🤔Inspect and find promo codes waiting to be discovered!🤔

Tech Security Tools

Magic Cards Flipper Zero

All the Magic Tags supported by the Flipper Zero

Table of Contents

    Video

    Understanding Magic Tags

    Magic Tags are a special type of RFID or NFC tag that contain unique features. Normal tags have their UID written in ROM (Read-Only Memory) and don’t allow us to change it. This isn’t the case for all tags, but some are made this way for security reasons. However, a Magic Tag allows us to rewrite its UID as many times as we like, thereby creating a tag that can be used to replace many other tags.

    Standard RFID Tags

    • UID: Each RFID tag has a unique identifier written into its memory, typically in ROM (Read-Only Memory).
    • Immutability: The UID in standard RFID tags is permanent and cannot be changed. This immutability is often employed for security purposes to prevent cloning or unauthorized duplication.

    Magic RFID Tags

    • Reprogrammable UID: Unlike standard tags, Magic Tags allow the UID to be rewritten. This means the UID can be modified multiple times as needed.
    • Flexibility: This reprogrammability offers flexibility and utility in various applications. For instance, Magic Tags can be used to replace other tags with different UIDs, making them useful for testing, development, and certain operational scenarios.

    The Different Forms of Magic Tags

    The magic tags come in different forms and can be found in key fobs, stickers and cards, except for the gen 4 which given it’s particular features it can only be found in the form of a card for now.

    The T5577 Tag

    When it comes to the low frequency (the 125kHz) a T5577 tag is all you will need in order to be able to write to pretty much all of the cards that operate at that level. The flipper zero makes it extremely easy and simple to do so. No extra applications are needed since by simply scrolling to the “125 kHz RFID” option in the main menu of the flipper zero, we can read any low frequency tag and then write it to a T5577. They come in different forms, from key fobs which is the most common, to cards and stickers.

    In order for this to work make sure you have a low frequency tag. With the flipper zero you can do this by scrolling to the “125 kHz RFID” option and selecting “Read” If information about the tag appears, it means that you have a low frequency tag. Otherwise, if you can’t read the tag in the “125 kHz RFID” option that probably means that you don’t have a low frequency tag and it’s most likely a high frequency tag.

    Magic Tag Gen 1a

    The Gen a1 is the first magic tag on the list for the high frequency (13.56MHz). This tag is compatible with the Mifare Classic 1K 4-byte UID it’s important to note that in order to successfully write the information of a Mifare card into a Gen 1a, you must be able to read all the sectors of the original tag, otherwise it won’t work. This is because the Mifare Card has a security mechanism that requires the reader to present the correct keys in order to view the data of the card. If the keys on that particular card isn’t the default keys, the flipper zero won’t be able to read it completely. For theses instances, the best solution will be to use a Proxmark3 and run an auto pwn command which will find the values of the keys and allow you to read all the data of the card.

    Magic Tag Gen 2

    After the Gen 1a we have the Gen 2 which is compatible with the Mifare Classic 1K that uses a 4-byte UID and a 7-byte UID. The difference between the Gen 1a and the Gen 2 is that the Gen 2 is also compatible with the Mifare 7-byte UID not just the 4-byte UID. They also have other differences that concern the way the data can be written since the Gen 2 supports direct writes to it’s data block while the Gen 1a doesn’t. However while using the flipper zero, this factor isn’t to be concerned it’s only important if you are using a Proxmark3.

    Ultimate Magic Card Gen 4 (UTM)

    The magic card Gen 4 which is also called ultimate magic card is compatible with most high frequency (13.56MHz) tags that operate at the ISO 14 type A standard. Since it’s capable of emulating many types of tags, we call it “ultimate” magic card. It is also more costly given this fact but if you purchase one, it is probably the only one you will need since it can also be rewritten multiples times. It also has other functions like Shadow Mode for example that allows the card to return to it’s initial state once it has been written.

    Conclusion

    To conclude, the T5577, the Gen 1a, the Gen 2 and the Gen 4 are the magi tags supported by the flipper zero, now depending on the type of tag you want to emulate, you will have to chose the proper magic tag. Anything that operates at the low frequency (125 kHz) a simple T5577 tag will do the job. Now if you have a Mifare Classic 1K of 4-byte UID a Gen 1a will be needed (make sure that your flipper can read all sectors, otherwise a Proxmakr3 will be needed). For a Mifare Classic 1K with a 4-byte or 7-byte UID, you can use a Gen 2. Any other type of tag you will have to go with the Gen 4. You can find a complete combo of all of the tags in the form of cards over here. Thank you, please leave us a comment if you have any questions or contact us at [email protected].

    Leave a Comment

    Your email address will not be published. Required fields are marked *

    0

    Scroll to Top