Writing a dump on a non magic mifare classic v1

sfsdfsdfds · May 18, 2024, 6:40pm

hi i dumped a card an now i need to write the dump on a non magic card. i used proxmark3 easy. i read in another post that this is possible but i need the key file of the new non magic card. i found the new card keys always with proxmark but i don’t know how to use that. are you sure the uid is writable with new card keyfile?
tnx

Aoxhwjfoavdlhsvfpzha · May 18, 2024, 6:56pm

You’d use the hf mf restore command
https://siliconbased.us/pm3/ref/hf-mf-restore-help.php

Yours should look something like:
hf mf restore -f <Dump file of source card> -k <key file of target card>
And you may also need the --ka flag, I’m not totally certain

If it’s a non-magic card this won’t overwrite the UID or other non-rewritable info on the card

But, some systems don’t utilize the UID, so it may still work for you

sfsdfsdfds · May 18, 2024, 7:01pm

i read of restore command for magic card after the uid mod, i was thinking hf mf cload. what do you think?

Aoxhwjfoavdlhsvfpzha · May 18, 2024, 7:05pm

hf mf cload is specifically for magic gen1a cards, it will not work for a non-magic card

sfsdfsdfds · May 18, 2024, 7:11pm

hf mf restore -f hf-mf-source card-dump.bin -k hf-mf-target card-key.bin
is this the correct syntax?

all files in the same dir were they was created, right?

the --ka flag is used at least with kay A?

tnx

Equipter · May 18, 2024, 8:24pm

are you trolling? you’ve been told multiple times now on multiple forums that you cannot change the uid of non magic cards.

that’s what magic cards do. change their UID. it’s not something normal cards can do.

if your desired form factor does not come as a magic variant you could potentially swap the chip inside the housing for a magic chip.

sfsdfsdfds · May 19, 2024, 6:31pm

are you sure it was me? I read only yesterday my new tag….

Equipter · May 19, 2024, 7:28pm

yes in iceman rfid hacking discord

sfsdfsdfds · May 19, 2024, 7:41pm

yes yes I didn’t consider it and I forgot why but no one replied me… this forum seems very active, tnx fot the help

hadoukenboy628 · May 19, 2024, 7:55pm

Well to be fair @Equipter responded to you on discord and there’s not much to add to his reply there.

sfsdfsdfds · May 19, 2024, 9:31pm

well I tried the command hf mf restore -f hf-mf-6E7BE4FB-dump.bin -k hf-mf-F059B2B1-key.bin and this was the result:
[usb] pm3 → hf mf restore -f hf-mf-6E7BE4FB-dump.bin -k hf-mf-F059B2B1-key.bin
[+] Loaded binary key file hf-mf-F059B2B1-key.bin
[=] Using key file hf-mf-F059B2B1-key.bin
[+] Loaded 1024 bytes from binary file hf-mf-6E7BE4FB-dump.bin

[=] blk | data | status
[=] -----±------------------------------------------------±---------------
[=] 0 | 6E 7B E4 FB 0A 88 04 00 C8 38 00 20 00 00 00 15 | ( fail ) key B
[=] 0 | 6E 7B E4 FB 0A 88 04 00 C8 38 00 20 00 00 00 15 | ( fail ) key A
[=] 1 | D5 00 26 88 26 88 69 88 00 00 00 00 00 00 00 00 | ( ok )
[=] 2 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 3 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 4 | 25 C5 49 56 BC 40 C6 FD A4 00 43 D7 E2 04 D2 E9 | ( ok )
[=] 5 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 | ( ok )
[=] 6 | E5 6B AB 30 00 00 00 00 00 00 00 00 00 00 00 03 | ( ok )
[=] 7 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 8 | 2E 18 2B 58 95 34 60 FC D7 ED CF 2B 20 93 53 4F | ( ok )
[=] 9 | 4F 7C 54 7C 5B DC 97 F1 40 E0 BB 67 6A 1F CD BF | ( ok )
[=] 10 | E5 6B AB 30 00 00 00 00 00 00 00 00 00 00 00 03 | ( ok )
[=] 11 | FF FF FF FF FF FF 08 77 8F 00 FF FF FF FF FF FF | ( ok )
[=] 12 | B0 FE FF 7F 4F 01 00 80 B0 FE FF 7F 0D F2 0D F2 | ( fail ) key B
[=] 12 | B0 FE FF 7F 4F 01 00 80 B0 FE FF 7F 0D F2 0D F2 | ( fail ) key A
[=] 13 | B0 FE FF 7F 4F 01 00 80 B0 FE FF 7F 0D F2 0D F2 | ( fail ) key B
[=] 13 | B0 FE FF 7F 4F 01 00 80 B0 FE FF 7F 0D F2 0D F2 | ( fail ) key A
[=] 14 | 31 01 13 70 69 C9 1C 6B 6B CC 18 57 39 F5 18 35 | ( fail ) key B
[=] 14 | 31 01 13 70 69 C9 1C 6B 6B CC 18 57 39 F5 18 35 | ( fail ) key A
[!] Strict ReadOnly Access Conditions on block 2 detected
[=] Skipping, use --force to override and write this data
[!] Strict ReadOnly Access Conditions on block 3 detected
[=] Skipping, use --force to override and write this data
[=] 15 | FF FF FF FF FF FF 37 8C 3C 00 FF FF FF FF FF FF | ( fail ) key B
[=] 15 | FF FF FF FF FF FF 37 8C 3C 00 FF FF FF FF FF FF | ( fail ) key A
[=] 16 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 17 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 18 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 19 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 21 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 22 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 23 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 24 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 25 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 26 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 27 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 28 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 29 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 30 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 31 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 32 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 33 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 34 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 35 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 36 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 37 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 38 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 39 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 41 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 42 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( fail ) key B
[=] 42 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( fail ) key A
[=] 43 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 44 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 45 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 46 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 47 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 48 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 49 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 50 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 51 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 52 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 53 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 54 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 55 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 56 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[#] Auth error
[=] 57 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( fail ) key B
[=] 57 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( fail ) key A
[=] 58 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 59 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 60 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 61 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 62 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 63 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] -----±------------------------------------------------±---------------

several unwritten blocks

then I tried hf mf restore -f hf-mf-6E7BE4FB-dump.bin --force

[usb] pm3 → hf mf restore -f hf-mf-6E7BE4FB-dump.bin --force
[+] Loaded binary key file hf-mf-F059B2B1-key.bin
[=] Using key file hf-mf-F059B2B1-key.bin
[+] Loaded 1024 bytes from binary file hf-mf-6E7BE4FB-dump.bin

[=] blk | data | status
[=] -----±------------------------------------------------±---------------
[=] 0 | 6E 7B E4 FB 0A 88 04 00 C8 38 00 20 00 00 00 15 | ( fail ) key B
[=] 0 | 6E 7B E4 FB 0A 88 04 00 C8 38 00 20 00 00 00 15 | ( fail ) key A
[=] 1 | D5 00 26 88 26 88 69 88 00 00 00 00 00 00 00 00 | ( ok )
[=] 2 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 3 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 4 | 25 C5 49 56 BC 40 C6 FD A4 00 43 D7 E2 04 D2 E9 | ( ok )
[=] 5 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 | ( ok )
[=] 6 | E5 6B AB 30 00 00 00 00 00 00 00 00 00 00 00 03 | ( ok )
[=] 7 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 8 | 2E 18 2B 58 95 34 60 FC D7 ED CF 2B 20 93 53 4F | ( ok )
[=] 9 | 4F 7C 54 7C 5B DC 97 F1 40 E0 BB 67 6A 1F CD BF | ( ok )
[=] 10 | E5 6B AB 30 00 00 00 00 00 00 00 00 00 00 00 03 | ( ok )
[=] 11 | FF FF FF FF FF FF 08 77 8F 00 FF FF FF FF FF FF | ( ok )
[=] 12 | B0 FE FF 7F 4F 01 00 80 B0 FE FF 7F 0D F2 0D F2 | ( fail ) key B
[=] 12 | B0 FE FF 7F 4F 01 00 80 B0 FE FF 7F 0D F2 0D F2 | ( fail ) key A
[=] 13 | B0 FE FF 7F 4F 01 00 80 B0 FE FF 7F 0D F2 0D F2 | ( fail ) key B
[=] 13 | B0 FE FF 7F 4F 01 00 80 B0 FE FF 7F 0D F2 0D F2 | ( fail ) key A
[=] 14 | 31 01 13 70 69 C9 1C 6B 6B CC 18 57 39 F5 18 35 | ( fail ) key B
[=] 14 | 31 01 13 70 69 C9 1C 6B 6B CC 18 57 39 F5 18 35 | ( fail ) key A
[!] Strict ReadOnly Access Conditions on block 2 detected
[!] Strict ReadOnly Access Conditions on block 3 detected
[=] 15 | FF FF FF FF FF FF 37 8C 3C 00 FF FF FF FF FF FF | ( fail ) key B
[=] 15 | FF FF FF FF FF FF 37 8C 3C 00 FF FF FF FF FF FF | ( fail ) key A
[=] 16 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 17 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 18 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 19 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 21 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 22 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 23 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 24 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 25 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 26 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 27 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 28 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 29 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 30 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 31 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 32 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 33 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 34 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 35 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 36 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 37 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 38 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 39 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 41 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 42 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 43 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 44 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 45 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 46 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 47 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 48 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 49 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 50 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 51 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 52 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 53 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 54 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 55 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 56 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 57 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 58 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 59 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] 60 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 61 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 62 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 63 | FF FF FF FF FF FF 78 77 88 00 FF FF FF FF FF FF | ( ok )
[=] -----±------------------------------------------------±---------------

he wrote a few more but still no 12-13-14-15 and then the read-only indication always appears for sectors 2 and 3

to understand what happened to the tag I tried to extract the keys:
[usb] pm3 → hf mf auto
[=] MIFARE Classic EV1 card detected
[+] loaded 5 user keys
[+] loaded 61 keys from hardcoded default array
[=] running strategy 1
[=] …
[=] running strategy 2
[=] …
[+] target sector 0 key type A – found valid key [ A0A1A2A3A4A5 ]
[+] target sector 3 key type A – found valid key [ FFFFFFFFFFFF ]
[+] target sector 3 key type B – found valid key [ FFFFFFFFFFFF ]
[+] target sector 16 key type A – found valid key [ 5C8FF9990DA2 ]
[+] target sector 16 key type B – found valid key [ D01AFEEB890A ]
[+] target sector 17 key type A – found valid key [ 75CCB59C9BED ]
[+] target sector 17 key type B – found valid key [ 4B791BEA7BCC ]

[+] found keys:

[+] -----±----±-------------±–±-------------±—
[+] Sec | Blk | key A |res| key B |res
[+] -----±----±-------------±–±-------------±—
[+] 000 | 003 | A0A1A2A3A4A5 | D | 1CBA75CFBC6E | H
[+] 001 | 007 | 0D736F015171 | H | 1D08FB230855 | H
[+] 002 | 011 | 0EF60B9B14BF | H | 1E886ADCCFDE | H
[+] 003 | 015 | FFFFFFFFFFFF | D | FFFFFFFFFFFF | D
[+] 004 | 019 | 082B7C717D54 | H | 18B97CAE1700 | H
[+] 005 | 023 | 09B1F2CDD616 | H | 19011FBDCEDC | H
[+] 006 | 027 | 0ACAE50D1095 | H | 1AD19209DAB1 | H
[+] 007 | 031 | 0B6766D8C301 | H | 1BCE7DC59C13 | H
[+] 008 | 035 | 04741791C2EE | H | 14EFE6B19393 | H
[+] 009 | 039 | 059186E8B774 | H | 150943654CEF | H
[+] 010 | 043 | 06D9AAFB7BD9 | H | 168CC705FB17 | H
[+] 011 | 047 | 07E792E2F2BF | H | 17D665D2B75D | H
[+] 012 | 051 | 009FEFE27057 | H | 10E700DDD545 | H
[+] 013 | 055 | 019CE4CFB7C6 | H | 11181931EA0B | H
[+] 014 | 059 | 027EBE457FE8 | H | 12D7652D43EB | H
[+] 015 | 063 | 034C38AE543A | H | 13790B174632 | H
[+] 016 | 067 | 5C8FF9990DA2 | D | D01AFEEB890A | D ( * )
[+] 017 | 071 | 75CCB59C9BED | D | 4B791BEA7BCC | D ( * )

from the new dump it emerged that everything had been copied except block 0 of course and block 15 (not all of sector 3 for which the read-only indication appeared). I look at the dump in visual studio and notice these differences:
“SectorKeys”: {
“0”: {
“KeyA”: “A0A1A2A3A4A5”,
“KeyB”: “1CBA75CFBC6E”,
“AccessConditions”: “78778800”,
“AccessConditionsText”: {
“block0”: “read AB; write B”,
“block1”: “read AB; write B”,
“block2”: “read AB; write B”,
“block3”: “write A by B; read ACCESS by AB; write ACCESS by B; write B by B”,
“UserData”: “00”
}
},
“1”: {
“KeyA”: “0D736F015171”,
“KeyB”: “1D08FB230855”,
“AccessConditions”: “78778800”,
“AccessConditionsText”: {
“block4”: “read AB; write B”,
“block5”: “read AB; write B”,
“block6”: “read AB; write B”,
“block7”: “write A by B; read ACCESS by AB; write ACCESS by B; write B by B”,
“UserData”: “00”
}
},
“2”: {
“KeyA”: “0EF60B9B14BF”,
“KeyB”: “1E886ADCCFDE”,
“AccessConditions”: “08778F00”,
“AccessConditionsText”: {
“block8”: “read AB; write B; increment B; decrement transfer restore AB”,
“block9”: “read AB; write B; increment B; decrement transfer restore AB”,
“block10”: “read AB; write B; increment B; decrement transfer restore AB”,
“block11”: “write A by B; read ACCESS by AB; write ACCESS by B; write B by B”,
“UserData”: “00”
}
},
“3”: {
“KeyA”: “FFFFFFFFFFFF”,
“KeyB”: “FFFFFFFFFFFF”,
“AccessConditions”: “378C3C00”,
“AccessConditionsText”: {
“block12”: “read AB; decrement transfer restore AB”,
“block13”: “read AB; decrement transfer restore AB”,
“block14”: “read AB”,
“block15”: “read ACCESS by AB”,
“UserData”: “00”
}

what do you think happened? Tomorrow, however, I’ll try the tag and update you

sfsdfsdfds · May 20, 2024, 7:23am

@Aoxhwjfoavdlhsvfpzha

Aoxhwjfoavdlhsvfpzha · May 20, 2024, 7:30am

Can you post an hf mf info on the card you’re trying to write to?

sfsdfsdfds · May 20, 2024, 7:46am

[usb] pm3 → hf mf info

[=] — ISO14443-a Information ---------------------
[+] UID: F0 59 B2 B1
[+] ATQA: 00 04
[+] SAK: 08 [2]
[=]
[=] — Tag Signature
[=] IC signature public key name: NXP MIFARE Classic MFC1C14_x
[=] IC signature public key value: 044F6D3F294DEA5737F0F46FFEE88A356EED95695DD7E0C27A591E6F6F65962BAF
[=] Elliptic curve parameters: NID_secp128r1
[=] TAG IC Signature: C929B9BC5A4DC1DC33722B942AB9C4C3DBCD00BE2639149CACB94289479100F1
[+] Signature verification: successful

[=] — Keys Information
[+] loaded 2 user keys
[+] loaded 61 keys from hardcoded default array
[+] Sector 0 key A… A0A1A2A3A4A5

[=] — Fingerprint

[=] — Magic Tag Information
[=] <N/A>

[=] — PRNG Information
[+] Prng… hard

Aoxhwjfoavdlhsvfpzha · May 20, 2024, 7:51am

Cool, now an hf mf auto of that same card, please

sfsdfsdfds · May 20, 2024, 7:59am

i’m doing but i think it will be the same i posted before

sfsdfsdfds · May 20, 2024, 8:03am

now it seems the same, i’m at key 6A

sfsdfsdfds · May 20, 2024, 8:16am

It looks the same of yesterday

Aoxhwjfoavdlhsvfpzha · May 20, 2024, 8:18am

Give
hf mf restore -f hf-mf-6E7BE4FB-dump.bin -k hf-mf-F059B2B1-key.bin --ka
A try for me

sfsdfsdfds · May 20, 2024, 8:21am

[usb] pm3 → hf mf restore -f hf-mf-6E7BE4FB-dump.bin -k hf-mf-F059B2B1-key.bin --ka
[+] Loaded binary key file hf-mf-F059B2B1-key.bin
[=] Using key file hf-mf-F059B2B1-key.bin
[+] Loaded 1024 bytes from binary file hf-mf-6E7BE4FB-dump.bin

[=] blk | data | status
[=] -----±------------------------------------------------±---------------
[=] 0 | 6E 7B E4 FB 0A 88 04 00 C8 38 00 20 00 00 00 15 | ( fail ) key B
[=] 0 | 6E 7B E4 FB 0A 88 04 00 C8 38 00 20 00 00 00 15 | ( fail ) key A
[=] 1 | D5 00 26 88 26 88 69 88 00 00 00 00 00 00 00 00 | ( ok )
[=] 2 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 3 | A0 A1 A2 A3 A4 A5 78 77 88 00 1C BA 75 CF BC 6E | ( ok )
[=] 4 | 25 C5 49 56 BC 40 C6 FD A4 00 43 D7 E2 04 D2 E9 | ( ok )
[=] 5 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 | ( ok )
[=] 6 | E5 6B AB 30 00 00 00 00 00 00 00 00 00 00 00 03 | ( ok )
[=] 7 | 0D 73 6F 01 51 71 78 77 88 00 1D 08 FB 23 08 55 | ( ok )
[=] 8 | 2E 18 2B 58 95 34 60 FC D7 ED CF 2B 20 93 53 4F | ( ok )
[=] 9 | 4F 7C 54 7C 5B DC 97 F1 40 E0 BB 67 6A 1F CD BF | ( ok )
[=] 10 | E5 6B AB 30 00 00 00 00 00 00 00 00 00 00 00 03 | ( ok )
[=] 11 | 0E F6 0B 9B 14 BF 08 77 8F 00 1E 88 6A DC CF DE | ( ok )
[=] 12 | B0 FE FF 7F 4F 01 00 80 B0 FE FF 7F 0D F2 0D F2 | ( fail ) key B
[=] 12 | B0 FE FF 7F 4F 01 00 80 B0 FE FF 7F 0D F2 0D F2 | ( fail ) key A
[=] 13 | B0 FE FF 7F 4F 01 00 80 B0 FE FF 7F 0D F2 0D F2 | ( fail ) key B
[=] 13 | B0 FE FF 7F 4F 01 00 80 B0 FE FF 7F 0D F2 0D F2 | ( fail ) key A
[=] 14 | 31 01 13 70 69 C9 1C 6B 6B CC 18 57 39 F5 18 35 | ( fail ) key B
[=] 14 | 31 01 13 70 69 C9 1C 6B 6B CC 18 57 39 F5 18 35 | ( fail ) key A
[!] Strict ReadOnly Access Conditions on block 2 detected
[=] Skipping, use --force to override and write this data
[!] Strict ReadOnly Access Conditions on block 3 detected
[=] Skipping, use --force to override and write this data
[=] 15 | 0F A4 DB 1A 8E F6 37 8C 3C 00 1F FE C7 19 8C BB | ( fail ) key B
[=] 15 | 0F A4 DB 1A 8E F6 37 8C 3C 00 1F FE C7 19 8C BB | ( fail ) key A
[=] 16 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 17 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 18 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 19 | 08 2B 7C 71 7D 54 78 77 88 00 18 B9 7C AE 17 00 | ( ok )
[=] 20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 21 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 22 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 23 | 09 B1 F2 CD D6 16 78 77 88 00 19 01 1F BD CE DC | ( ok )
[=] 24 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 25 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 26 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 27 | 0A CA E5 0D 10 95 78 77 88 00 1A D1 92 09 DA B1 | ( ok )
[=] 28 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 29 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 30 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 31 | 0B 67 66 D8 C3 01 78 77 88 00 1B CE 7D C5 9C 13 | ( ok )
[=] 32 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 33 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 34 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 35 | 04 74 17 91 C2 EE 78 77 88 00 14 EF E6 B1 93 93 | ( ok )
[=] 36 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 37 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 38 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 39 | 05 91 86 E8 B7 74 78 77 88 00 15 09 43 65 4C EF | ( ok )
[=] 40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 41 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 42 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 43 | 06 D9 AA FB 7B D9 78 77 88 00 16 8C C7 05 FB 17 | ( ok )
[=] 44 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 45 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 46 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 47 | 07 E7 92 E2 F2 BF 78 77 88 00 17 D6 65 D2 B7 5D | ( ok )
[=] 48 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 49 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 50 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 51 | 00 9F EF E2 70 57 78 77 88 00 10 E7 00 DD D5 45 | ( ok )
[=] 52 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 53 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 54 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 55 | 01 9C E4 CF B7 C6 78 77 88 00 11 18 19 31 EA 0B | ( ok )
[=] 56 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 57 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 58 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 59 | 02 7E BE 45 7F E8 78 77 88 00 12 D7 65 2D 43 EB | ( ok )
[=] 60 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 61 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 62 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ( ok )
[=] 63 | 03 4C 38 AE 54 3A 78 77 88 00 13 79 0B 17 46 32 | ( ok )
[=] -----±------------------------------------------------±---------------

[?] try hf mf dump --ns to verify
[=] Done!