.php

Yours should look something like:
hf mf restore -f <Dump file of source card> -k <key file of target card>
And you may also need the --ka flag, I’m not totally certain

If it’s a non-magic card this won’t overwrite the UID or other non-rewritable info on the card

But, some systems don’t utilize the UID, so it may still work for you

2 Likes

i read of restore command for magic card after the uid mod, i was thinking hf mf cload. what do you think?

hf mf cload is specifically for magic gen1a cards, it will not work for a non-magic card

2 Likes

hf mf restore -f hf-mf-source card-dump.bin -k hf-mf-target card-key.bin
is this the correct syntax?

all files in the same dir were they was created, right?

the --ka flag is used at least with kay A?

tnx

are you trolling? you’ve been told multiple times now on multiple forums that you cannot change the uid of non magic cards.

that’s what magic cards do. change their UID. it’s not something normal cards can do.

if your desired form factor does not come as a magic variant you could potentially swap the chip inside the housing for a magic chip.

3 Likes

are you sure it was me? I read only yesterday my new tag….

yes in iceman rfid hacking discord

1 Like

yes yes I didn’t consider it and I forgot why but no one replied me… this forum seems very active, tnx fot the help

Well to be fair @Equipter responded to you on discord and there’s not much to add to his reply there.

1 Like

well I tried the command hf mf restore -f hf-mf-6E7BE4FB-dump.bin -k hf-mf-F059B2B1-key.bin and this was the result:
[usb] pm3 → hf mf restore -f hf-mf-6E7BE4FB-dump.bin -k hf-mf-F059B2B1-key.bin
[+] Loaded binary key file hf-mf-F059B2B1-key.bin
[=] Using key file hf-mf-F059B2B1-key.bin
[+] Loaded 1024 bytes from binary file hf-mf-6E7BE4FB-dump.bin

[=] blk | data | status
[=] -----±------------------------------------------------±---------------
[=] 0 | 6E 7B E4 FB 0A 88 04 00 C8 38 00 20 00 00 00 15 | ( fail ) key B
[=] 0 | 6E 7B E4 FB 0A 88 04 00 C8 38 00 20 00 00 00 15 | ( fail ) key A
[=] 1 | D5 00 26 88 26 88 69 88 00 00 00 00 00 00 00 00 | ( ok )
[=] 2 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 3 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 4 | 25 C5 49 56 BC 40 C6 FD A4 00 43 D7 E2 04 D2 E9 | ( ok )
[=] 5 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 | ( ok )
[=] 6 | E5 6B AB 30 00 00 00 00 00 00 00 00 00 00 00 03 | ( ok )
[=] 7 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 8 | 2E 18 2B 58 95 34 60 FC D7 ED CF 2B 20 93 53 4F | ( ok )
[=] 9 | 4F 7C 54 7C 5B DC 97 F1 40 E0 BB 67 6A 1F CD BF | ( ok )
[=] 10 | E5 6B AB 30 00 00 00 00 00 00 00 00 00 00 00 03 | ( ok )
[=] 11 | FF FF FF FF FF FF 08 77 8F 00 FF FF FF FF FF FF | ( ok )
[=] 12 | B0 FE FF 7F 4F 01 00 80 B0 FE FF 7F 0D F2 0D F2 | ( fail ) key B
[=] 12 | B0 FE FF 7F 4F 01 00 80 B0 FE FF 7F 0D F2 0D F2 | ( fail ) key A
[=] 13 | B0 FE FF 7F 4F 01 00 80 B0 FE FF 7F 0D F2 0D F2 | ( fail ) key B
[=] 13 | B0 FE FF 7F 4F 01 00 80 B0 FE FF 7F 0D F2 0D F2 | ( fail ) key A
[=] 14 | 31 01 13 70 69 C9 1C 6B 6B CC 18 57 39 F5 18 35 | ( fail ) key B
[=] 14 | 31 01 13 70 69 C9 1C 6B 6B CC 18 57 39 F5 18 35 | ( fail ) key A
[!] Strict ReadOnly Access Conditions on block 2 detected
[=] Skipping, use --force to override and write this data
[!] Strict ReadOnly Access Conditions on block 3 detected
[=] Skipping, use --force to override and write this data
[=] 15 | FF FF FF FF FF FF 37 8C 3C 00 FF FF FF FF FF FF | ( fail ) key B
[=] 15 | FF FF FF FF FF FF 37 8C 3C 00 FF FF FF FF FF FF | ( fail ) key A
[=] 16 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 17 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 18 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 19 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 21 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 22 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 23 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 24 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 25 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 26 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 27 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 28 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 29 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 30 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 31 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 32 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 33 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 34 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 35 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 36 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 37 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 38 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 39 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 41 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 42 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( fail ) key B
[=] 42 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( fail ) key A
[=] 43 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 44 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 45 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 46 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 47 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 48 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 49 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 50 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 51 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 52 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 53 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 54 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 55 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 56 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[#] Auth error
[=] 57 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( fail ) key B
[=] 57 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( fail ) key A
[=] 58 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 59 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 60 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 61 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 62 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 63 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] -----±------------------------------------------------±---------------

several unwritten blocks

then I tried hf mf restore -f hf-mf-6E7BE4FB-dump.bin --force

[usb] pm3 → hf mf restore -f hf-mf-6E7BE4FB-dump.bin --force
[+] Loaded binary key file hf-mf-F059B2B1-key.bin
[=] Using key file hf-mf-F059B2B1-key.bin
[+] Loaded 1024 bytes from binary file hf-mf-6E7BE4FB-dump.bin

[=] blk | data | status
[=] -----±------------------------------------------------±---------------
[=] 0 | 6E 7B E4 FB 0A 88 04 00 C8 38 00 20 00 00 00 15 | ( fail ) key B
[=] 0 | 6E 7B E4 FB 0A 88 04 00 C8 38 00 20 00 00 00 15 | ( fail ) key A
[=] 1 | D5 00 26 88 26 88 69 88 00 00 00 00 00 00 00 00 | ( ok )
[=] 2 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 3 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 4 | 25 C5 49 56 BC 40 C6 FD A4 00 43 D7 E2 04 D2 E9 | ( ok )
[=] 5 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 | ( ok )
[=] 6 | E5 6B AB 30 00 00 00 00 00 00 00 00 00 00 00 03 | ( ok )
[=] 7 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 8 | 2E 18 2B 58 95 34 60 FC D7 ED CF 2B 20 93 53 4F | ( ok )
[=] 9 | 4F 7C 54 7C 5B DC 97 F1 40 E0 BB 67 6A 1F CD BF | ( ok )
[=] 10 | E5 6B AB 30 00 00 00 00 00 00 00 00 00 00 00 03 | ( ok )
[=] 11 | FF FF FF FF FF FF 08 77 8F 00 FF FF FF FF FF FF | ( ok )
[=] 12 | B0 FE FF 7F 4F 01 00 80 B0 FE FF 7F 0D F2 0D F2 | ( fail ) key B
[=] 12 | B0 FE FF 7F 4F 01 00 80 B0 FE FF 7F 0D F2 0D F2 | ( fail ) key A
[=] 13 | B0 FE FF 7F 4F 01 00 80 B0 FE FF 7F 0D F2 0D F2 | ( fail ) key B
[=] 13 | B0 FE FF 7F 4F 01 00 80 B0 FE FF 7F 0D F2 0D F2 | ( fail ) key A
[=] 14 | 31 01 13 70 69 C9 1C 6B 6B CC 18 57 39 F5 18 35 | ( fail ) key B
[=] 14 | 31 01 13 70 69 C9 1C 6B 6B CC 18 57 39 F5 18 35 | ( fail ) key A
[!] Strict ReadOnly Access Conditions on block 2 detected
[!] Strict ReadOnly Access Conditions on block 3 detected
[=] 15 | FF FF FF FF FF FF 37 8C 3C 00 FF FF FF FF FF FF | ( fail ) key B
[=] 15 | FF FF FF FF FF FF 37 8C 3C 00 FF FF FF FF FF FF | ( fail ) key A
[=] 16 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 17 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 18 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 19 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 21 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 22 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 23 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 24 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 25 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 26 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 27 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 28 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 29 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 30 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 31 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 32 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 33 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 34 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 35 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 36 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 37 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 38 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 39 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 41 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 42 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 43 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 44 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 45 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 46 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 47 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 48 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 49 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 50 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 51 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 52 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 53 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 54 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 55 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 56 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 57 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 58 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 59 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 60 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 61 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 62 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 63 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] -----±------------------------------------------------±---------------

he wrote a few more but still no 12-13-14-15 and then the read-only indication always appears for sectors 2 and 3

to understand what happened to the tag I tried to extract the keys:
[usb] pm3 → hf mf auto
[=] MIFARE Classic EV1 card detected
[+] loaded 5 user keys
[+] loaded 61 keys from hardcoded default array
[=] running strategy 1
[=] …
[=] running strategy 2
[=] …
[+] target sector 0 key type A – found valid key [ A0A1A2A3A4A5 ]
[+] target sector 3 key type A – found valid key [ FFFFFFFFFFFF ]
[+] target sector 3 key type B – found valid key [ FFFFFFFFFFFF ]
[+] target sector 16 key type A – found valid key [ 5C8FF9990DA2 ]
[+] target sector 16 key type B – found valid key [ D01AFEEB890A ]
[+] target sector 17 key type A – found valid key [ 75CCB59C9BED ]
[+] target sector 17 key type B – found valid key [ 4B791BEA7BCC ]

[+] found keys:

[+] -----±----±-------------±–±-------------±—
[+] Sec | Blk | key A |res| key B |res
[+] -----±----±-------------±–±-------------±—
[+] 000 | 003 | A0A1A2A3A4A5 | D | 1CBA75CFBC6E | H
[+] 001 | 007 | 0D736F015171 | H | 1D08FB230855 | H
[+] 002 | 011 | 0EF60B9B14BF | H | 1E886ADCCFDE | H
[+] 003 | 015 | FFFFFFFFFFFF | D | FFFFFFFFFFFF | D
[+] 004 | 019 | 082B7C717D54 | H | 18B97CAE1700 | H
[+] 005 | 023 | 09B1F2CDD616 | H | 19011FBDCEDC | H
[+] 006 | 027 | 0ACAE50D1095 | H | 1AD19209DAB1 | H
[+] 007 | 031 | 0B6766D8C301 | H | 1BCE7DC59C13 | H
[+] 008 | 035 | 04741791C2EE | H | 14EFE6B19393 | H
[+] 009 | 039 | 059186E8B774 | H | 150943654CEF | H
[+] 010 | 043 | 06D9AAFB7BD9 | H | 168CC705FB17 | H
[+] 011 | 047 | 07E792E2F2BF | H | 17D665D2B75D | H
[+] 012 | 051 | 009FEFE27057 | H | 10E700DDD545 | H
[+] 013 | 055 | 019CE4CFB7C6 | H | 11181931EA0B | H
[+] 014 | 059 | 027EBE457FE8 | H | 12D7652D43EB | H
[+] 015 | 063 | 034C38AE543A | H | 13790B174632 | H
[+] 016 | 067 | 5C8FF9990DA2 | D | D01AFEEB890A | D ( * )
[+] 017 | 071 | 75CCB59C9BED | D | 4B791BEA7BCC | D ( * )

from the new dump it emerged that everything had been copied except block 0 of course and block 15 (not all of sector 3 for which the read-only indication appeared). I look at the dump in visual studio and notice these differences:
“SectorKeys”: {
“0”: {
“KeyA”: “A0A1A2A3A4A5”,
“KeyB”: “1CBA75CFBC6E”,
“AccessConditions”: “78778800”,
“AccessConditionsText”: {
“block0”: “read AB; write B”,
“block1”: “read AB; write B”,
“block2”: “read AB; write B”,
“block3”: “write A by B; read ACCESS by AB; write ACCESS by B; write B by B”,
“UserData”: “00”
}
},
“1”: {
“KeyA”: “0D736F015171”,
“KeyB”: “1D08FB230855”,
“AccessConditions”: “78778800”,
“AccessConditionsText”: {
“block4”: “read AB; write B”,
“block5”: “read AB; write B”,
“block6”: “read AB; write B”,
“block7”: “write A by B; read ACCESS by AB; write ACCESS by B; write B by B”,
“UserData”: “00”
}
},
“2”: {
“KeyA”: “0EF60B9B14BF”,
“KeyB”: “1E886ADCCFDE”,
“AccessConditions”: “08778F00”,
“AccessConditionsText”: {
“block8”: “read AB; write B; increment B; decrement transfer restore AB”,
“block9”: “read AB; write B; increment B; decrement transfer restore AB”,
“block10”: “read AB; write B; increment B; decrement transfer restore AB”,
“block11”: “write A by B; read ACCESS by AB; write ACCESS by B; write B by B”,
“UserData”: “00”
}
},
“3”: {
“KeyA”: “FFFFFFFFFFFF”,
“KeyB”: “FFFFFFFFFFFF”,
“AccessConditions”: “378C3C00”,
“AccessConditionsText”: {
“block12”: “read AB; decrement transfer restore AB”,
“block13”: “read AB; decrement transfer restore AB”,
“block14”: “read AB”,
“block15”: “read ACCESS by AB”,
“UserData”: “00”
}

what do you think happened? Tomorrow, however, I’ll try the tag and update you

@Aoxhwjfoavdlhsvfpzha

Can you post an hf mf info on the card you’re trying to write to?

[usb] pm3 → hf mf info

[=] — ISO14443-a Information ---------------------
[+] UID: F0 59 B2 B1
[+] ATQA: 00 04
[+] SAK: 08 [2]
[=]
[=] — Tag Signature
[=] IC signature public key name: NXP MIFARE Classic MFC1C14_x
[=] IC signature public key value: 044F6D3F294DEA5737F0F46FFEE88A356EED95695DD7E0C27A591E6F6F65962BAF
[=] Elliptic curve parameters: NID_secp128r1
[=] TAG IC Signature: C929B9BC5A4DC1DC33722B942AB9C4C3DBCD00BE2639149CACB94289479100F1
[+] Signature verification: successful

[=] — Keys Information
[+] loaded 2 user keys
[+] loaded 61 keys from hardcoded default array
[+] Sector 0 key A… A0A1A2A3A4A5

[=] — Fingerprint

[=] — Magic Tag Information
[=] <N/A>

[=] — PRNG Information
[+] Prng… hard

Cool, now an hf mf auto of that same card, please

i’m doing but i think it will be the same i posted before

now it seems the same, i’m at key 6A

It looks the same of yesterday

Give
hf mf restore -f hf-mf-6E7BE4FB-dump.bin -k hf-mf-F059B2B1-key.bin --ka
A try for me

1 Like

[usb] pm3 → hf mf restore -f hf-mf-6E7BE4FB-dump.bin -k hf-mf-F059B2B1-key.bin --ka
[+] Loaded binary key file hf-mf-F059B2B1-key.bin
[=] Using key file hf-mf-F059B2B1-key.bin
[+] Loaded 1024 bytes from binary file hf-mf-6E7BE4FB-dump.bin

[=] blk | data | status
[=] -----±------------------------------------------------±---------------
[=] 0 | 6E 7B E4 FB 0A 88 04 00 C8 38 00 20 00 00 00 15 | ( fail ) key B
[=] 0 | 6E 7B E4 FB 0A 88 04 00 C8 38 00 20 00 00 00 15 | ( fail ) key A
[=] 1 | D5 00 26 88 26 88 69 88 00 00 00 00 00 00 00 00 | ( ok )
[=] 2 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 3 | A0 A1 A2 A3 A4 A5 78 77 88 00 1C BA 75 CF BC 6E | ( ok )
[=] 4 | 25 C5 49 56 BC 40 C6 FD A4 00 43 D7 E2 04 D2 E9 | ( ok )
[=] 5 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 | ( ok )
[=] 6 | E5 6B AB 30 00 00 00 00 00 00 00 00 00 00 00 03 | ( ok )
[=] 7 | 0D 73 6F 01 51 71 78 77 88 00 1D 08 FB 23 08 55 | ( ok )
[=] 8 | 2E 18 2B 58 95 34 60 FC D7 ED CF 2B 20 93 53 4F | ( ok )
[=] 9 | 4F 7C 54 7C 5B DC 97 F1 40 E0 BB 67 6A 1F CD BF | ( ok )
[=] 10 | E5 6B AB 30 00 00 00 00 00 00 00 00 00 00 00 03 | ( ok )
[=] 11 | 0E F6 0B 9B 14 BF 08 77 8F 00 1E 88 6A DC CF DE | ( ok )
[=] 12 | B0 FE FF 7F 4F 01 00 80 B0 FE FF 7F 0D F2 0D F2 | ( fail ) key B
[=] 12 | B0 FE FF 7F 4F 01 00 80 B0 FE FF 7F 0D F2 0D F2 | ( fail ) key A
[=] 13 | B0 FE FF 7F 4F 01 00 80 B0 FE FF 7F 0D F2 0D F2 | ( fail ) key B
[=] 13 | B0 FE FF 7F 4F 01 00 80 B0 FE FF 7F 0D F2 0D F2 | ( fail ) key A
[=] 14 | 31 01 13 70 69 C9 1C 6B 6B CC 18 57 39 F5 18 35 | ( fail ) key B
[=] 14 | 31 01 13 70 69 C9 1C 6B 6B CC 18 57 39 F5 18 35 | ( fail ) key A
[!] Strict ReadOnly Access Conditions on block 2 detected
[=] Skipping, use --force to override and write this data
[!] Strict ReadOnly Access Conditions on block 3 detected
[=] Skipping, use --force to override and write this data
[=] 15 | 0F A4 DB 1A 8E F6 37 8C 3C 00 1F FE C7 19 8C BB | ( fail ) key B
[=] 15 | 0F A4 DB 1A 8E F6 37 8C 3C 00 1F FE C7 19 8C BB | ( fail ) key A
[=] 16 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 17 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 18 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 19 | 08 2B 7C 71 7D 54 78 77 88 00 18 B9 7C AE 17 00 | ( ok )
[=] 20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 21 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 22 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 23 | 09 B1 F2 CD D6 16 78 77 88 00 19 01 1F BD CE DC | ( ok )
[=] 24 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 25 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 26 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 27 | 0A CA E5 0D 10 95 78 77 88 00 1A D1 92 09 DA B1 | ( ok )
[=] 28 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 29 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 30 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 31 | 0B 67 66 D8 C3 01 78 77 88 00 1B CE 7D C5 9C 13 | ( ok )
[=] 32 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 33 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 34 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 35 | 04 74 17 91 C2 EE 78 77 88 00 14 EF E6 B1 93 93 | ( ok )
[=] 36 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 37 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 38 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 39 | 05 91 86 E8 B7 74 78 77 88 00 15 09 43 65 4C EF | ( ok )
[=] 40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 41 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 42 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 43 | 06 D9 AA FB 7B D9 78 77 88 00 16 8C C7 05 FB 17 | ( ok )
[=] 44 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 45 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 46 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 47 | 07 E7 92 E2 F2 BF 78 77 88 00 17 D6 65 D2 B7 5D | ( ok )
[=] 48 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 49 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 50 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 51 | 00 9F EF E2 70 57 78 77 88 00 10 E7 00 DD D5 45 | ( ok )
[=] 52 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 53 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 54 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 55 | 01 9C E4 CF B7 C6 78 77 88 00 11 18 19 31 EA 0B | ( ok )
[=] 56 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 57 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 58 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 59 | 02 7E BE 45 7F E8 78 77 88 00 12 D7 65 2D 43 EB | ( ok )
[=] 60 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 61 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 62 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 63 | 03 4C 38 AE 54 3A 78 77 88 00 13 79 0B 17 46 32 | ( ok )
[=] -----±------------------------------------------------±---------------

[?] try hf mf dump --ns to verify
[=] Done!