Description

MIFARE Ntag21x Version Changing (Ntag213,215,216 true) – UID CHANGEABLE

Click here on demo video on these tags 

Works with Proxmark3 (Script provided)

World’s First Ntag UID Changeable Magic Cards

No backdoor command needed.

For Lua Script:

Arguments:
-h this help
-c read magic configuration
-u UID (14 hexsymbols)
-t tag type to impersonate
1 = UL_EV1 48k
2 = UL_EV1 128k
3 = NTAG 210
4 = NTAG 212
5 = NTAG 213 (true)
6 = NTAG 215 (true)
7 = NTAG 216 (true)
8 = NTAG I2C 1K
9 = NTAG I2C 2K
-p password (8 hexsymbols)
-a pack ( 4 hexsymbols)
-s signature data (64 hexsymbols)
-o OTP data (8 hexsymbols)
-v version data (16 hexsymbols)

Bug found on some batches on block 19 for Ultralight Ev1 (48 byte), hf mfu dump will not fix identify it properly.
Custom Command to fix it.

1) hf 14a raw -s -c a213xxxxxxxx

xx > Data

2) hf 14a raw -s -c 30xx

30 -> Read
xx -> Block (19 = 13)