Mifare Classic Tool Tutorial

Read data from MIFARE Classic tags using key files (dictionary).

Select Key Files:

• std.keys
• extended-std.keys

Specify Sector Range:

• Choose the sectors to read (default is 0-15).
• For faster reading, limit the range to specific sectors.

Start Mapping Process:

• Tap the Start button to begin the mapping process.
• MCT will attempt to authenticate sectors using the keys from the file.

View Data:

• Once successful, the tag data will be displayed in a hex editor.
• No keys found (or dead sector)
• ———— means the key is unknown to read.

Write data to tags, including single block writing, dump file writing, factory formatting and increasing and decreasing value blocks.

Write Block

Write 16 bytes block data to specific sector number and block number.

Write Dump

Choose dump and select the blocks that write to the tag.

Factory Format

Set the data block to 00000000000000000000000000000000 . And Set the trailer block data to FFFFFFFFFFFFFF078069FFFFFFFFFFFF.

Incr./Decr. Value Block

Increase or decrease the value of a standard value block.

View saved dump file and show in sectors. You can also send the data to built-in tools.

Data as ASCII

• Decode the block data in ASCII

Decode Access Conditions 

• Show access conditions for all available sector in dump

Compare Dump

• Choose another dump file to make a block to block comparison

Export Dump

• Export the dump to JSON, BIN/MFD, EML or MCT format

Save Keys

• Save Mifare Classic Keys as key file from all available sectors.

Write Dump

• Write current dump to the tag.

Manage key files to optimize dictionary-based authentication. Mifare Classic key is 6 bytes and total in 12 chars. 

You can create your own keys or import keys from file. The link below is the default Mifare Classic Keys from Proxmark3 repository.

mfc_default_keys.dic

The built-in Tools in MCT are useful for the data analysis or operation.

Display Tag Info

• It can show technology information for a non-MIFARE Classic tag.
• The Mifare Classic tag will show the UID, SAK, ATQA, Memory Size, Block Size, Number of Sectors and Number of Blocks information.

Clone UID

• This tool can read and write the UID to a 2nd Gen Chinese magic card, which also named CUID.
• You can also set the full block 0 for the magic tag.
• Notice that the SAK and ATQA must be valid so it won’t brick the magic tag.

Diff Tool

• It is the same as Dump comparison in the Edit Dump features.

Access Condition Decoder & Encode

It can convert the access control byte in trailer block for the permissions, which includes Read Key, Write Key, Read ACS, Write ACS to the Sector Trailer. And the permissions for Data Blocks include READ, WRITE, INCR, DECR, Transit and REST.

BCC Calculator 

It can calculate the fifth byte in block 0, which is the XOR value of the 4 bytes UID.