Proxmark Pro - Sniffing a Mifare Desfire 4K Tag
This post covers how to sniff a Mifare Desfire 4K tag with the ProxmarkPro.
For this blog post you will need the following:
- ProxmarkPro
- Mifare Desfire 4K Tag
- High Frequency Reader
1. Navigate to HF Sniff section. HF 13.56MHz -> Sniff ISO14A.
2. Place ProxmarkPro HF antenna over reader and begin sniffing.
3. Place Mifare Desfire 4K tag over ProxmarkPro antenna and reader. Allow some time for the ProxmarkPro to sniff the traffic. Stop the ProxmarkPro by pressing the <- button. The information will now be saved to a folder on the SD Card called SNIFF14A under SNIFF#.txt.
4. Eject your SD card and connect it to your computer. When you open the SNIFF#.txt file you should see traffic similar to the example below.
Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer
iso14443a - All times are in carrier periods (1/13.56Mhz)
iClass - Timings are not as accurate
Start | End | Src | Data (! denotes parity error) | CRC | Annotation |
-----------|-----------|-----|-----------------------------------------------------------------|-----|--------------------|
0 | 256 | Tag | 00! | |
97440 | 97632 | Tag | 01 | |
405580 | 406636 | Rdr | 26 | | REQA
4585596 | 4586652 | Rdr | 26 | | REQA
8765612 | 8766668 | Rdr | 26 | | REQA
8766668 | 8768224 | | fdt (Frame Delay Time): 1556
8768224 | 8770208 | Tag | e8! 20 | |
8777356 | 8782124 | Rdr | 50 00 57 cd | | HALT
9317164 | 9318220 | Rdr | 26 | | REQA
9318220 | 9319392 | | fdt (Frame Delay Time): 1172
9319392 | 9321760 | Tag | 44 03 | |
9329068 | 9331532 | Rdr | 93 20 | | ANTICOLL
9331532 | 9332720 | | fdt (Frame Delay Time): 1188
9332720 | 9338544 | Tag | 88 04 41 62 af | |
9346172 | 9356700 | Rdr | 93 70 88 04 41 62 af b7 2c | | SELECT_UID
9356700 | 9357872 | | fdt (Frame Delay Time): 1172
9357872 | 9361392 | Tag | 24 d8 36 | |
9368572 | 9371036 | Rdr | 95 20 | | ANTICOLL-2
9371036 | 9372208 | | fdt (Frame Delay Time): 1172
9372208 | 9378032 | Tag | ba 4d 3c 80 4b | |
9385660 | 9396188 | Rdr | 95 70 ba 4d 3c 80 4b 53 5d | | ANTICOLL-2
9396188 | 9397360 | | fdt (Frame Delay Time): 1172
9397360 | 9400944 | Tag | 20 fc 70 | |
9408236 | 9413004 | Rdr | e0 81 b8 62 | | RATS
9413004 | 9414176 | | fdt (Frame Delay Time): 1172
9414176 | 9423456 | Tag | 06 75 77 81 02 80 02 f0 | |
9436860 | 9442716 | Rdr | d1 11 0a d4 53 | | ?
9442716 | 9443952 | | fdt (Frame Delay Time): 1236
9443952 | 9447472 | Tag | d1 fa 96 | |
9752192 | 9752448 | Tag | 00!
Also in Blog
ProxmarkPro - Sniffing a Mifare 4K Tag
This post covers how to Sniff a Mifare 4K tag with the ProxmarkPro.
ProxmarkPro - Sniffing a Mifare 1K Tag
This post covers how to sniff a Mifare 1K tag with the ProxmarkPro.
ProxmarkPro - Sniffing a Mifare Ultralight Tag
This post covers how to Sniff a Mifare Ultralight tag with the ProxmarkPro.