Proxmark3 community
Research, development and trades concerning the powerful Proxmark3 device.
Remember; sharing is caring. Bring something back to the community.
"Learn the tools of the trade the hard way." +Fravia
You are not logged in.
Announcement
Time changes and with it the technology
Proxmark3 @ discord
Users of this forum, please be aware that information stored on this site is not private.
Pages: 1
#1 2016-10-02 18:26:07
- HighPressure
- Contributor
- Registered: 2016-07-17
- Posts: 56
Some Passport Magic out there?
Hi there
Sitting here bored, playing around with some cards, i thought of touching my passport.
I found the one year old post of iceman, which I didnt wanted to warm up (http://proxmark.org/forum/viewtopic.php?id=2171)
Basically I found this one earlier and thought it could be funny to have an elvis picture:
http://makezine.com/2008/10/02/how-to-back-up-a-rfid-pas/
basically it seems to be a proxmark 3 he is using (about in the middle of the page), but the link is dead.
here a more detailed link https://www.thc.org/thc-epassport/ as already posted also in the initial thread of iceman (take care, browser will warn you)
even more details of a site which is already down: https://web.archive.org/web/20160513081336/http://dexlab.nl/epassports.html
ecl0wn which he is talking about is still on the store https://play.google.com/store/apps/details?id=dexlab.eCL0WN
so back to basics
running iceman build and firmware
hf search brings up
UID : 08 C2 93 32
ATQA : 00 08
SAK : 20 [1]
TYPE : NXP MIFARE DESFire 4k | DESFire EV1 2k/4k/8k | Plus 2k/4k SL3 | JCOP 31/41
ATS : 0E 78 33 C4 02 80 67 04 12 B0 ...
- TL : length is 14 bytes
- T0 : TA1 is present, TB1 is present, TC1 is present, FSCI is 8 (FSC = 256)
- TA1 : different divisors are supported, DR: [2, 4], DS: [2, 4]
- TB1 : SFGI = 4 (SFGT = 65536/fc), FWI = 12 (FWT = 16777216/fc)
- TC1 : NAD is NOT supported, CID is supported
- HB : 80 67 04 12 B0.....
Answers to magic commands (GEN1): NO
Valid ISO14443-A Tag Found - Quiting Search
and as in icemans post the UID changes every time I read it
other than in his post it reports a desfire.. btw mine is from 2007
after a hf search I can also check content with hf 14b list, where some content will stay the same and some other will change randomly.
I just wanted to shout out in the forum if someone was into this already more deep until now?
otherwise i am going to investigate further, but thought someone might already point out what to do 
Offline
Pages: 1