Proxmark3 community
Research, development and trades concerning the powerful Proxmark3 device.
Remember; sharing is caring. Bring something back to the community.
"Learn the tools of the trade the hard way." +Fravia
You are not logged in.
Announcement
Time changes and with it the technology
Proxmark3 @ discord
Users of this forum, please be aware that information stored on this site is not private.
Pages: 1
#1 2021-01-10 13:21:56
- liushanyin1252
- Contributor
- Registered: 2021-01-04
- Posts: 15
Apple magsafe case
There is a rfid chip inside the apple magsafe case
it can not be identified with proxmark 3
i tried to sniff by using proxmark 3
but whatever how i tried , I get only tag side respond
Start | End | Src | Data (! denotes parity error) | CRC | Annotation
------------+------------+-----+-------------------------------------------------------------------------+-----+--------------------
0 | 2368 | Tag |04 03 | |
39072 | 41440 | Tag |04 03 | |
52256 | 58080 | Tag |08 b0 69 93 42 | |
76960 | 80544 | Tag |20 fc 70 | |
128288 | 130656 | Tag |04 03 | |
141472 | 147296 | Tag |08 b0 69 93 42 | |
166176 | 169760 | Tag |20 fc 70 | |
183264 | 192544 | Tag |06 77 77 71 02 80 be 6a | ok |
230544 | 236368 | Tag |02 90 00 f1 09 | |
257936 | 263760 | Tag |03 90 00 2d 53 | |
287248 | 310416 | Tag |02 00 1d 20 01 00 00 ff 04 06 e1 04 03 00 00 00 90 00 | |
| | |a9 9e | ok |
333840 | 355856 | Tag |03 05 06 e1 05 00 80 82 83 0f 04 53 01 04 95 90 00 9c | |
| | |5e | ok |
27407536 | 27409904 | Tag |04 03 | |
27446608 | 27448976 | Tag |04 03 | |
27459792 | 27465616 | Tag |08 d3 87 59 05 | |
27484496 | 27488080 | Tag |20 fc 70 | |
27535808 | 27538176 | Tag |04 03 | |
27548992 | 27554816 | Tag |08 d3 87 59 05 | |
27573712 | 27577296 | Tag |20 fc 70 | |
27590816 | 27600096 | Tag |06 77 77 71 02 80 be 6a | ok |
27638080 | 27643904 | Tag |02 90 00 f1 09 | |
27665472 | 27671296 | Tag |03 90 00 2d 53 | |
27694784 | 27717952 | Tag |02 00 1d 20 01 00 00 ff 04 06 e1 04 03 00 00 00 90 00 | |
| | |a9 9e | ok |
27741376 | 27742528 | Tag |03!
Offline
#2 2021-01-10 13:23:59
- iceman
- Administrator
- Registered: 2013-04-25
- Posts: 9,537
- Website
Re: Apple magsafe case
you need a better sniff, you only got the tag responses...
Offline
#3 2021-01-10 13:38:10
- liushanyin1252
- Contributor
- Registered: 2021-01-04
- Posts: 15
Re: Apple magsafe case
[usb] pm3 --> hf 15 list
[=] downloading tracelog data from device
[+] Recorded activity (trace len = 28 bytes)
[=] start = start of start frame end = end of frame. src = source of transfer
[=] ISO15693 / iCLASS - all times are in carrier periods (1/13.56MHz)
Start | End | Src | Data (! denotes parity error) | CRC | Annotation
------------+------------+-----+-------------------------------------------------------------------------+-----+--------------------
0 | 44032 | Rdr |26 01 00 f6 0a | ok | INVENTORY
7099168 | 7143200 | Rdr |26 01 00 f6 0a | ok | INVENTORY
[usb] pm3 -->
[usb] pm3 --> hf 14a list
[=] downloading tracelog data from device
[+] Recorded activity (trace len = 573 bytes)
[=] start = start of start frame end = end of frame. src = source of transfer
[=] ISO14443A - all times are in carrier periods (1/13.56MHz)
Start | End | Src | Data (! denotes parity error) | CRC | Annotation
------------+------------+-----+-------------------------------------------------------------------------+-----+--------------------
0 | 2368 | Tag |04 03 | |
39088 | 41456 | Tag |04 03 | |
52272 | 58160 | Tag |08 e7 c0 12 3d | |
76976 | 80560 | Tag |20 fc 70 | |
128288 | 130656 | Tag |04 03 | |
141472 | 147360 | Tag |08 e7 c0 12 3d | |
166176 | 169760 | Tag |20 fc 70 | |
183280 | 192560 | Tag |06 77 77 71 02 80 be 6a | ok |
230544 | 236368 | Tag |02 90 00 f1 09 | |
257936 | 263760 | Tag |03 90 00 2d 53 | |
287264 | 310432 | Tag |02 00 1d 20 01 00 00 ff 04 06 e1 04 03 00 00 00 90 00 | |
| | |a9 9e | ok |
333856 | 355872 | Tag |03 05 06 e1 05 00 80 82 83 0f 04 53 01 04 95 90 00 9c | |
| | |5e | ok |
20115008 | 20117376 | Tag |04 03 | |
20154096 | 20156464 | Tag |04 03 | |
20167280 | 20173104 | Tag |08 89 1d 59 c5 | |
20191984 | 20195568 | Tag |20 fc 70 | |
20243296 | 20245664 | Tag |04 03 | |
20256480 | 20262304 | Tag |08 89 1d 59 c5 | |
20281184 | 20284768 | Tag |20 fc 70 | |
20298288 | 20307568 | Tag |06 77 77 71 02 80 be 6a | ok |
20345568 | 20351392 | Tag |02 90 00 f1 09 | |
20372960 | 20378784 | Tag |03 90 00 2d 53 | |
20402272 | 20425440 | Tag |02 00 1d 20 01 00 00 ff 04 06 e1 04 03 00 00 00 90 00 | |
| | |a9 9e | ok |
20448864 | 20470880 | Tag |03 05 06 e1 05 00 80 82 83 0f 04 53 01 04 95 90 00 9c | |
| | |5e | ok |
46979456 | 46981824 | Tag |04 03 | |
47018544 | 47020912 | Tag |04 03 | |
47031728 | 47037616 | Tag |08 b8 00 a6 16 | |
47056432 | 47060016 | Tag |20 fc 70 | |
47107744 | 47110112 | Tag |04 03 | |
47120928 | 47126816 | Tag |08 b8 00 a6 16 | |
47145632 | 47149216 | Tag |20 fc 70 | |
47162736 | 47172016 | Tag |06 77 77 71 02 80 be 6a | ok |
47210016 | 47215840 | Tag |02 90 00 f1 09 | |
47237408 | 47243232 | Tag |03 90 00 2d 53 | |
47266720 | 47289888 | Tag |02 00 1d 20 01 00 00 ff 04 06 e1 04 03 00 00 00 90 00 | |
| | |a9 9e | ok |
47313312 | 47335328 | Tag |03 05 06 e1 05 00 80 82 83 0f 04 53 01 04 95 90 00 9c | |
| | |5e | ok |
Offline
#4 2021-01-10 13:39:11
- liushanyin1252
- Contributor
- Registered: 2021-01-04
- Posts: 15
Re: Apple magsafe case
you need a better sniff, you only got the tag responses...
it seems that the reader send bits in 15693 but tag response in 14443a
Offline
#5 2021-01-10 13:55:01
- liushanyin1252
- Contributor
- Registered: 2021-01-04
- Posts: 15
Re: Apple magsafe case
a bettter sniff
[usb] pm3 --> hf 14a list
[=] downloading tracelog data from device
[+] Recorded activity (trace len = 1008 bytes)
[=] start = start of start frame end = end of frame. src = source of transfer
[=] ISO14443A - all times are in carrier periods (1/13.56MHz)
Start | End | Src | Data (! denotes parity error) | CRC | Annotation
------------+------------+-----+-------------------------------------------------------------------------+-----+--------------------
0 | 2368 | Tag |04 03 | |
36828 | 37820 | Rdr |7d(7) | |
39088 | 41456 | Tag |04 03 | |
48604 | 51068 | Rdr |93 20 | | ANTICOLL
52272 | 58160 | Tag |08 05 7d 48 38 | |
76976 | 80560 | Tag |20 fc 70 | |
88108 | 92876 | Rdr |50 00 57 cd | ok | HALT
128288 | 130656 | Tag |04 03 | |
141472 | 147360 | Tag |08 05 7d 48 38 | |
154460 | 164988 | Rdr |93 70 08 05 7d 48 38 21 a7 | ok | SELECT_UID
166176 | 169760 | Tag |20 fc 70 | |
183280 | 192560 | Tag |06 77 77 71 02 80 be 6a | ok |
205004 | 222380 | Rdr |02 00 a4 04 00 07 d2 76 00 00 85 01 01 a6 09 | ok |
230560 | 236384 | Tag |02 90 00 f1 09 | |
243660 | 255340 | Rdr |03 00 a4 00 00 02 e1 03 e6 38 | ok |
257952 | 263776 | Tag |03 90 00 2d 53 | |
287264 | 310432 | Tag |02 00 1d 20 01 00 00 ff 04 06 e1 04 03 00 00 00 90 00 | |
| | |a9 9e | ok |
333856 | 355872 | Tag |03 05 06 e1 05 00 80 82 83 0f 04 53 01 04 95 90 00 9c | |
| | |5e | ok |
11797788 | 11798780 | Rdr |7a(7) | |
11800016 | 11802384 | Tag |04 03 | |
11809564 | 11814332 | Rdr |50 00 57 cd | ok | HALT
11836860 | 11837852 | Rdr |7d(7) | |
11839120 | 11841488 | Tag |04 03 | |
11848636 | 11851100 | Rdr |93 20 | | ANTICOLL
11852304 | 11858128 | Tag |08 b3 ac 33 24 | |
11877008 | 11880592 | Tag |20 fc 70 | |
11888140 | 11892908 | Rdr |50 00 57 cd | ok | HALT
11915004 | 11915996 | Rdr |7a(7) | |
11928304 | 11930672 | Tag |04 03 | |
11941504 | 11947328 | Tag |08 b3 ac 33 24 | |
11954492 | 11964956 | Rdr |93 70 08 b3 ac 33 24 75 96 | ok | SELECT_UID
11966208 | 11969792 | Tag |20 fc 70 | |
11983296 | 11992576 | Tag |06 77 77 71 02 80 be 6a | ok |
12005036 | 12022412 | Rdr |02 00 a4 04 00 07 d2 76 00 00 85 01 01 a6 09 | ok |
12030592 | 12036416 | Tag |02 90 00 f1 09 | |
12043692 | 12055372 | Rdr |03 00 a4 00 00 02 e1 03 e6 38 | ok |
12057984 | 12063808 | Tag |03 90 00 2d 53 | |
12071084 | 12080396 | Rdr |02 00 b0 00 00 0f 8e a6 | ok |
12087296 | 12110464 | Tag |02 00 1d 20 01 00 00 ff 04 06 e1 04 03 00 00 00 90 00 | |
| | |a9 9e | ok |
12117676 | 12126988 | Rdr |03 00 b0 00 0f 0e e4 30 | ok |
12133888 | 12155904 | Tag |03 05 06 e1 05 00 80 82 83 0f 04 53 01 04 95 90 00 9c | |
| | |5e | ok |
38740716 | 38741708 | Rdr |7a(7) | |
38742960 | 38745328 | Tag |04 03 | |
38752492 | 38757260 | Rdr |50 00 57 cd | ok | HALT
38779788 | 38780780 | Rdr |7d(7) | |
38782048 | 38784416 | Tag |04 03 | |
38795232 | 38801120 | Tag |08 20 ff 20 f7 | |
38819936 | 38823520 | Tag |20 fc 70 | |
38857932 | 38858924 | Rdr |7a(7) | |
38869004 | 38869996 | Rdr |7d(7) | |
38871264 | 38873632 | Tag |04 03 | |
38880780 | 38883244 | Rdr |93 20 | | ANTICOLL
38884448 | 38890336 | Tag |08 20 ff 20 f7 | |
38897420 | 38907884 | Rdr |93 70 08 20 ff 20 f7 1f 6a | ok | SELECT_UID
38909136 | 38912720 | Tag |20 fc 70 | |
38926240 | 38935520 | Tag |06 77 77 71 02 80 be 6a | ok |
38947964 | 38965340 | Rdr |02 00 a4 04 00 07 d2 76 00 00 85 01 01 a6 09 | ok |
38973520 | 38979344 | Tag |02 90 00 f1 09 | |
38986620 | 38998300 | Rdr |03 00 a4 00 00 02 e1 03 e6 38 | ok |
39000896 | 39006720 | Tag |03 90 00 2d 53 | |
39014012 | 39023324 | Rdr |02 00 b0 00 00 0f 8e a6 | ok |
39030224 | 39053392 | Tag |02 00 1d 20 01 00 00 ff 04 06 e1 04 03 00 00 00 90 00 | |
| | |a9 9e | ok |
39060604 | 39069916 | Rdr |03 00 b0 00 0f 0e e4 30 | ok |
39076816 | 39098832 | Tag |03 05 06 e1 05 00 80 82 83 0f 04 53 01 04 95 90 00 9c | |
| | |5e | ok |
39245340 | 39246396 | Rdr |26(7) | | REQA
Offline
#6 2021-01-10 14:04:16
- iceman
- Administrator
- Registered: 2013-04-25
- Posts: 9,537
- Website
Re: Apple magsafe case
00 a4 04 00 07 d2 76 00 00 85 01 01 -- select AID d2 76 00 00 85 01 01
00 a4 00 00 02 e1 03 -- select NDEF aid file ?
00 b0 00 00 0f -- read 15 bytes
tag >> 00 1d 20 01 00 00 ff 04 06 e1 04 03 00 00 00
00 b0 00 0f 0e -- read 14 bytes
Tag >> 05 06 e1 05 00 80 82 83 0f 04 53 01 04 95Looks like desfire communications.
Try running the desfire commands against the tag and see what it responds with.
Offline
#7 2021-01-10 14:09:04
- liushanyin1252
- Contributor
- Registered: 2021-01-04
- Posts: 15
Re: Apple magsafe case
[usb] pm3 --> hf mfdes getuid
[!!] APDU: No APDU response.
[!!] Error on getting uid.
[usb] pm3 --> hf mfdes enum
[!!] No card in field.
[!!] Can't get list of applications on tag
[usb] pm3 --> hf mfdes info
[#] Can't select card
[!] Can't select card
[usb] pm3 -->
Offline
#8 2021-01-10 14:12:05
- iceman
- Administrator
- Registered: 2013-04-25
- Posts: 9,537
- Website
Re: Apple magsafe case
Looking at the trace, you should be able to read the tag with the following apdu's
hf 14a apdu -skt 00a4040007d2760000850101
hf 14a apdu -kt 00a4000002e103
hf 14a apdu -kt 00b000000f
hf 14a apdu -t 00b0000f0ebtw, save a trace file from that good sniff and share if possible.
trace save -f hf14_apple_mag_safeOffline
#9 2021-01-10 14:23:58
- liushanyin1252
- Contributor
- Registered: 2021-01-04
- Posts: 15
Re: Apple magsafe case
Offline
#10 2021-01-10 14:27:07
- liushanyin1252
- Contributor
- Registered: 2021-01-04
- Posts: 15
Re: Apple magsafe case
[usb] pm3 --> hf 14a apdu -skt 00a4040007d2760000850101
[+] ( select, keep, TLV )
[+] >>> 00A4040007D2760000850101
[!!] No card in field.
[usb] pm3 --> hf 14a apdu -kt 00a4000002e103
[+] ( , keep, TLV )
[+] >>> 00A4000002E103
[#] Warning: HF field is off, ignoring TransmitFor14443a command
[!!] APDU: No APDU response.
[usb] pm3 --> hf 14a apdu -kt 00b000000f
[+] ( , keep, TLV )
[+] >>> 00B000000F
[#] Warning: HF field is off, ignoring TransmitFor14443a command
[!!] APDU: No APDU response.
[usb] pm3 --> hf 14a apdu -t 00b0000f0e
[+] ( , TLV )
[+] >>> 00B0000F0E
[#] Warning: HF field is off, ignoring TransmitFor14443a command
[!!] APDU: No APDU response.
[usb] pm3 -->
then i tried
[usb] pm3 --> hf 14a raw -ak -b 7 7a
[+] received 2 bytes
[+] 04 03
[usb] pm3 --> hf 14a raw -ak 9320
[+] received 5 bytes
[+] 08 13 EC [ EC 1B ]
[usb] pm3 --> hf 14a raw -ac 93700813ecec1b
[+] received 3 bytes
[+] 20 [ FC 70 ]
[usb] pm3 --> hf 14a raw -ak -b 7 7a
[+] received 2 bytes
[+] 04 03
[usb] pm3 --> hf 14a raw -ak 9320
[+] received 5 bytes
[+] 08 69 FD [ E6 7A ]
[usb] pm3 --> hf 14a raw -ak -b 7 7a
[+] received 0 bytes
[usb] pm3 --> hf 14a raw -ak -b 7 7a
[+] received 2 bytes
[+] 04 03
[usb] pm3 --> hf 14a raw -ak 9320
[+] received 5 bytes
[+] 08 69 FD [ E6 7A ]
[usb] pm3 -->
Offline
Pages: 1