Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add skylanders (/activision) mifare classic to identification procedure #1497

Closed
wants to merge 2 commits into from

Conversation

equipter
Copy link
Contributor

adds Skylanders SAK and ATQA to identification proc

used ATQA1 as necessary (previously marked as unused for Mifare classic)
added ATQA0 == 0x0F ATQA1 == 0x01 SAK == 0x01 for identification proc

Verification

scan a Skylanders or infinity figurine using NFC

Checklist (For Reviewer)

  • PR has description of feature/bug or link to Confluence/Jira task
  • Description contains actions to verify feature/bugfix
  • I've built this code, uploaded it to the device and verified feature/bugfix

@equipter
Copy link
Contributor Author

for reference, this comes at the request of a discord user :P they said they were gonna make an issue later so i had time to kill

@gornekich
Copy link
Member

Hello @equipter
Thanks for PR. Will be merged after verification on Skylanders

Copy link
Member

@gornekich gornekich left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hello @equipter
Skylander figures came to office. After tests I notices that ATQA order check in PR is incorrect. I prepared fix here:
change_atqa_order.txt
You can run git apply change_atqa_order.txt

@V0lk3n
Copy link

V0lk3n commented Aug 2, 2022

Hi! @gornekich, i've tested with your change as i noticed the same thing but you was more fast as me. Unfortunately there is one more change to do about the syntax used on mifare_common.c

I've made the change, compiled the FW, tested and it launch the brute force attack now!!!!!!

Here is the updated
change_atqa_order.txt

@V0lk3n
Copy link

V0lk3n commented Aug 2, 2022

As proof (sorry in advance if the picture are large im doing it from phone)

IMG_20220802_183034.jpg

IMG_20220802_183029.jpg

@V0lk3n
Copy link

V0lk3n commented Aug 2, 2022

Hi! @gornekich, i've tested with your change as i noticed the same thing but you was more fast as me. Unfortunately there is one more change to do about the syntax used on mifare_common.c

I've made the change, compiled the FW, tested and it launch the brute force attack now!!!!!!

Here is the updated change_atqa_order.txt

The change was about change this :

((ATQA0 == 0x01) && (ATQA1 == 0x0F) && (SAK == 0x01))) {//skylanders identification handling

To this

((ATQA0 == 0x01 || ATQA1 == 0x0F) && (SAK == 0x01))) { //skylanders identification handling

@gornekich
Copy link
Member

Hi @V0lk3n . I managed to generate sectors keys with algorithm from web cite that you mentioned in Issue, added that keys to User dictionary and read all tag.
We will wait for changed form @equipter and merge this

@V0lk3n
Copy link

V0lk3n commented Aug 2, 2022

Hi @V0lk3n . I managed to generate sectors keys with algorithm from web cite that you mentioned in Issue, added that keys to User dictionary and read all tag.
We will wait for changed form @equipter and merge this

So cool! Thanks so much i was going to look at it xD

I ve commented into the PR, the change you mentionned need one more change in my side otherwise he keep didnt detecting it :)

@V0lk3n
Copy link

V0lk3n commented Aug 2, 2022

Hi @V0lk3n . I managed to generate sectors keys with algorithm from web cite that you mentioned in Issue, added that keys to User dictionary and read all tag.
We will wait for changed form @equipter and merge this

So cool! Thanks so much i was going to look at it xD

I ve commented into the PR, the change you mentionned need one more change in my side otherwise he keep didnt detecting it :)

Sorry didnt notice that it is the PR and not my issue xD

V0lk3n added a commit to V0lk3n/flipperzero-firmware that referenced this pull request Aug 2, 2022
Doing a fix about the futur PR about skylander (Reference : flipperdevices#1497)

I  noticed Mifare DESFire having the same syntax, a bit later going into discord i noticed that a discord user was not able to read is DESFire tag anymore. 

I was wondering if this fix can bring back the functionnality but i didnt have the DESFire stuff. I made the PR and let you test :)
V0lk3n added a commit to V0lk3n/flipperzero-firmware that referenced this pull request Aug 2, 2022
I made this PR because i was doing a fix for Skylanders futur PR (Reference: flipperdevices#1497)

I noticed that the DESFire had the same syntax as skylanders before my change. After opening discord, i noticed an user that wasnt able to read is DESFire tag anymore with the newest update.

Maybe this change should fix, but i didn't have any DESFire stuff to test, i put this in your hand :P
@gornekich
Copy link
Member

No changes. I add it myself #1553

@gornekich gornekich closed this Aug 7, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
NFC NFC-related
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants