Skip to content

Instantly share code, notes, and snippets.

@kitsunehunter
Last active November 11, 2024 19:39
Show Gist options
  • Save kitsunehunter/7c53cc8bec43644f439d41e6d0588290 to your computer and use it in GitHub Desktop.
Save kitsunehunter/7c53cc8bec43644f439d41e6d0588290 to your computer and use it in GitHub Desktop.
Mifare GDM Configs
7A FF <- Allow gen1a magic auth
85 00 00 00 00 00 00 00 00 00 5A 5A 00 00 00 08 <- Shadow mode enabled
85 00 00 00 00 00 00 5A 00 FF 00 5A 00 00 00 08 <- CUID mode enabled + MFC EV1 Perso mode + shadow mode disabled
7A FF 00 00 00 00 00 00 BA FA 5A 5A 00 00 00 08 <- allow gen1a magic commands to persistant memory
85 00 00 00 00 00 5A 00 00 5A 00 5A 00 5A 00 08 <- switch to 7B GDM operation after using GDM script (DO NOT WRITE THIS CONFIG UNLESS YOUR TAG IS IN 7B OPERATION)
hf mf gdmsetcfg -d "7A FF 00 00 00 00 00 5A BA FA 5A 5A 00 00 00 08"
gen1a + CUID + shadow mode + gdm auth
hf mf gdmsetcfg -d "85 00 00 00 00 00 00 5A 00 FF 00 5A 00 00 00 08"
CUID + gdm auth
MKF tag presets
m4
hf mf wrbl --blk 0 -d "00 00 00 00 00 08 04 00 CD 01 0F 2C CD 80 AB 11" --force
n4
hf mf gen3blk -d "00 00 00 00 00 18 02 00 CD 01 0F 2C CD 81 F0 44"
n7
hf mf gen3blk -d "00 00 00 00 00 00 00 18 42 00 01 A4 CD 81 AD 24"
hf 14a raw -akb 7 40; hf 14a raw -k 43; hf 14a raw -c e000
check config
hf 14a raw -akb 7 20; hf 14a raw -k 23; hf 14a raw -c e000
check config with alt magic wakeup
hf 14a raw -akb 7 40; hf 14a raw -k 43; hf 14a raw -c -k -a E100; hf 14a raw -c -a "7A FF 00 00 00 00 00 5A BA FA 00 00 00 00 00 08"
CUID + gen1 for UFUID tag
hf 14a raw -akb 7 40; hf 14a raw -k 43; hf 14a raw -c -k -a E100; hf 14a raw -c -a "85 00 00 00 00 00 00 5A BA FA 00 00 00 00 00 08"
CUID only
hf 14a raw -akb 7 40; hf 14a raw -k 43; hf 14a raw -c -k -a E100; hf 14a raw -c -a "85 00 00 00 00 00 00 5A BA FA 00 00 00 00 00 08"; hf mf wrbl --blk 0 -d "00 00 00 00 00 08 04 00 CD 01 0F 2C CD 80 AB 11" --force
CUID MKF m4 4B UID
lf t5 write -b 0 -d 000880E0 -t; lf t5 restore -f mrkeyfob1.json
unlock pg1 and encode MKF t5577 tag
850000000000005A00FF005A00000008
85000000000000000000000000000008
^^ >> MFC EV1 CL2 Perso config*
USCUID-UL
UL 11
hf 14a raw -sck E2007AFF00A0; hf 14a raw -ck E20100000AC3; hf 14a raw -ck E20200040301; hf 14a raw -c E20301000B03
UL 21
hf 14a raw -sck E2007AFF00A0; hf 14a raw -ck E20100000A3C; hf 14a raw -ck E20200040301; hf 14a raw -c E20301000E03
UL C
hf 14a raw -sck E2007AFF00A0; hf 14a raw -ck E2010A000A00; hf 14a raw -ck E20200000000; hf 14a raw -c E20300000000
NTAG213
hf 14a raw -sck E2007AFF85A0; hf 14a raw -ck E20100000AA5; hf 14a raw -ck E20200040402; hf 14a raw -c E20301000F03
{
"Created": "proxmark3",
"FileType": "t55x7",
"Card": {
"ConfigBlock": "001070D0"
},
"blocks": {
"0": "001070D0",
"1": "CD010F2C",
"2": "00000000",
"3": "00000000",
"4": "00000000",
"5": "00000000",
"6": "00000000",
"7": "E9920427",
"8": "001070D0",
"9": "CD010F2C",
"10": "CD81F044",
"11": "00A00003"
}
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment