From 0330234aeabfea8a025832077560747968fb185c Mon Sep 17 00:00:00 2001 From: iceman1001 Date: Thu, 14 Oct 2021 19:49:57 +0200 Subject: [PATCH] Added sniffed traces of Visa Apple ECP transactions. Thanks to @a66at for them! --- CHANGELOG.md | 1 + traces/README.md | 3 +++ traces/hf_visa_apple_ecp.trace | Bin 0 -> 675 bytes traces/hf_visa_apple_normal.trace | Bin 0 -> 6997 bytes traces/hf_visa_apple_transit_bypass.trace | Bin 0 -> 1914 bytes 5 files changed, 4 insertions(+) create mode 100644 traces/hf_visa_apple_ecp.trace create mode 100644 traces/hf_visa_apple_normal.trace create mode 100644 traces/hf_visa_apple_transit_bypass.trace diff --git a/CHANGELOG.md b/CHANGELOG.md index c30be73e3..8dd40247c 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -3,6 +3,7 @@ All notable changes to this project will be documented in this file. This project uses the changelog in accordance with [keepchangelog](http://keepachangelog.com/). Please use this to write notable changes, which is not the same as git commit log... ## [unreleased][unreleased] + - Added trace of VISA Apple transactions (thanks @a66at ) - Added trace of reading a MIFARE UL-C with 3DES authentication (thanks @rad1game) - Added ATR fingerprinting (@iceman1001, @doegox) - Fix `hf mf dump/auto/csave` MFC JSON dumps - save real ATQA/SAK (@doegox) diff --git a/traces/README.md b/traces/README.md index 8bfda01d9..2875c0886 100644 --- a/traces/README.md +++ b/traces/README.md @@ -96,4 +96,7 @@ |hf_15_reader.trace |Execution of `hf 15 reader` against a card| |hf_mfp_mad_sl3.trace |`hf mfp mad`| |hf_mfp_read_sc0_sl3.trace |`hf mfp rdsc --sn 0 -k ...`| +|hf_visa_apple_ecp.trace |Sniff of VISA Apple ECP transaction| +|hf_visa_apple_normal.trace |Sniff of VISA Apple normal transaction| +|hf_visa_apple_transit_bypass.trace |Sniff of VISA Apple transaction bypass| diff --git a/traces/hf_visa_apple_ecp.trace b/traces/hf_visa_apple_ecp.trace new file mode 100644 index 0000000000000000000000000000000000000000..97446b59467050cc99f4ae538c37e5d73602c413 GIT binary patch literal 675 zcmZqPX3qA&nV%tx=>#JKGXqm40}vd#(O1>Hc^2CPW=4h}hGvm}*p(D(CbC16xEm$1 zJ8&{JurN40{#VMrfRl+~vOkwJ|i_UL#CKrIsxm?@S(7v;ooq>g(Sa&J9@#)b^;l@wyT*{sRH2y)ro}~fT zHv%OT*c(_Y8VZ<}x*cJjb(#G^x;O(9!x9z-KBEA~NWI|5U_BQXHv>b42Tq>XJnku#lpbI$T)#P=40^xDE`TA44*BY zu_t&40AmJd1572u9>>#9&6mDmXJBw>5YBgMfk`YipKl>OKaFKR6We@dw)s*_Q(5D+ zm}W80VVrNyGT%>RKabe_C{{zxQbvaT$t?F37#o)Hm!Eq5+^Y0abMnIv><@UE85TXe zuArXzk=?N?mIM0HLqf$;cX3E#wMg0H&U;MrRM}rVc!zadx4h+r?f*hb|1asO?334!qvoMkh#7FWEV$3)~_5Sx$0Bfv=Oy&O{h)v zK}H5oyCp3lXLBn^Jp2slQd>yqBtUHcj*$KKbCfNJgN#oTAaj2*q_ph{3B7yJZfq~e z&h7&_YxFHQkX@8bIy)Cq?!FK44HiS1uoN;=a!DILfQWEN23MD|mcSCZv~UL1M)m%IeIA zly(atDRT+rEL#R?J62G3;zP=Ae+=0Xt0A-fT1b9*J;c5B8KlhJ1Uc)rLgK#dkon7( zlvVD6)W~lr>r@13uk3@&iQm$0;UP%>>?mZpzJqx0_mCZTl6I-5AtmEyNLpM52^BVE z)Vm0o?XN&=pX-p5eiIV29mrUH2NJIRMQzo8Ahi|K2q&c*3vpw@NVBSt^y-khrxxU# zsSRm=)rEw54Ix%&49R`G5I?pVq|9jnS^86uRQNPxmPS+dR}3W7e-_d*Izh(b7a(V2 zXGlGm1X&llP|I|uc1%x5%1MFrwJ$^F-d9NH213HUG)QVN3^IniMw;?EBz`yw;=W3U z?2~Uox-$V%xOX7F?PN%M>0L-2^)G6({E(olkWn}r5=(O+rD8s{br(TGj0QQqmP2y- zN{G){1z8sYB$p1^P4Xe9)29$S@N-C*xEbP0w?Wq3FCewvPKXnBQ=3vqO5Y2y*~O53 z>;R-+ISg^tN+ABJ6OhsU2Wnsc2~yNEkdt>7vUdLh38&6O>Ya;_S^Fxawf!Apd;bAB z>9-*(yBy-y+$HV#hjyh*ECXkiDTlWbPjX@#hCatZO)=H5mbMFT6q7fYFdWaV*3xd<&94dmG{pyaVay zCqo=F6|y7WgXGv5kkNk@qzAGgsbDUoo_ZhR?ks{FZYd@AS8#(>!39gtJDlf)FzuIV1yC7O^vct2&C2WhwT2*hnIfy^T( zApP z?WBw^A!X4nNcgh=GPxp%ZMP57dVWh9bqEq?9fg!D$04ig_tZXl65_g?hKvzEL-zDC z$XR7W{Mp|i^X_FxZhRdQpSuZ3sSYGex&!gc{-WKszbPxJg!HTKCXddH;t7Ksz6!)9 zSBJ!5wIF?3ZAe~Gmv-A5(C&C7wbz1=7R*1qsdk)F!Bqk~SMsC*@FfdOqY-ETpWi z28l7tAvk0y9tn$n+);W zUxcI+-67>>Pg3bY`@$P!jKf^u%hAF{CCWOnU;7R@Q;EFY80j_l+R^W)sM&9t8=l zn?qdpCn0%tYsf5Y1Bs>WAgf$}6fPFBqo1c;ZakzKiKG${(yw-fY|l%i7QG=Mxi4jN zB}mO50EzokskMhdCi^O7UKx@)kEAwj3}j6i2eG;1A5wP}#pYC6Ps zok`hn4c0a&tX}suu1|O#!!T?_M7GNns2ak!T&_h-<3FUzv|3tMMy#>G`)cc!_Xep0(JQu*@WOD8gJ|9XarRiAC|PYhln z!?+&aGmNL@LwH(7Mbu$x_l`e={C^+vH#PK5?>wxs@_zQ^kG=ldA^uyg#fgmJ3q1Tl zA3hlsn*X@b;_@Fi1EV&2{lS0kEf=E=+W0s>8NdDUUvL@Q|Esz4W$>z#{O-vkX1bZg zr6CPmE+){?&9n)$^bGD;KPIi?>4HFn&-;?xKJUS$MzC(>!DHfsyT>>0D=GH4w(ANj znflFkdiR96{gt)+%I%$AUrmf{E%gxyLf}#6?3Xi<$Yp<_5%Txwx?U9RvRj8YB z7{+e88*id{3cRm2_XNKJ+gy#AgP|9duzlWFYp~38tt3(FwD0jJpn8kFc~w~^Au9NV NI$i873tnV6^KZMkoM8X} literal 0 HcmV?d00001 diff --git a/traces/hf_visa_apple_transit_bypass.trace b/traces/hf_visa_apple_transit_bypass.trace new file mode 100644 index 0000000000000000000000000000000000000000..6e2990864b8f69e6a4ff21c9a913cc602255eace GIT binary patch literal 1914 zcmZ8g3pkWn7(W01&;0+8a+%g;Ri;L6g&AXv)G|fJrOPmFE-7ku!|q^YLt6Qz4UZl( ztuBvlzj7xEVcSYXDXra7?bM2U!FTX=2p|C70myd6KQo?Aze80b5by=f#&@WE4H%~YK4SZf zs&xI_`+jCZ%1Uo^!dtM$8=dqXFbP3(G+>a$zIcZf5{;1x&mpRF|wWqXzPMgrhOBl|sNMfuO{f@Ih*@6?_Ca1`#|8v1ayVEqx-8%GTHpfy-jb zBL;*QXvej@>~-4SmSQm6j`AI}aCnLYr6BBcN{8(ho)Jf^3jA^8K*L+MRVq9|1ZkWM8 zKrw_6Ksdm_hcKgE(Ko$$?Cu9^LWg1EB@W3MzmyIF$BfVX@nN#{4}{qY>rC!E8mZl2 zri!OWB7}D`9ukrJZbp;Sh~h$BMAN1N_xGngsg~E~7-y6!OG8#`gJg{y^W{lgeh9)UFb>&ixVtULS5!mxO!d*A98(udx@t0xwH}gT4qE5+hu_k+beR=^Y6f2 zGRCQ;3!7pxZB?;P^(YvH`Yfz|h=;?*do2?-2p91e%Y;qh1;dlpL$4mf2W_e~1l z(DOF+RM>>L(qyF!qRErbx>$z)VUM|B9YX0GVyA6UUqEKSw^8L=J8J*(+{iC0HE~+| zf_9{%rFCA$z`oZE55JOaE!(&!Pgl7}bsq+cIwe!$VxbWe;(nCMD?1_o$8NBWacF<@ z>D|{l2wUUCM`gazlA+^Xj_us1dZVRYZ^~WMvNVqjoq3v4D=?tO45V=gg z{JhSOuDQ`u;tpADo8W!^ngkk-H50cDcDy^h7|AF^@etGu60 z%YdR_aBERfQ*Yv`89&XcNiHRCS%p zb;+@wl=a0^YV$gaCwT9Lss)GTPL?)vWrD2LXGEErw4grE=%JOn+A?~Z-9#rP6|T+9 z#44H(T>RuX