Demos

A ChameleonUltra tool to management the device info and settings.

Features

  • Show device info
  • Load/Save device settings
  • Modify Button Action
  • Change BLE pairing key
  • Reset to default settings
  • Delete all BLE bonds
  • Factory reset

A tool to update ChameleonUltra firmware.

Features

  • Select tag to update firmware

Related links


A ChameleonUltra tool to detect the mifare key that reader is authenticating (a.k.a. MFKey32).

Features

  • Emulate a mifare card and enable detect mode
  • Recover the mifare key that reader is authenticating
  • Check the mifare key is correct or not

Related links


A ChameleonUltra tool for mifare class 1k.

Features

  • Load/Emulate for slot of ChameleonUltra.
  • Read/Write for Mifare Gen1a Tag (UID).
  • Read/Write for Mifare Classic 1k, Gen2 Tag (CUID, FUID, UFUID).
  • Import/Export dump for .json, .bin, .eml, .mct files.

A tool to scan uid of ISO/IEC 14443-A tags.

Features

  • Continuous scan UID, ATQA, SAK for ISO/IEC 14443-A tags.

A tool for Xiaomi Watch to clone encrypted Mifare Classic tag.

Features

  • Import/Export dump for .json, .bin, .eml, .mct files.
  • Emulate ChameleonUltra as non-encrypted Mifare Classic tag.
  • Write/Verify/Read for Xiaomi Watch.

在台灣有些 MIFARE Classic 卡片使用 value block 來儲存卡片的餘額,但是有些中國魔術卡不支援 value block 指令,所以無法使用這些魔術卡來複製 MIFARE Classic 卡片。這個工具可以讓你測試卡片是否支援 value block 指令。

A ChameleonUltra tool for MIFARE Classic value block commands. Some MIFARE Classic cards in Taiwan are using value block to store the balance of the card. But some chinese magic cards didn't support value block commands. So you can't use these magic cards to clone original MIFARE Classic cards. This tool can help you to test whether the card support value block commands or not.

Features

  • Get/Set for mifare value block
  • Increase/Decrease/Restore for mifare value block

A tool to emulate EM410x tag, scan from EM410x tag and write to T55xx tag.

Features

  • Load/Emulate a EM410x tag
  • Scan from EM410x tag
  • Write to T55xx tag and set as EM410x tag