ROTHULT

Proxmark

hf search

UID : 02 E2 00 67 15 04 33
ATQA : 00 42
SAK : 20 [1]
TYPE : NXP MIFARE DESFire 4k | DESFire EV1 2k/4k/8k | Plus 2k/4k SL3 | JCOP 31/41
MANUFACTURER : ST Microelectronics SA France
ATS : 05 75 80 60 02 BB 58
      -  TL : length is 5 bytes
      -  T0 : TA1 is present, TB1 is present, TC1 is present, FSCI is 5 (FSC = 64)
      - TA1 : different divisors are NOT supported, DR: [], DS: []
      - TB1 : SFGI = 0 (SFGT = (not needed) 0/fc), FWI = 6 (FWT = 262144/fc)
      - TC1 : NAD is NOT supported, CID is supported
[=] Answers to magic commands: NO

[+] Valid ISO14443-A tag  found

hf mfdes info

-- Desfire Information --------------------------------------
-------------------------------------------------------------
  UID                : 02 E2 00 67 15 04 33
  Batch number       : 00 00 00 00 00
  Production date    : week 00, 2000
  -----------------------------------------------------------
  Hardware Information
      Vendor Id      : no tag-info available
      Type           : 0xEB
      Subtype        : 0x75
      Version        : 0.0 (Desfire MF3ICD40)
      Storage size   : 0x00 (1 bytes)
      Protocol       : 0x00 (Unknown)
  -----------------------------------------------------------
  Software Information
      Vendor Id      : no tag-info available
      Type           : 0x50
      Subtype        : 0x69
      Version        : 0.0
      storage size   : 0x00 (1 bytes)
      Protocol       : 0x00 (Unknown)
-------------------------------------------------------------
 CMK - PICC, Card Master Key settings

   [0x08] Configuration changeable       : NO
   [0x04] CMK required for create/delete : YES
   [0x02] Directory list access with CMK : YES
   [0x01] CMK is changeable              : NO

   Max number of keys       : 235
   Master key Version       : 0 (0x00)
   ----------------------------------------------------------
   [0x0A] Authenticate      : YES
   [0x1A] Authenticate ISO  : YES
   [0xAA] Authenticate AES  : YES

   ----------------------------------------------------------
   Available free memory on card       : 7727872 bytes
-------------------------------------------------------------

hf mfdes enum

-- Desfire Enumerate Applications ---------------------------
-------------------------------------------------------------
-------------------------------------------------------------

hf mfp info

 UID : 02 E2 00 67 15 04 33
ATQA : 00 42
 SAK : 20 [1]
TYPE : NXP MIFARE DESFire 4k | DESFire EV1 2k/4k/8k | Plus 2k/4k SL3 | JCOP 31/41
MANUFACTURER : ST Microelectronics SA France
 ATS : 05 75 80 60 02 BB 58
       -  TL : length is 5 bytes
       -  T0 : TA1 is present, TB1 is present, TC1 is present, FSCI is 5 (FSC = 64)
       - TA1 : different divisors are NOT supported, DR: [], DS: []
       - TB1 : SFGI = 0 (SFGT = (not needed) 0/fc), FWI = 6 (FWT = 262144/fc)
       - TC1 : NAD is NOT supported, CID is supported
----------------------------------------------
Mifare Plus info:
[=] ATQA: Mifare Plus 4k 7bUID
[=] SAK: Mifare Plus SL0/SL3 or Mifare desfire
[=] Mifare Plus SL mode: SL3

Links

https://hackaday.com/2019/05/05/ripping-up-a-rothult/ https://github.com/CognIot/iCode/tree/master/rfal_v1.3.0