Skip to content

Commit 6ef54af

Browse files
committed
Add numbering to NR-MAC parts
1 parent 6fd741b commit 6ef54af

File tree

1 file changed

+9
-9
lines changed

1 file changed

+9
-9
lines changed

.catalog/README.md

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -32,37 +32,37 @@ There are some situations when the offline loclass may not find a key, such as:
3232
* Custom keyed readers using Standard KDF
3333
* Custom keyed readers using SE KDF
3434

35-
# NR-MAC read
35+
# NR-MAC Attack
3636

37-
Due to the nature of how secure picopass works, it is possible to emulate some public fields from a card and capture the reader's response, which can be used to authenticate. Two of the pieces involved in this are the NR and MAC. This allows you to get a dump of the card, except for the key, even if you don't know the key. For picopass in non-HID systems this can allow you to see what the data looks like. For iClass SE the data is encrypted (SIO), but a friend with a HID SAM can decrypt it.
37+
Due to the nature of how secure mode picopass works, it is possible to emulate some public fields from a card and capture the reader's response, which can be used to authenticate. Two of the pieces involved in this are the `NR` and `MAC`. This allows you to get a dump of the card, except for the key, even if you don't know the key. For picopass in non-HID systems this can allow you to see what the data looks like. For iClass SE the data (SIO) is encrypted, but a friend with a HID SAM can decrypt it.
3838

3939
*These instructions are intended to be performed all at the same time. If you use the card with the reader between Card Part 1 and Card Part 2, then Card Part 2 will fail.*
4040

41-
## Card Part 1
41+
## First: Card Part 1
4242

4343
1. Place card against Flipper Zero
4444
2. Run _Read_ from the picopass main menu
4545
3. Get a "Read Failed" message
4646
4. Select the "Menu" option
4747
5. Select "Save Partial" (regardless if this card has been saved previously)
4848
6. Name file something you'll remember
49-
7. Immediately proceed to Reader Part
49+
7. *Immediately* proceed to Reader Part
5050

51-
## Reader Part
51+
## Second: Reader Part
5252

5353
1. Select _Saved_ from the picopass main menu
5454
2. Select the file name you saved in last step of Card Part 1
5555
3. Select _Emulate_
5656
4. Expose Flipper Zero to reader (It may work better a few inches from the reader, as opposed to physically touching)
57-
5. Flipper will buzz and screen will say "NR-MAC Saved!"
58-
6. Immediately proceed to Card Part 2
57+
5. Flipper will buzz and screen will say "NR-MAC Saved!" (may be very brief)
58+
6. *Immediately* proceed to Card Part 2
5959

60-
## Card Part 2
60+
## Third: Card Part 2
6161

6262
1. Place card against Flipper Zero
6363
2. Run _Read_ from the picopass main menu
6464
3. Card will authenticate and read
65-
4. Suggested to both "Save" the card and "Save as Seader"
65+
4. Suggested to do both "Save" and "Save as Seader"
6666

6767

6868
# Elite Keygen Attack

0 commit comments

Comments
 (0)