小米手环4NFC版复制校园卡CPU卡门禁功能
<span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">之前以为自己的校园卡是</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">ic</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">卡，看了之前论坛发的教程，买了个</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">pn532</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">，结果发现校园卡竟然是</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">CPU</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">卡。</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">但是用手机却可以模拟</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">cpu</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">卡的门禁功能？猜测学校的门禁系统只读取了一卡通号，没有任何加密解密，所以可以复制</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">cpu</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">卡的门禁。 </span></span><br /><span style="color:#444444;font-family:"font-size:16px;background-color:#FFFFFF;"></span><br />
<span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">准备工具：</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">nfc</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">手机（自己用的是小米</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">6</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">），</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">pn532</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">，</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">cuid</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">卡 </span></span><br />
<span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">步骤： </span></span><br />
<span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">1.</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">用</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">nfc</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">手机模拟</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">CPU</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">卡，模拟成功的卡应该是只带门禁功能</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">2.</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">用</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">pn532</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">读取手机模拟成功的卡，读取成功之后写入</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">cuid</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">卡，此时的</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">cuid</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">卡是未加密卡</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">3.</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">打开小米运动，模拟</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">cuid</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">卡，成功</span></span><br />
<span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">-------------------------------------------------------------------------</span></span><br />
<span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">提供另外一个猜想的方法（未实践）： </span></span><br />
<span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">工具：两部</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">nfc</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">手机，</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">cuid</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">卡，</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">app</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">：</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">MIFARE Classic Tool</span></span><br />
<span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">首先，用</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">A</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">手机模拟校园卡，用</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">B</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">手机的</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">MCT</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">读取</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">A</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">手机模拟成功的校园卡，写入</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">cuid</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">卡，再用小米运动模拟</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">cuid</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">卡</span></span><br />
<br />
<br />
<span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">-------------------------------------------------------------------------</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">ps</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">：上面的方法均用了</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">cuid</span></span><span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">卡当中介以供手环模拟，还可以试试手环开一个空白卡，把读取的信息直接写入</span></span><br />
<span style="background-color:#FFFFFF;font-size:16px;"><span style="font-size:16px;">时间有限，此贴只提供了一个大致的思路，具体的每个步骤的实现细节网上能找到。十分抱歉。</span></span><span style="font-size:16px;"></span>
页:
[1]