歐歪
4a276dfcbc
docs: content clean up
2026-08-30 03:39:19 +08:00
歐歪
5484d2083f
fix: oops
2026-08-30 03:00:07 +08:00
歐歪
f3883a3649
style: content compress
2026-08-30 02:53:30 +08:00
歐歪
ded9ac868b
style: datasheet url
2026-08-30 02:46:16 +08:00
歐歪
6235eadf21
feat: hf mfu format command
2026-08-29 23:42:28 +08:00
Iceman
27b16cf081
Merge pull request #3494 from Antiklesys/master
...
Added script supporting external SAM modules
2026-08-22 22:49:45 +07:00
Antiklesys
b1d2d41a44
Added script supporting external SAM modules
...
This script adds support for external SAM modules to be used with Proxmark 3 Easy and Proxmark 5.
To run this script you would need an external SIM/SAM reader such as the ACR39T or ACR40T family or similar.
2026-08-22 23:48:38 +08:00
Iceman
b4c4edd7c9
Merge pull request #3491 from xianglin1998/update_changelog
...
Updated Changelog
2026-08-22 18:31:18 +07:00
dxl
26571b5efe
Updated Changelog
2026-08-22 18:37:39 +08:00
iceman1001
74f2dcc52c
fix warning of comparision of narrow type ... in loop
2026-08-22 10:03:49 +02:00
iceman1001
6a35aec1ba
fix code scanning warning of potential overflow
2026-08-22 10:03:03 +02:00
iceman1001
dafce323b4
fix strncpy warnings on proxspace
2026-08-22 09:51:18 +02:00
Philippe Teuwen
644ebba3d7
Try to fix MSYS2 compilation with openjpeg
2026-08-22 00:54:36 +02:00
Philippe Teuwen
95db547747
Remove object file
2026-08-22 00:16:25 +02:00
iceman1001
26c23f6808
fix missing files
2026-08-21 23:15:01 +02:00
iceman1001
20a5cb5e7f
missing pace files and tests
2026-08-21 22:33:05 +02:00
iceman1001
f6e0119f5f
added PACE (--can) support to emrtd commands.
2026-08-21 22:32:06 +02:00
Iceman
122637f26f
Merge pull request #3488 from 0x6r1an0y/20260820-ntagwriter
...
Complete hf mfu ntagwriter command
2026-08-22 02:35:12 +07:00
Iceman
d16866f1a3
Merge pull request #3490 from xianglin1998/expand_fun
...
To expand crm_ertc_clock_select() in at32_bpr_write_dt1() for reduce code size
2026-08-22 02:32:44 +07:00
Iceman
fbebbd4b78
Merge pull request #3489 from xianglin1998/fix_hitag2_sniff
...
Fixed hitag2 sniff.
2026-08-22 02:31:55 +07:00
dxl
2a11c73bbe
To expand crm_ertc_clock_select() in at32_bpr_write_dt1() for reduce code size.
2026-08-22 03:04:27 +08:00
dxl
5174a54cbc
Fixed hitag2 sniffing.
...
1. Fixed a bug where old data caused incorrect bitwise operation results.
2. Do not call ResetLoEdgeCapture(), as this will prevent the condition rb >= HITAG_T_EOF from ever being met.
3. PM5 and RDV4 have been tested and have good compatibility.
4. FPGA_LF_EDGE_DETECT_TOGGLE_MODE seems to be useless.
2026-08-22 02:35:50 +08:00
歐歪
c35b682c31
Merge branch 'master' of https://github.com/RfidResearchGroup/proxmark3 into 20260820-ntagwriter
2026-08-22 02:14:22 +08:00
歐歪
644365b4e2
Merge branch 'master' of https://github.com/RfidResearchGroup/proxmark3 into 20260820-ntagwriter
2026-08-22 02:13:48 +08:00
iceman1001
d3391bef3c
missing files for jpeg2000
2026-08-21 20:12:26 +02:00
歐歪
cdca934f7e
feat: hf mfu ndefwrite command
2026-08-22 02:11:29 +08:00
iceman1001
0f3092ceb8
added support to view JPEG2000 images commonly used with epassports. The lib use a BSD-2 license compatible with our GPL3+
2026-08-21 20:10:30 +02:00
iceman1001
68af7e2582
- now correctly shows multiple images in the image viewer. Thanks Claude!
2026-08-21 19:41:27 +02:00
Iceman
9310f93df6
Merge pull request #3484 from jonyen/fix-grabbed-output-heap-overflow
...
fix: heap overflow in pm3_grabbed_output_get
2026-08-21 22:11:50 +07:00
Iceman
d3326dde78
Merge pull request #3486 from Antiklesys/master
...
Improved clock ticks in iclass.c
2026-08-21 17:43:17 +07:00
Antiklesys
7ce6a72cfc
Update iclass.c
2026-08-21 16:33:19 +08:00
Iceman
fa1ebcc18a
Merge pull request #3485 from Antiklesys/master
...
Added CMD_HF_ICLASS_RAW
2026-08-21 15:31:35 +07:00
Antiklesys
6a317bdacc
Added CMD_HF_ICLASS_RAW
...
Raw iCLASS reader exchange that leaves the field ON
2026-08-21 12:45:46 +08:00
Jonathan Yen and Claude Opus 5
d515458973
fix: heap overflow in pm3_grabbed_output_get
...
pm3_grabbed_output_get null-terminated the captured output at
g_grabbed_output.size, but size is the allocated capacity, not the number of
bytes written -- ui.c grows it by MAX_PRINT_BUFFER at a time and tracks the
used length separately in idx. Every call therefore wrote one zero byte past
the end of the heap allocation.
The CLI mostly survives it because it calls the function once or twice and
then exits, so the corrupted malloc metadata is never reused. A long-running
libpm3 client that captures output on every command does not: the damage
surfaces later, far from the cause. It was found as a SIGTRAP inside an
unrelated AppKit autorelease pool.
Reproduced against real hardware:
MALLOC_STRICT_SIZE=1 MallocGuardEdges=1 \
DYLD_INSERT_LIBRARIES=/usr/lib/libgmalloc.dylib ./pm3run <port> "hw version"
which crashes with SIGSEGV inside pm3_grabbed_output_get before this change
and exits cleanly with identical captured output after it.
Terminating at idx is always in bounds: the grabber guarantees at least
MAX_PRINT_BUFFER bytes of headroom before each write, so idx is strictly less
than size.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com >
Claude-Session: https://claude.ai/code/session_01AjGgtnsvWJHAMYEksAiYuf
2026-08-20 21:44:36 -04:00
Iceman
c7c9938bfe
Merge pull request #3483 from nffq/fix/hfmfsen_7b
...
fix: `hf mf sen` init wrong 4 bytes of UID for authentication
2026-08-21 05:37:27 +07:00
nffq
1646486787
Make #3483 more readable
...
Signed-off-by: nffq <143437252+nffq@users.noreply.github.com >
2026-08-21 05:01:02 +09:00
iceman1001
7ff85b09ec
remove the old SAM implementation
2026-08-20 18:34:57 +02:00
Philippe Teuwen
4682271488
add sleep to rdv4_init_extflash t55xx config
2026-08-20 17:49:12 +02:00
Philippe Teuwen
76dfb643d3
pm5 instructions
2026-08-20 17:37:58 +02:00
iceman1001
a9b98819bb
fix not assigned warning
2026-08-20 17:20:45 +02:00
nffq
b6929d9108
fix: hf mf sen init wrong 4 bytes of UID for authentication
2026-08-21 00:04:34 +09:00
Iceman
7223422070
Update Proxmark5-Instructions.md
...
Signed-off-by: Iceman <iceman@iuse.se >
2026-08-20 17:00:02 +02:00
Iceman
3cbdfe3c1e
Merge pull request #3475 from nemanjan00/fix/pm5-flash-mode-bpr-hick
...
fix(pm5): run flash-mode check on HICK before raising PLL clock
2026-08-20 21:52:18 +07:00
Iceman
a7c696b9a0
Merge branch 'master' into fix/pm5-flash-mode-bpr-hick
...
Signed-off-by: Iceman <iceman@iuse.se >
2026-08-20 21:52:08 +07:00
nffq
e9c61bca79
allow to break out of fm11_verify_candidates
2026-08-20 16:51:43 +02:00
nffq
aca26117c0
fix: fm11_propagate_key_reuse_online always shows key A == key B when key B is read
2026-08-20 16:51:43 +02:00
Iceman
d9066e365d
Merge pull request #3481 from nemanjan00/doc-pm5-fpga-config-poweron
...
doc(pm5): run `hf 14a read` before `hw fpga config` to power on the FPGA
2026-08-20 21:48:03 +07:00
Iceman
45ac9fdfad
Merge branch 'master' into doc-pm5-fpga-config-poweron
...
Signed-off-by: Iceman <iceman@iuse.se >
2026-08-20 21:47:12 +07:00
Iceman
a746369cbe
Merge pull request #3470 from corollary-de/mfdes-chk-keylogic
...
Fixes to key loading logic for mfdes chk
2026-08-20 21:46:04 +07:00
Iceman
4f410992d4
Merge branch 'master' into mfdes-chk-keylogic
...
Signed-off-by: Iceman <iceman@iuse.se >
2026-08-20 21:45:52 +07:00