Merge pull request #3457 from c-barron/docs/uscuid-ul-commands

Document USCUID-UL commands and fix hf_mf_uscuid_prog usage name
This commit is contained in:
Iceman
2026-08-19 02:08:35 +07:00
committed by GitHub
3 changed files with 23 additions and 2 deletions
+2
View File
@@ -3,6 +3,8 @@ All notable changes to this project will be documented in this file.
This project uses the changelog in accordance with [keepchangelog](http://keepachangelog.com/). Please use this to write notable changes, which is not the same as git commit log...
## [unreleased][unreleased]
- Changed `magic_cards_notes.md` - documented the USCUID-UL helper scripts (`hf_mfu_uscuid` / `hf_mf_uscuid_prog`) and how to set the tag signature, replacing the outdated "No implemented commands" note (@c-barron)
- Fixed `hf_mf_uscuid_prog.lua` - corrected the script name shown in its usage text (@c-barron)
- Added `hf felica seacauth1` command
- Added `lf trovan` commands to support Trovan Animal ID (@iceman1001)
- Added `hf mf gdmgetblk/gdmgethidblk/gdmsethidblk/gdmsetuid/gdmwipe/gdmsetsig` (@0x6r1an0y)
+1 -1
View File
@@ -44,7 +44,7 @@ example = [[
3. script run hf_mf_uscuid_prog -S 0
]]
usage = [[
script run hf_mf_uscuid_uid_prog [-h] [-u <uid>] [-t] [-3] [-s <signature>] [-w 1] [-R -B <blk>] [-S -E <sec>] [-g -c -b -2 -7 -d -a -n -r <0/1>]
script run hf_mf_uscuid_prog [-h] [-u <uid>] [-t] [-3] [-s <signature>] [-w 1] [-R -B <blk>] [-S -E <sec>] [-g -c -b -2 -7 -d -a -n -r <0/1>]
]]
arguments = [[
-h this help
+20 -1
View File
@@ -2233,7 +2233,26 @@ hf 14a raw -akb 7 40; hf 14a raw -k 43; hf 14a raw -ck A2F2000000BD; hf 14a raw
^[Top](#top)
No implemented commands at time of writing
Two helper scripts drive USCUID-UL cards:
* `script run hf_mfu_uscuid` (Python) - read/parse config, change emulated type, set UID, set signature, and raw backdoor read/write.
* `script run hf_mf_uscuid_prog` (Lua) - equivalent functionality. See `-h` for its options.
Backdoor operations (set UID, set signature, raw hidden-block read/write) require the gen1a backdoor to be enabled - a config block starting with `7AFF`, see the [USCUID-UL configuration guide](#uscuid-ul-configuration-guide) - and a magic wakeup to be selected: for the Python script, `--gen1a` (`40`/`43`) or `--gdm` (`20`/`23`).
Example - write the tag signature (32 bytes / 64 hexsymbols) using the `40:43` wakeup:
```
script run hf_mfu_uscuid -s <signature, 64 hexsymbols> --gen1a
```
Verify with `hf mfu info` and look for `Signature verification: successful`.
The same result can be achieved manually with raw commands (magic wakeup, then write the eight signature pages `F8`-`FF`):
```
hf 14a raw -akb 7 40; hf 14a raw -k 43; hf 14a raw -ck A2F8<4 bytes>; ...; hf 14a raw -c A2FF<4 bytes>
```
### libnfc commands