Research, development and trades concerning the powerful Proxmark3 device.
Remember; sharing is caring. Bring something back to the community.
"Learn the tools of the trade the hard way." +Fravia
Time changes and with it the technology
Proxmark3 @ discord
Users of this forum, please be aware that information stored on this site is not private.
Sure, why not? it responses to the basic Iso14443a commands. When you want to read/write a block then you will need to make a Auth which uses (des/3des/aes) There is also a uncrypted mode for transfer. The usual "hf 14a sim" should be able to fake a desfire straight off if you change the SAK/ATAQ in the code based on a UID only system.
I wonder, will there ever be a Mifare Desfire uid magic card ?
Are there any chinese cardpeople working on it? Or is it not possible to make?
It is possible. But they will not work on that unless there is an order for 1000 pieces waiting...
They did the Ultralight and Ultralight C UID. So I am guessing it will be the same price for the DESfire*1000.
Last edited by app_o1 (2015-04-15 07:55:29)
@thefkboss I know where to find Ultralight C UID but no idea about the EV1.
@iceman & @thefkboss You can contact me on ICQ.
Please leave your id or icq number or email here.
or find my icq number here :
https://ghostbin.com/paste/ 6 v z b o x s n
password : */%$^1254Od__)(
Last edited by app_o1 (2015-01-31 13:36:59)
If you are looking for a magic-desfire, its not available. App_o1 hinted that the person who made the magic Ultralight-c could make a magic-desfire but the smallest amount need was like 1000pieces, 10€ each, Since it was so much money involved I need asked for a price offer. You might be able to negotiate the price down a bit.
but still, I don't need 1000 pieces
if he still has a price of 10€ / piece then it will take some time to make a groupbuy.
It all comes down to how much he wants for the job and the price / piece afterwards. Can you talk to him App_o1? (i never downloaded that app needed)
ISO15693 is already "coming"!
Javacard with atr changeable might require to order 100 pieces @15$/piece.
I could buy a hundred and set up an ebay store to sell them. But I don't think I will be able to sell all of them in order to get my investment back... What do you guys think?
Some question about 15693.
Propietary commands like password or auth challenge??
Because every 15963 have some propietary commands.
What is going to be the list of commands that the card will support?
"no, just like icode2"
Last edited by app_o1 (2015-04-16 07:08:34)
Bank cards are javacards (emv,maestro....) you upload the applet and the card could be...any card (ISO 14443) but there is a problem the atr, you can't change it.
The readers detect atr if you could change atr you could make emv emulation, desfire emulation, atmel emulation....
Do you have gotten your hands on one?
Not yet.
I guess within a few days I will have a few samples sitting on my desk.
Let me know if you want one or more. Otherwise, I can do whatever you want me to do with them.
2-3 pieces for me too !
I would also like to know which command set will be available (password command ? other commands?); a simple ISO15693 card without some feature will be a total waste of time/money (EM and NXP proprietary commands will be the most appreciated!).
Here is a brief commands sum up:
MANDATORY COMMANDS (all ISO15693 tags must support those)
01 = Inventory (usage: 260100+2bytes ISO15693-CRC - answer: 12bytes)
02 = Stay Quiet
OPTIONAL COMMANDS (not all tags support them)
20 = Read Block (usage: 0220+1byte block number+2bytes ISO15693-CRC - answer: 4bytes)
21 = Write Block (usage: 0221+1byte block number+4bytes data+2bytes ISO15693-CRC - answer: 4bytes)
22 = Lock Block
23 = Read Multiple Blocks (usage: 0223+1byte 1st block to read+1byte last block to read+2bytes ISO15693-CRC)
24 = Write Multiple Blocks (?up to 2 blocks max?)
25 = Select
26 = Reset to Ready
27 = Write AFI
28 = Lock AFI
29 = Write DSFID
2A = Lock DSFID
2B = Get_System_Info (usage: 022B+2bytes ISO15693-CRC - answer: 14 or more bytes)
2C = Read Multiple Block Security Status (usage: 022C+1byte 1st block security to read+1byte last block security to read+2bytes ISO15693-CRC)
EM Microelectronic CUSTOM COMMANDS
A2 = Set EAS
A3 = Reset EAS
A4 = Lock EAS
A5 = Active EAS
A6 = Protect EAS
A7 = Write EAS ID
A8 = Write EAS Cfg
B4 = Write Password
B6 = Protect Memory Page
B8 = Get Protection Status for a specific block
B9 = Destroy
BA = Enable Privacy
BB = Disable Privacy
BC = Enable Low Security
C3 = Fast Read Multiple Blocks
E4 = Login
NXP/Philips CUSTOM COMMANDS
A0 = Inventory Read
A1 = Fast Inventory Read
A2 = Set EAS
A3 = Reset EAS
A4 = Lock EAS
A5 = EAS Alarm
A6 = Password Protect EAS/AFI
A7 = Write EAS ID
A8 = Read EPC
B0 = Inventory Page Read
B1 = Fast Inventory Page Read
B2 = Get Random Number
B3 = Set Password
B4 = Write Password
B5 = Lock Password
B6 = Bit Password Protection
B7 = Lock Page Protection Condition
B8 = Get Multiple Block Protection Status
B9 = Destroy SLI
BA = Enable Privacy
BB = 64bit Password Protection
40 = Long Range CMD (Standard ISO/TR7003:1990)
Texas Instruments CUSTOM COMMANDS
A2 = Write 2 Blocks
A3 = Lock 2 Blocks
A4 = Kill
A5 = Write Single Block Password
ST Microelectronics
B1 = Write-sector Password
B2 = Lock-sector Password
B3 = Present-sector Password
C0 = Fast Read Single Block
C1 = Fast Inventory Initiated
C2 = Fast Initiate
C3 = Fast Read Multiple Block
D1 = Inventory Initiated
D2 = Initiate
Fujitsu
A0 = Read EAS
A1 = Write EAS
A6 = Kill
B1 = Fast Inventory
C3 = Fast Read Multiple Blocks
C4 = Fast Write Multiple Blocks
Last edited by asper (2015-05-27 10:49:04)