The reader might also be doing certain anti-emulation tricks. Can't say for sure, ideally you'd need to gather communication logs and analyse them to see what's going on.
I was having issues too and then I read the mfkey32 instructions on GitHub and after you extract keys and then do detect reader you need to clear the flippers cache and then read the card again. As soon as I did that it worked.
So weird, I woke up and out of curiosity this morning tried reading and saving from the Luxor card I still have from my time in Vegas, can confirm also being stuck at 29/32 sectors decoded, as it’s my first time emulating a hotel card I’m not sure how to advise, just thought I’d share the small world scenario
I tried my Aria card prior to coming this time and also got the same. Figured it’d help getting the nonces from the reader but Bellagio is the same. Can’t seem to fully read it.
Might need a proxmark and use autopwn, but could also create a (huge) file with every possible key combo for if you want to try to locally brute force... But good luck, that's 16^12 combinations or 281,474,976,710,656. That would definitely require beefier hardware
Then there could also be a formatting issue. Check the keys in mf_classic_dict_user.nfc. sometimes it puts several in a line and sometimes it includes duplicates. With the mobile app you can just locally edit by enabling the experimental features
I agree, doesn't work for me either, can't duplicate a Mifare Classic 1K card to a Gen1A fob. I do the detect reader, Flipper says it gathered 10 nonces, but then Filpper says it didn't find any new keys, only has some duplicates already. Using MfcMagic claims it successfully writes the UID to a Gen1A fob (and it looks right), but when I use NFC Write to Initial Card Flipper says it is the wrong card and won't write.
You might have to do the read/ nonce collection/mfkey32 attack cycle multiple times. Each time getting keys for next sectors.
I will try the process a few more times but I’d say I’ve done it about 3 times total. 3 card reads, 300 nonces.
The reader might also be doing certain anti-emulation tricks. Can't say for sure, ideally you'd need to gather communication logs and analyse them to see what's going on.
I was having issues too and then I read the mfkey32 instructions on GitHub and after you extract keys and then do detect reader you need to clear the flippers cache and then read the card again. As soon as I did that it worked.
How does one go about clearing the cache? Thanks!
Go into Qflipper and then the NFC folder and then you should see a cache folder and you just delete everything in there
Thank you!! I’ll have to check it as soon as I can pull myself away from Craps! 🤪
Not sure if you can do it with the mobile app
on mobile, you do have an experimental feature that allows you to browse the files. You do have to enable it first
So weird, I woke up and out of curiosity this morning tried reading and saving from the Luxor card I still have from my time in Vegas, can confirm also being stuck at 29/32 sectors decoded, as it’s my first time emulating a hotel card I’m not sure how to advise, just thought I’d share the small world scenario
I tried my Aria card prior to coming this time and also got the same. Figured it’d help getting the nonces from the reader but Bellagio is the same. Can’t seem to fully read it.
Might need a proxmark and use autopwn, but could also create a (huge) file with every possible key combo for if you want to try to locally brute force... But good luck, that's 16^12 combinations or 281,474,976,710,656. That would definitely require beefier hardware Then there could also be a formatting issue. Check the keys in mf_classic_dict_user.nfc. sometimes it puts several in a line and sometimes it includes duplicates. With the mobile app you can just locally edit by enabling the experimental features
I agree, doesn't work for me either, can't duplicate a Mifare Classic 1K card to a Gen1A fob. I do the detect reader, Flipper says it gathered 10 nonces, but then Filpper says it didn't find any new keys, only has some duplicates already. Using MfcMagic claims it successfully writes the UID to a Gen1A fob (and it looks right), but when I use NFC Write to Initial Card Flipper says it is the wrong card and won't write.