MIFARE Plus
MIFARE Plus¶
- Uses the ISO/IEC 14443-3 and 14443-4 protocols
- Operates at 13.56 MHz
- Uses AES-128 Encryption
- CRYPTO1 backwards compatible
Plus X Datasheet
Plus S Datasheet
MIFARE Plus S¶
Basic Card Info:
hf 14a info
hf 14a reader
hf mfp info
Test Keys:
hf mfp chk -s 0 -e 31 -d mfp_default_keys
hf mfp mad
MIFARE Plus X¶
Read the Metro SMARTCARD Card:
[usb] pm3 --> hf mfp info
[=] --- Tag Information ---------------------------
[+] UID: 04 3A 26 EA 46 68 80
[+] ATQA: 00 44
[+] SAK: 20 [1]
[+] MANUFACTURER: NXP Semiconductors Germany
[+] Possible types:
[+] MIFARE Plus EV1 2K/4K CL2 in SL3
[+] MIFARE Plus S 2K/4K CL2 in SL3
[+] MIFARE Plus X 2K/4K CL2 in SL3
[+] MIFARE Plus SE 1K CL2
[+] NTAG 4xx
[=] -------------------------- ATS --------------------------
[+] ATS: 0C 75 77 80 02 C1 05 2F 2F 01 BC D6 [ D3 00 ]
[=] 0C............... TL length is 12 bytes
[=] 75............ T0 TA1 is present, TB1 is present, TC1 is present, FSCI is 5 (FSC = 64)
[=] 77......... TA1 different divisors are supported, DR: [2, 4, 8], DS: [2, 4, 8]
[=] 80...... TB1 SFGI = 0 (SFGT = (not needed) 0/fc), FWI = 8 (FWT = 1048576/fc)
[=] 02... TC1 NAD is NOT supported, CID is supported
[=] -------------------- Historical bytes --------------------
[=] C1 05 2F 2F 01 BC D6 MIFARE Plus X 2K (SL1)
[+] C1..................... Mifare or (multiple) virtual cards of various type
[+] 05.................. length is 5 bytes
[+] 2x............... MIFARE Plus
[+] 2x............ Released
[+] x1......... VCS, VCSL, and SVC supported
[?] Hint: try `hf mfp info`
[?] Hint: try `hf ntag424 info`
[=] --- Fingerprint
[=] SIZE: 2K (7 UID)
[=] SAK: MIFARE Plus SL0/SL3 or MIFARE DESFire
[=] result: MIFARE Plus SL0/SL3
[=] --- Security Level (SL)
[+] SL mode: SL3
[=] SL 3: 3-Pass authentication based on AES, data manipulation commands secured by AES encryption and an AES based MACing method.
hardnested???¶
Testing Keys¶
Try common key list:
[usb] pm3 --> hf mfp chk -d mfp_default_keys -s0 -e6
[+] loaded 32 keys from dictionary file `D:\V0.2.8-win64\rrg_other-20240116-989ef99e4a65424f77721540eb227cb8e86403dd\client\dictionaries/mfp_default_keys.dic`
[=] Loaded 26 keys
[=] Search keys
..........................................
[=] -----+----------------------------------+----------------------------------
[=] Sec | key A | key B
[=] -----+----------------------------------+----------------------------------
[=] 000 | -------------------------------- | --------------------------------
[=] 001 | -------------------------------- | --------------------------------
[=] 002 | -------------------------------- | --------------------------------
[=] 003 | -------------------------------- | --------------------------------
[=] 004 | -------------------------------- | --------------------------------
[=] 005 | -------------------------------- | --------------------------------
[=] 006 | -------------------------------- | --------------------------------
[=] -----+----------------------------------+----------------------------------
Try Repeated Character Keys:
[usb] pm3 --> hf mfp chk --pattern1b
[=] Loaded 256 keys
[=] Search keys
....................................................
[=] -----+----------------------------------+----------------------------------
[=] Sec | key A | key B
[=] -----+----------------------------------+----------------------------------
[=] 000 | -------------------------------- | --------------------------------
[=] -----+----------------------------------+----------------------------------
[usb] pm3 --> hf mfp chk --pattern2b
[=] Loaded 1024 keys
[=] Search keys
..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p...............................................................................................................................................................................................R...............p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..........................................................................................................................................R....................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................p..............................................................................................................................................................................................................
[=] -----+----------------------------------+----------------------------------
[=] Sec | key A | key B
[=] -----+----------------------------------+----------------------------------
[=] 000 | -------------------------------- | --------------------------------
[=] -----+----------------------------------+----------------------------------