mirror of
https://github.com/RfidResearchGroup/proxmark3.git
synced 2026-10-06 14:17:46 +00:00
When no sector key was known, autopwn probed for a static encrypted nonce using the default key FFFFFFFFFFFF. On a FM11RF08S with non-default keys that auth fails, the probe returns NONCE_FAIL, and autopwn fell through to darkside/nested instead of the sen recovery. The later re-detections are gated on known_key, so nothing recovered it. Probe the known Fudan backdoor keys first, as 'hf mf info' and 'hf mf sen' already do, and run the detection with MF_KEY_BD. The default key stays as the fallback for cards without a backdoor. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>