Commit Graph

796 Commits

Author SHA1 Message Date
Philippe Teuwen 080ddc1595 fm11rf08s_nonces_with_data: save in JSON file 2024-10-06 23:14:30 +02:00
iceman1001 c002ae9f77 style 2024-10-06 10:08:17 +02:00
Iceman f00fac8b59 Merge pull request #2557 from douniwan5788/82xx_config
add: 82xx config parse
2024-10-04 19:39:48 +03:00
douniwan5788 9a50e608e0 add PM3_REASON_UNKNOWN 2024-10-04 23:25:15 +08:00
douniwan5788 d361cd863c add: 82xx config parse 2024-10-04 23:00:24 +08:00
douniwan5788 680f16573d fix: lf hitag hts rdbl read by page 2024-10-04 22:30:28 +08:00
Iceman a03cde3db5 Merge branch 'master' into reason
Signed-off-by: Iceman <iceman@iuse.se>
2024-09-30 19:00:22 +03:00
Philippe Teuwen 2eac5419f0 Add crypto1 support to hf 14a raw 2024-09-26 23:47:09 +02:00
douniwan5788 96d462acee add: split PacketResponseNG status to status and reason 2024-09-24 03:10:53 +08:00
Iceman 350ed787e1 Merge pull request #2534 from evildaemond/master
Adding hf 14a simaid
2024-09-23 12:04:00 +03:00
Adam Jon Foster 03fcc1d8d6 Update pm3_cmd.h
Signed-off-by: Adam Jon Foster <me@evildaemond.com>
2024-09-23 15:31:46 +08:00
Adam Jon Foster d48d69b3e2 Update pm3_cmd.h
Added Header File

Signed-off-by: Adam Jon Foster <me@evildaemond.com>
2024-09-23 14:42:22 +08:00
Adam Jon Foster 92767a685f Update pm3_cmd.h
Added RATS_IN_DATA as a definition

Signed-off-by: Adam Jon Foster <me@evildaemond.com>
2024-09-23 14:33:30 +08:00
douniwan5788 f03eb1156a refactor: process Hitag S common args 2024-09-22 20:16:49 +08:00
douniwan5788 8b7f34b4d9 refactor: Merge enum hitag_function. read/write has already been differentiated by command 2024-09-22 20:05:25 +08:00
Antiklesys 90b05106f8 Updates to iclass legrec and legbrute
Streamlined legbrute to remove then need for CSN and validate variables accuracy as per Iceman's suggestions.
Updated legrec (client side only) for the future arm side PR
Fixed variable overflow on the arm side for hex conversions
2024-09-18 18:10:53 +08:00
douniwan5788 1a07ff1c12 refactor: switch hitagS_tag to union 2024-09-17 01:02:32 +08:00
douniwan5788 662b194e56 refactor: hitag S code sytle & cleanup 2024-09-15 12:56:51 +08:00
iceman1001 febaa64b4d make all device side HTS messages DBGlevel extended 2024-09-14 22:00:52 +02:00
iceman1001 db1b28f327 rename hts read/write commands to rdbl/wrbl to match rest of the client. added a lf hitag hts reader comamnd, modified the lf search to identify hitag2/s/82xx in the chipset detection 2024-09-14 21:00:42 +02:00
douniwan5788 3860942e55 feat: Added support for 8268/8310 2024-09-13 17:06:15 +08:00
Iceman b77099e195 Merge pull request #2490 from douniwan5788/fix_exit
fix: exit status
2024-09-06 08:53:46 +02:00
Philippe Teuwen 46a8bea230 hf mf info: FM11RF32 detection 2024-09-05 15:32:52 +02:00
douniwan5788 9b879b0dc0 fix: exit status 2024-09-05 19:31:37 +08:00
douniwan5788 970c2d0999 refactor: remove positive error codes 2024-09-04 22:50:26 +08:00
Philippe Teuwen c73e2ea623 Added support for collecting all fm11rf08s nT/{nT}/par_err at once 2024-09-02 23:11:36 +02:00
douniwan5788 8928883f2d refactor: move FPGA_BITSTREAM_* to fpga.h 2024-08-26 20:55:58 +08:00
Ciprian Ionescu 8d77ee5438 refactor Hitag S r/w into separate submenu; implement pretty config parsing 2024-08-25 02:30:40 +02:00
douniwan5788 ae2f41eaef refactor: move Hitag size defines to hitag.h 2024-08-24 22:32:23 +08:00
douniwan5788 75420482e4 refactor: Move Hitag 1 cmds to protocols.h 2024-08-24 02:15:28 +08:00
douniwan5788 c279f88f13 refactor: Move Hitag 2 cmds to protocols.h 2024-08-23 23:49:47 +08:00
douniwan5788 ad5a4134ec refactor: Move Hitag S cmds to protocols.h 2024-08-23 19:54:34 +08:00
Iceman 3a3deaf3cb Merge pull request #2463 from douniwan5788/hitagS_plain
fix: Hitag S read/write in plain mode
2024-08-22 11:37:47 +02:00
douniwan5788 fb6626d89f refactor: remove hitag_function enum value 2024-08-22 17:00:14 +08:00
douniwan5788 1efa52d704 add: Hitag S plain write 2024-08-22 02:16:10 +08:00
douniwan5788 d15537bbf1 Unified hitag naming style 2024-08-22 02:01:43 +08:00
Philippe Teuwen 116ac0c66b Added more fingerprinting to hf mf info 2024-08-16 12:09:20 +02:00
Antiklesys c7541790f8 Update iclass_cmd.h 2024-07-19 14:54:52 +08:00
Antiklesys 1832997ccb Iclass Legacy Raw Key Recovery Function
Based on the work described in Dismantling iClass whitepaper.
hf iclass legbrute is tested working
hf iclass legrec is partially working: logic of operations and sequence seems to be in order and was tested on simulated data to be effective. The privilege escalation part is still not successful, but the logic should be correct.
2024-07-19 14:47:13 +08:00
iceman1001 8d1e9c1f5d adapt response struct for hitag2 so be large enough to handle 256bytes for cryptostream 2024-05-27 15:19:22 +02:00
iceman1001 05df50678c missing header 2024-04-26 16:18:10 +02:00
iceman1001 c8849af5e0 This is the major changes made to the HITAG2 commands. Its heavly based on RFIDLers implementation and its been converted to work with Proxmark3. Special thanks to @kevsecurity for his amazing implementations of the Gone in 360 Seconds paper by Roel, Flavio & Balasch. Thanks to @adamlaurie for his RFIDler project. It wouldnt been doable without it. 2024-04-22 16:20:24 +02:00
iceman1001 d340de388d textual 2024-04-22 09:23:22 +02:00
iceman1001 87c6633de1 add support for generation 2 magic command when setting UID on ISO15693 cards. ref:: https://github.com/RfidResearchGroup/proxmark3/issues/1604#issuecomment-2068444071 2024-04-22 09:04:01 +02:00
iceman1001 700d558432 move hitag2 crypto parts to the common folder in order to be able to use it on the client side. Some textual and minor adaptations across the bord 2024-03-27 09:32:00 +01:00
iceman1001 c66e781a9c annotation of the hitag2 protocol now properly identifies different parts without shifting of whole hex arrays. Took the idea from RFIdler (@adamLLaurie) where he treats it like a binary string instead. It works. Problem: We use whole bytes in our logging protocol and Hitag2 uses 5, 10, 32, 64 bits commands. START_AUTH is 11000, which as a MSB aligned byte is 0xC0. Now we shift it down to LSB centered and 11000 becomes 0x18. This reduces all issues with handing the rest of the array. \n\nTake note that our protocol uses whole bytes. I had to print out number of actually captured bits in the trace log now. Otherwise 65 or 71 bits would not look any different but will not work when used with other tools. This also means we abuse the logging protocol by using the parity byte arry to store number of "left over bits" in the par[0] position. 2024-03-26 15:04:39 +01:00
Henry Gabryjelski cc2bae2f4d lf em 4x70 writekey --> lf em 4x70 setkey 2024-03-13 09:38:35 -07:00
Henry Gabryjelski ba83ac065e lf em 4x70 writepin --> lf em 4x70 setpin 2024-03-13 09:25:43 -07:00
Henry Gabryjelski 0a598b254c make style changes 2024-03-11 17:28:05 -07:00
Henry Gabryjelski 160d61682b Add lf em 4x70 autorecover
Also:
* common.h: Increase safety of some of the macros.
  Parenthesizing the macro parameters ... a best practice.
* firmware: partially-tracked source of "extra bits" messages.
  Add a TODO comment for further study.
* Improve reliability of `lf em 4x70 writekey`
  Authenticate w/new key after it is written.
  Particularly important for glass modules,
  or other tags with weaker coupling.
2024-03-11 17:14:03 -07:00