Added Support for MIFARE Plus 2K Cards in SL1 Mode
MIFARE Plus 2k cards in SL1 mode - emulating a MIFARE Classic card - would get recognized as MIFARE Classic 1K card and Flipper would stop checking after sector 16. However, 2k cards in SL1 mode offer more sectors, typically 2 additional ones, which Flipper would miss and break the cards and emulation if there is stuff written to these sectors that is needed for it to function.

There is now a detection logic for 2k cards and the additional sectors are also read and cam be emulated.
This is also in reference to:#4053

Verification

Scan a MIFARE Plus 2K card in SL1 mode an see that only 16 sectors are scanned and Flipper detects it as MIFARE Classic 1K card.
Install the new firmware and observer that the 2K card is now correctly recognized and the additional sectors read.

Checklist (For Reviewer)

[x ] PR has description of feature/bug or link to Confluence/Jira task
[x ] Description contains actions to verify feature/bugfix
[x ] I've built this code, uploaded it to the device and verified feature/bugfix

Added Support for MIFARE Plus 2K Cards in SL1 Mode

7c6dc02

MIFARE Plus 2k cards in SL1 mode - emulating a MIFARE Classic card - would get recognized as MIFARE Classic 1K card and Flipper would stop checking after sector 16.However, 2k cards in SL1 mode offer more sectors, typically 2 additional ones, which Flipper would miss and break the cards and emulation if there is stuff written to these sectors that is needed for it to function.There is now a detection logic for 2k cards and the additional sectors are also read and cam be emulated.

LuemmelSec requested review fromDrZlo13,gornekich,gsurkov,hedger andnminaylov ascode owners

December 10, 2025 10:33

fantomazz26 reviewed

Dec 14, 2025

View reviewed changes

Copy link

fantomazz26 left a comment•
edited
Loading

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others.Learn more.

Vamos a aprovechar 🫠

Copy link

Author

LuemmelSec commentedDec 15, 2025

Be careful though. While it 1:1 reads the emulated tag on another Flipper as well as on a PM3 easy, the original reader would not recognize it for some reason. Still trying to find out why that might be.

Copy link

Contributor

mxcdoam commentedDec 15, 2025•
edited
Loading

Hello, are you sure 2k sl1 cards have 18 sectors? I'm asking because all of mine have 32 sectors. I've tested this change, fz was able to detect 2k sl1, but was able to read 18 sectors only.

Copy link

Author

LuemmelSec commentedDec 15, 2025

Yes they potentially can, it's a 2k card.
However, as SL1 is emulating a 1K card, I only found 2k SL1s with 2 additional sectors written to.

Copy link

Contributor

mishamyte commentedDec 15, 2025•
edited
Loading

Can u pls reference datasheet or source of truth, which led you to the assumption there are 18 sectors?

Because in datasheet it's clearly described there are 32 sectors (2 kb) for MFP 2K in SL1.

I validated bunch of tags from different suppliers and real systems (like old transport cards from my city) and all tags have 32 sectors as described in DS.

Mifare-Plus-S.pdf

UPD. I can assume prob ur system for some reason changed pwd for 19+ sectors from factory to custom ones?

Update Mifare Plus 2K

4fb0f02

Copy link

Author

LuemmelSec commentedDec 16, 2025

My card also has 32 sectors, but written data is only on sectors 16 + 17 as an addition. All others show up as unresponsive / no data in there.
This also plays into the same observation as mentioned in#4053.
I can assure you that there are no passwords on sectors after 17 for my card.
Anyways, I changed the code to read and emulate all 32 sectors now.