As a general NFC mobile phone using NXP or Broadcom scheme, the modified method is not the same, why to modify this ID, followed by, in general, the phone's uid is fixed or random
Broadcom Mobile Phone Modification method
Modified path, such as the map, in the ETC directory has libnfc-brcm.conf, from the file name can also be seen BRCM is Broadcom abbreviation, so only the use of the Broadcom program mobile phone Only this file, open and find nfa_dm_start_up_cfg
The code is as follows |
Copy Code |
###############################################################################
# Startup Configuration (bytes maximum)
#
# for the 0xCA parameter, Byte[9] (marked by ' AA ') are for UICC0, and byte[10] (marked to BB) is
# for UICC1. The values are defined as:
# 0:UICCX only supports ISO_DEP in the low power mode.
# 2:UICCX only supports Mifare in the low power mode.
# 3:UICCX supports both ISO_DEP and Mifare in ' low ' power mode.
#
# AA BB
nfa_dm_start_up_cfg={2e:cb:01:01:a5:01:01:ca:14:00:00:00:00:06:e8:0 3:00:00:00:00:00:00:00:00:00:00:00:00:00:80:01:01:C2:08:61:40:82:04:40:4B:4C:00:B5:03:01:02:FF}
|
Added in curly braces, the 0x33 represents the UID number, the second byte uid is length, such as 0x04, the length of the card number is 4 bytes, followed by the card number, such as 01,02,03,04, and the modified data is:
The code is as follows |
Copy Code |
{2e:cb:01:01:a5:01:01:ca:14:00:00:00:00:06:e8:03:00:00:00:00:00:00:00:00:00:00:00:00:00:80:01:01:c2:0 8:61:40:82:04:40:4b:4c:00:b5:03:01:02:ff : 33:04:01:02:03:04}
|
After the change, restart the phone, you can use Taginfo app read card number is modified successfully:
NXP Program Phone Changes:
Find libcnfc-nxp.conf in etc directory
Change the 04 in the graph to the length of the UID, followed by 01 02 03 04 As the specific content of the UID.
Precautions:
1. After the change to restart the phone, and then read with Taginfo to see if there is no success
2. If Taginfo can't read the UID of the cell phone, try to read it in standby screen.
The reason for reading in 3.2 is that the Android beam is turned on and the android beam is turned off to try and read in the normal interface
4. If you don't want to change the system files, here's an app that you can try
Mobile NFC Chip Summary
Cell phone |
Chip |
Millet 5 |
NXP 66t17 |
Millet 2A |
NXP 44701 |
Millet 3 |
Broadcom 20793M |
Iphone6 |
NXP 65v10 (PN548) |
Iphone6s |
NXP 66V10 |
Nexus 6 |
Broadcom BCM20795 |
Nexus 7 |
NXP 65n04 |
Nexus 5 |
Broadcom bcm20793m |
Nexus 4 |
Broadcom 20793S |
Nexus 6P |
NXP PN548 |
Nexus 9 |
Broadcom BCM20795 |
HTC M8 |
NXP 44701 |
Vivo Xplay |
NXP 44701 |
Moto x |
NXP 44701 |