ProxmarkPro - Sniffing a Mifare 4K Tag
This post covers how to sniff a Mifare 4K tag with the ProxmarkPro.
For this blog post you will need the following:
- ProxmarkPro
- Mifare 4K Tag
- High Frequency Reader
1. Navigate to HF Sniff section. HF 13.56MHz -> Sniff ISO14A.
2. Place ProxmarkPro HF antenna over reader and begin sniffing.
3. Place Mifare 4K tag over ProxmarkPro antenna and reader. Allow some time for the ProxmarkPro to sniff the traffic. Stop the ProxmarkPro by pressing the <- button. The information will now be saved to a folder on the SD Card called SNIFF14A under SNIFF#.txt.
4. Eject your SD card and connect it to your computer. When you open the SNIFF#.txt file you should see traffic similar to the example below.
Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer
iso14443a - All times are in carrier periods (1/13.56Mhz)
iClass - Timings are not as accurate
Start | End | Src | Data (! denotes parity error) | CRC | Annotation |
-----------|-----------|-----|-----------------------------------------------------------------|-----|--------------------|
0 | 2368 | Tag | 02 00 | |
4796 | 7260 | Rdr | 93 20 | | ANTICOLL
7260 | 8448 | | fdt (Frame Delay Time): 1188
8448 | 14272 | Tag | de 3d 62 4d cc | |
16572 | 27036 | Rdr | 93 70 de 3d 62 4d cc e5 ca | | SELECT_UID
27036 | 28288 | | fdt (Frame Delay Time): 1252
28288 | 31872 | Tag | 18 37 cd | |
1248828 | 1249820 | Rdr | 52 | | WUPA
-1069812 | -1069524 | Rdr | 00! | | ?
-1069524 | 2464512 | | fdt (Frame Delay Time): 3534036
2464512 | 2466880 | Tag | 02 00 | |
2472960 | 2478784 | Tag | de 3d 62 4d cc | |
2492800 | 2496384 | Tag | 18 37 cd | |
5014476 | 5015468 | Rdr | 52 | | WUPA
5015468 | 5016720 | | fdt (Frame Delay Time): 1252
5016720 | 5019088 | Tag | 02 00 | |
5021516 | 5023980 | Rdr | 93 20 | | ANTICOLL
5023980 | 5025152 | | fdt (Frame Delay Time): 1172
5025152 | 5030976 | Tag | de 3d 62 4d cc | |
5033292 | 5043756 | Rdr | 93 70 de 3d 62 4d cc e5 ca | | SELECT_UID
5043756 | 5044992 | | fdt (Frame Delay Time): 1236
5044992 | 5048576 | Tag | 18 37 cd | |
6265420 | 6266412 | Rdr | 52 | | WUPA
7516492 | 7517484 | Rdr | 52 | | WUPA
7517484 | 7518736 | | fdt (Frame Delay Time): 1252
7518736 | 7521104 | Tag | 02 00 | |
7523532 | 7525996 | Rdr | 93 20 | | ANTICOLL
7525996 | 7527184 | | fdt (Frame Delay Time): 1188
7527184 | 7533008 | Tag | de 3d 62 4d cc | |
7535308 | 7545772 | Rdr | 93 70 de 3d 62 4d cc e5 ca | | SELECT_UID
7545772 | 7547024 | | fdt (Frame Delay Time): 1252
7547024 | 7550608 | Tag | 18 37 cd | |
8767564 | 8768556 | Rdr | 52 | | WUPA
8768556 | 10020880 | | fdt (Frame Delay Time): 1252324
10020880 | 10023248 | Tag | 02 00 | |
10029328 | 10035152 | Tag | de 3d 62 4d cc | |
10049168 | 10052752 | Tag | 18 37 cd | |
-1069812 | -1069396 | Rdr | 00!
Also in Blog
Proxmark Pro - Sniffing a Mifare Desfire 4K Tag
This post covers how to Sniff a Mifare Desfire 4K tag with the ProxmarkPro.
ProxmarkPro - Sniffing a Mifare 1K Tag
This post covers how to sniff a Mifare 1K tag with the ProxmarkPro.
ProxmarkPro - Sniffing a Mifare Ultralight Tag
This post covers how to Sniff a Mifare Ultralight tag with the ProxmarkPro.