RfidResearchGroup / ChameleonUltra

The new generation chameleon based on NRF52840 makes the performance of card emulation more stable. And gave the chameleon the ability to read, write, and decrypt cards.
https://chameleonultra.com
GNU General Public License v3.0
873 stars 147 forks source link

CLI nested attack error #225

Open Waiker opened 1 month ago

Waiker commented 1 month ago

I use CLI for Chameleon. But I can't run nested attack

Tell me, what's wrong? Снимок экрана 2024-08-10 022425 Снимок экрана 2024-08-10 021635

[USB] chameleon --> hf mf nested --blk 0 -A -k FFFFFFFFFFFF --tblk 3 --tA
  Nested recover one key running...
  NT vulnerable: HardNested
 [!] HardNested has not been implemented yet.
No key found, you can retry.
[USB] chameleon -->
Foxushka commented 1 month ago

NT vulnerable: HardNested

As it says your card is not vulnerable to default nested attack and requires hard nested attack, which isn't implemented at this moment on CU. If you have proxmark3/Flipper Zero you can run attack from them and use recovered keys to read card

Waiker commented 1 month ago

NT vulnerable: HardNested

As it says your card is not vulnerable to default nested attack and requires hard nested attack, which isn't implemented at this moment on CU. If you have proxmark3/Flipper Zero you can run attack from them and use recovered keys to read card

the documentation supports this type of attack Снимок экрана 2024-08-12 020304

Foxushka commented 1 month ago

NT vulnerable: HardNested

As it says your card is not vulnerable to default nested attack and requires hard nested attack, which isn't implemented at this moment on CU. If you have proxmark3/Flipper Zero you can run attack from them and use recovered keys to read card

the documentation supports this type of attack Снимок экрана 2024-08-12 020304

Application layer: not yet implemented

Waiker commented 1 month ago

Уровень приложений: пока не реализован

but, Does the software support : suuport ?

GameTec-live commented 1 month ago

That probably just means SDK or similar, but if the application doesn't support it, it's not there.