Visa · NFC
Visa debit
Step through a transaction one command at a time. Every field named, every status word explained.
Step 2 of 8: Response
6F 5B 84 0E 32 50 41 59 2E 53 59 53 2E 44 44 46 30 31 A5 49 BF 0C 46 61 22 4F 07 A0 00 00 00 03 10 10 50 0A 56 49 53 41 20 44 45 42 49 54 87 01 01 42 03 40 00 00 5F 55 02 55 53 61 20 4F 07 A0 00 00 00 98 08 40 50 08 55 53 20 44 45 42 49 54 87 01 02 42 03 40 00 00 5F 55 02 55 53 90 00Status word
Decoded objects
6FFile Control Information (FCI) Template91 bytes84Dedicated File Name14 bytes32 50 41 59 2E 53 59 53 2E 44 44 46 30 31“2PAY.SYS.DDF01”A5FCI Proprietary Template73 bytesBF0CFCI Issuer Discretionary Data70 bytes61Application Template34 bytes4FApplication Identifier (AID)7 bytesA0 00 00 00 03 10 1050Application Label10 bytes56 49 53 41 20 44 45 42 49 54“VISA DEBIT”87Application Priority Indicator1 byte0142Issuer Identification Number3 bytes40 00 005F55Issuer Country Code (alpha2)2 bytes55 53“US”
61Application Template32 bytes4FApplication Identifier (AID)7 bytesA0 00 00 00 98 08 4050Application Label8 bytes55 53 20 44 45 42 49 54“US DEBIT”87Application Priority Indicator1 byte0242Issuer Identification Number3 bytes40 00 005F55Issuer Country Code (alpha2)2 bytes55 53“US”
Exercises
Answer from the capture above. The explanation is worth reading either way.
- Level 1
Which Application Identifier (AID) does the card offer in its PPSE response?
- Level 2
What is the Application Transaction Counter (tag 9F36) in this capture, in hex?
- Level 2
The Application Interchange Profile (tag 82) on this card is 0000. Which authentication and verification capabilities does it assert?
- Level 2
Which tag carries the Issuer Identification Number, and what is its relationship to the PAN?
- Level 4
The Terminal Transaction Qualifiers in this session's GET PROCESSING OPTIONS data begin 32 80 40 00. Byte 2 carries the reader's CVM requirements. If this reader demanded a cardholder verification method, with every other bit left exactly as it is, what would byte 2 read?
- Level 1
The terminal's very first command carries fourteen bytes of name: 325041592E5359532E4444463031. Decode them as ASCII text.
- Level 1
In that same command, the fifth byte is 0E. How many bytes of data does it say follow it? Answer in decimal.
- Level 1
The card's reply contains tag 50 twice. The first reads VISA DEBIT. What does the second one read?
- Level 1
Tag 87 is the Application Priority Indicator. Which of the two applications does this card want the terminal to pick first? Give its label.
- Level 1
Card response 4 is ten bytes: 700A5F280208409F0702C080. Find the issuer country code and give its value.
- Level 1
When the terminal starts the transaction, the card answers with an Application Interchange Profile in tag 82. What are its two bytes?
Where this capture is taught
Every module below practices on this exact capture.
- 01Payment systems and securityFoundations60 minFree
- 02Toolset environmentsFoundations120 minSecurity status not satisfiedWith the course
- 03Magnetic stripe dataFoundations75 minSecurity status not satisfiedWith the course
- 04Communication process for EMV transactionsPractitioner150 minSecurity status not satisfiedWith the course
- 07Terminal risk management and action analysisPractitioner75 minSecurity status not satisfiedWith the course
- 08Near field communicationPractitioner120 minSecurity status not satisfiedWith the course
- 09Tokenization processPractitioner60 minSecurity status not satisfiedWith the course
- 12PCI DSS 4.0 and P2PE for testersPractitioner60 minSecurity status not satisfiedWith the course
- 14The unpredictable number and pre‑playOperator90 minSecurity status not satisfiedWith the course
- 15Contactless limits and the cumulative-limit bypassOperator75 minSecurity status not satisfiedWith the course
- 17Relay resistance and distance boundingOperator60 minSecurity status not satisfiedWith the course
- 18SoftPOS and Tap to PhoneOperator60 minSecurity status not satisfiedWith the course
- 20Offline terminals and the portable readerOperator90 minSecurity status not satisfiedWith the course