ProxmarkPro - Sniffing a Mifare 4K Tag
This post covers how to sniff a Mifare 4K tag with the ProxmarkPro.
For this blog post you will need the following:
- ProxmarkPro
- Mifare 4K Tag
- High Frequency Reader
1. Navigate to HF Sniff section. HF 13.56MHz -> Sniff ISO14A.
2. Place ProxmarkPro HF antenna over reader and begin sniffing.
3. Place Mifare 4K tag over ProxmarkPro antenna and reader. Allow some time for the ProxmarkPro to sniff the traffic. Stop the ProxmarkPro by pressing the <- button. The information will now be saved to a folder on the SD Card called SNIFF14A under SNIFF#.txt.
4. Eject your SD card and connect it to your computer. When you open the SNIFF#.txt file you should see traffic similar to the example below.
Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer iso14443a - All times are in carrier periods (1/13.56Mhz) iClass - Timings are not as accurate Start | End | Src | Data (! denotes parity error) | CRC | Annotation | -----------|-----------|-----|-----------------------------------------------------------------|-----|--------------------| 0 | 2368 | Tag | 02 00 | | 4796 | 7260 | Rdr | 93 20 | | ANTICOLL 7260 | 8448 | | fdt (Frame Delay Time): 1188 8448 | 14272 | Tag | de 3d 62 4d cc | | 16572 | 27036 | Rdr | 93 70 de 3d 62 4d cc e5 ca | | SELECT_UID 27036 | 28288 | | fdt (Frame Delay Time): 1252 28288 | 31872 | Tag | 18 37 cd | | 1248828 | 1249820 | Rdr | 52 | | WUPA -1069812 | -1069524 | Rdr | 00! | | ? -1069524 | 2464512 | | fdt (Frame Delay Time): 3534036 2464512 | 2466880 | Tag | 02 00 | | 2472960 | 2478784 | Tag | de 3d 62 4d cc | | 2492800 | 2496384 | Tag | 18 37 cd | | 5014476 | 5015468 | Rdr | 52 | | WUPA 5015468 | 5016720 | | fdt (Frame Delay Time): 1252 5016720 | 5019088 | Tag | 02 00 | | 5021516 | 5023980 | Rdr | 93 20 | | ANTICOLL 5023980 | 5025152 | | fdt (Frame Delay Time): 1172 5025152 | 5030976 | Tag | de 3d 62 4d cc | | 5033292 | 5043756 | Rdr | 93 70 de 3d 62 4d cc e5 ca | | SELECT_UID 5043756 | 5044992 | | fdt (Frame Delay Time): 1236 5044992 | 5048576 | Tag | 18 37 cd | | 6265420 | 6266412 | Rdr | 52 | | WUPA 7516492 | 7517484 | Rdr | 52 | | WUPA 7517484 | 7518736 | | fdt (Frame Delay Time): 1252 7518736 | 7521104 | Tag | 02 00 | | 7523532 | 7525996 | Rdr | 93 20 | | ANTICOLL 7525996 | 7527184 | | fdt (Frame Delay Time): 1188 7527184 | 7533008 | Tag | de 3d 62 4d cc | | 7535308 | 7545772 | Rdr | 93 70 de 3d 62 4d cc e5 ca | | SELECT_UID 7545772 | 7547024 | | fdt (Frame Delay Time): 1252 7547024 | 7550608 | Tag | 18 37 cd | | 8767564 | 8768556 | Rdr | 52 | | WUPA 8768556 | 10020880 | | fdt (Frame Delay Time): 1252324 10020880 | 10023248 | Tag | 02 00 | | 10029328 | 10035152 | Tag | de 3d 62 4d cc | | 10049168 | 10052752 | Tag | 18 37 cd | | -1069812 | -1069396 | Rdr | 00!
Also in Blog

Proxmark Pro - Sniffing a Mifare Desfire 4K Tag

ProxmarkPro - Sniffing a Mifare 1K Tag
