Finally we can welcome you all to MKFv4.1 Public Release. The successor to the excellent MKFind 3.11. This excellent program has been written by Raff. with some help from Friends Mal, Dasdl, Andmor, Pushkin, Jabo and Panda. Well done to you all.

This page is here to give you an idea as to what it can do and where to look in this excellent new piece of software.

MKF4 is a major re-working of MKFind and I must say that it should be the ONLY program you need for MOSC on SECA Cards. All the features from the existing version are here and some new ones to boot.

Where is....... ????	Section Title	Go To
Settings - Logs, Com Ports, Baud Rate, Autconnect, Elvis Support and Backdoor Key	Settings
View Basic Card Details - UA/ Serial No., Providers, Expiry Date, PPUA.	Card Layout
Read Card Records Table	Card Layout - Card Records
MK KEY Extraction/ OPERATIONAL KEY Extraction - FULL AUTO Card Extraction or Non-Overwrite (MaxProv) Key Extraction or Manual Key Extraction (Click Record to extract) (Key Extraction Not supported under v6 cards)	Card Layout - Card Records
Check Key or Write Keys - Either Operational or Management Keys	Card Layout - Provider Name - Keys
PBM - Package Bitmap Modification (i.e. Change Channels Available)	Card Layout - Provider Name - PBM
MODIFY - PPUA, Expiry Date, Provider Name	Card Layout - Provider Name - General
Manual Brute Force Section	Tools - BruteForce
Other Calculator/ Xor/ Hex Conversion/ Date Conversion/etc..	Tools - Sig_Enc_Dec/ Misc

Settings Options are easy to configure, including the new support for Elvis Programmers!



Once the Settings have been configured you can press the connect button (which is the icon on the left of the menu bar). This will then allow you to move on to reading the cards records:-



Once you have the basic Card Layout, you can now move on to the Card Records section. This is a 'bit' like the 'Read All' option in MKFind 3.11. However, it has had a bit of a makeover as you can see. Now you get a smart table, which identifies each record for you as they appear and sorts them into record order.




Once this list has appeared, the option at the bottom of the screen become available. There are three options on the Card Layout Screen. Manual, for individual key extraction. MaxProvider for just extracting keys without overwriting any records (success varies with card) and of course the most outstanding option - FULLAUTO. When running the Full Auto Option, the table above becomes decrypted right in front of your eyes. This is truly an amazingly cool facility.

If you try using the MaxProvider option, then the table will get filled in a bit like this:-



Simply clicking on a record that has 4 bytes or less left and is either a Primary key or follows a fully displayed primary key, will pop up the menu option displayed above. Then by clicking Brute force, the key will be brute force attacked in less than a second! Plus it only takes a few minutes maximum if you have 4 bytes missing.

If you end up with more than 4 bytes missing, then no problem.... Clicking on a record that has more than 4 bytes missing produces the options in the screen below:-




Ok, so that is everything right??? uummmm..... well no...... Raff has put far more time and effort into this program to just finish there!!!


So, what next?? well, once the keys have been extracted using the above options, they are copied across to the individual Providers sections. Each Provider on the card is made up of four sections. These are General, Keys, PBM, and Advanced. The General Tab allows the options shown below, by just typing in what you want and pressing modify (even the expiry date! - no more working in hex... ) :-



As you can see above, you can change the Provider Name, the Expiry Date, (which has a cool calender listing when the drop down menu is clicked) , The PPUA that goes with an MK01 you may be writing to the card.

Then you can move in to Keys Section. This is shown below and is so easy to use for changing a key. Simply type the key you want to program in (without having to encrypt it first!), then press Write Keys and there you go, the selected keys will be written to the card. It is done:-



You can also save your keys to a file and load up keys from another file to program in. It really is straight forward and very powerful. All the indexes on the card are listed along the top of the screen. Changing a monthly operational key is just as simple. Once you have the hex key you want to program in, just click on the 'Operational' tab and then type in the key in the appropriate space (Key 0C, 0D, or 0E) and press Write Keys. That's it!


Now, on to modifying your Package Bitmap. Like the rest of the program, this has been made a truly simple operation. Click on the Tab called 'PBM'. This will move you onto a screen as below:-



Now, as you can see the package can be modified simply by clicking on the channels you want, moving through each of the 8 byte tabs at the top. Once you have selected all the channels you require, the Package Bitmap box will display the correct PBM and you just need to click 'Modify PBM' and voila... your card now has those channels!!! There simply is no substitute for MKFv4.

There is just one more area I want to show you in this preview and that is the stand alone Brute Force section. You can happily brute force any combination of missing bytes on either the Primary or the Secondary Key. You can also choose whether to use the super quick 'Checksum' mode, where the Key and the checksum box must be filled in, or to use the more 'Traditional' mode (which is still pretty quick), for those cards that do not show the checksum.




Below are some of the other facilities available




MKFv4 now has such a powerful brute force option, that 4 bytes can be extracted in a minute or two. 3 bytes are done before you have even clicked the button!!! Anything more than five bytes and you can just tell it to get at least 5 bytes or extract full key!(as shown further up this document).

Please don't forget though. That if you really want to learn about how this works, try using the Non-Overwrite Method, as currently implemented in MKFind3.11 (Word doc is included) or even the Overwrite Method manually to see what each command is.
You should also try using the logging method.

Well that's about it for the Preview site. All the options/ screenshots shown above are of course subject to change as this program is still under development. You can be assured though, that as soon as it is ready, the release will appear here first - The official home of MKFind and MKFv4.

Many, many thanks go out to Raff for his excellent work on this ultimate program. Also a great deal of thanks must also go out to Mal for his excellent program - MKFindv3.11 that MKFv4 was based on and to Panda for his excellent work on the Brute Force option and dll that is so damn fast!


Please Note:- All info seen on the screen displays above is purely fictious. It is not real information. It is only there to give you an idea of the screen as the program runs.