ProxmarkPro - Sniffing a Mifare Ultralight Tag

October 21, 2019

This post covers how to sniff a Mifare Ultralight tag with the ProxmarkPro. 

For this blog post you will need the following:

  • ProxmarkPro
  • Mifare Ultralight Tag
  • High Frequency Reader

1. Navigate to HF Sniff section. HF 13.56MHz -> Sniff ISO14A.

2. Place ProxmarkPro HF antenna over reader and begin sniffing.

Sniffing a Mifare Ultralight Tag

3. Place Mifare Ultralight tag over ProxmarkPro antenna and reader. Allow some time for the ProxmarkPro to sniff the traffic. Stop the ProxmarkPro by pressing the <- button. The information will now be saved to a folder on the SD Card called SNIFF14A under SNIFF#.txt

ProxmarkPro - HF Sniffing LCD

4. Eject your SD card and connect it to your computer. When you open the SNIFF#.txt file you should see traffic similar to the example below. 

 Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer
iso14443a - All times are in carrier periods (1/13.56Mhz)
iClass    - Timings are not as accurate

     Start |       End | Src | Data (! denotes parity error)                                   | CRC | Annotation         |
-----------|-----------|-----|-----------------------------------------------------------------|-----|--------------------|
         0 |      2368 | Tag | 44  00                                                          |     | 
      4812 |      7276 | Rdr | 93  20                                                          |     | ANTICOLL
      7276 |      8448 |     | fdt (Frame Delay Time): 1172
      8448 |     14336 | Tag | 88  04  b4  a3  9b                                              |     | 
     16588 |     27116 | Rdr | 93  70  88  04  b4  a3  9b  eb  3d                              |     | SELECT_UID
     27116 |     28288 |     | fdt (Frame Delay Time): 1172
     28288 |     31808 | Tag | 04  da  17                                                      |     | 
     33100 |     35564 | Rdr | 95  20                                                          |     | ANTICOLL-2
     35564 |     36736 |     | fdt (Frame Delay Time): 1172
     36736 |     42624 | Tag | f2  f7  48  80  cd                                              |     | 
     44876 |     55404 | Rdr | 95  70  f2  f7  48  80  cd  e4  79                              |     | ANTICOLL-2
     55404 |     56576 |     | fdt (Frame Delay Time): 1172
     56576 |     60160 | Tag | 00  fe  51                                                      |     | 
   1246284 |   1247276 | Rdr | 52                                                              |     | WUPA
 -15383716 | -15383428 | Rdr | 00!                                                             |     | ?
 -15383428 |   2499968 |     | fdt (Frame Delay Time): 17883396
   2499968 |   2502336 | Tag | 44  00                                                          |     | 
   2508416 |   2514304 | Tag | 88  04  b4  a3  9b                                              |     | 
   2528256 |   2531776 | Tag | 04  da  17                                                      |     | 
   2536704 |   2542592 | Tag | f2  f7  48  80  cd                                              |     | 
   2556544 |   2560128 | Tag | 00  fe  51                                                      |     | 
   5000540 |   5001532 | Rdr | 52                                                              |     | WUPA
   5001532 |   5002752 |     | fdt (Frame Delay Time): 1220
   5002752 |   5005120 | Tag | 44  00                                                          |     | 
   5007580 |   5010044 | Rdr | 93  20                                                          |     | ANTICOLL
   5010044 |   5011200 |     | fdt (Frame Delay Time): 1156
   5011200 |   5017088 | Tag | 88  04  b4  a3  9b                                              |     | 
   5019356 |   5029884 | Rdr | 93  70  88  04  b4  a3  9b  eb  3d                              |     | SELECT_UID
   5029884 |   5031040 |     | fdt (Frame Delay Time): 1156
   5031040 |   5034560 | Tag | 04  da  17                                                      |     | 
   5035868 |   5038332 | Rdr | 95  20                                                          |     | ANTICOLL-2
   5038332 |   5039488 |     | fdt (Frame Delay Time): 1156
   5039488 |   5045376 | Tag | f2  f7  48  80  cd                                              |     | 
   5047644 |   5058172 | Rdr | 95  70  f2  f7  48  80  cd  e4  79                              |     | ANTICOLL-2
   5058172 |   5059328 |     | fdt (Frame Delay Time): 1156
   5059328 |   5062912 | Tag | 00  fe  51                                                      |     | 
   6251996 |   6252988 | Rdr | 52                                                              |     | WUPA
   7503324 |   7504316 | Rdr | 52                                                              |     | WUPA
   7504316 |   7505552 |     | fdt (Frame Delay Time): 1236
   7505552 |   7507920 | Tag | 44  00                                                          |     | 
   7510364 |   7512828 | Rdr | 93  20 





Also in Blog

Proxmark Pro - Sniffing a Mifare Desfire 4K Tag
Proxmark Pro - Sniffing a Mifare Desfire 4K Tag

October 21, 2019

This post covers how to Sniff a Mifare Desfire 4K tag with the ProxmarkPro.

View full article →

ProxmarkPro - Sniffing a Mifare 4K Tag
ProxmarkPro - Sniffing a Mifare 4K Tag

October 21, 2019

This post covers how to Sniff a Mifare 4K tag with the ProxmarkPro.

View full article →

ProxmarkPro - Sniffing a Mifare 1K Tag
ProxmarkPro - Sniffing a Mifare 1K Tag

October 21, 2019

This post covers how to sniff a Mifare 1K tag with the ProxmarkPro.

View full article →

We use cookies to ensure that we give you the best experience on our website. If you continue we'll assume that you are understand this. Learn more
Accept