Super Sniffer Card MiFare

A detection card is a type of card similar to a chameleon that reads random numbers from the M1 card during interaction by grabbing two or more times. After grabbing, other software reads the captured random numbers, supplemented by the card's UID, and combined with the MfKey32 algorithm, the key of the detected card can be recovered.

There is a certain amount of storage space inside the detection card, which can store up to 7 sets of random numbers during reader interaction, and the card number can be modified at any time.

The detection card supports M1 card key retrieval of 1K&4K, 4-byte & 7-byte types. When retrieving the key, only one card number needs to be set, and then the card can be placed on the reading head and swiped 2-3 times to resolve the password of the sector accessed by the reading head through other software.

Specifications:

Protocol: ISO14443-A/B 13.56MHz
Package: White card

UID Byte length: 4 or 7 Byte

Card capacity: 1K &  4k

Once you place the super sniffer card to the RFID reader, the card would copy the sector keys to the card with the UID identified.

Instructions for use:

Set desired UID to Super Sniffer Card via Android App or Proxmark3.

Go to the RFID reader and tap the card.

The reader will respond to the card and walk away.

Instructions for using the PM3

Modify the Super Sniffer card UID

Modify the card UID command is:

hf 14a raw -sc -t 1000 cf00000000cd00<UID>

For example, to modify the UID  to ‘04825461’, you should enter a command on the command line:

hf 14a raw-sc-t 1000 cf00000000cd0004825461

Return 90 00 [FD 07] is modified successfully.

Swipe the Super Sniffer card at the header or simulate a “swipe card” with PM3

[If you have a reader, return the detection card 2 to 3 times and continue on PM3.]

The PM3 is used to test the card. The command is hf mf rdbl, reads one or more blocks twice continuously, and requires reads with the same password.The read fails, which is normal. After the read is completed, you can use the detection card read command to calculate the password.

For example:
analog read B584125A3011 read with password zone 00 block:

hf mf rdbl blk 0-k B584125A3011

Read the Super Sniffer card and calculate the password

When the detection card has been (simulated) after the credit card. Using the hf mf super command, you can automatically read the sniffing password data from the detection card (PM3 can only read the last key, to read multiple please use the phone APP). Note that before reading the password, make sure that your detection card type (1K & 4K) is in the block area that you read.

For example: Read the key,

hf mf super

Description of mobile phone use

Open the APP, enter the welcome interface, and touch “NEXT” to start using the detection card.

After clicking NEXT, enter the selection interface, and you can choose

• to read the key from the detection card: namely, read out the key in the detection card through the phone and display.
• starts a new sniffing process for an M1 card: sniffing a previously unsniffing card needs to set the number of the detection card to be the same as the card to be detected, and automatically guide you to swipe your card to sniff and read the key.

UID Reset

The detection card is specially designed, the data does not need to be cleared (erased, formatted, deleted), just modify the card number can start sniffing at any time, the new data will automatically cover the old data

Note:

• There are no versions of the software available for Apple series devices.
• Not all mobile phones support brush detection card reading key, it is recommended to use NXP series NFC chip (such as: PN80T, SN100T) mobile phones.If you do not respond to the detection card on the phone, please change the angle and brush a few times, or reopen the NFC.
• Some phones will leave a [A0A1A2A3A4A5] password in the detection card because the NFC HAL layer of these phones will automatically detect whether the card is a certain type of bus card, and try to read the balance of the card.
• Super Sniffer card stores multiple groups (up to 3 groups) of keys simultaneously. Therefore, an incomplete swipe card will not destroy the previously stored key data, so the card can be assured to swipe on the reader, without worrying about the loss of sniffing content, as long as the sniffing will be able to save the data, as far as possible the card close to the reader and change the angle, in order to improve the success rate of sniffing.