小米手环5nfc怎么设置门禁卡_小米手环5如何nfc门禁卡

手机数码
2024 09-07 07:37 点击:

1.小米手环5 NFC 自定义 门禁卡数据

2.小米手环nfc怎么复制加密门禁

小米手环5nfc怎么设置门禁卡_小米手环5如何nfc门禁卡

小米手环5NFC版虽然支持复制门禁卡,但不能复制加密版本。所以直接复制操作是行不通,可以通过NFC读卡器来写入门禁卡,也可以只依靠一部带NFC功能的手机来实现。以下只介绍如何用带NFC的手机来实现。其实将加密的门禁卡复制到小米手环5NFC版上面比较简单,只需要三大步。

第一步,用NFC手机破解加密门禁卡。这一步最关键。如果不成功就不能复制到手环上在手机上安装mifare软件。读加密门禁,启动密匙映射。如果出现死扇区说明没有破解成功,反之每个扇区都有数据便是成功了。选择保存破解后的门禁卡信息。第二步,在小米手环5NFC上新建一张空白卡。

第三步,用NFC手机里的软件将原卡里面的信息复制到小米手环5NFC版上。先把小米手环5NFC版放在手机背面的NFC区域,当检测出新卡时选择主界面的“写标签”,选择“写转储”-打开第一步保存的文件,选择全部扇区进行写入,再选择全部的文件进行映射和写Dump。经过这三步小米手环5NFC复制加密小区门禁卡完成了。

小米手环5 NFC 自定义 门禁卡数据

小米手环NFC版的都支持NFC功能,能用手环实现公交卡、门禁卡功能的产品,,可以对门禁卡模拟、甚至支持空白卡的刷入。那么小米手环nfc怎么复制门禁卡?下面一起来看看吧~

小米手环nfc怎么复制门禁卡?

1、打开小米运动应用,在“我的”界面点击绑定的小米手环NFC版。

2、选择门卡模拟选项。

3、点击门卡模拟。

4、点击下一步。

5、点击开始检测。

6、将门禁卡贴近手环等待模拟完成即可。

小米手环nfc怎么复制加密门禁

小米手环5 NFC可以通过修改HTTPS的POST 数据来自定义NFC卡片的所有扇区数据;

我们利用小米手环NFC(3,4和5代)进行门卡模拟,需要读取一张非加密门禁卡。读取成功后,手机会将这张卡的卡号( uid )和所有数据( blockContent )上传至服务器,所有的手环指令都由服务器生成,再下发到手机,手机通过蓝牙将指令传给手环。这些指令我全都看不懂,也没办法自己生成手环指令。但是我可以在手机将卡号( uid )和所有数据( blockContent )上传至服务器前进行更改成自己想要的,然后由小米服务器自己去生成指令即可成功。

可以借鉴我以前的小米手环3 NFC数据修改的方式借鉴电脑抓包和改包。

s://.jianshu/p/8f944a7ac8d1

s://api-mifit-cn.huami/nfc/accessCard/script/init?r=A07A0065-DAC1-4C29-82DA-C30B664A37FA&t=1592767900198

Request Body为:

{

"fareCardType": 0,

"fetch_adpu_mode": "SYNC",

"product_sub_type": "",

"sak": "08",

"uid": "12345678",

"aid": "",

"atqa": "0400",

"size": ,

"action_type": "copyFareCard",

"blockContent": "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"

}

s://api-mifit-cn.huami/nfc/accessCard/script/request?r=A07A0065-DAC1-4C29-82DA-C30B664A37FA&t=15927679014

Request Body为:

{

"uid": "12345678",

"fareCardType": 0,

"product_sub_type": "",

"blockContent": "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",

"fetch_adpu_mode": "SYNC",

"session": "3581-547405239-44086875137",

"size": ,

"atqa": "0400",

"current_step": "1",

"sak": "08",

"command_results": {

"succeed": true,

"results": [

{

"result": "6F108408A000000151000000A5049F6501FF9000",

"checker": "^(9000|6283) ",

"command": "8050200008691C3B013B3EED18",

"index": "2"

}

]

},

"aid": "",

"action_type": "copyFareCard"

}

其实将加密的门禁卡复制到小米手环5NFC版上面比较简单,只需要三大步。

第一步,用NFC手机破解加密门禁卡。这一步最关键。如果不成功就不能复制到手环上

在手机上安装mifare软件。

读加密门禁

启动密匙映射

如果出现死扇区说明没有破解成功,反之每个扇区都有数据便是成功了

选择保存破解后的门禁卡信息

第二步,在小米手环5NFC上新建一张空白卡

第三步,用NFC手机里的软件将原卡里面的信息复制到小米手环5NFC版上。先把小米手环5NFC版放在手机背面的NFC区域,当检测出新卡时选择主界面的“写标签”,选择“写转储”-打开第一步保存的文件,选择全部扇区进行写入,再选择全部的文件进行映射和写Dump。

经过这三步小米手环5NFC复制加密小区门禁卡完成了。

The End