Proxmark3 community

hheile

Contributor

Registered: 2014-03-03

Posts: 35

Dumping Ultralight / Ultralight to a file

Hi Forum-menbers,

today i play around with an ultralight card.

proxmark3> hf 14a read
ATQA : 44 00         
UID : 04 55 55 55 55 2b 80           
SAK : 00 [2]         
TYPE : NXP MIFARE Ultralight | Ultralight C         
proprietary non iso14443a-4 card found, RATS not supported

so reading is possible too:
proxmark3> hf mf urdcard
Attempting to Read Ultralight...           
#db# READ CARD FINISHED                 
isOk:01         
Block 00:04 55 55 e0           
Block 01:55 55 55 80           
Block 02:d3 48 00 00           
Block 03:00 00 00 00  [0]         
Block 04:9a e4 4c ba  [0]         
Block 05:f7 52 00 00  [0]         
Block 06:01 00 00 00  [0]         
Block 07:01 d0 00 22  [0]         
Block 08:00 00 00 00  [0]         
Block 09:00 00 00 00  [0]         
Block 0a:00 00 00 00  [0]         
Block 0b:00 00 00 00  [0]         
Block 0c:00 00 00 00  [0]         
Block 0d:00 00 00 00  [0]         
Block 0e:00 00 00 00  [0]         
Block 0f:00 00 00 00  [0]

so, how can i dump this informations directly to a file for later use?
thanks to all

hheile

midnitesnake

Contributor

Registered: 2012-05-11

Posts: 151

Re: Dumping Ultralight / Ultralight to a file

I believe Pentura_Prox has slightly improved the code here: https://github.com/PenturaLabs/proxmark3/tree/Ultralight-Mod

the command will be 'hf mfu udump'

think their still testing/playing around with the code until they issue a pull-request into the main repository.

Last edited by midnitesnake (2014-05-22 13:23:55)

pentura_prox

Contributor

From: England,UK

Registered: 2014-03-11

Posts: 22

Website

Re: Dumping Ultralight / Ultralight to a file

You are correct.

We are still testing the code (Myself, Asper and Iceman), just received some UID Changeable UC cards, and everything appears to work ok.

At the moment there is a fair bit of duplicated code in the client, and I have not really experimented with the Authentication and protected blocks/pages, though the authentication routine does appear to work - currently development has stopped there.

Once I have some more free time, I'll pick this up again.  At the moment I'm very busy.

hheile

Contributor

Registered: 2014-03-03

Posts: 35

Re: Dumping Ultralight / Ultralight to a file

okay sounds wonderful for me.
i have a lot of cards here, some of them are absolutly unknown (public transport, i believe basic card) and Parking (no idea, not recognized by proxmark). i believe its skydata

iceman

Administrator

Registered: 2013-04-25

Posts: 9,538

Website

Re: Dumping Ultralight / Ultralight to a file

I added some small stuff to the "hf mfu urdcard"  to make the data bit clearer.

pm3 --> hf mfu urdcard
Attempting to Read Ultralight...
#db# Pages 16
#db# Pages read 16
isOk:01
         ID :01 02 03 05 06 07 08
       BCC  :04 11
   Internal :22
       Lock :00 00
 OneTimePad :00 00 00 00

Block 00:01 02 03 04
Block 01:05 06 07 08
Block 02:11 22 00 00
Block 03:00 00 00 00  [0]
Block 04:00 00 00 00  [0]
Block 05:00 00 00 00  [0]
Block 06:00 00 00 00  [0]
Block 07:00 00 00 00  [0]
Block 08:00 00 00 00  [0]
Block 09:00 00 00 00  [0]
Block 0a:00 00 00 00  [0]
Block 0b:00 00 00 00  [0]
Block 0c:00 00 00 00  [0]
Block 0d:00 00 00 00  [0]
Block 0e:00 00 00 00  [0]
Block 0f:00 00 00 00  [0]

Who wants to verify & commit?

iceman

Administrator

Registered: 2013-04-25

Posts: 9,538

Website

Re: Dumping Ultralight / Ultralight to a file

I just saw a problem here,  since I have a merged build from Pentura_prox and Midnitesnake,   my codebase is not the official one so "hf mfu" doesnt exits there yet...    However it should be kind of same.

iceman

Administrator

Registered: 2013-04-25

Posts: 9,538

Website

Re: Dumping Ultralight / Ultralight to a file

Added some crc checks aswell.

pm3 --> hf mfu urdcard
Attempting to Read Ultralight...
#db# Pages 16
#db# Pages read 16
isOk:01
        UID :04 01 02 05 06 07 08
       BCC0 :8f - Ok
       BCC1 :0c - Ok
   Internal :22
       Lock :00 00
 OneTimePad :00 00 00 00

Block 00:04 01 02 8f
Block 01:05 06 07 08
Block 02:0c 22 00 00
Block 03:00 00 00 00  [0]
Block 04:00 00 00 00  [0]
Block 05:00 00 00 00  [0]
Block 06:00 00 00 00  [0]
Block 07:00 00 00 00  [0]
Block 08:00 00 00 00  [0]
Block 09:00 00 00 00  [0]
Block 0a:00 00 00 00  [0]
Block 0b:00 00 00 00  [0]
Block 0c:00 00 00 00  [0]
Block 0d:00 00 00 00  [0]
Block 0e:00 00 00 00  [0]
Block 0f:00 00 00 00  [0]

iceman

Administrator

Registered: 2013-04-25

Posts: 9,538

Website

Re: Dumping Ultralight / Ultralight to a file

@hheile   its all in the PM3 master now. You can test it out.