ProxmarkPro - Sniffing a Mifare Ultralight Tag
This post covers how to sniff a Mifare Ultralight tag with the ProxmarkPro.
For this blog post you will need the following:
- ProxmarkPro
- Mifare Ultralight Tag
- High Frequency Reader
1. Navigate to HF Sniff section. HF 13.56MHz -> Sniff ISO14A.
2. Place ProxmarkPro HF antenna over reader and begin sniffing.
3. Place Mifare Ultralight tag over ProxmarkPro antenna and reader. Allow some time for the ProxmarkPro to sniff the traffic. Stop the ProxmarkPro by pressing the <- button. The information will now be saved to a folder on the SD Card called SNIFF14A under SNIFF#.txt.
4. Eject your SD card and connect it to your computer. When you open the SNIFF#.txt file you should see traffic similar to the example below.
Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer
iso14443a - All times are in carrier periods (1/13.56Mhz)
iClass - Timings are not as accurate
Start | End | Src | Data (! denotes parity error) | CRC | Annotation |
-----------|-----------|-----|-----------------------------------------------------------------|-----|--------------------|
0 | 2368 | Tag | 44 00 | |
4812 | 7276 | Rdr | 93 20 | | ANTICOLL
7276 | 8448 | | fdt (Frame Delay Time): 1172
8448 | 14336 | Tag | 88 04 b4 a3 9b | |
16588 | 27116 | Rdr | 93 70 88 04 b4 a3 9b eb 3d | | SELECT_UID
27116 | 28288 | | fdt (Frame Delay Time): 1172
28288 | 31808 | Tag | 04 da 17 | |
33100 | 35564 | Rdr | 95 20 | | ANTICOLL-2
35564 | 36736 | | fdt (Frame Delay Time): 1172
36736 | 42624 | Tag | f2 f7 48 80 cd | |
44876 | 55404 | Rdr | 95 70 f2 f7 48 80 cd e4 79 | | ANTICOLL-2
55404 | 56576 | | fdt (Frame Delay Time): 1172
56576 | 60160 | Tag | 00 fe 51 | |
1246284 | 1247276 | Rdr | 52 | | WUPA
-15383716 | -15383428 | Rdr | 00! | | ?
-15383428 | 2499968 | | fdt (Frame Delay Time): 17883396
2499968 | 2502336 | Tag | 44 00 | |
2508416 | 2514304 | Tag | 88 04 b4 a3 9b | |
2528256 | 2531776 | Tag | 04 da 17 | |
2536704 | 2542592 | Tag | f2 f7 48 80 cd | |
2556544 | 2560128 | Tag | 00 fe 51 | |
5000540 | 5001532 | Rdr | 52 | | WUPA
5001532 | 5002752 | | fdt (Frame Delay Time): 1220
5002752 | 5005120 | Tag | 44 00 | |
5007580 | 5010044 | Rdr | 93 20 | | ANTICOLL
5010044 | 5011200 | | fdt (Frame Delay Time): 1156
5011200 | 5017088 | Tag | 88 04 b4 a3 9b | |
5019356 | 5029884 | Rdr | 93 70 88 04 b4 a3 9b eb 3d | | SELECT_UID
5029884 | 5031040 | | fdt (Frame Delay Time): 1156
5031040 | 5034560 | Tag | 04 da 17 | |
5035868 | 5038332 | Rdr | 95 20 | | ANTICOLL-2
5038332 | 5039488 | | fdt (Frame Delay Time): 1156
5039488 | 5045376 | Tag | f2 f7 48 80 cd | |
5047644 | 5058172 | Rdr | 95 70 f2 f7 48 80 cd e4 79 | | ANTICOLL-2
5058172 | 5059328 | | fdt (Frame Delay Time): 1156
5059328 | 5062912 | Tag | 00 fe 51 | |
6251996 | 6252988 | Rdr | 52 | | WUPA
7503324 | 7504316 | Rdr | 52 | | WUPA
7504316 | 7505552 | | fdt (Frame Delay Time): 1236
7505552 | 7507920 | Tag | 44 00 | |
7510364 | 7512828 | Rdr | 93 20
Also in Blog
Proxmark Pro - Sniffing a Mifare Desfire 4K Tag
This post covers how to Sniff a Mifare Desfire 4K tag with the ProxmarkPro.
ProxmarkPro - Sniffing a Mifare 4K Tag
This post covers how to Sniff a Mifare 4K tag with the ProxmarkPro.
ProxmarkPro - Sniffing a Mifare 1K Tag
This post covers how to sniff a Mifare 1K tag with the ProxmarkPro.