Proxmark3 community

Boby4

Contributor

Registered: 2023-07-25

Posts: 3

MIFARE Ultralight EV1

Hi there, I have a lab401 Magic NTAG 21x, I have used the following command: hf mfu restore -f with the corresponding bin file to clone a Mifare ultralight EV1 card. (the card has a number of buckets on it) I then went to use the card and the number of buckets went down, however when comparing the dump file from the previous dump and the new one, there are no changes. I was wondering if you could help me find the information where the bucket number changes.

Here is an example of dump file information:

[=] -------------------------------------------------------------
[=] block#   | data        |lck| ascii
[=] ---------+-------------+---+------
[=]   0/0x00 | 04 E2 9F F1 |   | ....
[=]   1/0x01 | 02 91 69 80 |   | ..i.
[=]   2/0x02 | 7A 48 00 00 |   | zH..
[=]   3/0x03 | 00 00 00 00 | 0 | ....
[=]   4/0x04 | 00 00 00 00 | 0 | ....
[=]   5/0x05 | 00 00 00 00 | 0 | ....
[=]   6/0x06 | 00 00 00 00 | 0 | ....
[=]   7/0x07 | 00 00 00 00 | 0 | ....
[=]   8/0x08 | 00 00 00 00 | 0 | ....
[=]   9/0x09 | 00 00 00 00 | 0 | ....
[=]  10/0x0A | 00 00 00 00 | 0 | ....
[=]  11/0x0B | 00 00 00 00 | 0 | ....
[=]  12/0x0C | 00 00 00 00 | 0 | ....
[=]  13/0x0D | 00 00 00 00 | 0 | ....
[=]  14/0x0E | 00 00 00 00 | 0 | ....
[=]  15/0x0F | 00 00 00 00 | 0 | ....
[=]  16/0x10 | 00 00 00 FF | 0 | ....
[=]  17/0x11 | 00 05 00 00 | 0 | ....
[=]  18/0x12 | FF FF FF FF | 0 | ....
[=]  19/0x13 | 00 00 00 00 | 0 | ....
[=] ---------------------------------
[=] Using UID as filename

Thanks for your help

Boby4

Contributor

Registered: 2023-07-25

Posts: 3

Re: MIFARE Ultralight EV1

Ok No answer and I understand Why .

Question  I get that I have to  sniff and to try to apply the tear off  technic (even I am not sure I will be able ) but Will it for on NXP Card  Ultralight EV1 MF0ULx1?

If not will it work on the magic Card NTAG 21X modifiable ?

If yes any help will be appreciated.

Thank You for your answer.