Description
Ultimate Magic Card + RFID Card Writer + Software
Product Introduction
This card supports multiple functions. The ATQA/SAK/ATS/byte length/card number (UID)/M1 area size of any card can be modified at will without any restrictions. It can read and write any block like UID card without password. At the same time, it can also be transformed into an Ultralight card, and it also supports rolling code recovery card mode, and it supports rolling code recovery after key modification. At the same time, it is also a 14B card with a card number that can be modified at will. The card backdoor command supports setting a password. If the password is incorrect, the card configuration cannot be modified. It supports Recovery mode. If the card encounters abnormal interference, it will enter the recovery mode, which can be reconfigured, which greatly reduces the chance of your card being damaged.
Specifications
Protocol: ISO14443-A/B 13.56MHz
Package: white card
Byte length: 4 or 7 or 10 bytes
Card capacity: up to 4K bytes
ATS: Can be modified, or not used
Instructions for use
This card uses private commands to modify internal data. The data supported for modification are:
- ATQA modification
The user can customize ATQA with a length of two bytes, which is the opposite of the result read by Pm3. It should be noted that if the card byte length> 4 bytes, then it must be 004X (Pm3 order)
- SAK modification
Users can customize SAK, one byte
hf 14a raw -s -c -t 1000 cf0000000035<ATQA><SAK>
*ATQA may be reversed on Pm3
Example: hf 14a raw -s -c -t 1000 cf0000000035440028
Modify ATQA=00 44 SAK=28 (note that ATQA on Pm3 is reversed)
- ATS modification
The user can customize the ATS of any length, or not open the ATS. It should be noted that when SAK=20,28, ATS must be turned on, otherwise the card will not be recognized!
Set up ATS:
hf 14a raw -s -c -t 1000 cf0000000034<length><ATS>
*The length is set to 0, which means that ATS is not sent
*When SAK is 20 or 28, ATS must be set, otherwise the card cannot be read
*The last two digits of ATS are CRC and cannot be counted as length
Example: hf 14a raw -s -c -t 1000 cf000000003406067577810280
Modify ATS to 0606757781028002F0
- Byte length modification
Users can switch between 4, 7, and 10 byte lengths at will
hf 14a raw -s -c -t 1000 cf0000000068<Param>
Param=00: 4 bytes 01: 7 bytes 02: 10 bytes
Example: hf 14a raw -s -c -t 1000 cf000000006801
Modify the card number length to 7 bytes
- 14443A/B-UID modification
Modifying block 0 in area 0 means modifying the UID of the card. It should be noted that this area cannot be read and written by password, and must be written through backdoor instructions! See below for details: Read and write any block
- Ultralight protocol switch
Turning on this switch allows to read and write each block without a password. In this mode, if SAK=00 ATQA=0044 (Pm3 sequence), it can become an Ultralight card
Set Ultralight mode
hf 14a raw -s -c -t 1000 cf0000000069<00>
01: UL agreement opened
00: UL agreement closed
- Rolling code restore switch
This mode is divided into four states: off (pre-write), on (on restore), don’t care, and high-speed read and write. If you don’t need it, please set it to “don’t care” to avoid affecting performance. If you use it, please enter the pre-write mode first. At this time, write the full card data. After writing, set it to on. At this time, after writing the data, the first time you read the data just written, the next time you read It is the pre-written data. All modes support this operation. It should be noted that using any block to read and write in this mode may give wrong results.
If it is an Ultralight card, in order to improve the response speed, please set it to “High Speed Reading and Writing”.
hf 14a raw -s -c -t 1000 cf0000000032<parameter>
—- ———————————————
|Parameter| Description |
—- ———————————————
| 00 | Closed, shadow data can be written at this time |
| 01 | Open, start restore |
| 02 | Turn it off completely, as a normal card |
| 03 | High-speed read and write mode |
—- ———————————————
- Any block read and write
Using the backdoor command can read and write any area without password, similar to UID card, it should be noted that this command must be used to modify UID.
Backdoor card reading:
hf 14a raw -s -c -t 1000 cf00000000CE<block number>
Backdoor write card:
hf 14a raw -s -c -t 1000 cf00000000CD<block number><single block data>
- Fast card issue
This operation can directly write all the configurations into the card (except the card number) with one instruction. It is valid in Recovery mode or when the card is issued by the machine.
<Refer to the attached code for this mode>
It is recommended that you use this mode.
- Backdoor password setting
All backdoor operations are protected by passwords. If the password is incorrect, the card will not reply to any information. The user can set the backdoor password to avoid possible card tracking. It should be noted that once the password is forgotten, the card will be scrapped and can only be returned to production again.
Modify the backdoor password
hf 14a raw -s -c -t 1000 cf00000000feaabbccdd
Modify the original password 00000000 to aabbccdd
Attention
Description of Recovery Mode
The card number becomes: 01023304 and it enters Recovery mode. In this mode, you can only pass
⭐Quick issue
To repair the card.
- Code
- private string generateSendChangableData()
{
string bkdat = “CF00000000″+(cmb_fuse.Checked?”F1″:”F0”);
bkdat += chk_ul_en.Checked ? “01” : “00”;
if (rb_10b.Checked)
bkdat += “02”;
else if (rb_7b.Checked)
bkdat += “01”;
else
bkdat += “00”;
bkdat += txt_bk_pwd.Text;
this.Invoke(new Action(() =>
{
bkdat += “0” + cmb_shadow.SelectedIndex;
}));
this.Invoke(new Action(() =>
{
if (cmb_ats_len.Text == “No ATS”)
bkdat += “00”;
else
bkdat += cmb_ats_len.Text;
}));
bkdat += txt_ats_dat.Text;
bkdat += txt_atqa.Text.Substring(2, 2);
bkdat += txt_atqa.Text.Substring(0, 2);
bkdat += txt_sak.Text;
this.Invoke(new Action(() =>
{
bkdat += “0” + cmb_ul_mode.SelectedIndex;
}));
return bkdat;
}
Demo Program
- FuseTool fast card issuance routine
- Pm-Proxmark3 Python Write Sample Code
Card variant can change from:
-
- UID Length
- Card Type
- SAK
- ATQA
- ATS
- Shadow mode – Gen3 GTU (Card data will revert back to known data)
- Bk Password – Custom Backdoor
Known Preset Change Available:
-
- MIFARE Mini
- MIFARE 1k S50 4 byte UID
- MIFARE 1k S50 7 byte UID
- MIFARE 1k S50 10 byte UID
- MIFARE 4k S70 4 byte UID
- MIFARE 4k S70 7 byte UID
- MIFARE 4k S70 10 byte UID
- Ultralight
- Ultralight-C
- Ultralight Ev1
- NTAG
- Software: Fuse Tool
Reading the Ultimate Magic Card < Click Here
RlDmwYKNx –
epgXOwknjEsuL
caONHIPihkfx –
znvtMWjmA
zoritoler imol –
My partner and I stumbled over here by a different web address and thought I may as well check things out. I like what I see so i am just following you. Look forward to looking at your web page for a second time.
https://www.zoritolerimol.com
ZUzBGeiugmjH –
DXjsJfBw
vorbelutr ioperbir –
Hiya, I’m really glad I’ve found this info. Today bloggers publish only about gossips and net and this is really annoying. A good blog with interesting content, this is what I need. Thanks for keeping this site, I’ll be visiting it. Do you do newsletters? Cant find it.
http://www.vorbelutrioperbir.com
jFAmIGRvu –
emqPZDnfF
slotbesar –
Hi would you mind letting me know which hosting company you’re working with? I’ve loaded your blog in 3 completely different browsers and I must say this blog loads a lot faster then most. Can you suggest a good web hosting provider at a fair price? Thanks, I appreciate it!
https://playslot77jackpot.win/slot/sbo_slot
segla i Kroatien –
I am no longer certain where you’re getting your info, but good topic. I must spend a while finding out more or working out more. Thanks for fantastic info I used to be in search of this information for my mission.
https://www.touradria.se
LxQwoNspgtHDq –
DxaFnVEqSs
Purifier –
I have not checked in here for some time because I thought it was getting boring, but the last several posts are great quality so I guess I’ll add you back to my everyday bloglist. You deserve it my friend 🙂
https://saberdistributors.com/xcart/air-purifiers/khaos-
Betwing88 –
Hi, Neat post. There is a problem with your web site in internet explorer, would check this… IE still is the market leader and a good portion of people will miss your great writing because of this problem.
https://betwing88.wheelmonk.com/
safety work shoe –
Some genuinely tremendous work on behalf of the owner of this web site, dead great written content.
https://safety-shoe.com.my/
XiaAncrokej –
YufQpVPDJGUsd
luxury queen bedroom sets –
Great info and straight to the point. I don’t know if this is in fact the best place to ask but do you folks have any ideea where to hire some professional writers? Thank you 🙂
https://www.luxurylivingroomfurnitures.com
Aloë Vera Gel –
of course like your website but you need to take a look at the spelling on quite a few of your posts. Several of them are rife with spelling problems and I find it very troublesome to inform the truth then again I will certainly come again again.
https://www.forever-aloe-vera.com/
poe lighting –
Have you ever thought about publishing an ebook or guest authoring on other websites? I have a blog based upon on the same information you discuss and would love to have you share some stories/information. I know my readers would appreciate your work. If you are even remotely interested, feel free to send me an e-mail.
https://lvenergysystems.com
dog travel –
Good article and straight to the point. I am not sure if this is truly the best place to ask but do you guys have any thoughts on where to hire some professional writers? Thx 🙂
https://anythingfordogs.com
ZMDclTnGqusf –
aXgLWqKZBtk
สล็อตแตกง่าย –
What i do not understood is in fact how you’re no longer really a lot more neatly-liked than you may be now. You are so intelligent. You recognize therefore considerably with regards to this matter, produced me for my part imagine it from a lot of numerous angles. Its like women and men don’t seem to be involved unless it is one thing to do with Girl gaga! Your personal stuffs great. Always maintain it up!
https://www.vipbetflex.com
Crowdsale Contract Builder –
You made some decent points there. I did a search on the topic and found most people will approve with your blog.
https://officeblock.io
Token Standards Generator (e.g., ERC-721, ERC-1155) –
I used to be suggested this website through my cousin. I am no longer positive whether this post is written by means of him as no one else recognize such specific approximately my problem. You’re amazing! Thanks!
https://officeblock.io
rwWadDXhJxq –
sPbBkURyYW
eMPFfHaYcgLrsOTx –
dFWlAoUXOzEbvwQ