Research, development and trades concerning the powerful Proxmark3 device.
Remember; sharing is caring. Bring something back to the community.
"Learn the tools of the trade the hard way." +Fravia
You are not logged in.
Time changes and with it the technology
Proxmark3 @ discord
Users of this forum, please be aware that information stored on this site is not private.
Pages: 1
Hi All,
Can someone point me to info on how to use the Proxmark to read EMV data in particular the card number, expiry date etc.
I assume this should be possible as if I read the card with an NFC-enabled phone like an S8 and a run-of-the-mill app it shows me the card no etc.
I just cant seem to find how to do it.
Offline
Thanks to all the wonderful work merlokk's done it should be a simple "hf emv exec -s" assuming you have recent code from GitHub.
Offline
Awesome thanks, am I looking for a particular fork or just the main source?
Offline
works in offical and iceman
Offline
When I received my NFC enabled Mastercard from my bank I wanted to disable this contactless feature.
The way it is done is by calling my bank and asking them to disable.
I have wondered exactly what happens after they do this, and how this affect the card, but now when I compare my disabled with an enabled one from the same bank the results are obvious
My disabled one:
######################
pm3 --> hf emv exec -s
* PPSE.
APDU ERROR: Proxmark error 0.
PPSE ERROR: Can't select PPSE AID. Error: 1
* Search AID in list.
APDU ERROR: Proxmark error 0.
APDU ERROR: Proxmark error 3.
APDU ERROR: Proxmark error 0.
Exit...
pm3 -->
######################
Thought this might be interesting. Not sure if the bank sent some instructions to the card the next time I used it after they had disabled it, that also changed something on the NFC chip itself.
As I said, I also scanned a functional card, that gave a lot more output.
Not sure if any if it is of interest however. And I am a bit reluctant to post the entire output here just in case there is indeed something interesting.
What I wanted to verify is if the the card number, name or other critical information could be read from the card when enabled.
This part seem to indicate no
* MSD dCVV path. Check dCVV
Error MSD: Track2 data not found.
* Transaction completed.
What I can see is for example that the authorized amount to shop without pin is 100, currency code etc, as well as the language it prefers on the POS terminal.
Offline
I compared with an older card I have not used in a while. It is from the same bank. There I could see the full card number etc. scary
Offline
At what point did you read the card?
Did you read the card and obtain something like transaction history, disable the card, then re-read the the card?
How was the card disabled?
After the phone call did you present the card to your phone / POS terminal?
Offline
My disabled one:
######################
pm3 --> hf emv exec -s
* PPSE.APDU ERROR: Proxmark error 0.
PPSE ERROR: Can't select PPSE AID. Error: 1
* Search AID in list.APDU ERROR: Proxmark error 0.
APDU ERROR: Proxmark error 3.
APDU ERROR: Proxmark error 0.
Exit...
pm3 -->
######################
I get almost the same output with my recent NFC ENABLED VISA
proxmark3> hf emv exec -s
* PPSE.
APDU ERROR: Proxmark error 0.
PPSE ERROR: Can't select PPSE AID. Error: 1
* Search AID in list.
APDU ERROR: Proxmark error 0.
APDU ERROR: Proxmark error 0.
APDU ERROR: Proxmark error 0.
Exit...
However
hf emv exec -s -a -t -c -g
Leads to a successful transaction message (last PM3 build // bootrom: master/v3.0.1-379-gb2e0ac5-suspect 2018-07-25 07:58:59
os: master/v3.0.1-379-gb2e0ac5-suspect 2018-07-25 07:58:33 ).
Last edited by www (2018-07-25 11:53:29)
Offline
im on windows build / master 3.0.1-381-g913
same for me with a 2 month old visa with nfc enabled
hf search tells its a desfire
hf emv exec -s brought same error messages for me
I then ran a hf em test
now after this the hf emv exec -s works fine, no matter if I just exit the client software or also reboot the proxmark device itself.
Seems the card was stuckin a state and is now "unlocked"
the menitoned exec with satcg didnt change anything for me.
anyhow it doesnt show the name, number date or anything.. just things like what type of visa card it is and if online pin is enabled etc.
my other cc´s are all nfc disabled, so I cant tell if its just that card
Offline
`hf emv exec -s` just make an EMV transaction.
if card can't make a transaction - it cant too...
if you look more detail `hf emv exec -sa` you see might be... it founds an application, but it in status BLOCKED...
to unblock it you need to put it to your bank's ATM and bank need to send to it some script to unblock it.
any command cant do nothing with blocked card.
it needs to know card's key or card's master key
P.S. as for emv test its strange... coz it dont touch any structures instead of crypto
Last edited by merlok (2018-10-13 10:11:34)
Offline
and sometimes it needs to play with card place on the anntenna... it may not read if too far or too close or with some angle...
Offline
in my case when I execute "emv exec -s" I end up getting this and no track2
* Read records from AFL.
[!] WARNING: AFL not found.
[!!] Can't find AIP.* Transaction completed.
but when I execute "emv exec -s -a -t -c -g" I end up getting track2, but only the first 16 digits hmm
Offline
Pages: 1