New NXP mifare S50 hardened

Danz · 2018-01-09 19:16:00

Hello everyone,

New cards from nxp doesn't have any known keys (not even one on the common ones), darkside and nested wont work.

Is nonce bruteforce is the way to go or have to get sniffing to get keys from reader ?

Thanks,

iceman · 2018-01-09 19:21:10

easiest to sniff. Not sure how you were going to bruteforce a nonce. Would you care to elaborate?

piwi · 2018-01-10 14:16:10

Danz wrote:

Hello everyone,
New cards from nxp doesn't have any known keys (not even one on the common ones), darkside and nested wont work.

Can you please elaborate? What type of cards are these? Without known keys they would be quite useless because nobody would be able to write anything to them.

xiaojin1985 · 2018-01-23 18:12:21

I have the same card with fully encoded sectors........and there is NO WAY to sniff.....

iceman · 2018-01-23 18:21:48

Please explain why you can't sniff traffic between reader & card?

Danz · 2018-01-23 19:58:57

For me, software issue, I just crack it with chameleonmini then bruteforced the other keys out .. I am sure sniff the decrypt will do the same for proxmark as chameleonmini did

iceman · 2018-01-23 20:08:00

PM3 can get a key quite fast from simulation x, but sniffing requires knowledge on what data to use for in mfkey32.
well, not if you use the "hf mf sniff" that one will also find it. However I removed that command from the fork, still exists in offical pm3.

Chameleon mini makes that process a bit smoother. @danz, which device do you have?

xiaojin1985 · 2018-01-25 17:49:07

iceman wrote:

Please explain why you can't sniff traffic between reader & card?

My staff-id card is linked with some restricted area,if I do sniffering,the security guard may arrest me...

xiaojin1985 · 2018-01-25 17:52:12

and there is a monitor above any card-reader...I want backup my card data,but no way....

piwi · 2018-01-25 20:31:17

You should always have a printout of your management approval for the penetration test.

Danz · 2018-01-28 00:07:25

@iceman I have rdv2 and for chameleonmini .. got RevE and official ReveG.

Incase you need to run some tests let me know

iceman · 2018-01-28 00:11:33

That would be outside of the purpose of this thread. However revg and the new gui would be nice if you tested

Proxmark3 community

Announcement

#1 2018-01-09 19:16:00

New NXP mifare S50 hardened

#2 2018-01-09 19:21:10

Re: New NXP mifare S50 hardened

#3 2018-01-10 14:16:10

Re: New NXP mifare S50 hardened

#4 2018-01-23 18:12:21

Re: New NXP mifare S50 hardened

#5 2018-01-23 18:21:48

Re: New NXP mifare S50 hardened

#6 2018-01-23 19:58:57

Re: New NXP mifare S50 hardened

#7 2018-01-23 20:08:00

Re: New NXP mifare S50 hardened

#8 2018-01-25 17:49:07

Re: New NXP mifare S50 hardened

#9 2018-01-25 17:52:12

Re: New NXP mifare S50 hardened

#10 2018-01-25 20:31:17

Re: New NXP mifare S50 hardened

#11 2018-01-28 00:07:25

Re: New NXP mifare S50 hardened

#12 2018-01-28 00:11:33

Re: New NXP mifare S50 hardened

Quick reply

Board footer