1 Topic by la.fouine44 (edited by la.fouine44 2013-12-10 10:11:05)

  • From: FRANCE
  • Registered: 2013-08-30
  • Posts: 36

Topic: [Solved] Beginner in RFiD wants to crack Mifare Cards

Hi all,
I managed to read the beginning of a badge that I have and my keys A and B need to be able to access the rest. I use my Samsung Galaxy SII and software Mifare Classic Tool.
To find the key I think to buy reader/writer scl3711.
What software do I need? This player is good?
Thank you for your help.

PS: sorry for my writing, I'm French and I use a translator ...


What I got with my smartphone :

#### Basic Info ####
Tag UID : 062D538D
Target technology classes (Android)
Android.nfc.tech.MifareClassic
Android.nfc.tech.NfcA
Android.nfc.tech.NdeFormatable

#### Tag Info ####
Tag Type = MIFARE CLASSIC tag
Tag Size = MINI
Sector Count = 5
Block Count = 20
Sak = 9
Atqa = 0004

#### Tag Data ####
Sector 0
Block0: 062D538DF5890400C211000000000012
Block1: 6200488849884A884B88000000000000
Block2: 0
Block3: A0A1A2A3A4A5787788C1000000000000

Sector 1
No keys found (or dead sector)

Sector 2
No keys found (or dead sector)

Sector 3
No keys found (or dead sector)

Sector 4
No keys found (or dead sector)

French beginner in RFiD.
Maybe you can help me? Contact : la.fouine44@hotmail.fr
  • Registered: 2013-05-13
  • Posts: 19

Re: [Solved] Beginner in RFiD wants to crack Mifare Cards

Hi, using and scl3711 under ubuntu it should work great.

If you wish to recover all other sectors have seach a software called "MFOC",
after installing the libNfc library with this tool and the SCL3711 you should recover
all other data in less than a minute.
bye

3 Reply by la.fouine44 (edited by la.fouine44 2013-10-07 16:47:06)

  • From: FRANCE
  • Registered: 2013-08-30
  • Posts: 36

Re: [Solved] Beginner in RFiD wants to crack Mifare Cards

Thank you for the answer.
Is it necessary to use Ubuntu? I am currently on Windows and I do not really want to change (we are several to use the PC).
Can I still use the Scl3711 under windows? I can install software but not change OS.

French beginner in RFiD.
Maybe you can help me? Contact : la.fouine44@hotmail.fr
  • From: FRANCE
  • Registered: 2013-08-30
  • Posts: 36

Re: [Solved] Beginner in RFiD wants to crack Mifare Cards

Up!
Why is not MP on the forum? :'(

French beginner in RFiD.
Maybe you can help me? Contact : la.fouine44@hotmail.fr
  • Registered: 2013-05-13
  • Posts: 19

Re: [Solved] Beginner in RFiD wants to crack Mifare Cards

Unfortunately neither Mfoc nor SCL3711 works correctly under Windows (on my experience).

So I strongly suggest to use Ubuntu.. Using Ubuntu 13.04 and following the instruction here: https://gist.github.com/lmjabreu/5678039

you should have any problem.

bye

  • From: FRANCE
  • Registered: 2013-08-30
  • Posts: 36

Re: [Solved] Beginner in RFiD wants to crack Mifare Cards

Thank you for your reply d.giordan88. I don't want to install Ubuntu yet. What hardware and software do I use to read all sectors under Windows 7 64bit?

Thank you ;-)

French beginner in RFiD.
Maybe you can help me? Contact : la.fouine44@hotmail.fr
  • From: FRANCE
  • Registered: 2013-08-30
  • Posts: 36

Re: [Solved] Beginner in RFiD wants to crack Mifare Cards

Me again ^^
In doing research on Ubuntu I found that it was possible to use it live, using a USB stick. Do you think it might work to decrypt all sectors of my card?

Link to the USB key to use Ubuntu live : http://enventelibre.org/produit/framake … u-fr-remix

French beginner in RFiD.
Maybe you can help me? Contact : la.fouine44@hotmail.fr
  • From: FRANCE
  • Registered: 2013-08-30
  • Posts: 36

Re: [Solved] Beginner in RFiD wants to crack Mifare Cards

Otherwise I am ready to send my card to whoever will be interested and will be able to send me the card with the key A and B.
http://www.dinosa.es/mizip_llaves.jpg

French beginner in RFiD.
Maybe you can help me? Contact : la.fouine44@hotmail.fr

9 Reply by la.fouine44 (edited by la.fouine44 2014-04-03 09:35:59)

  • From: FRANCE
  • Registered: 2013-08-30
  • Posts: 36

Re: [Solved] Beginner in RFiD wants to crack Mifare Cards

la.fouine44 wrote:

Me again ^^
In doing research on Ubuntu I found that it was possible to use it live, using a USB stick. Do you think it might work to decrypt all sectors of my card?

Link to the USB key to use Ubuntu live : http://enventelibre.org/produit/framake … u-fr-remix

Hello everyone,
I left the NFC side but I'm back!

Nobody tried not work with Ubuntu on USB key (bootable Linux Version 12.10 LTS)?
I really do not want to change OS, but I really want to know what lies in my Mifare chip!
I wonder if there are chances to work before purchase ^ ^

French beginner in RFiD.
Maybe you can help me? Contact : la.fouine44@hotmail.fr
  • From: FRANCE
  • Registered: 2013-08-30
  • Posts: 36

Re: [Solved] Beginner in RFiD wants to crack Mifare Cards

Hello,
What do you think about that reader will do?

http://www.ebay.fr/itm/SCM-SCL3711-Toke … 3cd808a652

Otherwise it really is much more expensive and I do not want to put too much because I'm not sure I get there ... Thank you.

French beginner in RFiD.
Maybe you can help me? Contact : la.fouine44@hotmail.fr
  • From: FRANCE
  • Registered: 2013-08-30
  • Posts: 36

Re: [Solved] Beginner in RFiD wants to crack Mifare Cards

Or : http://www.javacardsdk.com/Index.aspx?p … 0&p5=1

French beginner in RFiD.
Maybe you can help me? Contact : la.fouine44@hotmail.fr
  • From: FRANCE
  • Registered: 2013-08-30
  • Posts: 36

Re: [Solved] Beginner in RFiD wants to crack Mifare Cards

d.giordan88 wrote:

Unfortunately neither Mfoc nor SCL3711 works correctly under Windows (on my experience).

So I strongly suggest to use Ubuntu.. Using Ubuntu 13.04 and following the instruction here: https://gist.github.com/lmjabreu/5678039

you should have any problem.

bye

Hello,
Can I use an other version of Ubuntu? As version 14.04?
Thank you ;-)

French beginner in RFiD.
Maybe you can help me? Contact : la.fouine44@hotmail.fr
  • From: FRANCE
  • Registered: 2013-08-30
  • Posts: 36

Re: [Solved] Beginner in RFiD wants to crack Mifare Cards

I found how to make a "live cd" I must try.
Then I'll have to find a SCL3711 cheaply.

French beginner in RFiD.
Maybe you can help me? Contact : la.fouine44@hotmail.fr
  • From: FRANCE
  • Registered: 2013-08-30
  • Posts: 36

Re: [Solved] Beginner in RFiD wants to crack Mifare Cards

I just created my "live CD" on USB. I installed the latest version of Ubuntu (14.04 Trusty Tahr "Unity").
It remains for me to buy the reader...

French beginner in RFiD.
Maybe you can help me? Contact : la.fouine44@hotmail.fr
  • From: FRANCE
  • Registered: 2013-08-30
  • Posts: 36

Re: [Solved] Beginner in RFiD wants to crack Mifare Cards

My Linux works well. It is now that I bought my reader.

French beginner in RFiD.
Maybe you can help me? Contact : la.fouine44@hotmail.fr
  • From: FRANCE
  • Registered: 2013-08-30
  • Posts: 36

Re: [Solved] Beginner in RFiD wants to crack Mifare Cards

Who knows this website? Is it reliable?
http://www.javacardsdk.com/Index.aspx?p … 0&p5=1
Because I still have not placed my order ... ^^

Thank you!

French beginner in RFiD.
Maybe you can help me? Contact : la.fouine44@hotmail.fr
  • Registered: 2014-06-20
  • Posts: 1

Re: [Solved] Beginner in RFiD wants to crack Mifare Cards

Salut La.fouine44,


As tu pu avancé sur tes recherches ?
Je cherche également un reader/writer nfc usb mais je ne sais pas lequel prendre.

Merci

  • From: FRANCE
  • Registered: 2013-08-30
  • Posts: 36

Re: [Solved] Beginner in RFiD wants to crack Mifare Cards

J'ai prit un SCL3711 mais je n'ai pas encore essayé de le faire fonctionner ;-)

French beginner in RFiD.
Maybe you can help me? Contact : la.fouine44@hotmail.fr
  • From: FRANCE
  • Registered: 2013-08-30
  • Posts: 36

Re: [Solved] Beginner in RFiD wants to crack Mifare Cards

Should I install the drivers of the SCL3711 before starting to follow the link?
https://gist.github.com/lmjabreu/5678039

Can I use another version of ubuntu? Because the version 13.04 is very slow...

French beginner in RFiD.
Maybe you can help me? Contact : la.fouine44@hotmail.fr
  • From: FRANCE
  • Registered: 2013-08-30
  • Posts: 36

Re: [Solved] Beginner in RFiD wants to crack Mifare Cards

Hello,
I have not gone too far lately ...
I would like to know if it is possible to run MFOC on a Netbook?

Acer Aspire One ZG5
- Intel Atom N270 1.6 GHz
- 1 Go RAM
- SSD 16 Go
- Ecran 9" LCD

Thank you in advance

French beginner in RFiD.
Maybe you can help me? Contact : la.fouine44@hotmail.fr
  • Registered: 2014-11-28
  • Posts: 3

Re: [Solved] Beginner in RFiD wants to crack Mifare Cards

Salut

Je ne sais pas où tu en es, mais à mon avis n'importe quel systeme avec un processeur classique ( genre pas smartphone ou truc trop exotique ) et un port usb pourra faire tourner mfoc.

Pour ma part, j'avais un badge pour rentrer dans le batiment de ma boite et un smartphone galaxy note 2 avec lecteur nfc.

Avec mfclassic que tu trouves sur le play store ( et que tu as l'air d'avoir utilisé dans tes explications ), j'ai vu que c'était un mifare classic, donc obsolète.
Du coup j'ai acheté un lecteur de cartes nfc ACR122U sur amazon que j'ai branché sur un pc sous linux, j'ai installé mfoc et j'ai posé le badge dessus.

mfoc -O dump.mfd m'a trouvé les clefs que l'appli du galaxy ne trouvait pas, du coup je les y ai ajoutées à la main. J'ai donc pu faire des dumps complets du badge.

Pour la petite histoire il a après fallu décoder le contenu des données qui sont "brutes", mais au final j'ai réussi et cela démontre à quel point utiliser encore cette technologie dans des stratégies de sécurité est irresponsable.

Bon courage et n'hésite pas.


=================== GOOGLE TRADUCTION ===============


hi

I do not know where you are , but I think any system with a standard processor (like smartphone or not too exotic stuff ) and a USB port can rotate MFOC .

For my part, I had a badge to enter the building of my box and Galaxy Note 2 smartphone with NFC reader.

With mfclassic you find the play store (and you seem to have used in your explanation ) , I saw that it was a mifare classic, thus obsolete .
So I bought a card reader nfc ACR122U on amazon I connected on a PC with Linux , I installed MFOC and I put the badge on it.

MFOC -O dump.mfd found me the keys that the app did not find the galaxy , so I added them there by hand. I was able to complete dumps of the badge.

For the record after he took decode the data content that are "raw" , but in the end I managed and it shows how even use this technology in security policy is irresponsible.

Good luck and do not hesitate.

  • From: FRANCE
  • Registered: 2013-08-30
  • Posts: 36

Re: [Solved] Beginner in RFiD wants to crack Mifare Cards

Salut mdenavac, Je suis de Nantes.
Tu me redonnes espoir. En ce moment j'ai laissé de côté ce projet. Sa te dérange si on discute un peu par mail? Tu trouveras mon adresse dans ma signature.
Merci.
Antoine.

Hello mdenavac, I am of Nantes.
You brings new hope. At the moment I have left out the project. His mind if we talk a little mail ? You can find my address in my signature .
Thank you.
Antoine.

French beginner in RFiD.
Maybe you can help me? Contact : la.fouine44@hotmail.fr
  • From: FRANCE
  • Registered: 2013-08-30
  • Posts: 36

Re: [Solved] Beginner in RFiD wants to crack Mifare Cards

Thank you to Mdenavac, without him I would not have come this far!
Unfortunately, it seems that my card is not compatible with Mfoc :

root@it:~/mfoc# mfoc -O mycard.mfd
ISO/IEC 14443A (106 kbps) target:
    ATQA (SENS_RES): 00  04 
* UID size: single
* bit frame anticollision supported
       UID (NFCID1): 06  2d  53  8d 
      SAK (SEL_RES): 09 
* Not compliant with ISO/IEC 14443-4
* Not compliant with ISO/IEC 18092

Fingerprinting based on MIFARE type Identification Procedure:
* MIFARE Mini 0.3K
* SmartMX with MIFARE 1K emulation
Other possible matches based on ATQA & SAK values:

Try to authenticate to all sectors with default keys...
Symbols: '.' no key found, '/' A key found, '\' B key found, 'x' both keys found
nfc_initiator_mifare_cmd: Timeout
[Key: ffffffffffff] -> [root@it:~/mfoc#


Un grand merci à Mdenavac, sans lui je n'aurais jamais été aussi loin!
malheureusement il semble que ma carte ne soit pas compatible avec Mfoc.

French beginner in RFiD.
Maybe you can help me? Contact : la.fouine44@hotmail.fr
  • Registered: 2014-06-21
  • Posts: 2

Re: [Solved] Beginner in RFiD wants to crack Mifare Cards

la.fouine44 wrote:

Thank you to Mdenavac, without him I would not have come this far!
Unfortunately, it seems that my card is not compatible with Mfoc :

root@it:~/mfoc# mfoc -O mycard.mfd
ISO/IEC 14443A (106 kbps) target:
    ATQA (SENS_RES): 00  04 
* UID size: single
* bit frame anticollision supported
       UID (NFCID1): 06  2d  53  8d 
      SAK (SEL_RES): 09 
* Not compliant with ISO/IEC 14443-4
* Not compliant with ISO/IEC 18092

Fingerprinting based on MIFARE type Identification Procedure:
* MIFARE Mini 0.3K
* SmartMX with MIFARE 1K emulation
Other possible matches based on ATQA & SAK values:

Try to authenticate to all sectors with default keys...
Symbols: '.' no key found, '/' A key found, '\' B key found, 'x' both keys found
nfc_initiator_mifare_cmd: Timeout
[Key: ffffffffffff] -> [root@it:~/mfoc#


Un grand merci à Mdenavac, sans lui je n'aurais jamais été aussi loin!
malheureusement il semble que ma carte ne soit pas compatible avec Mfoc.

I want give you just one gift smile

KEY A

a0a1a2a3a4a5
0F3F09A88FC8
AD589ABA9402
E45F12222A24
3757E4A242BD

KEY B

b4c132439eef
A2A1827E8BAC
206A9FD361CC
F9C0155B0523
E39E210A7E70

  • From: FRANCE
  • Registered: 2013-08-30
  • Posts: 36

Re: [Solved] Beginner in RFiD wants to crack Mifare Cards

Thank you for the keys Marcus81.
I will also try to apply this patch on MFOC : https://code.google.com/p/mfoc/issues/detail?id=12

French beginner in RFiD.
Maybe you can help me? Contact : la.fouine44@hotmail.fr