MFKey64 — with tag

This PN532Killer workflow captures a complete MIFARE Classic authentication exchange while the original authorized tag is present.

Configure with the PN532 CLI

Connect to PN532Killer

pn532> hw connect

Return to Reader modePN532Killer

pn532> hw mode r

Start capture with the original tagPN532Killer

pn532> hw mode s -t 1

Place the original tag against the PN532Killer antenna and present both to the reader without changing their relative position. Repeat only the permitted interaction, then return to Reader mode:

Exit Sniffer modePN532Killer

pn532> hw mode r

Retrieve and analyze

Run the beta command after returning to Reader mode:

Analyze MFKey64 recordsPN532Killer · beta

pn532> hf mf mfkey64 --show-raw

Downloads the Sniffer records and runs the bundled mfkey64 helper.

Packaged beta releases include the helper. For a source checkout, run ./script/build_helpers.sh before analysis.

If capture fails, move the original tag slightly across the PN532Killer antenna, keep both close to the reader, confirm the reader performed MIFARE Classic authentication rather than only reading the UID, and check that the native helper exists.