Research, development and trades concerning the powerful Proxmark3 device.
Remember; sharing is caring. Bring something back to the community.
"Learn the tools of the trade the hard way." +Fravia
You are not logged in.
Time changes and with it the technology
Proxmark3 @ discord
Users of this forum, please be aware that information stored on this site is not private.
Pages: 1
Here my findings with the new emv functionality
On the compilled proxmark3-14a-TagFuzz fork i have following commands:
elp This help
readrecord EMV Read Record
transaction Perform EMV Transaction
clone Clone an EMV card
sim Simulate an EMV card (clone it first)
test Test Function
execpt the "test" command it seems working somehow.
When i try to clone the card, and hold it on my payment terminal it says "swipe or plug in the card".
So its not working to do a payment with this function, maybe im doing something wrong, cant find the correct steps anywhere to successfully make a payment.
The "transaction" command seems to interact only with the card, so no payment is possible with this function (as i believe), but it gives me a output:
proxmark3> hf emv transaction
#db# Transmitting...
#db# Received ATQA...
#db# Transmit SEL_ALL ATQA...
#db# Transmit SEL_ALL ATQA...
#db# SELECT Finished
#db# SELECT_PPSE Finished
#db# SELECT PPSE COMPLETED
#db# VISA Paywave Card Detected
#db# SELECT Finished
#db# SELECT AID COMPLETED
#db# Get Processing Options Finished
#db# AFL=
#db# 08 01 01 00
#db# AIP=
#db# 20 80
#db# DDA supported
#db# Chip supported
#db# 03 70 3c 57 13 04 62 72
#db# 27 00 20 96 87 7d 19 09
#db# 20 10 00 04 21 00 73 01
#db# 5f 20 02 20 2f 9f 1f 1f
#db# 30 30 30 30 30 30 30 30
#db# 30 30 30 30 30 30 30 30
#db# 30 30 30 30 30 30 30 30
#db# 30 30 30 30 30 30 30 90
#db# 00 c2 76 e8 c7 ff 26 dd
#db# 09 e6 aa 33 f5 1b 14 c5
#db# a2 90 8b f8 08 f1 4f d7
#db# 62 0f ec e8 74 e1 4e c5
#db# 3c 5e e9 ba 35 71 7d 61
#db# 9a c8 ae 2c 6f fe 54 dc
#db# 98 0b 2b 12 20 a2 a3 67
#db# 6b fd 55 c1 9a aa 2b d6
#db# 35 4d 44 33 ac a1 c6 ec
#db# d8 73 1e 12 89 a5 a4 eb
#db# 56 76 45 c7 93 6f 2b 42
#db# dd 90 21 85 38 0a bf cb
#db# 45 90 e0 16 ae cd 9d af
#db# 31 15 a2 64 a0 4c e9 2a
#db# 5d 3c 56 d9 95 85 97 56
#db# 2a ab 4e 8b 5c 79 61 98
#db# 2b 86 49 66 95 51 fa 17
#db# Record not found SFI=1 RECORD=2
#db# 02 6a 83 1a 3e 04 62 72
#db# 27 00 20 96 87 7d 19 09
#db# 20 10 00 04 21 00 73 01
#db# 5f 20 02 20 2f 9f 1f 1f
#db# 30 30 30 30 30 30 30 30
#db# 30 30 30 30 30 30 30 30
#db# 30 30 30 30 30 30 30 30
#db# 30 30 30 30 30 30 30 90
#db# 00 c2 76 e8 c7 ff 26 dd
#db# 09 e6 aa 33 f5 1b 14 c5
#db# a2 90 8b f8 08 f1 4f d7
#db# 62 0f ec e8 74 e1 4e c5
#db# 3c 5e e9 ba 35 71 7d 61
#db# 9a c8 ae 2c 6f fe 54 dc
#db# 98 0b 2b 12 20 a2 a3 67
#db# 6b fd 55 c1 9a aa 2b d6
#db# 35 4d 44 33 ac a1 c6 ec
#db# d8 73 1e 12 89 a5 a4 eb
#db# 56 76 45 c7 93 6f 2b 42
#db# dd 90 21 85 38 0a bf cb
#db# 45 90 e0 16 ae cd 9d af
#db# 31 15 a2 64 a0 4c e9 2a
#db# 5d 3c 56 d9 95 85 97 56
#db# 2a ab 4e 8b 5c 79 61 98
#db# 2b 86 49 66 95 51 fa 17
#db# Record not found SFI=2 RECORD=1
#db# 03 6a 83 c6 64 04 62 72
#db# 27 00 20 96 87 7d 19 09
#db# 20 10 00 04 21 00 73 01
#db# 5f 20 02 20 2f 9f 1f 1f
#db# 30 30 30 30 30 30 30 30
#db# 30 30 30 30 30 30 30 30
#db# 30 30 30 30 30 30 30 30
#db# 30 30 30 30 30 30 30 90
#db# 00 c2 76 e8 c7 ff 26 dd
#db# 09 e6 aa 33 f5 1b 14 c5
#db# a2 90 8b f8 08 f1 4f d7
#db# 62 0f ec e8 74 e1 4e c5
#db# 3c 5e e9 ba 35 71 7d 61
#db# 9a c8 ae 2c 6f fe 54 dc
#db# 98 0b 2b 12 20 a2 a3 67
#db# 6b fd 55 c1 9a aa 2b d6
#db# 35 4d 44 33 ac a1 c6 ec
#db# d8 73 1e 12 89 a5 a4 eb
#db# 56 76 45 c7 93 6f 2b 42
#db# dd 90 21 85 38 0a bf cb
#db# 45 90 e0 16 ae cd 9d af
#db# 31 15 a2 64 a0 4c e9 2a
#db# 5d 3c 56 d9 95 85 97 56
#db# 2a ab 4e 8b 5c 79 61 98
#db# 2b 86 49 66 95 51 fa 17
#db# 02 70 81 e0 90 81 b0 1c
#db# 5f 87 d5 75 7a 13 f2 4a
#db# cb b9 93 d7 06 73 1e 58
#db# 3a 31 69 d8 ad 09 3d 64
#db# e5 ae f4 e6 d2 09 00 b5
#db# be f7 4c 09 77 50 f4 13
#db# c5 4b e2 35 11 da 68 23
#db# cd 30 2d 3d 19 cd 41 fd
#db# 36 48 41 e9 93 a5 be 93
#db# 05 8b 4e bd 2c 1d 83 c0
#db# e3 1c fb 3d 53 4a 99 fe
#db# 2c b3 3b 2e 91 fc b9 e6
#db# cb 62 09 c4 98 81 c0 82
#db# 61 eb 9e 0c 74 9c 66 b8
#db# 94 9e c2 39 1e 66 91 2b
#db# ee 03 82 81 40 85 26 09
#db# 55 ed 81 24 fb 43 f5 89
#db# fe e6 6e 50 cc ea 84 a8
#db# 60 9c 0e 90 b8 17 7e c5
#db# 08 e3 4f 08 8d b2 52 29
#db# 0b e9 1f 4b 3d 92 84 4f
#db# 28 c0 2b c4 dd 87 ed a5
#db# fd 13 b3 eb 9b ad af 8f
#db# 01 08 92 24 ec 66 68 63
#db# a7 ac a1 13 8a 0e 49 75
#db# 03 70 81 e3 5a 08 46 27
#db# 22 70 02 09 68 77 5f 24
#db# 03 19 09 30 5f 28 02 07
#db# 56 9f 07 02 ff 00 9f 46
#db# 81 b0 70 c7 ca 69 41 03
#db# 07 c0 1d a6 4a 96 75 d8
#db# f9 a8 e8 b4 21 48 24 22
#db# 70 fc 3d 08 06 51 43 e7
#db# 1b a2 05 d3 90 fe 6c 2e
#db# 8a 0d 15 bb 85 4b b4 86
#db# 55 21 3b d5 a5 d5 98 d8
#db# e2 3e 10 dc 8a 56 01 f4
#db# 41 c9 79 ae 0e 4c e1 c4
#db# 18 7f fd d3 1d 3e 52 74
#db# 52 eb fb 1b 90 ac 32 31
#db# 43 b5 ef 82 f2 06 04 3c
#db# 10 82 3d 8c 50 84 56 06
#db# e0 c5 18 f4 f2 dc 83 3e
#db# 61 8d aa 10 a0 f0 4d 9c
#db# a4 2f 0a 3e 0e 61 93 57
#db# ca 0a 7a 79 e4 6f c6 8c
#db# fc 84 9b fb 0d 75 c5 da
#db# e7 d6 cc dd 70 6d 32 8d
#db# cf b7 3a e7 d3 39 d4 76
#db# b7 d1 f2 97 4e 52 86 1f
#db# Record not found SFI=2 RECORD=4
#db# 02 6a 83 1a 3e 08 46 27
#db# 22 70 02 09 68 77 5f 24
#db# 03 19 09 30 5f 28 02 07
#db# 56 9f 07 02 ff 00 9f 46
#db# 81 b0 70 c7 ca 69 41 03
#db# 07 c0 1d a6 4a 96 75 d8
#db# f9 a8 e8 b4 21 48 24 22
#db# 70 fc 3d 08 06 51 43 e7
#db# 1b a2 05 d3 90 fe 6c 2e
#db# 8a 0d 15 bb 85 4b b4 86
#db# 55 21 3b d5 a5 d5 98 d8
#db# e2 3e 10 dc 8a 56 01 f4
#db# 41 c9 79 ae 0e 4c e1 c4
#db# 18 7f fd d3 1d 3e 52 74
#db# 52 eb fb 1b 90 ac 32 31
#db# 43 b5 ef 82 f2 06 04 3c
#db# 10 82 3d 8c 50 84 56 06
#db# e0 c5 18 f4 f2 dc 83 3e
#db# 61 8d aa 10 a0 f0 4d 9c
#db# a4 2f 0a 3e 0e 61 93 57
#db# ca 0a 7a 79 e4 6f c6 8c
#db# fc 84 9b fb 0d 75 c5 da
#db# e7 d6 cc dd 70 6d 32 8d
#db# cf b7 3a e7 d3 39 d4 76
#db# b7 d1 f2 97 4e 52 86 1f
#db# Record not found SFI=3 RECORD=1
#db# 03 6a 83 c6 64 08 46 27
#db# 22 70 02 09 68 77 5f 24
#db# 03 19 09 30 5f 28 02 07
#db# 56 9f 07 02 ff 00 9f 46
#db# 81 b0 70 c7 ca 69 41 03
#db# 07 c0 1d a6 4a 96 75 d8
#db# f9 a8 e8 b4 21 48 24 22
#db# 70 fc 3d 08 06 51 43 e7
#db# 1b a2 05 d3 90 fe 6c 2e
#db# 8a 0d 15 bb 85 4b b4 86
#db# 55 21 3b d5 a5 d5 98 d8
#db# e2 3e 10 dc 8a 56 01 f4
#db# 41 c9 79 ae 0e 4c e1 c4
#db# 18 7f fd d3 1d 3e 52 74
#db# 52 eb fb 1b 90 ac 32 31
#db# 43 b5 ef 82 f2 06 04 3c
#db# 10 82 3d 8c 50 84 56 06
#db# e0 c5 18 f4 f2 dc 83 3e
#db# 61 8d aa 10 a0 f0 4d 9c
#db# a4 2f 0a 3e 0e 61 93 57
#db# ca 0a 7a 79 e4 6f c6 8c
#db# fc 84 9b fb 0d 75 c5 da
#db# e7 d6 cc dd 70 6d 32 8d
#db# cf b7 3a e7 d3 39 d4 76
#db# b7 d1 f2 97 4e 52 86 1f
#db# Record not found SFI=3 RECORD=2
Waiting for a response from the proxmark...
Don't forget to cancel its operation first by pressing on the button
#db# 02 6a 83 1a 3e 08 46 27
#db# 22 70 02 09 68 77 5f 24
#db# 03 19 09 30 5f 28 02 07
#db# 56 9f 07 02 ff 00 9f 46
#db# 81 b0 70 c7 ca 69 41 03
#db# 07 c0 1d a6 4a 96 75 d8
#db# f9 a8 e8 b4 21 48 24 22
#db# 70 fc 3d 08 06 51 43 e7
#db# 1b a2 05 d3 90 fe 6c 2e
#db# 8a 0d 15 bb 85 4b b4 86
#db# 55 21 3b d5 a5 d5 98 d8
#db# e2 3e 10 dc 8a 56 01 f4
#db# 41 c9 79 ae 0e 4c e1 c4
#db# 18 7f fd d3 1d 3e 52 74
#db# 52 eb fb 1b 90 ac 32 31
#db# 43 b5 ef 82 f2 06 04 3c
#db# 10 82 3d 8c 50 84 56 06
#db# e0 c5 18 f4 f2 dc 83 3e
#db# 61 8d aa 10 a0 f0 4d 9c
#db# a4 2f 0a 3e 0e 61 93 57
#db# ca 0a 7a 79 e4 6f c6 8c
#db# fc 84 9b fb 0d 75 c5 da
#db# e7 d6 cc dd 70 6d 32 8d
#db# cf b7 3a e7 d3 39 d4 76
#db# b7 d1 f2 97 4e 52 86 1f
#db# Record not found SFI=2 RECORD=4
#db# Record not found SFI=3 RECORD=1
#db# 02 6a 83 1a 3e 08 46 27
#db# 22 70 02 09 68 77 5f 24
#db# 03 19 09 30 5f 28 02 07
#db# 56 9f 07 02 ff 00 9f 46
#db# 81 b0 70 c7 ca 69 41 03
#db# 07 c0 1d a6 4a 96 75 d8
#db# f9 a8 e8 b4 21 48 24 22
#db# 70 fc 3d 08 06 51 43 e7
#db# 1b a2 05 d3 90 fe 6c 2e
#db# 8a 0d 15 bb 85 4b b4 86
#db# 55 21 3b d5 a5 d5 98 d8
#db# e2 3e 10 dc 8a 56 01 f4
#db# 41 c9 79 ae 0e 4c e1 c4
#db# 18 7f fd d3 1d 3e 52 74
#db# 52 eb fb 1b 90 ac 32 31
#db# 43 b5 ef 82 f2 06 04 3c
#db# 10 82 3d 8c 50 84 56 06
#db# e0 c5 18 f4 f2 dc 83 3e
#db# 61 8d aa 10 a0 f0 4d 9c
#db# a4 2f 0a 3e 0e 61 93 57
#db# ca 0a 7a 79 e4 6f c6 8c
#db# fc 84 9b fb 0d 75 c5 da
#db# e7 d6 cc dd 70 6d 32 8d
#db# cf b7 3a e7 d3 39 d4 76
#db# b7 d1 f2 97 4e 52 86 1f
#db# Get Challenge finished
#db# Get AC Finished
#db# 02 69 85 44 71 08 46 27
#db# 22 70 02 09 68 77 5f 24
#db# 03 19 09 30 5f 28 02 07
#db# 56 9f 07 02 ff 00 9f 46
#db# 81 b0 70 c7 ca 69 41 03
#db# 07 c0 1d a6 4a 96 75 d8
#db# f9 a8 e8 b4 21 48 24 22
#db# 70 fc 3d 08 06 51 43 e7
#db# 1b a2 05 d3 90 fe 6c 2e
#db# 8a 0d 15 bb 85 4b b4 86
#db# 55 21 3b d5 a5 d5 98 d8
#db# e2 3e 10 dc 8a 56 01 f4
#db# 41 c9 79 ae
isOk:00
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#db# EMV TRANSACTION FINISHED
Where Iceman fork gives me something like this
pm3 --> hf emv trans
#db# SELECT AID COMPLETED
#db# EMV TRANSACTION FINISHED
Someone know how to make a successfull payment ater that?
Offline
Sweet!
When I've more time, I've been thinking on merging the other cmds from @fillmores 14a-tag-fuzz branch.
As mentioned in other thread, its only targeted 14a-cards. not 14b. Of course is my tag 14b, which makes testing a bit harder.
Saw on twitter that @MichaelWiesner has been trying to read nfc creditcards with proxmark3. Maybe something comes out of his work too.
Offline
will try to unbrick my pm3 first 8)
Offline
Willkommen miat
I (soft)bricket my pm3 a lot of times with the proxmark3-14a-TagFuzz, seems that the bootloader makes some problem. My machine didn't reconize the pm3 till i plug it in, with the button pushed, and keeps rebooting till i flash the appropriate OS matching to the bootloader. Maybe this helps.
Sorry for the offtopic
Viel glück
Offline
Pages: 1