flexM1 v2
The flexM1 v2 is a Mifare “Classic” S50 1k chip emulator with writable Sector 0, also known as the “manufacturer block” (includes the 4 byte NUID “serial number”).
- 13.56MHz Mifare S50 1k emulator chip
- 4 byte NUID and all of sector 0 is writable
- 10.25mm x 13.5mm x 0.65mm flexible biopolymer package
- Available as:
- ZUID which supports both gen1a and gen2 (aka CUID) magic features. Gen2 is not enabled by default.
- gen2 which supports direct writing to block 0 with the MIFARE Classic Tools Android app or a Proxmark. Unlike the ZUID (or gen1a tags), most readers can’t detect it as a “magic” tag.
$225.00
More Details
WARNING This kit definitely contains dangerous things. The flexM1 transponder has not been tested or certified by any regulatory agency for implantation or use inside the human body. Use of this device is strictly at your own risk.
What’s so great about the flexM1 v2?
Basically, for many years the MF1ICS50 1k chip was used for all kinds of applications as a “secure chip” for everything from access control to stored value cards, and used for making localized payments within closed systems like public transit and laundry services. However, its security mechanism called “crypto1” is a simple, proprietary encryption mechanism that hardly has anything to do with modern cryptography. It has been broken for many years now, but the sheer number of systems out there that still use it means the S50 1k chip will continue to be used by legacy systems around the world for years to come. So now, you can crack the security on those cards and clone their content (including the 4 byte non-unique ID or NUID “serial number”) to your flexM1!
What can this chip implant do?
• Copy certain HF chip IDs to this chip
• Some types of access control applications
• Scan this chip implant to log into your computer
What this chip implant can’t do
• Share data with NFC enabled smartphones
• Trigger events on NFC devices like smartphones
• Can’t make payments with this chip implant
• Chip implants can’t be used for GPS or tracking
Basic features
- 13.56MHz ISO14443A Mifare “magic” S50 1k emulator chip
- 4 byte ID and all of sector 0 is writable
- 10 year data retention. Rated for 100k writes per memory block.
- Embedded in 10.25mm x 13.5mm biopolymer encapsulation that is only 0.65mm thick
Common questions
- Q: What’s the difference between the gen1a and gen2 version?
- A: Read the magic chip post on our forum!
- Q: How do I change the ID of my magic chip?
- A: Read the magic chip post on our forum!
- Q: How do I clone cards to my magic chip?
- A: Read the magic chip post on our forum!
WARNING If you decide to purchase one of these units, be aware that “magic” chips come from Chinese grey market suppliers. Because the silicon IC inside the flexM1 is not made by a large reputable RFID transponder company, proper functionality or performance is not guaranteed. That said, the flexM1 still comes with our limited warranty protection.
Configuring the ZUID version with a Proxmark
Forum user Equiptor wrote the following documentation.
Professional installation notes
Installation of a flexM1 device should always be done by a professional.
- Do not install under any gripping surface (e.g. no palm side installations)
- Do not install atop or parallel to any joints (flex devices are only “semi-flexible”)