From 0330234aeabfea8a025832077560747968fb185c Mon Sep 17 00:00:00 2001 From: iceman1001 Date: Thu, 14 Oct 2021 19:49:57 +0200 Subject: [PATCH] Added sniffed traces of Visa Apple ECP transactions. Thanks to @a66at for them! --- CHANGELOG.md | 1 + traces/README.md | 3 +++ traces/hf_visa_apple_ecp.trace | Bin 0 -> 675 bytes traces/hf_visa_apple_normal.trace | Bin 0 -> 6997 bytes traces/hf_visa_apple_transit_bypass.trace | Bin 0 -> 1914 bytes 5 files changed, 4 insertions(+) create mode 100644 traces/hf_visa_apple_ecp.trace create mode 100644 traces/hf_visa_apple_normal.trace create mode 100644 traces/hf_visa_apple_transit_bypass.trace diff --git a/CHANGELOG.md b/CHANGELOG.md index c30be73e3..8dd40247c 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -3,6 +3,7 @@ All notable changes to this project will be documented in this file. This project uses the changelog in accordance with [keepchangelog](http://keepachangelog.com/). Please use this to write notable changes, which is not the same as git commit log... ## [unreleased][unreleased] + - Added trace of VISA Apple transactions (thanks @a66at ) - Added trace of reading a MIFARE UL-C with 3DES authentication (thanks @rad1game) - Added ATR fingerprinting (@iceman1001, @doegox) - Fix `hf mf dump/auto/csave` MFC JSON dumps - save real ATQA/SAK (@doegox) diff --git a/traces/README.md b/traces/README.md index 8bfda01d9..2875c0886 100644 --- a/traces/README.md +++ b/traces/README.md @@ -96,4 +96,7 @@ |hf_15_reader.trace |Execution of `hf 15 reader` against a card| |hf_mfp_mad_sl3.trace |`hf mfp mad`| |hf_mfp_read_sc0_sl3.trace |`hf mfp rdsc --sn 0 -k ...`| +|hf_visa_apple_ecp.trace |Sniff of VISA Apple ECP transaction| +|hf_visa_apple_normal.trace |Sniff of VISA Apple normal transaction| +|hf_visa_apple_transit_bypass.trace |Sniff of VISA Apple transaction bypass| diff --git a/traces/hf_visa_apple_ecp.trace b/traces/hf_visa_apple_ecp.trace new file mode 100644 index 0000000000000000000000000000000000000000..97446b59467050cc99f4ae538c37e5d73602c413 GIT binary patch literal 675 zcmZqPX3qA&nV%tx=>#JKGXqm40|NuYp&NZw&6{VjJz!>J2x4d!`G;Lev1TGWM2Wjm zBD(`8Qv(Zw!{dLY>F=wlVNfJ*qqC?O%3fko7oxom>U%S6gX_Q=we?W#KI83 z5PtT6ao+@}$;R6!LRp*dPlBDLaD#djo4lLjluLwtmoq5W?;zhz{&If zDtGs5>%FWS091j19~9%TK+2ZdH1zIr-rS_6NMo z42zy!S5VLV$nIdq)4&9G5X-WR3&C$WI2afl7?>MYFff=mn;JDZfD#J>Bba1h;7|iI zIMfscL>N?mIL`ue(Fvy;Gv({;BL4sXFMeNuqd|zJ;S=LT2L@*cK@Lzff;sJ{1UVSQ NSsR!$+n6OU007hn!j}L5 literal 0 HcmV?d00001 diff --git a/traces/hf_visa_apple_normal.trace b/traces/hf_visa_apple_normal.trace new file mode 100644 index 0000000000000000000000000000000000000000..8ac4f3d9aa3c0b5d4d1a14cba110cab0c3c6f9a7 GIT binary patch literal 6997 zcmWgM`bGQ!Gb2L~gY)C>P!{w5Ur?5@^gk#o*ql)UqAoa?1u}(>#~h3locGQ0A+11Rfe)2Pf~-jKCjn=vYb!rz*sNz zp)6wyV}d%6i=H4`qE` z5(Hx%427~b-;02E%$?XNy%(mh!^2P?qt&4N%tPTbrS*%ip#^ zSwt@#Mo$*5(bzpsdN4PC{A5@6SM4lLan7S(kM#Ls`W>*PyJ! zSvR39<@P&Jmhj^HP?qujM^IMt?Wa)IFtiU7*$uo~_SfMQEC=Mv=aw#{IRXm9g##$=~Wo;G~g|dnbC7`Te zKWQi{IZF=8n%u4kWjQZVfwCSSREM&d*|edoWF+!Q97>lV4%9<=!31w|=t%0&0FRF*Kln*vR zS&Q$qLRro~I-sn@B0W%6u|YqS6(q`N$S1>+r+vP?q!mT~JoD^gbxd+2SCSH96!6 zly$i1IF!}ge+tT4y!tGZb(!%Zl%*_x1*5pzPC~NaXYbfjUT01DK`J^M1b@{0al=Ydx1IlX7 z^oFv6JN=-n#Y+RBtiy*wV66M$P?quUC@3pfA`Z&h9FquRRi;2$&a=~@Ea4qlP}bw? zxlq>P&jnCcv2Y2LrL12LWli>~g0h;^YoRRV)&?lccyTk7wRwLVl;wP<6Ur+7(F0{| z7M%cP85>T9vOfDvgR+vdWj3jEAx&%O*it!q%x!*5t4ZDC==iHk8HOp9f_nuP%hLluwjES&N^P zLs`NM)lk-B={hJY*}M_T+8o*fWi6iH4rK-J?SitJZ}vi2!rvx9S)YZcKv~ZE)1j>7 z$+Ms=<_&Y9tmZQdpsdL+7DHLhEX$!RXT?=eR+^%1 zFc!mJD63fR0F=e-a2U#39DNMRVy-v|Wff0317!(sJP&0ZK644mTKw`Vlx56z6Uv&b zatF#vcDxT|8OJ_?vYM-&LRpumzkso}zJ{`#1>ZwikM%x5S<2pDp)BUKA5hlh#@|qu z^4xzg7AunsB+oP}vO-zPwj5B_;%IIttGR*?#+oJwWif9SfwGE!h(lSyBGORSVpBO7 zD_9Z6DprBAg8S8>EaUZBP*(71T_|hwa|0;rGP4Pkby(gU%KB_=1!YZ+w1u)ZmpMRL zizhonS>HG&JoP7(<-F++l%;(BKa{ojHIpnP&lGd8L0O-b zIiW0OCmtxvIgTI7T3jOpWhKuLg|e8pNI+T67o?%AjN;mT*oWl=Zng1j-U#5e{W-J`n|FDL;*cvL3S}LRp^`QlKnl+jJ;vb3_)DC0vpV zWjRkMfU*v+D~7TjpDKg0gkM%dS&P|fp)6yi1}IC|z8T6Yj%tIln#($&tm0ceP}b)k z{ZLl1=wv9%*>D<^_1JGFl%?oll(o6~36vE)<2jVYyzLc~wfWLpDC_Zu4^Y-+ z?=Mi+=Zx=AmT=oIC@XmJUnpzwK?XTUPI11=3}q=hvO`(Tv0PAAa3wF4r94dl%9^}I z7|LS4C1)tS{vYg-OLs^&EjiIb! zWiu%2v%MvhRUB&rWo@pqhq5kDcY?B%x41%C!IwOstl|&eFcyzLl+~;e1Z5SwhC*47 zlOv$4&wHbxtjRaype*5UiBOiYP%4zAtd{|0efG?TvY0pLL0QV@3!$vVuS%dSVU7wY zD_Nx)$`W>}gR+|A8=)-Y6)jNK=cDaVR`Js=D9f3#56XJ1FcHcUww(fHU5=R!WhGb6 zg0c=znG0nVZ&(0jDW6*mWih{A24!7lTLoo(R$L2ZF*|O6vYKNyLs^?Ew?SFT({@5x zi#P6pvJRi!4`prEKMZ9R`yPX`E@z&EvXooTKv|0yo`+<^FP?qxf ze^A!vSB&zIJTsY%6~)S;~8MOskS;r+T$mh&A0DC_cfV<@Xw*c{4wtY-yfIZwBRvYIzL zz*y&=XcHJ?;vIvYMBLL0QhnBB89uk7J;$!^{a#)?@i( zC@a`54azzkl?i2CuFQe5n5XAMS(7&x!B`hcp)BKf6;Re@?iwh|S+gF>Qg&;CvYeAz zp{(y&t?~|>Obsjy4$U)L5f0x&-(qnRN*w^N>hkGVnNPk{sTf=;l>4;l=M8O%>~ z$}=diH?UST6fiAyJ2Kh0Oa4K+I0F;I5*7wNqX5T9z2L}TJr@@@14D)fPM-f)U4Pvp z?{LSkfhk|B1x>+HiTymHiNgNu3m6y}m<0sd85!quu`n<)GEQKS`562^ihr^jgEMcR ze1eAn12f15m`a8{j;EiND@>JVVDM~U&Ub2oNh~#=Zy`NDjb%O)+k9rW`BF?%S>v^s zW--rUoNvxD-%n&ekJ$VuRzuDT4z>NsEcX={8{jrp?D>A`^>eGz8_n(v!QZFJGcY(X zFg2`TU@&hsHEM8R00Bl2!N9=4p$2Afs3{7FFbMhDo&s~xiDl~~;UD=>jr z$y&SR7f7=){QLLs-?<+g$?JB@EATKg{GZQ%Ao=KS`30;@44)Yo9?R{4S~8hquY7_E z2Lm(1CPo>CldR8+*^bC3@G>*hPd@K3+2RNy1e)cK$}iwzX0TUeU|_y=RQ>@YBLh1F E0K2)IVE_OC literal 0 HcmV?d00001 diff --git a/traces/hf_visa_apple_transit_bypass.trace b/traces/hf_visa_apple_transit_bypass.trace new file mode 100644 index 0000000000000000000000000000000000000000..6e2990864b8f69e6a4ff21c9a913cc602255eace GIT binary patch literal 1914 zcmWfh6U3^(!pNY;F!@L@lqLK&1jf=VWqshp&ydA*f{}rlfvJ*#fq~&rL|=ul@MYEq z%!~{{49BG}vpR4xHLx%^Fzdfyec+6)`bJ+>v#U27M76u0Hyc#-XZZxS1)NL_lNB1w z^%B?^#913SB>8iT6&|0;W`j5>`Ew4GrT!-erY~4M7p8BzX)cn!!}D|56f`**CKrIs z=}7NnXg{0F#=ytipzx=_!Pu{aZGjLALjXhg*#n!GR6$KPK3ffCZT?yVWf@=XgSz+m z-9DJT%F_Ml#$Wg7hZ`?k-p`gG#KQ0(V9(M3_xb&73<~TGtQ8FfOiSI4G#l+>dyp>9 zz{IeGg@Ml~z%f!UI5Jqz#l_9Qkl}%o=l@m5?;T)cxNF$Jl&{r-reLYWejd?8VSn}o z3=9m+0s`%fjPtoz7#JBDCosr-4E`U*KiQ3;`1A#~1P=iQW{?dql?;0vPd`;Rzs|pU8e5vH4M~hMc90 z4EvK=?kg}hEaNXf_4>J0>7{1z-?!Nu%y=4@;ErHfmT@7u{xirH2Ihtp3=HPYrp65p zptQok2qqaAIMl!l4mCvq5eB{u-^9RNbRyh$=KOlQ$ol_(#S4G4H3+dZd}5sFzz}@t zH#q9R9QJKY>~NXG2F&cBNCnH3i*O-i(u)NVoXu|q5z3xllt9QV_K`%$gc~RzWQ12M zAY_i$DYAnDvApqF6O)3&6c!0aW`_A@ObmhZ)i@4`shpm3<)`j^0R?%l{#= zJ05MFuzi8#-3+^{-2QFEM-Fgo1zcv;EujFt2U3$xY^s zTI>&anHd)6AA4YKsSP$;*lOFA8?)~jF6_Q*(6qGT;P!%T8P`wA?S9hMUBAL2YtCXR4Na^49wPdCBvF*b`JZ7?>G0G0HHUWPL7vJA|Eq!LEV1z&u`qiIHJG zJJSJ%`I2lb;9!h5VPu%EA{%C4U}#`qXlh|(U}#`rYHDO`Y;0g`Zf;;~Vqh?VVT#qv zxk2@r(a*lLFUkN1fKWl>gMLPi35^@@CaX3bgIa7;hN3%1%h|tgYV^l0{|4b?CH5+vxR>Z zOxSdfG2)>MlYn&k$Kz|7j@_NFFI{_oZBSv(_qkpcw@sf2{afwzX`OS&WUg7?*FS0A z?k>(+{JFz;{&l17{+JWLB`W0Z{c>Jh2sRrOxZkykz-9~WJeI@wyG$+l($~jdSOV5a z=n7v}KUiSaQ<3EJW#!p2_qE{+jQ@-RlD@S+t#5lh|7Equ6OGwh7$03xkCsRj+q~iN zNtcPqRWFRw%fM!X++F^@jQzkJ!v<#CC6iRvGF)HwHEqR;BhPDnxLf(QHLjko<#pUL zChpf7foo^k`TvW3FhYn^Z3C4De> hvH9PG>GRzgndfJ+Ga4*k-od~yf#JGN$x literal 0 HcmV?d00001