Commit Graph
23062 Commits
Author SHA1 Message Date
kormaxandmxcdoam 1ecbcb74be Add ISO14443-3 Type A timeslot support to 'hf 14a info' and 'hf 14a reader'
Co-authored-by: mxcdoam <72457810+mxcdoam@users.noreply.github.com>
2026-09-07 22:55:24 +03:00
Iceman 9f641c3ced Merge pull request #3427 from Sanduuz/feature/st25ta_ndef_sim
Added support for emulating ST25TA tag (IKEA Rothult) with custom NDEF response
2026-09-07 15:38:46 +07:00
Iceman e807ef0df7 Merge pull request #3497 from 0x6r1an0y/20260823-uscuiddoc
Update USCUID section in magic_cards_notes
2026-09-07 15:31:12 +07:00
Iceman 07209fc358 Merge pull request #3493 from 0x6r1an0y/20260819-gdmfix
Improve `hf mf gdm*` commands
2026-09-07 15:28:56 +07:00
ry4000 6b1305cbc9 R&Y: Nomeclature updates to felica_system_code_list.json
# Updates
1. Changed `type` from `e-amusement` to `arcade` for:
    - Bandai Namco Passport
    - Konami e-amusement pass
    - Sega Aime
    - Taito NESiCA
2. Updated `description` to include the full name and `(AIC)` annotation to note that this information only applies to the Amusement IC Card variants as opposed to MFC/ICODE SLI/MFC/MFU, respectively.

-r&y.

Signed-off-by: ry4000 <154689120+ry4000@users.noreply.github.com>
2026-09-07 10:09:18 +02:00
Iceman 428a573b55 Merge pull request #3593 from xilni/docs/bwm-command-references
docs(bwm): fix stale hw bwm command references
2026-09-07 11:55:21 +07:00
xilni 342cc37cca docs(bwm): fix stale hw bwm command references 2026-09-07 00:07:07 -04:00
Iceman c42ead12dd Merge pull request #3591 from Antiklesys/master
TA1=96 support for SIM module
2026-09-06 21:25:42 +07:00
Iceman 2da575ab36 Merge branch 'master' into master
Signed-off-by: Iceman <iceman@iuse.se>
2026-09-06 21:25:31 +07:00
Iceman 23f8bfbc46 Merge pull request #3473 from YoungJules/feature/add_kgh_tools
Feature/add kgh tools
2026-09-06 21:01:40 +07:00
Iceman 8423286160 Merge pull request #3549 from 0x6r1an0y/20260823-mfuformat
Complete `hf mfu format` command
2026-09-06 21:00:20 +07:00
Iceman 45c1d79282 Merge branch 'master' into 20260823-mfuformat
Signed-off-by: Iceman <iceman@iuse.se>
2026-09-06 21:00:13 +07:00
Antiklesys b2ae468bf9 Update i2c.h 2026-09-06 13:53:46 +08:00
dxl fc355df050 Added IO test capabilities to the factory QC for PM5. 2026-09-05 18:09:46 +02:00
dxl 93983ed82f PM5 unit test logic updated. 2026-09-05 18:09:46 +02:00
dxl ea5485b4b8 Rename CMD_PM5_QC_TEST to CMD_PM5_QC_TEST_HW
and delete repeated def: CMD_PM5_BWM_SET_CAP
2026-09-05 18:09:46 +02:00
dxl c21ddfdb74 Power consumption testing has been added for pm5. 2026-09-05 18:09:46 +02:00
Antiklesys 3f24b2fb49 Update CHANGELOG.md 2026-09-05 22:47:35 +08:00
Antiklesys 57a42e3ce9 Stability fix for sc-bigbuf traces 2026-09-05 22:31:52 +08:00
Antiklesys ceb77de7fe Merge branch 'master' of https://github.com/Antiklesys/proxmark3 2026-09-05 17:30:52 +08:00
Antiklesys a96e3e8c18 Update sam_sc.c
Fix implemented: ARM RF-off now bypasses SAM initialization, saving 330ms from operations.
2026-09-05 17:30:42 +08:00
Antiklesys 999f64ddf9 Merge branch 'RfidResearchGroup:master' into master 2026-09-05 17:17:25 +08:00
Antiklesys 264d9bf284 TA1=96 support for SIM module 2026-09-05 17:16:38 +08:00
Niel Nielsen 9dfc7aacf4 Refactor command syntax in PM5-BWM-USAGE.md
Updated command syntax and formatting for clarity.

Signed-off-by: Niel Nielsen <nieldk@gmail.com>
2026-09-05 10:10:48 +02:00
Niel Nielsen ea4d90ebe4 Refactor BWM command handling for clarity and structure
Signed-off-by: Niel Nielsen <nieldk@gmail.com>
2026-09-05 10:09:23 +02:00
Niel Nielsen eb5b9eb561 Added removed comment again
Added removed comment again

Signed-off-by: Niel Nielsen <nieldk@gmail.com>
2026-09-05 09:12:39 +02:00
Niel Nielsen 96e13303c8 Update PM3_FPC_MAX_DATA to 2048
Increase maximum data size for FPC from 240 to 2048 bytes.

Signed-off-by: Niel Nielsen <nieldk@gmail.com>
2026-09-05 08:33:03 +02:00
歐歪 6960a6e788 fix: oops 2026-09-05 05:40:45 +08:00
歐歪 7bfd6b6189 docs: content clean up 2026-09-05 05:18:51 +08:00
歐歪 7e2ecc0ba6 rename: hf mfu format to ndefformat 2026-09-05 05:18:36 +08:00
Julian Isaac 71ca59a8ad Moved the new tool to tools/kgh and renamed it legic_kgh_tool. Added some validation so we don't return random bytes from non-kgh cards. Applied some styling to the new code. Added GPL header to new source file. Cleaned up the static build. 2026-09-04 23:14:22 +02:00
Julian Isaac 1d5d09b073 Merge branch 'master' into feature/add_kgh_tools 2026-09-04 22:23:13 +02:00
Niel Nielsen 1c8a1c1c95 Merge branch 'RfidResearchGroup:master' into BWM-work 2026-09-04 20:46:27 +02:00
Philippe Teuwen 47d0a8fa00 typo 2026-09-04 19:59:40 +02:00
Niel Nielsen 93ea5600f8 Merge branch 'RfidResearchGroup:master' into BWM-work 2026-09-04 17:10:15 +02:00
iceman1001 2025e49c09 added missing clock fct for pm5 2026-09-04 15:34:30 +02:00
iceman1001 9a958880ff fix bad txframe variable 2026-09-04 15:21:19 +02:00
iceman1001 0aef94c667 fix 'lf hitag reader -@' mode with sending a break afterwards. 2026-09-04 15:18:16 +02:00
Niel Nielsen 7b37171986 Merge pull request #1 from nieldk/bwm-ota-begin-timeout
Give BWM OTA begin enough time to erase, and stop retuning UART for t…
2026-09-04 14:55:00 +02:00
Niel Nielsen 8e1582233a Merge branch 'RfidResearchGroup:master' into BWM-work 2026-09-04 14:45:59 +02:00
iceman1001 ceda0728b6 remove debug statements 2026-09-04 14:34:19 +02:00
Niel Nielsen cf3730e1b4 Merge branch 'RfidResearchGroup:master' into BWM-work 2026-09-04 14:29:26 +02:00
WillandCursor 22969ec79a Give BWM OTA begin enough time to erase, and stop retuning UART for the transfer
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-04 08:24:16 -04:00
iceman1001 1a34aac8df texts 2026-09-04 13:32:54 +02:00
iceman1001 ace5d63ff9 hitag2: fix simulation against genuine readers, add restore, fix info
Simulation now completes the full exchange with a genuine Paxton reader in
password mode, and crypto mode read/write passes Proxmark-to-Proxmark.

Firmware:
- SOF was one bit period short. The lead-in that compensated for the lost
  head half bit was removed and nothing replaced it, so readers rejected
  every answer with a second START_AUTH. Default is now 6.
- The edge-detect threshold was latched before being measured, so the value
  chosen depended on whether the Proxmark was in a field when sim started.
  It is now measured on field entry and re-armed when the reader leaves.
- The percentile walk latched on run-scoped variables, so one attempt made
  outside a field poisoned every later one.
- Field loss was detected from TIMESTAMP, which is free-running MCU time and
  never stalls. Detect it from receive silence instead.
- Frames of a length the protocol does not have no longer reach the state
  machine; our own modulation tail was resetting the session and breaking
  every write.
- A dropped edge merges two or three reader bit periods into one gap. Those
  bits were discarded; they are now recovered by decomposition, which is what
  made crypto mode work (AUTH decode 15% -> 100%).
- Threshold selection is limited to 20 and 32 and settles in under 25 ms.

Client:
- lf hitag info printed a hardcoded 0x06 and reported 'Password mode' for
  every tag. It now reads page 3, takes -k (4 bytes password, 6 bytes
  crypto), and says so when the config cannot be read.
- lf hitag restore: writes a dump back in dependency order - user pages,
  then key material, then config last - validates the config byte, and
  prints the credential the tag will require afterwards.
- lf hitag crack2 now reports why it failed instead of a bare 'fail'.
- trace list: bit count moved to its own column, relative mode shows a
  Frame Delay Time row rather than renaming Start/End, --frame and -r
  rejected together.
2026-09-04 13:20:29 +02:00
Niel Nielsen a019756bfa Merge branch 'RfidResearchGroup:master' into BWM-work 2026-09-04 12:58:10 +02:00
Niel Nielsen d4e375f50b Move all bmw commands to subgroups
hw bwmautooff	hw bwm autooff
hw bwmcharge	hw bwm charge
hw bwmsetcap	hw bwm setcap
hw bwmupgrade	hw bwm upgrade
hw bwmvchg	hw bwm vchg
hw bwmwifi	hw bwm wifi

Signed-off-by: Niel Nielsen <nieldk@gmail.com>
2026-09-04 11:57:28 +02:00
iceman1001 d85550c6de text 2026-09-04 10:18:08 +02:00
iceman1001 ff387762b4 text 2026-09-04 10:16:34 +02:00
Niel Nielsen 5f56828912 Change BWM OTA baud rate from 921600 to 460000
Signed-off-by: Niel Nielsen <nieldk@gmail.com>
2026-09-04 10:05:50 +02:00