Reading/Writing MiFare Ultralight on Nexus S (ICS) - NFC Hacking

Hi,
I'm looking for a way to read & write on a Mifare Ultralight. I know a couple of applications available on the Play Store allow the possibility to read them, but I didn't find any application allowing me to write back (for example, change the data and save it back).
Is there a way to do so?
Also, is it possible to plug in the Android to my computer to use the NFC capabilities and to code in another language than Java? (some kind of bridge)
Thanks a lot for your support!

jpmonette said:
Hi,
I'm looking for a way to read & write on a Mifare Ultralight. I know a couple of applications available on the Play Store allow the possibility to read them, but I didn't find any application allowing me to write back (for example, change the data and save it back).
Is there a way to do so?
Also, is it possible to plug in the Android to my computer to use the NFC capabilities and to code in another language than Java? (some kind of bridge)
Thanks a lot for your support!
Click to expand...
Click to collapse
Have you tried NXP NFC Writer app? As of now there is no way to use your phone as a USB NFC reader.

Well I have both TagWriter and TagInfo. I can read the content of my NFC chip with TagInfo, but I can't with TagWriter. That's why I'm looking for something else to do the job, but can't find much on the Play Store.

jpmonette said:
Well I have both TagWriter and TagInfo. I can read the content of my NFC chip with TagInfo, but I can't with TagWriter. That's why I'm looking for something else to do the job, but can't find much on the Play Store.
Click to expand...
Click to collapse
Is the tag write locked? Formatting Classic 1K tags to NDEF is part of the standard NFC/NDEF libraries on Android. This allows full write access.
If you're trying to do it without NDEF then you have a different set of issues you'll need to deal with.

Nfc task launcher
Sent from my Nocturnal HOX

krohnjw said:
Is the tag write locked? Formatting Classic 1K tags to NDEF is part of the standard NFC/NDEF libraries on Android. This allows full write access.
If you're trying to do it without NDEF then you have a different set of issues you'll need to deal with.
Click to expand...
Click to collapse
Well, some pages are writable, some others aren't. Still, I can't get it to work with any apps I found (also the one people suggested in here).

Related

Use Android Phone as NFC Tag?

Hello there,
is it possible to use my HTC One X as an NFC Tag?
My goal is to scan a normal NFC Tag (1k) with my phone and store the informations. And then I'll provide this informations with my phone, so an other NFC Reader can read the informations stored on my phone.
Greetz
It is possible as the NXP chip most likely used by the HTC (and known to be in Nexus S/galaxy) can be put into card emulation mode but the current kernel does not support it. There has been at least one user that has gotten it to work on the Nexus S.
Nightskill said:
Hello there,
is it possible to use my HTC One X as an NFC Tag?
My goal is to scan a normal NFC Tag (1k) with my phone and store the informations. And then I'll provide this informations with my phone, so an other NFC Reader can read the informations stored on my phone.
Greetz
Click to expand...
Click to collapse
Hi i believe NFC ReTag will do the trick , or at Least NFC TagReader , can also be use as ask … but that will depend on what you will store in … as you didn’t say it ican’r help you more at this stage.
hope that help
Nightskill said:
Hello there,
is it possible to use my HTC One X as an NFC Tag?
My goal is to scan a normal NFC Tag (1k) with my phone and store the informations. And then I'll provide this informations with my phone, so an other NFC Reader can read the informations stored on my phone.
Greetz
Click to expand...
Click to collapse
I'd really like to do the same thing.. but haven't had any success in finding a way to do that. I would personally love to scan my work badge and use my phone instead of my badge which I commonly leave at home. It would also be great for hotels where I commonly lose my hotel key and could instead use my phone.
Any advice on these being a possibility. Any additional information I need to provide. I personally have the HTC EVO 4G LTE and my wife has the Nexus S 4G that I could use.
card emulation
try NFClassic.apk its in the android market, i cannot confirm it works but it appears to and i will test it tomorrow, it recognises my work card it picks up 2 tags, one will be door access and the other is canteen credit, (the app doesnt tell you this, but i know there 2 parts to the card, as i recently cancelled a card then found it, and can no longer access doors with it, but can still use it in the canteen) anyway the app reads the card and asks if you want to save the info, save it, the you will see it under saved tags click the tag, and click share tag, it then appears to emulate the tag as a card so it can be read by a nfc card reader, but i dont have a reader to confirm this, but i will try it tomorrow night at work to see if the doors accept it, ill let you know my results
and if anyone else know of any apps that can definatley emulate cards on galaxy s 3 let me know ! the more software i can try at work the more likely ill find one that works, i only got my s3 yesterday and have been of work so havnt tested any app, but NFClassic is the only one that appears to emulate my card.
note the app cannot write cards, only has options to write contact to card but when tried it force closes. i would definatly like to be able to write to card if at all possible ( free lunch copy card when it has credit , when run out of credit, re-write info = credit again its gotta be possible somehow ! )
okz19 said:
try NFClassic.apk its in the android market, i cannot confirm it works but it appears to and i will test it tomorrow, it recognises my work card it picks up 2 tags, one will be door access and the other is canteen credit, (the app doesnt tell you this, but i know there 2 parts to the card, as i recently cancelled a card then found it, and can no longer access doors with it, but can still use it in the canteen) anyway the app reads the card and asks if you want to save the info, save it, the you will see it under saved tags click the tag, and click share tag, it then appears to emulate the tag as a card so it can be read by a nfc card reader, but i dont have a reader to confirm this, but i will try it tomorrow night at work to see if the doors accept it, ill let you know my results
and if anyone else know of any apps that can definatley emulate cards on galaxy s 3 let me know ! the more software i can try at work the more likely ill find one that works, i only got my s3 yesterday and have been of work so havnt tested any app, but NFClassic is the only one that appears to emulate my card.
note the app cannot write cards, only has options to write contact to card but when tried it force closes. i would definatly like to be able to write to card if at all possible ( free lunch copy card when it has credit , when run out of credit, re-write info = credit again its gotta be possible somehow ! )
Click to expand...
Click to collapse
You can try, but it's probably not going to work.
Bardamuz said:
Hi i believe NFC ReTag will do the trick , or at Least NFC TagReader , can also be use as ask … but that will depend on what you will store in … as you didn’t say it ican’r help you more at this stage.
hope that help
Click to expand...
Click to collapse
NFC ReTag can´t do that ... but a lot of other cool stuff
I tried nfclassic and that didn't work I'm also looking for NFC card emulation
I'm not sure about other phones but Evo4GLTE's have Android beam that should do what is wanted
This didn't even occur to me til I saw this thread. I will be trying with my work badge since I occasionally forget mine as well...
I am still deciding between getting the S3 and the EVO 4G LTE. Leaning towards evo... but haven't played with the s3 yet.
I don't have your HTC, although there's documented info for the nexus s where devs were successful in emulating mifare most of the code is still on dev android. Its not full reigns of emulation but depending on your level of tech you can do some pretty cool stuff. I don't know how far this has gone but I remember people getting some functionality on new galaxy. Check out the link.
http://techshek4u.blogspot.com/2012/01/applying-card-emulation-patch-to_03.html
How does google wallet do it? Doesn't that emulate a secure card?
Sent from my GT-I9300 using xda premium
Zanith said:
How does google wallet do it? Doesn't that emulate a secure card?
Click to expand...
Click to collapse
I was thinking the same thing!
The most "advanced" operations that i was able to do with the Galaxy Nexus were saving actions with differents cards. But that's all.
By the way, i use NFC ReTag to achieve it.
What I was just referring to was emulation how I perceived the op was looking for. Example you use a card at work to open a door and wanted to emulate that so you could use your phone instead. However with gwallet or say paywave then you'd need to have the secure key which obviously wouldn't just be given out otherwise you would be able to emulate anyone's card. Hence the secure element. Then it would be ridiculously insecure. Ex. If I took a friends paywave and was able to emulate it then now I in theory just stole their credit card . It's also why gwallet won't work without a secure element like on my sgs2.
Sent from my SGH-I777 using xda premium
WOW interesting topic
Nizda1 said:
I don't have your HTC, although there's documented info for the nexus s where devs were successful in emulating mifare most of the code is still on dev android. Its not full reigns of emulation but depending on your level of tech you can do some pretty cool stuff. I don't know how far this has gone but I remember people getting some functionality on new galaxy. Check out the link.
http://techshek4u.blogspot.com/2012/01/applying-card-emulation-patch-to_03.html
Click to expand...
Click to collapse
anyone trythis
ive seen the video after flashing and kinda dissapointed
bcos they cannot prove that nexus s can be the nfc tag anyway they donk have the reader too to test it
Hmmm...
Hey guys.. i went searching in the marketplace for an app that does just that (emulate a RFID)...
And... I FOUND ONE!It's called NFC Classic Tag Reader
It was able to read my cards and apparently emulate it but i have no idea if it works cause my door does not detect it... and i have no other NFC devices...
I'm using a SHS-5120 door lock... and that only registers the serial no of the tags programmed and allows only those to enter...
Read on the comments that ICS users are not getting it to work but previous 2.3.3 user reviewed that it was working like a charm...
Oh and i'm using a S3... which of course is ICS...
I reckoned Google Wallet will store something into the mobile NFC chip. Make the phone like a RFID card or tag.
I also noticed some Korean telecom operators has their apps integrated on the Android phones which have the Membership card, Voucher, Credit card etc. functionality. That means the NFC enabled phone can be acted as RFID card or tag.
Is there anyone know where we can find the source code sample from Google development website we could look into this kind of project?
We have HID sensors on doors at work as well as a clocking in system and both use different cards so I'm going to have a go with them on Monday with my SGS3.
SimonCraddock said:
We have HID sensors on doors at work as well as a clocking in system and both use different cards so I'm going to have a go with them on Monday with my SGS3.
Click to expand...
Click to collapse
any luck with doors?
Anyone any luck with being able to push/publish his phone as a card? Like for instance with doors?
We have Mifare Classic cards which open doors, reading the card isn't a problem, but being able to emulate your phone as a card has proven to be more difficult..
How does one turn his phone into 'beacon mode' (being able to receive the door's power boost and return card info) ?

Card emulation on Galaxy S3 olympics

Just read this article
http://global.samsungtomorrow.com/?p=16659
The interesting thing is that they must have been using the hidden API to be able to use card emulation.
From my experience with hotel nfc cards they often are Mifare UltraLight cards.
Maybe they are giving out special phones using a custom ROM made by samsung that has this enabled.
I'm currently checking the 4.1 sources to see if anything can be done with that.
So what do you guys think about this? If someone with access to this phone could dump the rom it could be easily checked with the current S3 and see the diff.
This is interesting but I think we will have to wait. The article says only 40 VIPs will get it to start, the odds of any of them dumping the the ROM is slim to none.
Fredro said:
Just read this article
http://global.samsungtomorrow.com/?p=16659
The interesting thing is that they must have been using the hidden API to be able to use card emulation.
From my experience with hotel nfc cards they often are Mifare UltraLight cards.
Maybe they are giving out special phones using a custom ROM made by samsung that has this enabled.
I'm currently checking the 4.1 sources to see if anything can be done with that.
So what do you guys think about this? If someone with access to this phone could dump the rom it could be easily checked with the current S3 and see the diff.
Click to expand...
Click to collapse
They have the Holiday Inn app on their phone, as shown on Engadget. I think there are already apps that let you copy NFC card data to your phone.
Product F(RED) said:
They have the Holiday Inn app on their phone, as shown on Engadget. I think there are already apps that let you copy NFC card data to your phone.
Click to expand...
Click to collapse
Indeed copying the card is no problem, though it's the ability to use the phone to emulate the card that is interesting
Fredro said:
Indeed copying the card is no problem, though it's the ability to use the phone to emulate the card that is interesting
Click to expand...
Click to collapse
All it does is transmit what was copied on the card via NFC. But in my experience most hotels don't use NFC yet; they still use magnetic strip cards, which by the way can still be easily copied. Just because they're encrypted doesn't mean you can't just copy the raw encrypted data to another card. Check this out:
Product F(RED) said:
All it does is transmit what was copied on the card via NFC. But in my experience most hotels don't use NFC yet; they still use magnetic strip cards, which by the way can still be easily copied. Just because they're encrypted doesn't mean you can't just copy the raw encrypted data to another card. Check this out:
Click to expand...
Click to collapse
I've been to several new hotels which indeed use NFC Ultralight cards.
I'm saying that, to be able to use this data you've copied from a card onto your phone, you need to be able to make the phone emulate the same card as the one you copied from. And that is the interesting part.
I'm working on a patch for 4.1.1 (galaxy nexus) that will enable this option, same as the phones used at this olympic hotel.
Google Wallet works in the same way, doesn't it? Card emulation is built into Android, but for an application (like Google Wallet) to use it, it must hold the access keys to the secure element.
Samsung controls the secure element in the S3; writing an application that can access the secure element is no problem for them.
Also, someone above said something about just copying the 'raw data' from an 'encrypted' card. You'll need access keys to access the data stored in each sector, so I doubt that would work.
LoveNFC said:
Google Wallet works in the same way, doesn't it? Card emulation is built into Android, but for an application (like Google Wallet) to use it, it must hold the access keys to the secure element.
Samsung controls the secure element in the S3; writing an application that can access the secure element is no problem for them.
Also, someone above said something about just copying the 'raw data' from an 'encrypted' card. You'll need access keys to access the data stored in each sector, so I doubt that would work.
Click to expand...
Click to collapse
yes, it's correct that samsung has control over who has access to it, but it's easy to "add yourself" if you patch the software.
About the keys for each sector, this is no problem because the ultralight cards dont use any encryption, even for the classic cards the protection is broken. So this doesn't really matter, the point is that people should be able to create their own cards inside the phone for their own usage for example.
Fredro said:
I've been to several new hotels which indeed use NFC Ultralight cards.
I'm saying that, to be able to use this data you've copied from a card onto your phone, you need to be able to make the phone emulate the same card as the one you copied from. And that is the interesting part.
I'm working on a patch for 4.1.1 (galaxy nexus) that will enable this option, same as the phones used at this olympic hotel.
Click to expand...
Click to collapse
Please kindly let me know if you succeed in patching the galaxy nexus, as I really want to use my phone as a nfc to open my building entrance door!
any. outhosur
Fredro said:
yes, it's correct that samsung has control over who has access to it, but it's easy to "add yourself" if you patch the software.
About the keys for each sector, this is no problem because the ultralight cards dont use any encryption, even for the classic cards the protection is broken. So this doesn't really matter, the point is that people should be able to create their own cards inside the phone for their own usage for example.
Click to expand...
Click to collapse
Sometimes I totally no idea why RFID card or NFC tag emulation so complicated.
fordiy said:
Sometimes I totally no idea why RFID card or NFC tag emulation so complicated.
Click to expand...
Click to collapse
cuz of the thousands of geezers who wanna abuse cards or nfs tags
LoveNFC said:
Also, someone above said something about just copying the 'raw data' from an 'encrypted' card. You'll need access keys to access the data stored in each sector, so I doubt that would work.
Click to expand...
Click to collapse
I've succesfully copied and cracked a Mifare classic card, thus accessing all the data in the sectors. It took me just over 10 minutes for a single card. But my interest is also, how can I put this card dump file on my phone and let the NFC chip push/emulate this card dump as a Mifare card?
See also http://forum.xda-developers.com/showthread.php?t=1706057
Is there any reason it has to be your phone? Could you write the info to a mifare tag, and get the same effect? This would allow you to clone the card to a paper sticker.
sysadmn said:
Is there any reason it has to be your phone? Could you write the info to a mifare tag, and get the same effect? This would allow you to clone the card to a paper sticker.
Click to expand...
Click to collapse
The Problem is that you can't change the ID of the card. Most applications check (only) for the ID as it is (falsely) seen by many as unique and unspoofable. So an card emulator able to let you change the ID as handy as a smartphone would be really really nice
nookieman said:
The Problem is that you can't change the ID of the card. Most applications check (only) for the ID as it is (falsely) seen by many as unique and unspoofable. So an card emulator able to let you change the ID as handy as a smartphone would be really really nice
Click to expand...
Click to collapse
But this feature is normally not accessible in the phones - partly also because of these reasons.
You would have to obtain keys to the ecure element from the operator or the handset manufacturer and will surely not give it to you if you are not a bank or someone of a similar size
---------- Post added at 02:38 PM ---------- Previous post was at 02:32 PM ----------
Perhaps you could also try to use an unofficial ROM, but I am not sure if that solves the problem
In order to emulate MIFARE Ultralight, you need the first UID byte = 0x04. NXP Semiconductors have introduced a restriction in their interface chips such that UID0 is hardwired to 0x08, meaning "random UID" according to their specifications. So even if hidden Android API get released, it will still not be possible to use the phone itself for MIFARE Ultralight tag emulation. However, EMUTAG emulator on emutag.com totally solves the problem by being portable, and can emulate any UID with almost no restrictions* (see Manual).
yeah its right.. i agree with you

Copying NFC tags?

Is there some way to copy one RFID NFC tag to another blank NFC tag with the SGS3?. I have 2 active NFC tags that I would like to mess around with and see if I can actually copy them and get the same access as my authentic ones offers.
So down to the question. Is it possible to copy the entire contents of an NFC chip and write it to another one with an app, and in that case which one?
bump* I'd like to know as well
copy a tag
"NFC Smart Q supports reading or copying a tag"
I just read this, didn't use this app.
There must be more nfc apps in Google's android shop, doing this trick.
I cannot post links, i'm sure you will find it.
MeX_DK said:
Is there some way to copy one RFID NFC tag to another blank NFC tag with the SGS3?. I have 2 active NFC tags that I would like to mess around with and see if I can actually copy them and get the same access as my authentic ones offers.
So down to the question. Is it possible to copy the entire contents of an NFC chip and write it to another one with an app, and in that case which one?
Click to expand...
Click to collapse
Depends. If it's a tag without any protection, yes.
If it's a tag with crypto, such as most RFID door entry systems, contactless credit cards, subway cards - no, they're intentionally designed to prevent such things. (Specific systems may have been hacked, but in general, these are not copyable.)
"Not protected" means I can edit them as I want right??
So if I can solve the encryption manually than I can change my info on my NFC card with the help of my cellphone.
Is that right??
https://play.google.com/store/apps/details?id=com.skjolberg.nfc.clone2. Try this..... Works for me
Sent from my Nexus 4
carhustler said:
https://play.google.com/store/apps/details?id=com.skjolberg.nfc.clone2. Try this..... Works for me
Sent from my Nexus 4
Click to expand...
Click to collapse
Agreed - may not work for everything, but definitely one of the better tag cloning apps.
Hello,
I am new at nfc so please do not judge me
I have one question:
It is possible to write dokumrent path in nfc tags for example:URL.
but on the path will be security level as:
login
pasword
And after you type your login and password it is automatically opened your dokument.
I was tried to write this way, but after I type login and password the link is not active longer and I have to search manually the document in my data base.
Waiiting fot you answers
For any information I would be thankfull.
P.S. It is possible to do this with my samsung galaxy s3?

Inventory Management with NFC

I am an IT consultant and would like to figure out a way to log systems as they are visited for maintenance with NFC tags. I figure what better way than to simply put NFC tags in\on the machines and simply tap phone or tablet to it to log it as serviced. So here are my questions
Is there any way to program the tags with specific ID's for each system?
Is there software that will track these things?
What apps would be best for this kind of use?
I would love to know about this as well .
I know that u can use a phone with a bluethooth serial code reader and manage inventory that way...but NFC is much better in my opinion
Sent from my SAMSUNG-SGH-I717 using xda app-developers app
Inventory
I did this with QR and Bar codes although a bit archaic i would also like to explore this option further
nerdslogic said:
I am an IT consultant and would like to figure out a way to log systems as they are visited for maintenance with NFC tags. I figure what better way than to simply put NFC tags in\on the machines and simply tap phone or tablet to it to log it as serviced. So here are my questions
Is there any way to program the tags with specific ID's for each system?
Is there software that will track these things?
What apps would be best for this kind of use?
Click to expand...
Click to collapse
rixking said:
I did this with QR and Bar codes although a bit archaic i would also like to explore this option further
Click to expand...
Click to collapse
I'm no IT or inventory expert, but going along with your idea of QR codes, I did notice that the NXP TagWriter app has an option to convert QR codes into an NFC data set and store it on an NFC item. With that in mind, you could take your existing QR codes, scan and convert them into NFC tags. I'm not sure if scanning the tag would bring
I think another potential option is to store the barcode number as plain text, which can also be done within the NXP TagWriter app.
Note, you'll have to enable professional mode from the preferences before the QR and plain text options will appear.
nerdslogic said:
I am an IT consultant and would like to figure out a way to log systems as they are visited for maintenance with NFC tags. I figure what better way than to simply put NFC tags in\on the machines and simply tap phone or tablet to it to log it as serviced. So here are my questions
Is there any way to program the tags with specific ID's for each system?
Is there software that will track these things?
What apps would be best for this kind of use?
Click to expand...
Click to collapse
i'm off the IT line for a long time already, php was the last thing i did. But some simple ideas pop-up. since its not out there, than built it sort of thing.
Is there any way to program the tags with specific ID's for each system?
yas, just use tagwriter and write tags with http address and an id at the end.
Is there software that will track these things?
local web server to catch input, ruby or php are simple enough. since you must have already registers an id for a tag for the job.
tags that have a web address and an id will be enough to do tracking. reports are printed from a computer anyway.
What apps would be best for this kind of use?
stock browser.
can do same thing with QR code.

Write NFC tags that do not require other users to have the app used to write the tag.

I have a done a bit of looking but all I've come up with is mainly 'use trigger' or something like it. But my question is: Is there a way with Trigger to write a tag that anyone can read? Or is there another NFC tag writer app that I should use?
The thing I want to do is make a tag for friends to tap when they call over that will connect them to my wifi network, but if they have to go and download trigger first then no one is going to use my tag.
Sorry if this is a re-posted question, I looked and didn't see it anywhere here and when I put the title in there was no recommended threads that had what I was asking.
I've tried different apps, and it looks like connect to wireless is not one of the default actions that is included in Android. I've only found connect to bluetooth.
Hi, you can use NFC Tools for that.
All records on "write" tab is compatible with other NFC device.
daniel_loft said:
I've tried different apps, and it looks like connect to wireless is not one of the default actions that is included in Android. I've only found connect to bluetooth.
Click to expand...
Click to collapse
I am new to NFC and I am a little confused about what NFC can do. I have the nfc-tool App and I can read many NFC tags that I have.
But for an Android phone with NFC support, without installing any 3rd party App, what can it do? Is NFC enabled by default? Are there native NFC apps that can trigger action, open URL, etc?
Also, since each NFC tag already has a unique identifier, it seems to me writing data to NFC tag isn't all that useful when only 1 phone is using it. As you could have just programmed the command to the phone. The same applies to multiple phones if you can program the phones through some other means. Am I missing something here?
As I was saying, looks like what you want is only possible in Android L.
Have a nice day!
nookin said:
I am new to NFC and I am a little confused about what NFC can do. I have the nfc-tool App and I can read many NFC tags that I have.
But for an Android phone with NFC support, without installing any 3rd party App, what can it do? Is NFC enabled by default? Are there native NFC apps that can trigger action, open URL, etc?
Click to expand...
Click to collapse
Android has native build-in support for some simple standard NFC activities, like reading a messages/contact, open URL/URI, launch application etc. .For more sophisticated activities you will always need an app to parse the tag content and handle the activities.
Also, since each NFC tag already has a unique identifier, it seems to me writing data to NFC tag isn't all that useful when only 1 phone is using it. As you could have just programmed the command to the phone. The same applies to multiple phones if you can program the phones through some other means. Am I missing something here?
Click to expand...
Click to collapse
yep, fully agree. Have a look at NFC ReTag
ascsa said:
Android has native build-in support for some simple standard NFC activities, like reading a messages/contact, open URL/URI, launch application etc.
Click to expand...
Click to collapse
I'm a newbie here. I have a phone running 4.2.2. How do I make it read an NFC tag and take action without installing additional app? Just tap?
So I finally found an official NFC tag in mall. When I place my phone on it, it asks me to choose between stock Browser and Chrome. I guess if I have already chosen a default, it will just open a webpage. Now I wonder if there are security concerns. What if the URL is malicious? What if it downloaded a lot of data when the user is roaming?
I wonder what other functions an NFC tag can trigger without installing additional Apps? If I buy writable NFC tags, like the Samsung TecTiles, can it be programmed just like the mall NFC tag?

Categories

Resources