Online Galaxy | Your Online Space

Blogs

NEW Ultimate Magic Card Fob Gne4

<h2 style="margin:0pt 0pt 6pt;margin-bottom:6pt;margin-top:0pt;margin-left:0pt;margin-right:0pt;padding:0pt 0pt 0pt 0em;padding-bottom:0pt;padding-top:0pt;padding-right:0pt">Description</h2>Ultimate Magic Card + RFID Card Writer + SoftwareProduct IntroductionThis card supports multiple functions. The ATQA/SAK/ATS/byte length/card number (UID)/M1 area size of any card can be modified at will without any restrictions. It can read and write any block like UID card without password. At the same time, it can also be transformed into an Ultralight card, and it also supports rolling code recovery card mode, and it supports rolling code recovery after key modification. At the same time, it is also a 14B card with a card number that can be modified at will. The card backdoor command supports setting a password. If the password is incorrect, the card configuration cannot be modified. It supports Recovery mode. If the card encounters abnormal interference, it will enter the recovery mode, which can be reconfigured, which greatly reduces the chance of your card being damaged.SpecificationsProtocol: ISO14443-A/B 13.56MHz Package: white card Byte length: 4 or 7 or 10 bytes Card capacity: up to 4K bytes ATS: Can be modified, or not usedInstructions for useThis card uses private commands to modify internal data. The data supported for modification are:· ATQA modificationThe user can customize ATQA with a length of two bytes, which is the opposite of the result read by Pm3. It should be noted that if the card byte length> 4 bytes, then it must be 004X (Pm3 order)· SAK modificationUsers can customize SAK, one bytehf 14a raw -s -c -t 1000 cf0000000035<ATQA><SAK>*ATQA may be reversed on Pm3Example: hf 14a raw -s -c -t 1000 cf0000000035440028Modify ATQA=00 44 SAK=28 (note that ATQA on Pm3 is reversed)· ATS modificationThe user can customize the ATS of any length, or not open the ATS. It should be noted that when SAK=20,28, ATS must be turned on, otherwise the card will not be recognized!Set up ATS:hf 14a raw -s -c -t 1000 cf0000000034<length><ATS>*The length is set to 0, which means that ATS is not sent*When SAK is 20 or 28, ATS must be set, otherwise the card cannot be read*The last two digits of ATS are CRC and cannot be counted as lengthExample: hf 14a raw -s -c -t 1000 cf000000003406067577810280Modify ATS to 0606757781028002F0· Byte length modificationUsers can switch between 4, 7, and 10 byte lengths at willhf 14a raw -s -c -t 1000 cf0000000068<Param>Param=00: 4 bytes 01: 7 bytes 02: 10 bytesExample: hf 14a raw -s -c -t 1000 cf000000006801Modify the card number length to 7 bytes· 14443A/B-UID modificationModifying block 0 in area 0 means modifying the UID of the card. It should be noted that this area cannot be read and written by password, and must be written through backdoor instructions! See below for details: Read and write any block· Ultralight protocol switchTurning on this switch allows to read and write each block without a password. In this mode, if SAK=00 ATQA=0044 (Pm3 sequence), it can become an Ultralight card Set Ultralight modehf 14a raw -s -c -t 1000 cf0000000069<00>01: UL agreement opened00: UL agreement closed· Rolling code restore switchThis mode is divided into four states: off (pre-write), on (on restore), don’t care, and high-speed read and write. If you don’t need it, please set it to “don’t care” to avoid affecting performance. If you use it, please enter the pre-write mode first. At this time, write the full card data. After writing, set it to on. At this time, after writing the data, the first time you read the data just written, the next time you read It is the pre-written data. All modes support this operation. It should be noted that using any block to read and write in this mode may give wrong results.If it is an Ultralight card, in order to improve the response speed, please set it to “High Speed Reading and Writing”.hf 14a raw -s -c -t 1000 cf0000000032<parameter>—- ———————————————|Parameter| Description |—- ———————————————| 00 | Closed, shadow data can be written at this time || 01 | Open, start restore || 02 | Turn it off completely, as a normal card || 03 | High-speed read and write mode |—- ———————————————· Any block read and writeUsing the backdoor command can read and write any area without password, similar to UID card, it should be noted that this command must be used to modify UID.Backdoor card reading:hf 14a raw -s -c -t 1000 cf00000000CE<block number>Backdoor write card:hf 14a raw -s -c -t 1000 cf00000000CD<block number><single block data>· Fast card issueThis operation can directly write all the configurations into the card (except the card number) with one instruction. It is valid in Recovery mode or when the card is issued by the machine.<Refer to the attached code for this mode>It is recommended that you use this mode.· Backdoor password settingAll backdoor operations are protected by passwords. If the password is incorrect, the card will not reply to any information. The user can set the backdoor password to avoid possible card tracking. It should be noted that once the password is forgotten, the card will be scrapped and can only be returned to production again.Modify the backdoor passwordhf 14a raw -s -c -t 1000 cf00000000feaabbccddModify the original password 00000000 to aabbccdd AttentionDescription of Recovery ModeThe card number becomes: 01023304 and it enters Recovery mode. In this mode, you can only passQuick issueTo repair the card.· Code1. private string generateSendChangableData(){string bkdat = “CF00000000″+(cmb_fuse.Checked?”F1″:”F0”);bkdat += chk_ul_en.Checked ? “01” : “00”;if (rb_10b.Checked)bkdat += “02”;else if (rb_7b.Checked)bkdat += “01”;elsebkdat += “00”;bkdat += txt_bk_pwd.Text;this.Invoke(new Action(() =>{bkdat += “0” + cmb_shadow.SelectedIndex;}));this.Invoke(new Action(() =>{ if (cmb_ats_len.Text == “No ATS”)bkdat += “00”;elsebkdat += cmb_ats_len.Text;}));bkdat += txt_ats_dat.Text;bkdat += txt_atqa.Text.Substring(2, 2);bkdat += txt_atqa.Text.Substring(0, 2);bkdat += txt_sak.Text;this.Invoke(new Action(() =>{bkdat += “0” + cmb_ul_mode.SelectedIndex;}));return bkdat;}Demo Program1. FuseTool fast card issuance routine2. Pm-Proxmark3 Python Write Sample CodeCard variant can change from:· <p style="margin:0pt 0pt 3.6pt 22.3pt;margin-bottom:3.6pt;margin-top:0pt;margin-left:22.3pt;margin-right:0pt;padding:0pt 0pt 0pt 0em;padding-bottom:0pt;padding-top:0pt;padding-right:0pt" class="MsoNormal">· UID Length<p style="margin:0pt 0pt 3.6pt 22.3pt;margin-bottom:3.6pt;margin-top:0pt;margin-left:22.3pt;margin-right:0pt;padding:0pt 0pt 0pt 0em;padding-bottom:0pt;padding-top:0pt;padding-right:0pt" class="MsoNormal">· Card Type<p style="margin:0pt 0pt 3.6pt 22.3pt;margin-bottom:3.6pt;margin-top:0pt;margin-left:22.3pt;margin-right:0pt;padding:0pt 0pt 0pt 0em;padding-bottom:0pt;padding-top:0pt;padding-right:0pt" class="MsoNormal">· SAK<p style="margin:0pt 0pt 3.6pt 22.3pt;margin-bottom:3.6pt;margin-top:0pt;margin-left:22.3pt;margin-right:0pt;padding:0pt 0pt 0pt 0em;padding-bottom:0pt;padding-top:0pt;padding-right:0pt" class="MsoNormal">· ATQA<p style="margin:0pt 0pt 3.6pt 22.3pt;margin-bottom:3.6pt;margin-top:0pt;margin-left:22.3pt;margin-right:0pt;padding:0pt 0pt 0pt 0em;padding-bottom:0pt;padding-top:0pt;padding-right:0pt" class="MsoNormal">· ATS<p style="margin:0pt 0pt 3.6pt 22.3pt;margin-bottom:3.6pt;margin-top:0pt;margin-left:22.3pt;margin-right:0pt;padding:0pt 0pt 0pt 0em;padding-bottom:0pt;padding-top:0pt;padding-right:0pt" class="MsoNormal">· Shadow mode – Gen3 GTU (Card data will revert back to known data)<p style="text-align:left;margin:0pt 0pt 3.6pt 22.3pt;margin-bottom:3.6pt;margin-top:0pt;margin-left:22.3pt;margin-right:0pt;padding:0pt 0pt 0pt 0em;padding-bottom:0pt;padding-top:0pt;padding-right:0pt" class="MsoNormal" align="left">· Bk Password – Custom BackdoorKnown Preset Change Available:00001. <p style="margin:0pt 0pt 3.6pt 27.1pt;margin-bottom:3.6pt;margin-top:0pt;margin-left:27.1pt;margin-right:0pt;padding:0pt 0pt 0pt 0em;padding-bottom:0pt;padding-top:0pt;padding-right:0pt" class="MsoNormal">1. MIFARE Mini<p style="margin:0pt 0pt 3.6pt 27.1pt;margin-bottom:3.6pt;margin-top:0pt;margin-left:27.1pt;margin-right:0pt;padding:0pt 0pt 0pt 0em;padding-bottom:0pt;padding-top:0pt;padding-right:0pt" class="MsoNormal">2. MIFARE 1k S50 4 byte UID<p style="margin:0pt 0pt 3.6pt 27.1pt;margin-bottom:3.6pt;margin-top:0pt;margin-left:27.1pt;margin-right:0pt;padding:0pt 0pt 0pt 0em;padding-bottom:0pt;padding-top:0pt;padding-right:0pt" class="MsoNormal">3. MIFARE 1k S50 7 byte UID<p style="margin:0pt 0pt 3.6pt 27.1pt;margin-bottom:3.6pt;margin-top:0pt;margin-left:27.1pt;margin-right:0pt;padding:0pt 0pt 0pt 0em;padding-bottom:0pt;padding-top:0pt;padding-right:0pt" class="MsoNormal">4. MIFARE 1k S50 10 byte UID<p style="margin:0pt 0pt 3.6pt 27.1pt;margin-bottom:3.6pt;margin-top:0pt;margin-left:27.1pt;margin-right:0pt;padding:0pt 0pt 0pt 0em;padding-bottom:0pt;padding-top:0pt;padding-right:0pt" class="MsoNormal">5. MIFARE 4k S70 4 byte UID<p style="margin:0pt 0pt 3.6pt 27.1pt;margin-bottom:3.6pt;margin-top:0pt;margin-left:27.1pt;margin-right:0pt;padding:0pt 0pt 0pt 0em;padding-bottom:0pt;padding-top:0pt;padding-right:0pt" class="MsoNormal">6. MIFARE 4k S70 7 byte UID<p style="margin:0pt 0pt 3.6pt 27.1pt;margin-bottom:3.6pt;margin-top:0pt;margin-left:27.1pt;margin-right:0pt;padding:0pt 0pt 0pt 0em;padding-bottom:0pt;padding-top:0pt;padding-right:0pt" class="MsoNormal">7. MIFARE 4k S70 10 byte UID<p style="margin:0pt 0pt 3.6pt 27.1pt;margin-bottom:3.6pt;margin-top:0pt;margin-left:27.1pt;margin-right:0pt;padding:0pt 0pt 0pt 0em;padding-bottom:0pt;padding-top:0pt;padding-right:0pt" class="MsoNormal">8. Ultralight<p style="margin:0pt 0pt 3.6pt 27.1pt;margin-bottom:3.6pt;margin-top:0pt;margin-left:27.1pt;margin-right:0pt;padding:0pt 0pt 0pt 0em;padding-bottom:0pt;padding-top:0pt;padding-right:0pt" class="MsoNormal">9. Ultralight-C<p style="margin:0pt 0pt 3.6pt 27.1pt;margin-bottom:3.6pt;margin-top:0pt;margin-left:27.1pt;margin-right:0pt;padding:0pt 0pt 0pt 0em;padding-bottom:0pt;padding-top:0pt;padding-right:0pt" class="MsoNormal">10. Ultralight Ev1<p style="margin:0pt 0pt 3.6pt 27.1pt;margin-bottom:3.6pt;margin-top:0pt;margin-left:27.1pt;margin-right:0pt;padding:0pt 0pt 0pt 0em;padding-bottom:0pt;padding-top:0pt;padding-right:0pt" class="MsoNormal">11. NTAG· Software: Fuse ToolULTIMATE MAGIC CARD (GEN4)The Ultimate Magic Card is multi-purpose emulation card, supporting customisable card type, card configuration and functionality mode. It is essentially a completely configurable emulation platform in card format. Configurable Card TypesThe Ultimate Magic Card contains presets of multiple card types: MIFARE MiniMIFARE 1k S50 4 byte UIDMIFARE 1k S50 7 byte UIDMIFARE 1k S50 10 byte UIDMIFARE 4k S70 4 byte UIDMIFARE 4k S70 7 byte UIDMIFARE 4k S70 10 byte UIDUltralightUltralight-CUltralight Ev1NTAGAs below, all ATQA/ATS/ATS values are freely configurable allowing for emulation of other or custom chipsets Configurable ParametersThe card supports configuration of the following parameters: Preset Card TypeUIDUID Length (4-byte / 7-byte / 10-byte)SAK (1 byte)ATQA (2 bytes)ATS (Custom length / Disable)Configurable FunctionalityThe card has several modes of operation, depending on your requirements Shadow ModeShadow Mode, or "Write once then forget" mode, allows the card to be pre-configured with data. When next updated (ie, via a card reader / access control reader), modifications are temporarily maintained. The modified data can be read once, and then the card reverts to its pre-configured state. Shadow Mode is purpose built for in-the-field operations. Previously a card would have to be written, used, read and re-written manually; Shadow Mode takes care of this without any additional hardware. Recovery ModeIf the card is poorly configured, it can be pushed back into Recovery Mode - preventing unintentional bricking. Auto-BCC CalculationThe card automatically calculates BCC values, saving time and avoiding making the card undetectable.Password Protection / One-Time-Write EmulationConfiguration commands can be protected with a customisable password; it will not respond to magic commands or direct writes to restricted values unless the correct password is given, allowing the card to function as a "One-Time-Write" card. Programming CompatibilityThe card can be programmed on multiple platforms:iCopy-XS (via the menu with LUA scripts) or in PC-ModeProxmark3 RDV4.01 (via manual commands or LUA scripts)LibNFC (via manual commands)Windows Platforms + LibNFC reader/writer (via GUI software)TECHNICAL RESOURCESUltimate Magic Card Command DocumentationProxmark / iCopy-XS LUA Script DocumentationProgramming Tool (Windows) TECHNICAL RESOURCESUltimate Magic Card Command Documentationhttps://github.com/RfidResearchGroup/proxmark3/blob/master/doc/magic_cards_notes.md#gen-4-gtuProxmark / iCopy-XS LUA Script Documentationhttps://github.com/RfidResearchGroup/proxmark3/blob/master/doc/magic_cards_notes.md#magic-commands-8Programming Tool (Windows)Contact buyer.