Proxmark3 community

JohnDoePM

Contributor

Registered: 2018-07-08

Posts: 49

Unknown MFC ATQA 00 48 SAK 20

Dear community,

I have a to me unknown mifare classic at hand:

[usb] pm3 --> hf 14a info                     

[+]  UID: *4 *5 *2 *2 ** *0 *0 
[+] ATQA: 00 48
[+]  SAK: 20 [1]
[+] MANUFACTURER:    NXP Semiconductors Germany
[+] Possible types:
[+]    MIFARE Plus EV1 2K/4K CL2 in SL3
[+]    MIFARE Plus S 2K/4K CL2 in SL3
[+]    MIFARE Plus X 2K/4K CL2 in SL3
[+]    MIFARE Plus SE 1K CL2
[+]    NTAG 4xx
[=] -------------------------- ATS --------------------------
[+] ATS: 0E 78 77 91 02 4D 54 43 4F 53 73 02 05 04 [ f1 00 ]
[=]      0e...............  TL    length is 14 bytes
[=]         78............  T0    TA1 is present, TB1 is present, TC1 is present, FSCI is 8 (FSC = 256)
[=]            77.........  TA1   different divisors are supported, DR: [2, 4, 8], DS: [2, 4, 8]
[=]               91......  TB1   SFGI = 1 (SFGT = 8192/fc), FWI = 9 (FWT = 2097152/fc)
[=]                  02...  TC1   NAD is NOT supported, CID is supported

[=] -------------------- Historical bytes --------------------
   	00: 4d 54 43 4f 53 73 02 05 04                      |MTCOSs...

Has anybody heard of that type? Is it possible to dump that card? I will try to get some sniffs in the next time.
Regards

JD.

iceman

Administrator

Registered: 2013-04-25

Posts: 9,507

Website

Re: Unknown MFC ATQA 00 48 SAK 20

tried the  HF MFP commands?

JohnDoePM

Contributor

Registered: 2018-07-08

Posts: 49

Re: Unknown MFC ATQA 00 48 SAK 20

Hey iceman,

thats 's the result of hf mfp info:

[!!] ? iso14443-4 framing error. Card send  0 must be  a
[=] --- Fingerprint
[=]            SAK: MIFARE Plus SL0/SL3 or MIFARE DESFire
[!!] ? iso14443-4 framing error. Card send  0 must be  a
[=] Send copy to iceman of this command output!
[=] data: 00 00 00 
[=]         result: MIFARE Plus SL0/SL3

Does that mean that it 's a Desfire?
Best regards,

JD.

iceman

Administrator

Registered: 2013-04-25

Posts: 9,507

Website

Re: Unknown MFC ATQA 00 48 SAK 20

yeah, try the desfire commands instead

JohnDoePM

Contributor

Registered: 2018-07-08

Posts: 49

Re: Unknown MFC ATQA 00 48 SAK 20

Hey iceman,

I've tried:

[usb] pm3 --> hf mfdes info
[!] ⚠️  Command unsuccessful
[usb] pm3 --> 

So I'm still not sure about the card type.

iceman

Administrator

Registered: 2013-04-25

Posts: 9,507

Website

Re: Unknown MFC ATQA 00 48 SAK 20

If you google MTCOSs,   you find ref to emv etc,  looks like you will need to know some apdu to talk with it.