1.小米手环5 NFC 自定义 门禁卡数据
2.小米手环nfc怎么复制加密门禁
小米手环5NFC版虽然支持复制门禁卡,但不能复制加密版本。所以直接复制操作是行不通,可以通过NFC读卡器来写入门禁卡,也可以只依靠一部带NFC功能的手机来实现。以下只介绍如何用带NFC的手机来实现。其实将加密的门禁卡复制到小米手环5NFC版上面比较简单,只需要三大步。
第一步,用NFC手机破解加密门禁卡。这一步最关键。如果不成功就不能复制到手环上在手机上安装mifare软件。读加密门禁,启动密匙映射。如果出现死扇区说明没有破解成功,反之每个扇区都有数据便是成功了。选择保存破解后的门禁卡信息。第二步,在小米手环5NFC上新建一张空白卡。
第三步,用NFC手机里的软件将原卡里面的信息复制到小米手环5NFC版上。先把小米手环5NFC版放在手机背面的NFC区域,当检测出新卡时选择主界面的“写标签”,选择“写转储”-打开第一步保存的文件,选择全部扇区进行写入,再选择全部的文件进行映射和写Dump。经过这三步小米手环5NFC复制加密小区门禁卡完成了。
小米手环5 NFC 自定义 门禁卡数据
小米手环NFC版的都支持NFC功能,能用手环实现公交卡、门禁卡功能的产品,,可以对门禁卡模拟、甚至支持空白卡的刷入。那么小米手环nfc怎么复制门禁卡?下面一起来看看吧~
小米手环nfc怎么复制门禁卡?1、打开小米运动应用,在“我的”界面点击绑定的小米手环NFC版。
2、选择门卡模拟选项。
3、点击门卡模拟。
4、点击下一步。
5、点击开始检测。
6、将门禁卡贴近手环等待模拟完成即可。
小米手环nfc怎么复制加密门禁
小米手环5 NFC可以通过修改HTTPS的POST 数据来自定义NFC卡片的所有扇区数据;
我们利用小米手环NFC(3,4和5代)进行门卡模拟,需要读取一张非加密门禁卡。读取成功后,手机会将这张卡的卡号( uid )和所有数据( blockContent )上传至服务器,所有的手环指令都由服务器生成,再下发到手机,手机通过蓝牙将指令传给手环。这些指令我全都看不懂,也没办法自己生成手环指令。但是我可以在手机将卡号( uid )和所有数据( blockContent )上传至服务器前进行更改成自己想要的,然后由小米服务器自己去生成指令即可成功。
可以借鉴我以前的小米手环3 NFC数据修改的方式借鉴电脑抓包和改包。
s://.jianshu/p/8f944a7ac8d1
s://api-mifit-cn.huami/nfc/accessCard/script/init?r=A07A0065-DAC1-4C29-82DA-C30B664A37FA&t=1592767900198
Request Body为:
{
"fareCardType": 0,
"fetch_adpu_mode": "SYNC",
"product_sub_type": "",
"sak": "08",
"uid": "12345678",
"aid": "",
"atqa": "0400",
"size": ,
"action_type": "copyFareCard",
"blockContent": "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"
}
s://api-mifit-cn.huami/nfc/accessCard/script/request?r=A07A0065-DAC1-4C29-82DA-C30B664A37FA&t=15927679014
Request Body为:
{
"uid": "12345678",
"fareCardType": 0,
"product_sub_type": "",
"blockContent": "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",
"fetch_adpu_mode": "SYNC",
"session": "3581-547405239-44086875137",
"size": ,
"atqa": "0400",
"current_step": "1",
"sak": "08",
"command_results": {
"succeed": true,
"results": [
{
"result": "6F108408A000000151000000A5049F6501FF9000",
"checker": "^(9000|6283) ",
"command": "8050200008691C3B013B3EED18",
"index": "2"
}
]
},
"aid": "",
"action_type": "copyFareCard"
}
其实将加密的门禁卡复制到小米手环5NFC版上面比较简单,只需要三大步。
第一步,用NFC手机破解加密门禁卡。这一步最关键。如果不成功就不能复制到手环上
在手机上安装mifare软件。
读加密门禁
启动密匙映射
如果出现死扇区说明没有破解成功,反之每个扇区都有数据便是成功了
选择保存破解后的门禁卡信息
第二步,在小米手环5NFC上新建一张空白卡
第三步,用NFC手机里的软件将原卡里面的信息复制到小米手环5NFC版上。先把小米手环5NFC版放在手机背面的NFC区域,当检测出新卡时选择主界面的“写标签”,选择“写转储”-打开第一步保存的文件,选择全部扇区进行写入,再选择全部的文件进行映射和写Dump。
经过这三步小米手环5NFC复制加密小区门禁卡完成了。