Commit Graph
21694 Commits
Author SHA1 Message Date
Iceman cfb6a9cfc8 Merge pull request #3266 from kormax/duox-new-trust-anchors
Add new DUOX trust anchors
2026-04-26 10:08:23 +07:00
kormax f72032840a Add new DUOX trust anchors 2026-04-25 11:47:49 +03:00
Iceman ca792bd430 Merge pull request #3264 from kormax/duox-vdesign
Add `hf mfdes vdesign` command
2026-04-25 06:59:36 +07:00
kormax a46cf9f291 Add 'hf mfdes vdesign' command 2026-04-24 21:17:03 +03:00
Iceman a326d5538f Merge pull request #3263 from kormax/duox-trust-anchors
Add known DUOX trust anchors to client resources
2026-04-24 06:48:52 +07:00
kormax 8052208b03 Add known DUOX trust anchors to client resources 2026-04-23 19:30:32 +03:00
Iceman be43c2e7f4 Merge pull request #3262 from jrozner/bugfix/selectaid-increase
Raise simaid selectaid_response cap to 256
2026-04-23 14:07:53 +07:00
Joe Rozner 73799a6c69 Raise simaid selectaid_response cap to 256
The selectaid_response buffer in `hf 14a simaid` was capped at 100
bytes, which is well below the ISO 14443A frame maximum of 256 bytes
and prevents users from emulating tags whose SELECT AID response is
larger than a trivial status word.

This bumps selectaid_response from 100 to 256 in all three locations
(ARM packet handler, client locals, client payload struct) along with
the argparse help text. getdata_response is left at 100. The payload
struct overlays PM3_CMD_DATA_SIZE (512) via packet->data.asBytes;
with the new sizes it totals 435 bytes, so it still fits.

Pairs with the earlier tosend bounds check / DYNAMIC_MODULATION_BUFFER2
fix, which raised the actual transmit ceiling to the 256-byte frame
limit — this change lets callers supply a response up to that limit.
2026-04-22 23:38:18 -07:00
Iceman 3cebdb6c6f Merge pull request #3261 from kormax/aidlist-new-mobile-aid
Add new mobile AID entries to 'aidlist.json'
2026-04-23 08:18:40 +07:00
kormax 79beba1632 Add new mobile AID entries to 'aidlist.json' 2026-04-22 21:20:40 +03:00
Iceman a0bf655bda Merge pull request #3259 from Antiklesys/master
Update comments in cipher_bs_avx512.c - no code changes
2026-04-22 16:49:51 +07:00
Antiklesys bf8c2faf6e Update cipher_bs_avx512.c
Updated comments
2026-04-22 16:34:10 +08:00
Iceman 0a8b475b48 Merge pull request #3257 from Antiklesys/master
Update cipher_bs_avx512.c
2026-04-22 08:18:23 +07:00
iceman1001 eecf447b57 text 2026-04-22 08:17:03 +07:00
iceman1001 d3b7cbb3ff remove debug statements 2026-04-22 07:25:50 +07:00
iceman1001 46bd7b9631 bad strings 2026-04-22 06:41:01 +07:00
Iceman 54b0e52c6c Merge pull request #3258 from kormax/felica-new-services
Add new block-data-based service detection qualifiers in 'felica_system_code_list.json'
2026-04-22 06:21:15 +07:00
kormax f14d2313f6 Add new block-based service detection qualifiers in 'felica_system_code_list.json' 2026-04-21 19:33:44 +03:00
Antiklesys bf27cb673c Update cipher_bs_avx512.c
Pushing a potential fix for https://github.com/RfidResearchGroup/proxmark3/issues/3250

Use the masked variant with an explicit zero source. _mm512_maskz_andnot_epi32(0xFFFF, a, b) is semantically identical to _mm512_andnot_si512(a, b) but goes through a different code path that takes a proper src argument instead of calling _mm512_undefined_epi32(). No uninitialized read, no warning, single instruction.
It compiles to the exact same single vpandnd instruction as _mm512_andnot_si512. The all-ones mask is resolved at compile time and folded away — the encoder just emits the unmasked form. Zero cycle difference, zero code-size difference.
2026-04-21 15:06:12 +08:00
iceman1001 7c0f9d0991 ai and their love for emdash or utf characters 2026-04-21 13:26:34 +07:00
iceman1001 3cf1dbb5fb text 2026-04-21 13:22:11 +07:00
iceman1001 eb54497704 added the command "hf iclass liberate" , it checks for drm markers and removes them, thus liberates them. Now if someone wants to make drm tags, they can easily just make a "hf iclass drm" command with the reverse of this command 2026-04-21 11:17:11 +07:00
iceman1001 5b3a6387ee annoyed 2026-04-21 11:14:23 +07:00
Iceman 582770113a Merge pull request #3256 from kormax/felica-lite-dfc-arb
Add new DFC qualifiers for FeliCa lite, print DFC in `hf felica info`
2026-04-21 04:19:06 +07:00
kormax e604aaa857 Print DFC and ARB value for FeliCa lite system in 'hf felica info' 2026-04-20 21:19:22 +03:00
kormax 2d755487d1 Add more block-based FeliCa Lite service qualifiers to 'felica_system_code_list.json' 2026-04-20 21:19:02 +03:00
Iceman 4059f253a2 Merge pull request #3255 from Antiklesys/master
Added Claude.md to gitignore
2026-04-20 11:56:07 +07:00
Antiklesys d327d1c51e Added Claude.md to gitignore 2026-04-20 12:53:02 +08:00
Iceman a7c7e2ae62 Merge pull request #3254 from Antiklesys/master
Removed deprecated extension
2026-04-20 11:50:21 +07:00
Antiklesys ca4d161e06 Removed deprecated extension
Removed deprecated extension recommendation.
Updated version is already in ms-vscode.cpptools
2026-04-20 12:44:59 +08:00
iceman1001 0e2f546707 style 2026-04-20 09:15:40 +07:00
iceman1001 a0b77b23e5 style 2026-04-20 09:14:51 +07:00
Iceman 784a8b66a4 Merge pull request #3252 from team-orangeBlue/fix_mfp_dumping
Fix Mifare Plus dumping (and misc functions)
2026-04-20 03:36:58 +07:00
team-orangeBlue 99a6e4f39e Update CHANGELOG.md
Signed-off-by: team-orangeBlue <63470411+team-orangeBlue@users.noreply.github.com>
2026-04-19 22:35:58 +03:00
team-orangeBlue 12ea3f087c Bodge: fix mfpreadsector
Looks like either I, or someone else, has never thought about encrypted mode enforcement in mfpreadsector.

Now during readouts data is decrypted on the fly.
Checked on real tag.

Signed-off-by: team-orangeBlue <63470411+team-orangeBlue@users.noreply.github.com>
2026-04-19 22:34:45 +03:00
Iceman f0c8fe99ff Merge pull request #3251 from jrozner/bugfix/fix-broken-crc
Fix overflow in 14a to send buffer
2026-04-20 01:49:23 +07:00
Joe Rozner b1cdefe3b4 Fix overflow in 14a to send buffer
Currently there is no bounds checking on the to send buffer which
results in larger requests overflowing the buffer and corrupting the
CRC. This fixes that by adding bounds checking. It also increases
DYNAMIC_MODULATION_BUFFER2_SIZE to support frames up to 256 bytes
2026-04-19 11:23:58 -07:00
Iceman 54996da407 Merge pull request #3249 from Antiklesys/master
Update hf iclass legbrute progress counter
2026-04-19 20:19:44 +07:00
Antiklesys 9a46fd7301 Update hf iclass legbrute progress counter
Freeing up additional cpu cycles and increasing speed by reducing print statement frequency.
2026-04-19 21:05:27 +08:00
Iceman 40eb7e917c Merge pull request #3248 from kormax/felica-info-service-block-data-based-detection
Implement block-data-based service detection for `hf felica info`
2026-04-19 16:17:06 +07:00
kormax 072b82bb8e Implement block-data-based service detection in 'hf felica info' 2026-04-19 11:58:37 +03:00
kormax 63be5d21c1 Add block-based service qualifiers in 'felica_system_code_list.json' 2026-04-19 11:58:35 +03:00
iceman1001 69f40df005 unified some minor hint text messages. added a ndef detection to hf mfu dump, hf mfu view, hf mfu eview in order to suggest that there is actually a ndefmessage 2026-04-19 08:52:16 +07:00
Iceman ba22b7e4ef Merge pull request #3247 from kormax/felica-info-service-detection
Add detection of nested services present on a FeliCa system
2026-04-19 06:06:13 +07:00
Iceman 5e6b208c42 Merge pull request #3246 from kormax/duox-internal-auth
Implement DUOX internal authentication
2026-04-19 06:05:26 +07:00
Iceman 2da1cd954a Merge pull request #3245 from Antiklesys/master
Update hf iclass encode to accept -k and not just --ki
2026-04-19 05:52:12 +07:00
kormax 141c21749a Add per-system inner service discovery to 'hf felica info' 2026-04-18 20:05:42 +03:00
kormax e274482f71 Add service indicators to systems in 'felica_system_code_list.json' 2026-04-18 20:05:42 +03:00
kormax 5097554217 Fix changelog yet again 2026-04-17 20:41:48 +03:00
kormax 6a4ed240b4 Implement 'hf mfdes intauth' command 2026-04-17 20:39:38 +03:00