Difference between revisions of "N2 Elite"

From YobiWiki
Jump to navigation Jump to search
m
Line 8: Line 8:
 
In that article, the author revealed how the emulator could be used to emulate any 7-byte UID or even a 4-byte UID (we'll come to that later) and he's providing two programs written in Basic; apparently Patrick remained true to himself ;)
 
In that article, the author revealed how the emulator could be used to emulate any 7-byte UID or even a 4-byte UID (we'll come to that later) and he's providing two programs written in Basic; apparently Patrick remained true to himself ;)
   
  +
=N2 & NTAG Resources=
=Links=
 
 
* [http://www.n2elite.com/ Official]
 
* [http://www.n2elite.com/ Official]
 
** Official site has a list of shops. Mine came from Cyprus ([https://www.playmods.co.uk/en/n2-elite-nfc-toy-emulator.html Playmods.co.uk]) and was delivered in 4 days to Belgium.
 
** Official site has a list of shops. Mine came from Cyprus ([https://www.playmods.co.uk/en/n2-elite-nfc-toy-emulator.html Playmods.co.uk]) and was delivered in 4 days to Belgium.
 
* [http://www.nxp.com/documents/data_sheet/NTAG213_215_216.pdf NTAG213/215/216 datasheet]
 
* [http://www.nxp.com/documents/data_sheet/NTAG213_215_216.pdf NTAG213/215/216 datasheet]
  +
* Amiibo specificities
 
  +
Three versions of the Android app so far:
  +
* ed5fc865e98b33e584860b39cb70ddb6 Amiiqo_1.0.apk
  +
* 44d1ea2fd342c7faa3af81f473eada12 Amiiqo_1.1.apk
  +
* f39a091be603058329b085f1b0382caa Amiiqo_1.2.apk
  +
Versions 1.1 and 1.2 contain both the same fw image to update older N2 Elite tags, see below the section about firmware.
  +
=Amiibo Resources=
  +
Nothing really useful fir us but well...
 
* Amiibo tags
 
** http://3dbrew.org/wiki/Amiibo
 
** http://3dbrew.org/wiki/Amiibo
 
** http://nfc-bank.com/bins.php?categoryid=2&tabid=39
 
** http://nfc-bank.com/bins.php?categoryid=2&tabid=39
  +
** https://www.mediafire.com/folder/f74yt2jfrkl76/Amiibo_Dump
  +
  +
* Unofficial sw
  +
** Alternate manager: http://www.maxconsole.com/maxcon_forums/threads/291976-Amiiqo-Manager
  +
** Parsing library: https://github.com/Falco20019/libamiibo
   
 
=Hardware=
 
=Hardware=
Line 29: Line 42:
 
=Traces=
 
=Traces=
 
Let's trace some transactions between the Android app and the device.
 
Let's trace some transactions between the Android app and the device.
 
   
   
 
=Commands=
 
=Commands=
  +
  +
=Firmware=

Revision as of 21:05, 11 June 2016

N2 Elite is sold as a game cheating product, called previously Amiiqo, an name probably too close to the original targeted game Amiibo.
I'm not interested at all in its gaming aspects but it's primarily a (multiple) NTAG215 emulator and in that respect, I'm very curious about that product :)

Intro

It's a small round passive device with one button. It can emulate up to 200 NTAG215 and can be programmed via an Android app or, if you buy their additional reader, via a PC application: N2 Manager for Windows or Mac.

Credits: I heard about it by reading a 3-page article of Patrick Gueulle in the French revue Le Virus Informatique #28. In that article, the author revealed how the emulator could be used to emulate any 7-byte UID or even a 4-byte UID (we'll come to that later) and he's providing two programs written in Basic; apparently Patrick remained true to himself ;)

N2 & NTAG Resources

Three versions of the Android app so far:

  • ed5fc865e98b33e584860b39cb70ddb6 Amiiqo_1.0.apk
  • 44d1ea2fd342c7faa3af81f473eada12 Amiiqo_1.1.apk
  • f39a091be603058329b085f1b0382caa Amiiqo_1.2.apk

Versions 1.1 and 1.2 contain both the same fw image to update older N2 Elite tags, see below the section about firmware.

Amiibo Resources

Nothing really useful fir us but well...

Hardware

Device was sold previously under the name Amiiqo, and they insist this is the same hardware as the N2 Elite. Nevertheless there are apparently two revisions of the product:

  • V1, preloaded with 10 amiibo figurines
  • V2, empty, and an alien face printed on the PCB

I got a V2.

N2elite.jpg

Patrick Gueulle mentions the QFN24 chip has a mark "SX3" but mine is completely black. Under the microscope he found two references on the die: "G4830H001I" and "DI 503 03".

Traces

Let's trace some transactions between the Android app and the device.


Commands

Firmware