ProxmarkPro - Sniffing a Mifare Ultralight Tag
This post covers how to sniff a Mifare Ultralight tag with the ProxmarkPro.
For this blog post you will need the following:
- ProxmarkPro
- Mifare Ultralight Tag
- High Frequency Reader
1. Navigate to HF Sniff section. HF 13.56MHz -> Sniff ISO14A.
2. Place ProxmarkPro HF antenna over reader and begin sniffing.
3. Place Mifare Ultralight tag over ProxmarkPro antenna and reader. Allow some time for the ProxmarkPro to sniff the traffic. Stop the ProxmarkPro by pressing the <- button. The information will now be saved to a folder on the SD Card called SNIFF14A under SNIFF#.txt.
4. Eject your SD card and connect it to your computer. When you open the SNIFF#.txt file you should see traffic similar to the example below.
Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer iso14443a - All times are in carrier periods (1/13.56Mhz) iClass - Timings are not as accurate Start | End | Src | Data (! denotes parity error) | CRC | Annotation | -----------|-----------|-----|-----------------------------------------------------------------|-----|--------------------| 0 | 2368 | Tag | 44 00 | | 4812 | 7276 | Rdr | 93 20 | | ANTICOLL 7276 | 8448 | | fdt (Frame Delay Time): 1172 8448 | 14336 | Tag | 88 04 b4 a3 9b | | 16588 | 27116 | Rdr | 93 70 88 04 b4 a3 9b eb 3d | | SELECT_UID 27116 | 28288 | | fdt (Frame Delay Time): 1172 28288 | 31808 | Tag | 04 da 17 | | 33100 | 35564 | Rdr | 95 20 | | ANTICOLL-2 35564 | 36736 | | fdt (Frame Delay Time): 1172 36736 | 42624 | Tag | f2 f7 48 80 cd | | 44876 | 55404 | Rdr | 95 70 f2 f7 48 80 cd e4 79 | | ANTICOLL-2 55404 | 56576 | | fdt (Frame Delay Time): 1172 56576 | 60160 | Tag | 00 fe 51 | | 1246284 | 1247276 | Rdr | 52 | | WUPA -15383716 | -15383428 | Rdr | 00! | | ? -15383428 | 2499968 | | fdt (Frame Delay Time): 17883396 2499968 | 2502336 | Tag | 44 00 | | 2508416 | 2514304 | Tag | 88 04 b4 a3 9b | | 2528256 | 2531776 | Tag | 04 da 17 | | 2536704 | 2542592 | Tag | f2 f7 48 80 cd | | 2556544 | 2560128 | Tag | 00 fe 51 | | 5000540 | 5001532 | Rdr | 52 | | WUPA 5001532 | 5002752 | | fdt (Frame Delay Time): 1220 5002752 | 5005120 | Tag | 44 00 | | 5007580 | 5010044 | Rdr | 93 20 | | ANTICOLL 5010044 | 5011200 | | fdt (Frame Delay Time): 1156 5011200 | 5017088 | Tag | 88 04 b4 a3 9b | | 5019356 | 5029884 | Rdr | 93 70 88 04 b4 a3 9b eb 3d | | SELECT_UID 5029884 | 5031040 | | fdt (Frame Delay Time): 1156 5031040 | 5034560 | Tag | 04 da 17 | | 5035868 | 5038332 | Rdr | 95 20 | | ANTICOLL-2 5038332 | 5039488 | | fdt (Frame Delay Time): 1156 5039488 | 5045376 | Tag | f2 f7 48 80 cd | | 5047644 | 5058172 | Rdr | 95 70 f2 f7 48 80 cd e4 79 | | ANTICOLL-2 5058172 | 5059328 | | fdt (Frame Delay Time): 1156 5059328 | 5062912 | Tag | 00 fe 51 | | 6251996 | 6252988 | Rdr | 52 | | WUPA 7503324 | 7504316 | Rdr | 52 | | WUPA 7504316 | 7505552 | | fdt (Frame Delay Time): 1236 7505552 | 7507920 | Tag | 44 00 | | 7510364 | 7512828 | Rdr | 93 20
Also in Blog

Proxmark Pro - Sniffing a Mifare Desfire 4K Tag

ProxmarkPro - Sniffing a Mifare 4K Tag
