Flipper Infinity Skylanders

This repository stores Skylanders and Disney Infinity A-Keys to read sector and data of Skylanders and Disney Infinity NFC Toys.

Currently under testing.

Skylanders - How to retrieve the 16 keys

First, we need to read the Skylanders NFC Toy to retrieve its UID, using Flipper Zero or an app that allows you to do that.

Then, we need to use the NFC Toys Script "tnp3xxx.py", to generate the 16 keys which allow us to read sector and data. You can also find it hosted on this repository here

┌──(v0lk3n㉿lab)-[~]
└─$ python3 scripts/tnp3xxx.py 2453be1f
4B0B20107CCB
BA50B997D1B8
9C3D6DC4067B
0F0B876DED9A
43D12FCA431D
D0E7C563A8FC
F68A11307F3F
65BCFB9994DE
FD08AAD6C9D1
6E3E407F2230
4853942CF5F3
DB657E851E12
97BFD622B095
04893C8B5B74
22E4E8D88CB7
B1D202716756

Then, add those 16 keys to your "/nfc/assets/mf_classic_dict_user.nfc" file.

Disney Infinity - How to Retrieve the Key

First, we need to read the Disney Infinity NFC Toy to retrieve its UID, using Flipper Zero or an app that allows you to do that.

Then, we need to use the NFC Toys Script "infsha.py", to generate the key which allow us to read sector and data. You can also find it hosted on this repository here

┌──(v0lk3n㉿lab)-[~]
└─$ python3 scripts/infsha.py 048376728B3A80
9327436F1966 

Then, add the one key to your "/nfc/assets/mf_classic_dict_user.nfc" file.

I'm adding my keys for each of my own Toys into this file here. Feel free to contribute!

Flipper zero now run the dictionnary attack on the skylanders nfc tags. Thanks to this pull request: flipperdevices/flipperzero-firmware#1497

Resources

• [NFC Toys] Skylanders Interoperability
• [NFC Toys] Disney Infinity Interoperability
• [NFC Toys] Skylanders Data Analysis
• [NFC Toys] Key Generation
• [NFC Toys] Writing Your Own Data to Skylanders
• [NFC Toys] Writing Your Own Data to Disney Infinity
• [Con Mod] Cloning Skylanders NFC !!! NO HTTPS