Proxmark3 community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

Announcement

Time changes and with it the technology
Proxmark3 @ discord

Users of this forum, please be aware that information stored on this site is not private.

#1 2014-05-22 10:38:35

hheile
Contributor
Registered: 2014-03-03
Posts: 35

Dumping Ultralight / Ultralight to a file

Hi Forum-menbers,

today i play around with an ultralight card.

proxmark3> hf 14a read
ATQA : 44 00         
UID : 04 55 55 55 55 2b 80           
SAK : 00 [2]         
TYPE : NXP MIFARE Ultralight | Ultralight C         
proprietary non iso14443a-4 card found, RATS not supported

so reading is possible too:
proxmark3> hf mf urdcard
Attempting to Read Ultralight...           
#db# READ CARD FINISHED                 
isOk:01         
Block 00:04 55 55 e0           
Block 01:55 55 55 80           
Block 02:d3 48 00 00           
Block 03:00 00 00 00  [0]         
Block 04:9a e4 4c ba  [0]         
Block 05:f7 52 00 00  [0]         
Block 06:01 00 00 00  [0]         
Block 07:01 d0 00 22  [0]         
Block 08:00 00 00 00  [0]         
Block 09:00 00 00 00  [0]         
Block 0a:00 00 00 00  [0]         
Block 0b:00 00 00 00  [0]         
Block 0c:00 00 00 00  [0]         
Block 0d:00 00 00 00  [0]         
Block 0e:00 00 00 00  [0]         
Block 0f:00 00 00 00  [0]

so, how can i dump this informations directly to a file for later use?
thanks to all

hheile

Offline

#2 2014-05-22 13:22:04

midnitesnake
Contributor
Registered: 2012-05-11
Posts: 151

Re: Dumping Ultralight / Ultralight to a file

I believe Pentura_Prox has slightly improved the code here: https://github.com/PenturaLabs/proxmark3/tree/Ultralight-Mod

the command will be 'hf mfu udump'

think their still testing/playing around with the code until they issue a pull-request into the main repository.

Last edited by midnitesnake (2014-05-22 13:23:55)

Offline

#3 2014-05-22 13:30:43

pentura_prox
Contributor
From: England,UK
Registered: 2014-03-11
Posts: 22
Website

Re: Dumping Ultralight / Ultralight to a file

You are correct.

We are still testing the code (Myself, Asper and Iceman), just received some UID Changeable UC cards, and everything appears to work ok.

At the moment there is a fair bit of duplicated code in the client, and I have not really experimented with the Authentication and protected blocks/pages, though the authentication routine does appear to work - currently development has stopped there.

Once I have some more free time, I'll pick this up again.  At the moment I'm very busy.

Offline

#4 2014-05-22 14:37:49

hheile
Contributor
Registered: 2014-03-03
Posts: 35

Re: Dumping Ultralight / Ultralight to a file

okay sounds wonderful for me.
i have a lot of cards here, some of them are absolutly unknown (public transport, i believe basic card) and Parking (no idea, not recognized by proxmark). i believe its skydata

Offline

#5 2014-08-27 10:43:37

iceman
Administrator
Registered: 2013-04-25
Posts: 9,495
Website

Re: Dumping Ultralight / Ultralight to a file

I added some small stuff to the "hf mfu urdcard"  to make the data bit clearer.

pm3 --> hf mfu urdcard
Attempting to Read Ultralight...
#db# Pages 16
#db# Pages read 16
isOk:01
         ID :01 02 03 05 06 07 08
       BCC  :04 11
   Internal :22
       Lock :00 00
 OneTimePad :00 00 00 00

Block 00:01 02 03 04
Block 01:05 06 07 08
Block 02:11 22 00 00
Block 03:00 00 00 00  [0]
Block 04:00 00 00 00  [0]
Block 05:00 00 00 00  [0]
Block 06:00 00 00 00  [0]
Block 07:00 00 00 00  [0]
Block 08:00 00 00 00  [0]
Block 09:00 00 00 00  [0]
Block 0a:00 00 00 00  [0]
Block 0b:00 00 00 00  [0]
Block 0c:00 00 00 00  [0]
Block 0d:00 00 00 00  [0]
Block 0e:00 00 00 00  [0]
Block 0f:00 00 00 00  [0]

Who wants to verify & commit?

Offline

#6 2014-08-27 10:47:14

iceman
Administrator
Registered: 2013-04-25
Posts: 9,495
Website

Re: Dumping Ultralight / Ultralight to a file

I just saw a problem here,  since I have a merged build from Pentura_prox and Midnitesnake,   my codebase is not the official one so "hf mfu" doesnt exits there yet...    However it should be kind of same.

Offline

#7 2014-08-27 12:33:21

iceman
Administrator
Registered: 2013-04-25
Posts: 9,495
Website

Re: Dumping Ultralight / Ultralight to a file

Added some crc checks aswell.

pm3 --> hf mfu urdcard
Attempting to Read Ultralight...
#db# Pages 16
#db# Pages read 16
isOk:01
        UID :04 01 02 05 06 07 08
       BCC0 :8f - Ok
       BCC1 :0c - Ok
   Internal :22
       Lock :00 00
 OneTimePad :00 00 00 00

Block 00:04 01 02 8f
Block 01:05 06 07 08
Block 02:0c 22 00 00
Block 03:00 00 00 00  [0]
Block 04:00 00 00 00  [0]
Block 05:00 00 00 00  [0]
Block 06:00 00 00 00  [0]
Block 07:00 00 00 00  [0]
Block 08:00 00 00 00  [0]
Block 09:00 00 00 00  [0]
Block 0a:00 00 00 00  [0]
Block 0b:00 00 00 00  [0]
Block 0c:00 00 00 00  [0]
Block 0d:00 00 00 00  [0]
Block 0e:00 00 00 00  [0]
Block 0f:00 00 00 00  [0]

Offline

#8 2015-01-26 22:42:26

iceman
Administrator
Registered: 2013-04-25
Posts: 9,495
Website

Re: Dumping Ultralight / Ultralight to a file

@hheile   its all in the PM3 master now. You can test it out.

Offline

Board footer

Powered by FluxBB