所有水卡的密钥位都是20173B3B3C04FF07806920173B3B3C04
每张水卡的2区块都不一样,但是刷卡过程中2区块数据始终不变,1区和3区保持同步变动.
A水卡的UID: 69 ba 1f 11
2区块为
4B016777FFBB66000001FE0000FFFF56
1区和3区的数据如下:
10元: A7 EB E8 03 00 14 66 00 00 02 FE 00 00 AE 00 54
9.99元: A8 EA E7 03 00 15 66 00 00 02 FE 00 00 AF 01 53
9.98元: AA E9 E6 03 00 16 66 00 00 02 FE 00 00 AF 02 53
9.97元: B7 E8 E5 03 00 17 66 00 00 02 FE 00 00 B0 03 52
9.96元: B0 E7 E4 03 00 18 66 00 00 02 FE 00 00 B1 04 51
3.90元: D0 87 86 01 00 78 66 00 02 02 FE 00 00 D5 62 2D
B水卡
UID: 44 16 41 d3
2区块数据:17016777FFBB66000001FE00004100F8
1区和3区的数据:
10.41:B0 15 11 04 00 EA 66 00 22 03 FE 00 00 86 FF 15
10.40:4E 14 10 04 00 EB 66 00 23 03 FE 00 00 87 00 13
8.91元:A0 7E 7B 03 00 81 66 00 23 03 FE 00 00 90 95 0B
8.60元:A7 5F 5C 03 00 A0 66 00 23 03 FE 00 00 91 B4 0A
8.51元:A3 56 53 03 00 A9 66 00 23 03 FE 00 00 93 BD 08
C水卡
UID: f7 b0 fd 0d
2区块:21016777FFBB66000001FE0000FFFFF8
1区和3区数据:
0.00元:BC 00 00 00 00 FF 66 00 03 00 FE 00 00 DD E8 C9
D水卡 UID: a5 d0 08 dc
2区块:17016777FFBB66000001FE00004100F8
1区和3区数据:
1.49元:E2 95 95 00 00 6A 66 00 07 02 FE 00 00 AD 43 5B
现在就弄出来了3,4位是金额位,第2位是3,4位的加和,求大神看看其他位的算法
ps:发现第15位是金额循环位,金额变动超过2.55时,第9位貌似会加一,还有每张卡的1,3,4,9,10,14,15位的Xor值应该是固定的。
小白,刚开始研究,求大神帮帮忙
[培训]《安卓高级研修班(网课)》月薪三万计划,掌
握调试、分析还原ollvm、vmp的方法,定制art虚拟机自动化脱壳的方法