Commit Graph
335 Commits
Author SHA1 Message Date
iceman1001 6411ba1ee4 add 2026-07-30 17:06:36 +02:00
iceman1001 19cc98c532 hooked up the new DSP code. Should improve the t55xx commands 2026-07-30 16:43:09 +02:00
iceman1001 436de5d43e style 2026-07-26 23:38:51 +02:00
iceman1001 2c6e607110 style 2026-07-15 16:39:15 +02:00
歐歪 f0c3dccdb6 Added hf mf gdmgetblk/gdmgethidblk/gdmsethidblk/gdmsetuid/gdmwipe/gdmsetsig ,improved hf mf gdmparsecfg/gdmsetblk and rename hf mf gdmcfg commands 2026-07-13 21:48:48 +08:00
iceman1001 005f4abb1a texts 2026-07-07 22:50:22 +02:00
iceman1001 c6d01e6e72 update helptexts 2026-06-29 23:51:37 +02:00
Philippe Teuwen 5666cdf4e8 make style 2026-06-23 00:03:16 +02:00
Philippe Teuwen 184a957436 counterfeit ULC: add support to auth with nonce pairs 2026-06-10 01:02:14 +02:00
Philippe Teuwen efcc34a698 make style 2026-06-07 23:01:20 +02:00
kormax 5be7e8f9a3 Add --dfname param to 'hf mfdes read' 2026-06-07 16:24:31 +03:00
kormax 73d0388141 Add 'hf mfdes getversion' command 2026-06-07 16:24:31 +03:00
Connor Milligan 590edbcc3f Native client support for mfulc desbrute 2026-05-22 00:19:07 +02:00
Philippe Teuwen d078e8a62b make style 2026-05-21 20:54:44 +02:00
iceman1001 cbb572afad style 2026-05-11 14:36:17 +02:00
kormax 7484af6c87 Drop old 'hf 14b calypso' and 'hf 14b mobib' commands 2026-05-03 08:08:15 +03:00
iceman1001 eb54497704 added the command "hf iclass liberate" , it checks for drm markers and removes them, thus liberates them. Now if someone wants to make drm tags, they can easily just make a "hf iclass drm" command with the reverse of this command 2026-04-21 11:17:11 +07:00
Philippe Teuwen 88d20bd4f2 make style 2026-04-13 09:35:02 +02:00
iceman1001 6af1a8e432 updated help text for `lf realy 2026-04-11 09:04:55 +07:00
iceman1001 489940cf76 helptexts 2026-04-02 19:43:24 +07:00
iceman1001 e6db327485 text 2026-03-30 09:29:52 +07:00
iceman1001 6542a35585 update helptexts 2026-03-20 09:45:15 +07:00
kormax ec3b249d30 Remove redundant methods from Aliro/VAS, make private key load helpers universal 2026-03-15 10:08:30 +02:00
xNovyz 52676ebbd4 style: whitespace fixes 2026-03-11 22:41:21 +01:00
xNovyz 286df8f4eb feat(14b): add interactive hf 14b tearoff command
Add an interactive command for performing tear-off attacks on ST25TB/SRx
monotonic counter blocks. This exploits EEPROM tearing to increment
counters that normally can only be decremented, based on the
near-field-chaos project by SecLabz.

The command sweeps tear-off timing from --start downward in --adj
microsecond steps, automatically consolidates partial writes, verifies
stability across multiple reads, and reports progress in real-time with
color-coded output.

Performance optimizations:
- One-time full iso14443b_setup() at start; subsequent field cycles use
  lightweight tearoff_field_on()/tearoff_field_off() that skip FPGA
  bitstream reload and buffer reallocation
- Periodic CMD_WTX keepalives to prevent USB timeouts during long attacks
- Calls FpgaResetBitstream() on exit to ensure clean FPGA state

Usage: hf 14b tearoff -b <block> -d <target> [--start <us>] [--adj <us>]
2026-03-11 21:43:37 +01:00
Philippe Teuwen b8a5e7b656 hf mf cauth/aesauth/cchk/aeschk: make fast READ0 optional 2026-02-24 16:46:00 +01:00
Philippe Teuwen b62658f5ac make style 2026-02-21 12:43:25 +01:00
Philippe Teuwen b7f3e4219e make style 2026-02-09 01:12:54 +01:00
Philippe Teuwen c00e4801b7 make style 2026-02-06 13:43:41 +01:00
Philippe Teuwen 1cf446fa7f make commands 2026-02-06 13:07:16 +01:00
Philippe Teuwen a26892a891 Add hf mfu cchk/aeschk and options to hf mf cauth/aesauth 2026-01-19 21:47:49 +01:00
Aaron Tulino (Aaronjamt) e0fd7414c2 Update docs 2025-12-21 20:55:26 -07:00
Iceman bcf1b57ddd Merge pull request #3026 from henrygab/safer_safelok
Safer safelok routines
2025-12-18 15:10:59 +01:00
Sanduuz 3e0d00bb13 Typo fix in hfmfdes help (0ffset -> offset) 2025-12-16 17:01:37 +02:00
Henry Gabryjelski 1cfeb79003 automated from make style 2025-11-17 01:27:32 -08:00
Foxushka b380132cbb Replaced hf mf bambukeys with hf mf keygen with multiple KDFs support, use table for key output
Added Snapmaker U1 filament RFID KDF in `hf mf keygen`
2025-11-10 20:58:49 +03:00
iceman1001 ed516550ca added "data qrcode" command to generate QR codes from inside the PM3 client 2025-11-10 16:20:00 +01:00
iceman1001 eab695347a text and style 2025-10-17 13:38:45 +02:00
Philippe Teuwen fd88967443 make style 2025-10-14 09:50:59 +02:00
Philippe Teuwen e8302673e9 commands 2025-10-09 22:44:54 +02:00
Philippe Teuwen 4aac77aaa2 support for Ultralight AES auth in hf mfu info/rdbl/wrbl/dump/ndefread/wipe/setkey 2025-10-04 02:00:23 +02:00
iceman1001 347a4d5eff fix help text samples 2025-09-25 19:51:49 +02:00
Oleg Moiseenko 944a80d217 make style 2025-09-21 16:41:30 +03:00
Philippe Teuwen bde33711c7 style 2025-09-20 22:02:23 +02:00
iceman1001 02b4d61796 style 2025-09-02 16:16:29 +02:00
iceman1001 d6aeda7075 style 2025-08-29 14:01:34 +02:00
iceman1001 e578d75e66 style 2025-08-20 10:55:49 +02:00
iceman1001 8ab2f2b5a0 style 2025-08-12 19:06:38 +02:00
iceman1001 a0df90af18 style 2025-08-04 19:53:08 +02:00
iceman1001 ee2f5595ee added a lf t55xx view command to view t55xx dump files 2025-07-28 15:46:09 +02:00