hf mf autopwn: where do user keys and keys from hardcoded default array come from? about proxmark3 HOT 5 CLOSED

Got same result, didn't find where defined 5 user keys

from proxmark3.

After digging in the source code, correct me if I'm wrong:
I think signature of the card is recognized. Some keys on specific sectors are known (hardcoded in client source) this tell the 'signature' of the card, with this specific kind of card, it is possible to derive key from UID (with a specific algo). This computed derivative keys are maybe placed as "user keys" and used for dictionary attack.

from proxmark3.

The default hard-coded list is a small very verified list of known default keys being used in the wild.
The dictionary files is larger ones which might depend on your geographic / regional / system. You can create a dictionary file based on which dump files you have. There is a python script for that already.

Does this make sense?

from proxmark3.

It's what I understood after reading the source code.
I was quite confused because it doesn't appear when using hf mf chk or hf mf fchk.
Regards

from proxmark3.

the hard coded default list is always used, the custom user dictionary is optional.

from proxmark3.