Thanks in advance.

Muzik

Out of interest, what would be necessary to add support for reading/writing data, and running the "Get UID" and "Get System Information Command" commands mentioned in Maxim's datasheet?

I can successfully obtain identifying information from my 2 free sample cards that I managed to recently obtain:

tyson@UmBongo:~$ nfc-list 
nfc-list uses libnfc 1.5.0 (r1122)
Connected to NFC device: ACS ACR122U 00 00 / ACR122U103 - PN532 v1.6 (0x07)
2 ISO14443B passive target(s) found:
               PUPI: 34  ab  02  00  
   Application Data: 30  00  2b  e0  
      Protocol Info: 77  21  71  

               PUPI: a2  a6  02  00  
   Application Data: 30  00  2b  e0  
      Protocol Info: 77  21  71  


tyson@UmBongo:~$ lsnfc 
device = ACS ACR122U 00 00 / ACR122U103 - PN532 v1.6 (0x07)
  ISO14443B: PUPI: 34ab0200 Application Data: 30002be0 Protocol Info: 772171
  ISO14443B: PUPI: a2a60200 Application Data: 30002be0 Protocol Info: 772171
2 tag(s) on device.

I could probably have a look into the codebase (beyond the bits that I've played with, previously), since I have knowledge of C and C++ - but limited time for a full investigation, since I'm busy with other things at the moment.

Thanks.

Acording ISO 14443, I do thouse steps:
1) Request
where gets atq
2) Anticoll
gets id of chips
2) Select card
gets sak

Then I send command RATS (Request answer to select)

    MFRC_Write(FIFOData, RATS);
    // Set parameter byte codes FSDI and CID, get 64 bytes
    MFRC_Write(FIFOData, 0x50);
    code = MFRC_Transceive();

As result:  0D 78 77 B1 02 4A 43 4F 50 76 32 34 31 00 00 00

Then I wand send APDU command...

How do it?

Thank you!

ReadNavigo.sh reads the records of a french Navigo Pass (tested on a
"Découverte")
https://secure.wikimedia.org/wikipedia/ … avigo_pass

ReadMobib.sh reads the records of a belgian Mobib
https://secure.wikimedia.org/wikipedia/fr/wiki/MoBIB

These scripts only extract the data, they don't interpret them
but ReadMobib.sh output is compatible with MOBIB Extractor.

I am trying to build RFID reader based on pn531 (which can not read ISO14443 type B). Unfortunately it can't read HID's iClass cards.
My question is - what type of card is it? Is it type B?
I have CardMan 5321 which can read the iClasses. The reader is build with NXP's RC632  RFID reader chip.

Thank you in advance.

M.K.

My reader device is the touchatag reader, which according to its specs should also support these ISO14443 Type B tags:
http://www.touchatag.com/touchatag-rfid-reader

I have been trying to read those tags using the latest SVN version 253 of libnfc by selecting ISO14443B_106 using the following code:
nfc_initiator_select_tag(pnd,NM_ISO14443B_106,NULL,0,&nti)

Unfortunately none of the two tickets I have is recognized. Did I miss something I should consider for these tag types?
I'd like to add support for these tags to my application, since this might be simply a cheap source of RFID tags.

best regards,
Martin.K

how do i read and write to a simple 14443 tag. Note it's not mifare or other type of tag, it's a plain 14443A.

just want to write a 64 byte, and read multiple of 128 bytes.

Thanks in advance !

-Kunal

I search to established a PoC with your relay attack but unsuccesfully.
As you can see, I started a comversation on the proxmark forum : http://www.proxmark.org/forum/topic/247/relay-attack/
where I explain my issue. Could you help me ?
I copy the piece of conversation that we interested :

"I tested the relay exemple but  I think I have the same problem : the Timing. After the first SEL and the RATS command, when the relaying is done between 2 Touchatag (ACR122U102 Rev 1.4), if I try to SEL a Mifare 1k with my Omnikey 5553, the result is I only see the REQA but never the ATQ of the card.
On a documentation I find the possibility to change a parameter in the register of the reader named "SEL Time Iso 14443A", that I increase from 10ms to 255ms, but unsuccessfully. Do you think it is the good parameter ? Do you think 255ms is not enough ? What the difference with the Omnikey 5121 ?"

Thank you