banner
DIYgod

Hi, DIYgod

写代码是热爱,写到世界充满爱!
github
twitter
follow
bilibili
telegram
email
steam
playstation
nintendo switch

Mi Band 4 NFC Simulated Encryption Card Exploration

I couldn't wait to buy a Xiaomi Mi Band 4 NFC version from scalpers as soon as it was released.

The NFC function of the band has three main features: Xiao Ai, public transportation card, and simulated access card.

However, Xiao Ai on the band is difficult to use, with missing features and slow response. It even scolds me sometimes. Shanghai public transportation doesn't support it either. The access card suddenly became the hope of the whole village. Luckily, I have two access cards, so I decided to give it a try and simulate it.

pn5321

This NFC thing is a complete failure, just like life itself.

The first card is an ID card, which is definitely beyond saving. I hope everything is on the second encrypted IC card. In order to save the useless NFC, I bought an NFC reader/writer PN532 from Taobao.

I put the encrypted card on the PN532 to read the data.

pn5322

I used MifareOne Tool to decrypt the card.

pn5323

The decryption failed... According to what I found online, it might be caused by the PN532 overheating. So, where is the coolest place?

The refrigerator.

pn5324

After a long wait, it finally succeeded.

pn5325

I obtained the encrypted card data.

pn5326

Then, I wrote the data of sector 0, block 0 into a blank card.

pn5327

pn5328

After that, I wrote the data of the blank card into the band.

pn5329

pn53210

Now, the band has a card, but it only has the data of sector 0, block 0. So, I just need to write the remaining data into the band.

pn53211

pn53212

Verification: Comparing the data of the original card and the band card,

pn53213

pn53214

Only the data of sector 0, block 0 (vendor number) is different, and the encryption data of sector 15 is the same. This means that the simulation was successful.

Finally, the NFC was not bought in vain.

Loading...
Ownership of this post data is guaranteed by blockchain and smart contracts to the creator alone.