Research, development and trades concerning the powerful Proxmark3 device.
Remember; sharing is caring. Bring something back to the community.
"Learn the tools of the trade the hard way." +Fravia
You are not logged in.
Time changes and with it the technology
Proxmark3 @ discord
Users of this forum, please be aware that information stored on this site is not private.
Hi,
According to my passport, EU member, it has rfid capabilities. I see a drop of voltage in the HF when presenting my passport.
I tried the "hf epa" command or "hf 14a read" but I can't get my passport to answer.
Soooo, what information is it that I need to read up on?
Offline
EPA in pm3 is really not compatible with all epas. It needs to be developed MUCH more !
Offline
Did you have some info? Would you be so kind and mail me it? please.
Offline
I read your other thread Asper, and tried both the epa.lua script and rewriting the epa.c code. However my epassport doesn't react on wupa 0x26 or 0x52 at all. No response at all.
Offline
Well in that case a sniffing is needed to better understand. Anyway this is strange... the only reason can be that your country does not follow ICAO standard... but it seems not to be.
Last edited by asper (2014-11-17 09:24:58)
Offline
Yes, we seem to like the ICAO standard very much.
Strange that it doesn't answer to either startups commands.
Offline
Maybe position problems?
Offline
i tried many different positions.. maybe too small antenna?
Offline
Can you post a pic of the antenna?
Offline
Its the standard hf antenna from xfpga.com, been working since day 1.
Offline
The hackers choice, have played around with epassports. Much is based on Adam Lauries rfidiot tools.
Offline
or some details from the maker of eClown...
Offline
I had stumbled over hf epa only recently in order to test the support for bigger frames - my passport was the only tag I had which could provide frames bigger than 32 bytes.
Don't expect too much - even if you have a compliant e-passport. Currently there is only one command (hf epa cnonces) and it doesn't do very much: just starting a PACE authentication. It requests a number of nonces from the card and displays them - that's all. There is a long way to go to send a password and retrieve data from the passport.
Offline
Yeah, I noticed that in the sourcecode. And I'm not even able to get my passport to be read. So it is pretty fram away
Offline
Good news with the changes to 14b.
I finally got my password to be read by the pm3.
pm3 --> hf 14b raw -c -p 05 00 08
received 14 octets
[LEN 14] 50 23 xx xx xx E1 F3 5E 11 77 87 95 [C5 78] OK
pm3 --> hf 14b read
14443-3b tag found:
UID: 23 xx xx xx
pm3 --> hf 14b inf
14443-3b tag found:
UID: 65 xx xx xx
App Data: E1 F3 5E 11
Protocol: 77 87 95
Bit Rate: 212 kbit/s PICC -> PCD supported
Bit Rate: 424 kbit/s PICC -> PCD supported
Bit Rate: 847 kbit/s PICC -> PCD supported
Bit Rate: 212 kbit/s PICC <- PCD supported
Bit Rate: 424 kbit/s PICC <- PCD supported
Bit Rate: 847 kbit/s PICC <- PCD supported
Max Frame Size: 256
Protocol Type: Protocol is compliant with ISO/IEC 14443-4
Frame Wait Int: 9
App Data Code: Application is Standard
Frame Options: NAD is not supported
Frame Options: CID is supported
Max Buf Length: 0 (MBLI) not supported
It seems to give me different UID every time I read it.
Offline
It seems to give me different UID every time I read it.
Normally, the first protocol that is running after woken up the epassport is BAC (old generation) or PACE (new generation). In both cases, the first message sent by the epassport is a challenge (so random message).
I guess, this is message is interpreted as an UID by the PM3 code....
More info here: http://tiny. cc/niyj0x
PS: I really hope I will manage to fix my flashing issue soon. Can't wait to play with my epassport as well ...
Offline
Nice, I have no idea how epassports works. Before I never got an answer from it, so I'm happy for this progress!
Offline