How to use Mfkey64

Mfkey64 is a powerful tool for analyzing the keys for MIFARE Classic Tags. In this tutorial, we’ll discuss Mfkey64, how it works, its source code, how to retrieve Mfkey64 data using PN532Killer, and how to decode the data on Windows software.

What is Mfkey64

Mfkey64 is an open-source software tool for finding keys to MIFARE Classic Tags. It works on one complete 64-bit keystream authentication between the tag and reader. We also name Mfkey64 as Sniff with tag, which means you must put the PN532Killer and tag together close to the reader while sniffing the authentication logs.

Mfkey64 Source Code

The source code of Mfkey64 comes from the Proxmark3 Repository on Github. It shows the parameters delivered to the function and how it recovers the key from only one complete authentication.1

Video Tutorial

Test Mfkey64 Sniff with Tag with MTools App and Mifare Classic Tool App with NFC

Steps to sniff with Tag

Step 1: Choose Sniff14A with Tag

Step 2: Enter Sniff14A + Tag Mode

Step 3: Put the Tag on PN532Killer together on the reader.

How to check if the Mfkey64 log sniffed

After several times of sniffing, the number on the screen will turn to 04, which means the Mfkey64 log is sniffed.

Be sure to exit Sniff14A with Tag mode to save the Mfkey64 log.

If you don’t have the Screen extension, the RED LED on the PN532Killer board will be on together with the Green LED. And you can exit the Sniff14a with Tag mode in the MTools App.

How to use Mfkey64 on Android

  1. Install the MTools from the Play Store.
  2. Connect PN532Killer with cable.
  3. Put the original tag on PN532Killer and choose Sniffer > MFC > Sniff with Tag.
  4. Enter the Detail of the card and choose Decode Mifare Keys.
  5. Select Mfkey64 – With Tag to calculate keys.

How to use Mfkey64 with PN532Killer (Windows)

  1. Connect PN532Killer to your Windows. Learn more on the tutorial: How to connect the PN532Killer Program on Windows
  2. Choose Sniff with tag and Click Read Data
  3. Click Calculate Key and get results
  4. The sector, key type, and key will be shown in the group. The key type in 60 means the keyA and the key type in 61 means the keyB.
  1.……/mfkey64.c ↩︎


Leave a Reply

Your email address will not be published. Required fields are marked *