iceman1001
6411ba1ee4
add
2026-07-30 17:06:36 +02:00
iceman1001
19cc98c532
hooked up the new DSP code. Should improve the t55xx commands
2026-07-30 16:43:09 +02:00
iceman1001
436de5d43e
style
2026-07-26 23:38:51 +02:00
YoungJules
862a338feb
hf legic: rename repeat fill to fill
2026-07-25 19:39:23 +02:00
YoungJules
8b3c67dac3
doc: mention legic wrbl repeat fill
2026-07-25 14:07:09 +02:00
iceman1001
2c6e607110
style
2026-07-15 16:39:15 +02:00
歐歪
f0c3dccdb6
Added hf mf gdmgetblk/gdmgethidblk/gdmsethidblk/gdmsetuid/gdmwipe/gdmsetsig ,improved hf mf gdmparsecfg/gdmsetblk and rename hf mf gdmcfg commands
2026-07-13 21:48:48 +08:00
iceman1001
005f4abb1a
texts
2026-07-07 22:50:22 +02:00
iceman1001
c6d01e6e72
update helptexts
2026-06-29 23:51:37 +02:00
Philippe Teuwen
5666cdf4e8
make style
2026-06-23 00:03:16 +02:00
Philippe Teuwen
efcc34a698
make style
2026-06-07 23:01:20 +02:00
kormax
73d0388141
Add 'hf mfdes getversion' command
2026-06-07 16:24:31 +03:00
YoungJules
8462363e61
legic: clarify restore and migration flow
2026-06-05 21:08:18 +02:00
Connor Milligan
590edbcc3f
Native client support for mfulc desbrute
2026-05-22 00:19:07 +02:00
Philippe Teuwen
d078e8a62b
make style
2026-05-21 20:54:44 +02:00
iceman1001
cbb572afad
style
2026-05-11 14:36:17 +02:00
kormax
7484af6c87
Drop old 'hf 14b calypso' and 'hf 14b mobib' commands
2026-05-03 08:08:15 +03:00
iceman1001
eb54497704
added the command "hf iclass liberate" , it checks for drm markers and removes them, thus liberates them. Now if someone wants to make drm tags, they can easily just make a "hf iclass drm" command with the reverse of this command
2026-04-21 11:17:11 +07:00
iceman1001
6af1a8e432
updated help text for `lf realy
2026-04-11 09:04:55 +07:00
iceman1001
489940cf76
helptexts
2026-04-02 19:43:24 +07:00
iceman1001
6542a35585
update helptexts
2026-03-20 09:45:15 +07:00
xNovyz
52676ebbd4
style: whitespace fixes
2026-03-11 22:41:21 +01:00
xNovyz
286df8f4eb
feat(14b): add interactive hf 14b tearoff command
...
Add an interactive command for performing tear-off attacks on ST25TB/SRx
monotonic counter blocks. This exploits EEPROM tearing to increment
counters that normally can only be decremented, based on the
near-field-chaos project by SecLabz.
The command sweeps tear-off timing from --start downward in --adj
microsecond steps, automatically consolidates partial writes, verifies
stability across multiple reads, and reports progress in real-time with
color-coded output.
Performance optimizations:
- One-time full iso14443b_setup() at start; subsequent field cycles use
lightweight tearoff_field_on()/tearoff_field_off() that skip FPGA
bitstream reload and buffer reallocation
- Periodic CMD_WTX keepalives to prevent USB timeouts during long attacks
- Calls FpgaResetBitstream() on exit to ensure clean FPGA state
Usage: hf 14b tearoff -b <block> -d <target> [--start <us>] [--adj <us>]
2026-03-11 21:43:37 +01:00
Philippe Teuwen
b62658f5ac
make style
2026-02-21 12:43:25 +01:00
Philippe Teuwen
1cf446fa7f
make commands
2026-02-06 13:07:16 +01:00
Philippe Teuwen
a26892a891
Add hf mfu cchk/aeschk and options to hf mf cauth/aesauth
2026-01-19 21:47:49 +01:00
Aaron Tulino (Aaronjamt)
e0fd7414c2
Update docs
2025-12-21 20:55:26 -07:00
Henry Gabryjelski
1cfeb79003
automated from make style
2025-11-17 01:27:32 -08:00
Foxushka
b380132cbb
Replaced hf mf bambukeys with hf mf keygen with multiple KDFs support, use table for key output
...
Added Snapmaker U1 filament RFID KDF in `hf mf keygen`
2025-11-10 20:58:49 +03:00
iceman1001
ed516550ca
added "data qrcode" command to generate QR codes from inside the PM3 client
2025-11-10 16:20:00 +01:00
Michael Wiesinger
737a6dc3d7
Fix help description for lf indala brute
2025-11-07 21:02:14 +01:00
Philippe Teuwen
4aac77aaa2
support for Ultralight AES auth in hf mfu info/rdbl/wrbl/dump/ndefread/wipe/setkey
2025-10-04 02:00:23 +02:00
iceman1001
d6aeda7075
style
2025-08-29 14:01:34 +02:00
iceman1001
e578d75e66
style
2025-08-20 10:55:49 +02:00
iceman1001
8ab2f2b5a0
style
2025-08-12 19:06:38 +02:00
iceman1001
a0df90af18
style
2025-08-04 19:53:08 +02:00
iceman1001
ee2f5595ee
added a lf t55xx view command to view t55xx dump files
2025-07-28 15:46:09 +02:00
iceman1001
ed84b1fcf4
style
2025-07-13 15:55:44 +02:00
iceman1001
c7cf62fcf1
Added support for sending and receiving MQTT messages. It enables end user to quickly upload or share JSON files between them. Given the nature of MQTT, I also worked with @KevTheHermit who has proxdump.com site, where you can upload pm3 dump files and browse. He added support for MQTT uploads, so the process to share a file and it gets also uploaded to proxdump.com is very smooth. Feel free to improve this functionality with TLS etc. For now it looks quite promising.
2025-07-08 21:15:09 +02:00
iceman1001
1fa5e28a38
unify text and hints for static enc nonces a bit more
2025-06-08 21:46:31 +02:00
iceman1001
53e1e32409
text
2025-06-06 19:00:34 +02:00
James Churchill
c312bae516
Add "hf mf bambukeys" command to generate Bambu Lab keys
2025-05-25 00:18:25 +10:00
iceman1001
d4bc190dd4
renamed the hf iclass trdbl -> hf iclass tear
2025-05-23 17:29:28 +02:00
iceman1001
84b565bec4
style
2025-05-19 22:31:41 +02:00
iceman1001
87c2e82e2f
style
2025-03-19 12:53:24 +01:00
Philippe Teuwen
c657ddf135
Add hf mfu aesauth
2025-03-19 09:36:15 +01:00
iceman1001
2137284a93
style\n Some improvements to trace list -t seos annotations.
2025-03-12 16:41:06 +01:00
iceman1001
cef07dedf6
code style, code clean up of redundant functions, comments, its many minor fixes across the platform. Sorry for not making 20 commits
2025-02-21 15:38:33 +01:00
iceman1001
1040fa8a86
style
2025-01-14 18:18:07 +01:00
iceman1001
2585a77403
fixed buffer overflow and swapped parameter to "suffix" since its not a output file name
2025-01-05 13:12:34 +01:00
iceman1001