Commit Graph
22184 Commits
Author SHA1 Message Date
kormax c3ba7e29c7 Add annotation of mobile commands for FeliCa 2026-07-23 17:39:59 +03:00
IcemanandGitHub deee966b8a Merge pull request #3422 from kormax/annotate-felica-secure-channel-commands
Add annotation of secure channel commands for FeliCa
2026-07-22 23:20:03 +07:00
kormax 8b67f60775 Add annotation of secure channel commands for FeliCa 2026-07-22 17:15:47 +03:00
iceman1001 c1f5ca6b3a remove some ai slop 2026-07-20 17:52:49 +02:00
iceman1001 2c6e607110 style 2026-07-15 16:39:15 +02:00
IcemanandGitHub 067688422c Merge pull request #3415 from 0x6r1an0y/20260714-15693v3
Add ISO15693 magic 'V3' tag support
2026-07-15 16:49:21 +07:00
IcemanandGitHub af4c664606 Merge pull request #3414 from 0x6r1an0y/20260713-gdm
Complete hf mf gdm* command
2026-07-15 16:48:58 +07:00
IcemanandGitHub 2bd5aff062 Merge branch 'master' into 20260713-gdm
Signed-off-by: Iceman <iceman@iuse.se>
2026-07-15 16:48:51 +07:00
IcemanandGitHub da0a412996 Merge pull request #3416 from lolbird123/master
add hf mfu aesgetuid
2026-07-15 16:47:23 +07:00
lolbirdandGitHub f3fd5abed3 forgot the mention in changelog
Signed-off-by: lolbird <65594081+lolbird123@users.noreply.github.com>
2026-07-14 13:21:52 +00:00
lolbirdandGitHub 92eb06eef1 Update CHANGELOG.md
Signed-off-by: lolbird <65594081+lolbird123@users.noreply.github.com>
2026-07-14 13:16:22 +00:00
lolbird 1497f615d3 add hf mfu aesgetuid 2026-07-14 08:03:36 -05:00
歐歪 c2cd37025b Add ISO15693 magic 'V3' tag support (hf 15 csetuid --v3 / hf 15 cfinalize) 2026-07-14 04:22:00 +08:00
歐歪 667ced436d add changelog 2026-07-13 22:07:41 +08:00
歐歪andGitHub 9394f065a5 Merge branch 'RfidResearchGroup:master' into 20260713-gdm 2026-07-13 21:54:15 +08:00
歐歪 f0c3dccdb6 Added hf mf gdmgetblk/gdmgethidblk/gdmsethidblk/gdmsetuid/gdmwipe/gdmsetsig ,improved hf mf gdmparsecfg/gdmsetblk and rename hf mf gdmcfg commands 2026-07-13 21:48:48 +08:00
IcemanandGitHub d0e8cf1861 Merge pull request #3413 from 0xDRRB/master
fix CMD_HF_MIFARE_READBL not working in Lua scripts since 2024-09-24...
2026-07-11 21:50:13 +07:00
Denis Bodor 4a891b3018 fix CMD_HF_MIFARE_READBL not working in Lua scripts after PacketResponseNGPreamble struct split (96d462ace) 2026-07-11 16:13:33 +02:00
IcemanandGitHub 8728a62933 Merge pull request #3412 from munzzyy/fix-iclass-view-oob-read
Fix heap out-of-bounds read in hf iclass view on short dump files
2026-07-11 11:15:05 +07:00
Cole Munz 2d45e334fb Fix heap out-of-bounds read in hf iclass view on short dump files 2026-07-10 21:02:47 -05:00
IcemanandGitHub ab11f8f6a7 Merge pull request #3411 from munzzyy/fix-ir56-wiegand-fc-mask
Fix IR56 wiegand decode leaking header sentinel bit into facility code
2026-07-11 03:26:44 +07:00
munzzyy d18d1c6713 Fix IR56 wiegand decode leaking header sentinel bit into facility code 2026-07-10 14:16:54 -05:00
IcemanandGitHub e3ce59f1a5 Merge pull request #3410 from towelbyte/fix-improve-cotag-demod-auto-threshold
Fix/improve 'lf cotag demod' threshold estimation
2026-07-09 12:46:41 +07:00
towelbyte 2f6a767edf Fix/improve 'lf cotag demod'
Fix/improve 'lf cotag demod' auto threshold estimation
and demodulation of COTAG traces with high value spikes and
COTAG traces with very low amplitude values.
2026-07-09 01:04:35 +02:00
iceman1001 005f4abb1a texts 2026-07-07 22:50:22 +02:00
iceman1001 af2980c753 style 2026-07-06 23:21:00 +02:00
iceman1001 9256181945 updated annotations for some missing desfire commands 2026-07-06 23:20:30 +02:00
IcemanandGitHub ee8a5cca87 Merge pull request #3409 from munzzyy/fix/em4x05-dump-corruption
Fix lf em 4x05 dump writing corrupted (byte-swapped) dump files
2026-07-07 01:04:26 +07:00
munzzyy 9f83c9307d Fix lf em 4x05 dump writing corrupted (byte-swapped) dump files
em4x05_print_blocks() byte-swaps its buffer in place to display the blocks.
In CmdEM4x05Dump() that call runs before pm3_save_dump(), so the buffer
handed to the saver has been swapped out of the canonical on-disk order and
the saved .bin/.json reloads with every block reversed.

The read loop stores each word as data[addr] = BSWAP_32(word), which is what
the loader in CmdEM4x05View() expects (it reads blocks MSB-first via
bytes_to_num()). The extra in-place swap in the print routine undoes that
right before the save. It also corrupts the auto-generated filename, which is
built from BSWAP_32(data[1]) after the print call. Symmetric words such as
0x00000000 survive the swap, so it's easy to miss.

Give em4x05_print_blocks() a private copy to swap and print, and take the
input as const so it can't mutate the caller's buffer. On-screen output is
unchanged; the dump path now saves the untouched buffer.

Fixes #3403
2026-07-04 18:31:02 -05:00
IcemanandGitHub 871b40ed97 Merge pull request #3407 from dangerous-tac0s/more-umc-pack-updates
More umc pack updates
2026-07-04 03:31:50 +07:00
michael e04adc2fc9 Added notes to hf mfu restore/dump about UMC pw/pack issues 2026-07-03 11:46:17 -07:00
iceman1001 b8911a29a1 fix coverity findings 2026-07-03 18:08:02 +02:00
michael bef2afcccf Added version numbers to ginfo output. Also, fixed version detection for short version response and updated magic card notes. 2026-07-03 09:04:05 -07:00
iceman1001 87388b3897 Merge branch 'master' of github.com:RfidResearchGroup/proxmark3 2026-07-03 17:30:20 +02:00
iceman1001 dc5e213420 fix coverity #910754 2026-07-03 17:19:00 +02:00
IcemanandGitHub 5a46bb5f69 Merge pull request #3405 from cirosec/feature/fix-android-cross-compilation
Fix build issues with Android NDK
2026-07-03 19:11:31 +07:00
iceman1001 b18c274612 fix coverity findings 2026-07-03 12:38:59 +02:00
iceman1001 07b3491346 fix coverity resource leak #910743 2026-07-03 11:51:45 +02:00
iceman1001 52fc106027 fix coverity #910570 2026-07-03 11:40:45 +02:00
iceman1001 546ec40dc6 fix coverity mem leaks 2026-07-03 11:37:57 +02:00
iceman1001 41ad752a95 fix coverity #290250 2026-07-03 11:33:35 +02:00
iceman1001 fc773ea230 fix coverity #910036 2026-07-03 11:26:32 +02:00
iceman1001 b5abc8b335 fix coverity #910704 2026-07-03 11:25:14 +02:00
iceman1001 bf082caab7 fix coverity #910690 2026-07-03 11:22:38 +02:00
iceman1001 2d43d4c021 fix coverity #910669 2026-07-03 11:20:33 +02:00
iceman1001 c118e1cf20 fix various coverity scan findings' 2026-07-03 11:16:44 +02:00
IcemanandGitHub ccfd25cd9b Merge pull request #3404 from dangerous-tac0s/hf-mfu-esetblk
Hf mfu esetblk
2026-07-03 13:04:05 +07:00
dangerous-tac0sandGitHub a0797e0530 Merge branch 'RfidResearchGroup:master' into hf-mfu-esetblk 2026-07-02 18:14:31 -07:00
michael f4214a0a83 Removing unecessary plans 2026-07-02 18:11:43 -07:00
michaelandClaude Opus 4.8 b30bde22f6 fix(sim): load Amiibo PWD/PACK into emulator memory at init, serve from memory
For tagType 7, when the PWD page is unset (0000) the UID-derived Amiibo
password and its PACK (0x8080) are now written into emulator memory at sim
init, and the PWD_AUTH path reads PWD and PACK straight from emulator memory.
Removes the auth-time pwd substitution and the PACK 0x8080 override, so
eset/eview are authoritative (what's in memory is what the sim serves) while
Amiibo sims still work.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-02 16:44:27 -07:00