RfidResearchGroup/proxmark3
1
1
Fork 0
mirror of https://github.com/RfidResearchGroup/proxmark3.git synced 2024-09-25 01:36:12 +08:00
Code Issues Packages Projects Releases Wiki Activity
proxmark3/client/src/cmdlft55xx.c

4249 lines
158 KiB
C
Raw Normal View History

Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
//-----------------------------------------------------------------------------
//
// This code is licensed to you under the terms of the GNU GPL, version 2 or,
// at your option, any later version. See the LICENSE.txt file for the text of
// the license.
//-----------------------------------------------------------------------------
// Low frequency T55xx commands
//-----------------------------------------------------------------------------
times times times
2019-04-13 09:01:31 +08:00
// ensure localtime_r is available even with -std=c99; must be included before
localtime, gmtime replaced
2019-04-13 08:45:53 +08:00
#if !defined(_WIN32)
#define _POSIX_C_SOURCE 200112L
#endif
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
#include "cmdlft55xx.h"
summer restructuring: * .h include only the strict minimum for their own parsing * this forces all files to include explicitment their needs and not count on far streched dependencies * this helps Makefile to rebuild only the minimum * according to this rule, most standalone .h are now gone * big app.h is gone * remove seldom __cplusplus, if c++ happens, everything will have to be done properly anyway * all unrequired include were removed * split common/ into common/ (client+arm) and common_arm/ (os+bootloader) * bring zlib to common/ * bring stuff not really/not yet used in common back to armsrc/ or client/ * bring liblua into client/ * bring uart into client/ * move some portions of code around (dbprint, protocols,...) * rename unused files into *_disabled.[ch] to make it explicit * rename soft Uarts between 14a, 14b and iclass, so a standalone could use several without clash * remove PrintAndLogDevice * move deprecated-hid-flasher from client to tools * Makefiles * treat deps in armsrc/ as in client/ * client: stop on warning (-Werror), same as for armsrc/ Tested on: * all standalone modes * Linux
2019-08-08 22:57:33 +08:00
#include <ctype.h>
lf t55xx sniff - now uses cliparser
2021-01-10 19:52:57 +08:00
#include <time.h> // MingW
summer restructuring: * .h include only the strict minimum for their own parsing * this forces all files to include explicitment their needs and not count on far streched dependencies * this helps Makefile to rebuild only the minimum * according to this rule, most standalone .h are now gone * big app.h is gone * remove seldom __cplusplus, if c++ happens, everything will have to be done properly anyway * all unrequired include were removed * split common/ into common/ (client+arm) and common_arm/ (os+bootloader) * bring zlib to common/ * bring stuff not really/not yet used in common back to armsrc/ or client/ * bring liblua into client/ * bring uart into client/ * move some portions of code around (dbprint, protocols,...) * rename unused files into *_disabled.[ch] to make it explicit * rename soft Uarts between 14a, 14b and iclass, so a standalone could use several without clash * remove PrintAndLogDevice * move deprecated-hid-flasher from client to tools * Makefiles * treat deps in armsrc/ as in client/ * client: stop on warning (-Werror), same as for armsrc/ Tested on: * all standalone modes * Linux
2019-08-08 22:57:33 +08:00
#include "cmdparser.h" // command_t
#include "comms.h"
#include "commonutil.h"
#include "protocols.h"
stricter warnings, wip
2020-05-03 06:33:28 +08:00
#include "proxgui.h"
summer restructuring: * .h include only the strict minimum for their own parsing * this forces all files to include explicitment their needs and not count on far streched dependencies * this helps Makefile to rebuild only the minimum * according to this rule, most standalone .h are now gone * big app.h is gone * remove seldom __cplusplus, if c++ happens, everything will have to be done properly anyway * all unrequired include were removed * split common/ into common/ (client+arm) and common_arm/ (os+bootloader) * bring zlib to common/ * bring stuff not really/not yet used in common back to armsrc/ or client/ * bring liblua into client/ * bring uart into client/ * move some portions of code around (dbprint, protocols,...) * rename unused files into *_disabled.[ch] to make it explicit * rename soft Uarts between 14a, 14b and iclass, so a standalone could use several without clash * remove PrintAndLogDevice * move deprecated-hid-flasher from client to tools * Makefiles * treat deps in armsrc/ as in client/ * client: stop on warning (-Werror), same as for armsrc/ Tested on: * all standalone modes * Linux
2019-08-08 22:57:33 +08:00
#include "graph.h"
#include "cmddata.h"
#include "lfdemod.h"
lf t55xx sniff - now uses cliparser
2021-01-10 19:52:57 +08:00
#include "cmdhf14a.h" // for getTagInfo
#include "fileutils.h" // loadDictionary
summer restructuring: * .h include only the strict minimum for their own parsing * this forces all files to include explicitment their needs and not count on far streched dependencies * this helps Makefile to rebuild only the minimum * according to this rule, most standalone .h are now gone * big app.h is gone * remove seldom __cplusplus, if c++ happens, everything will have to be done properly anyway * all unrequired include were removed * split common/ into common/ (client+arm) and common_arm/ (os+bootloader) * bring zlib to common/ * bring stuff not really/not yet used in common back to armsrc/ or client/ * bring liblua into client/ * bring uart into client/ * move some portions of code around (dbprint, protocols,...) * rename unused files into *_disabled.[ch] to make it explicit * rename soft Uarts between 14a, 14b and iclass, so a standalone could use several without clash * remove PrintAndLogDevice * move deprecated-hid-flasher from client to tools * Makefiles * treat deps in armsrc/ as in client/ * client: stop on warning (-Werror), same as for armsrc/ Tested on: * all standalone modes * Linux
2019-08-08 22:57:33 +08:00
#include "util_posix.h"
lf t55xx sniff - now uses cliparser
2021-01-10 19:52:57 +08:00
#include "cmdlf.h" // for lf sniff
Update cmdlft55xx.c Use generator function
2020-09-26 15:31:46 +08:00
#include "generator.h"
lf t55xx sniff - now uses cliparser
2021-01-10 19:52:57 +08:00
#include "cliparser.h" // cliparsing
summer restructuring: * .h include only the strict minimum for their own parsing * this forces all files to include explicitment their needs and not count on far streched dependencies * this helps Makefile to rebuild only the minimum * according to this rule, most standalone .h are now gone * big app.h is gone * remove seldom __cplusplus, if c++ happens, everything will have to be done properly anyway * all unrequired include were removed * split common/ into common/ (client+arm) and common_arm/ (os+bootloader) * bring zlib to common/ * bring stuff not really/not yet used in common back to armsrc/ or client/ * bring liblua into client/ * bring uart into client/ * move some portions of code around (dbprint, protocols,...) * rename unused files into *_disabled.[ch] to make it explicit * rename soft Uarts between 14a, 14b and iclass, so a standalone could use several without clash * remove PrintAndLogDevice * move deprecated-hid-flasher from client to tools * Makefiles * treat deps in armsrc/ as in client/ * client: stop on warning (-Werror), same as for armsrc/ Tested on: * all standalone modes * Linux
2019-08-08 22:57:33 +08:00
Added set default timings
2019-07-25 19:00:30 +08:00
// Some defines for readability
chg: 'codestyle'
2019-07-27 16:25:03 +08:00
#define T55XX_DLMODE_FIXED 0 // Default Mode
#define T55XX_DLMODE_LLR 1 // Long Leading Reference
#define T55XX_DLMODE_LEADING_ZERO 2 // Leading Zero
#define T55XX_DLMODE_1OF4 3 // 1 of 4
T55xx DLMode Update
2019-09-14 12:13:55 +08:00
// #define T55XX_LONGLEADINGREFERENCE 4 // Value to tell Write Bit to send long reference
#define T55XX_DLMODE_ALL 4 // Tell help to show 'r 4' for all dl modes
#define T55XX_DLMODE_SINGLE 5 // Tell help file NOT to show 'r 4' (not available)
#define T55XX_PrintConfig true
#define T55XX_DontPrintConfig false
Added set default timings
2019-07-25 19:00:30 +08:00
chg: 'lf t55xx info c' - renamed from "d" to "c", takes a block0 and print info. chg: 'lf t55xx config c' - now takes a block0 and use as configuration. usage: lf t55xx config c 000880E8 lf t55xx info c 000880E8
2019-09-14 02:50:00 +08:00
//static uint8_t bit_rates[9] = {8, 16, 32, 40, 50, 64, 100, 128, 0};
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
// Default configuration
style
2019-09-19 16:54:34 +08:00
t55xx_conf_block_t config = {
chg: 'lf t55xx info c' - renamed from "d" to "c", takes a block0 and print info. chg: 'lf t55xx config c' - now takes a block0 and use as configuration. usage: lf t55xx config c 000880E8 lf t55xx info c 000880E8
2019-09-14 02:50:00 +08:00
.modulation = DEMOD_ASK,
.inverted = false,
.offset = 0x00,
.block0 = 0x00,
Block0 source explicit in lf t55xx config and color coded
2020-12-09 06:54:29 +08:00
.block0Status = notSet,
chg: 'lf t55xx info c' - renamed from "d" to "c", takes a block0 and print info. chg: 'lf t55xx config c' - now takes a block0 and use as configuration. usage: lf t55xx config c 000880E8 lf t55xx info c 000880E8
2019-09-14 02:50:00 +08:00
.Q5 = false,
T55xx DLMode Update
2019-09-14 12:13:55 +08:00
.usepwd = false,
Update cmdlft55xx.c removed extra comma.
2019-10-12 14:55:23 +08:00
.downlink_mode = refFixedBit
style
2019-09-19 16:54:34 +08:00
};
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
less global vars
2020-06-02 02:10:45 +08:00
static t55xx_memory_item_t cardmem[T55x7_BLOCK_COUNT] = {{0}};
T55xx Save and Restore
2019-10-11 17:29:20 +08:00
stricter warnings, wip
2020-05-03 07:13:28 +08:00
t55xx_conf_block_t Get_t55xx_Config(void) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
return config;
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
t55x7 save and restore eml/bin
2019-10-10 18:27:48 +08:00
changing {} style to match majority of previous style
2019-03-10 18:20:22 +08:00
void Set_t55xx_Config(t55xx_conf_block_t conf) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
config = conf;
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
lf t55xx detect and help Added lf t55xx detect to try without password first and try password if still not detected. Added password status to detected output. Updated lf t55xx help to show current default downlink mode. typo fixed in win10 color help
2019-10-08 18:46:36 +08:00
static void print_usage_t55xx_downloadlink(uint8_t ShowAll, uint8_t dl_mode_default) {
T55xx DLMode Update
2019-09-14 12:13:55 +08:00
if (ShowAll == T55XX_DLMODE_ALL)
PrintAndLogEx(NORMAL, " r <mode> - downlink encoding 0|1|2|3|4");
else
PrintAndLogEx(NORMAL, " r <mode> - downlink encoding 0|1|2|3");
make style
2019-10-13 06:48:26 +08:00
PrintAndLogEx(NORMAL, " 0 - fixed bit length%s", (dl_mode_default == 0) ? " (detected default)" : ""); // default will be whats in config struct
PrintAndLogEx(NORMAL, " 1 - long leading reference%s", (dl_mode_default == 1) ? " (detected default)" : "");
PrintAndLogEx(NORMAL, " 2 - leading zero%s", (dl_mode_default == 2) ? " (detected default)" : "");
PrintAndLogEx(NORMAL, " 3 - 1 of 4 coding reference%s", (dl_mode_default == 3) ? " (detected default)" : "");
T55xx DLMode Update
2019-09-14 12:13:55 +08:00
if (ShowAll == T55XX_DLMODE_ALL)
make style
2019-10-13 06:48:26 +08:00
PrintAndLogEx(NORMAL, " 4 - Try all downlink modes%s", (dl_mode_default == 4) ? " (default)" : "");
chg: lf t55xx - helptext
2019-07-28 15:21:02 +08:00
}
lf t55xx protect/sniff - now use cliparser
2021-01-12 07:11:40 +08:00
static void arg_add_t55xx_downloadlink(void *at[], uint8_t *idx, uint8_t show, uint8_t dl_mode_def) {
make style
2021-01-14 18:39:45 +08:00
char *r0 = (char *)calloc(56, sizeof(uint8_t));
char *r1 = (char *)calloc(56, sizeof(uint8_t));
char *r2 = (char *)calloc(56, sizeof(uint8_t));
char *r3 = (char *)calloc(56, sizeof(uint8_t));
lf t55xx protect/sniff - now use cliparser
2021-01-12 07:11:40 +08:00
sprintf(r0, "downlink - fixed bit length %s", (dl_mode_def == 0) ? "(detected def)" : "");
sprintf(r1, "downlink - long leading reference %s", (dl_mode_def == 1) ? "(detected def)" : "");
sprintf(r2, "downlink - leading zero %s", (dl_mode_def == 2) ? "(detected def)" : "");
sprintf(r3, "downlink - 1 of 4 coding reference %s", (dl_mode_def == 3) ? "(detected def)" : "");
uint8_t n = *idx;
at[n++] = arg_lit0(NULL, "r0", r0);
at[n++] = arg_lit0(NULL, "r1", r1);
at[n++] = arg_lit0(NULL, "r2", r2);
at[n++] = arg_lit0(NULL, "r3", r3);
if (show == T55XX_DLMODE_ALL) {
make style
2021-01-14 18:39:45 +08:00
char *r4 = (char *)calloc(50, sizeof(uint8_t));
lf t55xx protect/sniff - now use cliparser
2021-01-12 07:11:40 +08:00
sprintf(r4, "try all downlink modes %s", (dl_mode_def == 4) ? "(def)" : "");
at[n++] = arg_lit0(NULL, "all", r4);
}
at[n++] = arg_param_end;
make style
2021-01-14 18:39:45 +08:00
*idx = n;
lf t55xx protect/sniff - now use cliparser
2021-01-12 07:11:40 +08:00
}
stricter warnings, wip
2020-05-03 07:13:28 +08:00
static int usage_t55xx_config(void) {
chg: 'lf t55xx info c' - renamed from "d" to "c", takes a block0 and print info. chg: 'lf t55xx config c' - now takes a block0 and use as configuration. usage: lf t55xx config c 000880E8 lf t55xx info c 000880E8
2019-09-14 02:50:00 +08:00
PrintAndLogEx(NORMAL, "Usage: lf t55xx config [c <blk0>] [d <demodulation>] [i [0/1]] [o <offset>] [Q5 [0/1]] [ST [0/1]]");
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
PrintAndLogEx(NORMAL, "Options:");
T55xx DLMode Update
2019-09-14 12:13:55 +08:00
PrintAndLogEx(NORMAL, " h - This help");
PrintAndLogEx(NORMAL, " c <block0> - set configuration from a block0");
PrintAndLogEx(NORMAL, " b <8|16|32|40|50|64|100|128> - Set bitrate");
PrintAndLogEx(NORMAL, " d <FSK|FSK1|FSK1a|FSK2|FSK2a|ASK|PSK1|PSK2|NRZ|BI|BIa> - Set demodulation FSK / ASK / PSK / NRZ / Biphase / Biphase A");
PrintAndLogEx(NORMAL, " i [0/1] - Set/reset data signal inversion");
PrintAndLogEx(NORMAL, " o [offset] - Set offset, where data should start decode in bitstream");
textual Q5
2020-08-28 21:53:34 +08:00
PrintAndLogEx(NORMAL, " Q5 [0/1] - Set/reset as Q5/T5555 chip instead of T55x7");
T55xx DLMode Update
2019-09-14 12:13:55 +08:00
PrintAndLogEx(NORMAL, " ST [0/1] - Set/reset Sequence Terminator on");
PrintAndLogEx(NORMAL, ""); // layout is a little differnet, so seperate until a better fix
make style
2019-10-13 06:48:26 +08:00
print_usage_t55xx_downloadlink(T55XX_DLMODE_SINGLE, config.downlink_mode);
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
PrintAndLogEx(NORMAL, "");
PrintAndLogEx(NORMAL, "Examples:");
textual
2020-08-21 23:15:58 +08:00
PrintAndLogEx(NORMAL, _YELLOW_(" lf t55xx config d FSK") " - FSK demodulation");
PrintAndLogEx(NORMAL, _YELLOW_(" lf t55xx config d FSK i 1") " - FSK demodulation, inverse data");
PrintAndLogEx(NORMAL, _YELLOW_(" lf t55xx config d FSK i 1 o 3") " - FSK demodulation, inverse data, offset=3,start from position 3 to decode data");
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
PrintAndLogEx(NORMAL, "");
chg: cmdlft55xx return codes
2019-05-22 20:48:23 +08:00
return PM3_SUCCESS;
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
stricter warnings, wip
2020-05-03 07:13:28 +08:00
static int usage_t55xx_read(void) {
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
PrintAndLogEx(NORMAL, "Usage: lf t55xx read [r <mode>] b <block> [p <password>] [o] <page1>");
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
PrintAndLogEx(NORMAL, "Options:");
PrintAndLogEx(NORMAL, " b <block> - block number to read. Between 0-7");
PrintAndLogEx(NORMAL, " p <password> - OPTIONAL password (8 hex characters)");
PrintAndLogEx(NORMAL, " o - OPTIONAL override safety check");
chg: 'codestyle'
2019-07-27 16:25:03 +08:00
PrintAndLogEx(NORMAL, " 1 - OPTIONAL 0|1 read Page 1 instead of Page 0");
make style
2019-10-13 06:48:26 +08:00
print_usage_t55xx_downloadlink(T55XX_DLMODE_SINGLE, config.downlink_mode);
emphase warnings
2019-10-05 18:07:28 +08:00
PrintAndLogEx(NORMAL, " " _RED_("**** WARNING ****"));
PrintAndLogEx(NORMAL, " Use of read with password on a tag not configured");
PrintAndLogEx(NORMAL, " for a password can damage the tag");
PrintAndLogEx(NORMAL, " " _RED_("*****************"));
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
PrintAndLogEx(NORMAL, "");
PrintAndLogEx(NORMAL, "Examples:");
textual
2020-08-21 23:15:58 +08:00
PrintAndLogEx(NORMAL, _YELLOW_(" lf t55xx read b 0") " - read data from block 0");
PrintAndLogEx(NORMAL, _YELLOW_(" lf t55xx read b 0 p feedbeef") " - read data from block 0 password feedbeef");
PrintAndLogEx(NORMAL, _YELLOW_(" lf t55xx read b 0 p feedbeef o") " - read data from block 0 password feedbeef safety check");
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
PrintAndLogEx(NORMAL, "");
chg: cmdlft55xx return codes
2019-05-22 20:48:23 +08:00
return PM3_SUCCESS;
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
stricter warnings, wip
2020-05-03 07:13:28 +08:00
static int usage_t55xx_resetread(void) {
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
PrintAndLogEx(NORMAL, "Send Reset Cmd then lf read the stream to attempt to identify the start of it (needs a demod and/or plot after)");
PrintAndLogEx(NORMAL, "Usage: lf t55xx resetread [r <mode>]");
PrintAndLogEx(NORMAL, "Options:");
make style
2019-10-13 06:48:26 +08:00
print_usage_t55xx_downloadlink(T55XX_DLMODE_SINGLE, config.downlink_mode);
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
PrintAndLogEx(NORMAL, "");
PrintAndLogEx(NORMAL, "Examples:");
textual
2020-08-21 23:15:58 +08:00
PrintAndLogEx(NORMAL, _YELLOW_(" lf t55xx resetread"));
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
PrintAndLogEx(NORMAL, "");
return PM3_SUCCESS;
}
stricter warnings, wip
2020-05-03 07:13:28 +08:00
static int usage_t55xx_write(void) {
chg: 'lf t55 write v' - validation of data. After a write, the command tries to read the block and see if it matches the data entered. This can fail because of password, not correct configuration settings before. Also validating a block0 write is harder, some modulations are not that perfect. This is however a nice step forward.
2019-09-14 03:25:39 +08:00
PrintAndLogEx(NORMAL, "Usage: lf t55xx write [r <mode>] b <block> d <data> [p <password>] [1] [t] [v]");
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
PrintAndLogEx(NORMAL, "Options:");
PrintAndLogEx(NORMAL, " b <block> - block number to write. Between 0-7");
PrintAndLogEx(NORMAL, " d <data> - 4 bytes of data to write (8 hex characters)");
PrintAndLogEx(NORMAL, " p <password> - OPTIONAL password 4bytes (8 hex characters)");
PrintAndLogEx(NORMAL, " 1 - OPTIONAL write Page 1 instead of Page 0");
PrintAndLogEx(NORMAL, " t - OPTIONAL test mode write - ****DANGER****");
chg: 'lf t55 write v' - validation of data. After a write, the command tries to read the block and see if it matches the data entered. This can fail because of password, not correct configuration settings before. Also validating a block0 write is harder, some modulations are not that perfect. This is however a nice step forward.
2019-09-14 03:25:39 +08:00
PrintAndLogEx(NORMAL, " v - OPTIONAL validate data afterwards");
make style
2019-10-13 06:48:26 +08:00
print_usage_t55xx_downloadlink(T55XX_DLMODE_SINGLE, config.downlink_mode);
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
PrintAndLogEx(NORMAL, "");
PrintAndLogEx(NORMAL, "Examples:");
textual
2020-08-21 23:15:58 +08:00
PrintAndLogEx(NORMAL, _YELLOW_(" lf t55xx write b 3 d 11223344") " - write 11223344 to block 3");
PrintAndLogEx(NORMAL, _YELLOW_(" lf t55xx write b 3 d 11223344 p feedbeef") " - write 11223344 to block 3 password feedbeef");
PrintAndLogEx(NORMAL, _YELLOW_(" lf t55xx write b 3 d 11223344 v") " - write 11223344 to block 3 and try to validate data");
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
PrintAndLogEx(NORMAL, "");
chg: cmdlft55xx return codes
2019-05-22 20:48:23 +08:00
return PM3_SUCCESS;
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
stricter warnings, wip
2020-05-03 07:13:28 +08:00
static int usage_t55xx_trace(void) {
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
PrintAndLogEx(NORMAL, "Usage: lf t55xx trace [1] [r mode]");
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
PrintAndLogEx(NORMAL, "Options:");
make style
2019-10-13 06:48:26 +08:00
print_usage_t55xx_downloadlink(T55XX_DLMODE_SINGLE, config.downlink_mode);
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
PrintAndLogEx(NORMAL, " 1 - if set, use Graphbuffer otherwise read data from tag.");
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
PrintAndLogEx(NORMAL, "");
PrintAndLogEx(NORMAL, "Examples:");
textual
2020-08-21 23:15:58 +08:00
PrintAndLogEx(NORMAL, _YELLOW_(" lf t55xx trace"));
PrintAndLogEx(NORMAL, _YELLOW_(" lf t55xx trace 1"));
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
PrintAndLogEx(NORMAL, "");
chg: cmdlft55xx return codes
2019-05-22 20:48:23 +08:00
return PM3_SUCCESS;
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
stricter warnings, wip
2020-05-03 07:13:28 +08:00
static int usage_t55xx_info(void) {
chg: 'lf t55xx info c' - renamed from "d" to "c", takes a block0 and print info. chg: 'lf t55xx config c' - now takes a block0 and use as configuration. usage: lf t55xx config c 000880E8 lf t55xx info c 000880E8
2019-09-14 02:50:00 +08:00
PrintAndLogEx(NORMAL, "Usage: lf t55xx info [1] [r <mode>] [c <blk0> [q]]");
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
PrintAndLogEx(NORMAL, "Options:");
T55xx DLMode Update
2019-09-14 12:13:55 +08:00
PrintAndLogEx(NORMAL, " (default) - read data from tag.");
PrintAndLogEx(NORMAL, " p <password> - OPTIONAL password 4bytes (8 hex symbols)");
PrintAndLogEx(NORMAL, " 1 - if set, use Graphbuffer instead of reading tag.");
PrintAndLogEx(NORMAL, " c <block0> - set configuration from a block0");
PrintAndLogEx(NORMAL, " if set, use these data instead of reading tag.");
PrintAndLogEx(NORMAL, " q - if set, provided data are interpreted as Q5 config.");
make style
2019-10-13 06:48:26 +08:00
print_usage_t55xx_downloadlink(T55XX_DLMODE_SINGLE, config.downlink_mode);
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
PrintAndLogEx(NORMAL, "");
PrintAndLogEx(NORMAL, "Examples:");
textual
2020-08-21 23:15:58 +08:00
PrintAndLogEx(NORMAL, _YELLOW_(" lf t55xx info"));
PrintAndLogEx(NORMAL, _YELLOW_(" lf t55xx info 1"));
PrintAndLogEx(NORMAL, _YELLOW_(" lf t55xx info d 00083040"));
PrintAndLogEx(NORMAL, _YELLOW_(" lf t55xx info d 6001805A q"));
PrintAndLogEx(NORMAL, _YELLOW_(" lf t55xx info p 11223344"));
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
PrintAndLogEx(NORMAL, "");
chg: cmdlft55xx return codes
2019-05-22 20:48:23 +08:00
return PM3_SUCCESS;
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
stricter warnings, wip
2020-05-03 07:13:28 +08:00
static int usage_t55xx_dump(void) {
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
PrintAndLogEx(NORMAL, "Usage: lf t55xx dump [r <mode>] [p <password> [o]]");
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
PrintAndLogEx(NORMAL, "Options:");
t55x7 save and restore eml/bin
2019-10-10 18:27:48 +08:00
PrintAndLogEx(NORMAL, " p <password> - OPTIONAL password 4bytes (8 hex symbols)");
PrintAndLogEx(NORMAL, " o - OPTIONAL override, force pwd read despite danger to card");
typos
2020-10-21 02:21:57 +08:00
PrintAndLogEx(NORMAL, " f <prefix> - override filename prefix (optional). Default is based on blk 0");
make style
2019-10-13 06:48:26 +08:00
print_usage_t55xx_downloadlink(T55XX_DLMODE_SINGLE, config.downlink_mode);
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
PrintAndLogEx(NORMAL, "");
PrintAndLogEx(NORMAL, "Examples:");
textual
2020-08-21 23:15:58 +08:00
PrintAndLogEx(NORMAL, _YELLOW_(" lf t55xx dump"));
PrintAndLogEx(NORMAL, _YELLOW_(" lf t55xx dump p feedbeef o"));
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
PrintAndLogEx(NORMAL, "");
chg: cmdlft55xx return codes
2019-05-22 20:48:23 +08:00
return PM3_SUCCESS;
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
stricter warnings, wip
2020-05-03 07:13:28 +08:00
static int usage_t55xx_restore(void) {
t55x7 save and restore eml/bin
2019-10-10 18:27:48 +08:00
PrintAndLogEx(NORMAL, "Usage: lf t55xx restore f <filename> [p password]");
PrintAndLogEx(NORMAL, "Options:");
PrintAndLogEx(NORMAL, " f <filename> - filename of the dump file (.bin/.eml)");
PrintAndLogEx(NORMAL, " p <password> - optional password if target card has password set");
PrintAndLogEx(NORMAL, "");
PrintAndLogEx(NORMAL, _YELLOW_(" Assumes lf t55 detect has been run first!"));
PrintAndLogEx(NORMAL, "");
PrintAndLogEx(NORMAL, "Examples:");
textual
2020-08-21 23:15:58 +08:00
PrintAndLogEx(NORMAL, _YELLOW_(" lf t55xx restore f lf-t55xx-00148040-dump.bin"));
t55x7 save and restore eml/bin
2019-10-10 18:27:48 +08:00
PrintAndLogEx(NORMAL, "");
return PM3_SUCCESS;
}
stricter warnings, wip
2020-05-03 07:13:28 +08:00
static int usage_t55xx_detect(void) {
Added T55 downlink mode support
2019-07-23 07:50:28 +08:00
PrintAndLogEx(NORMAL, "Usage: lf t55xx detect [1] [r <mode>] [p <password>]");
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
PrintAndLogEx(NORMAL, "Options:");
PrintAndLogEx(NORMAL, " 1 - if set, use Graphbuffer otherwise read data from tag.");
Added T55 downlink mode support
2019-07-23 07:50:28 +08:00
PrintAndLogEx(NORMAL, " p <password - OPTIONAL password (8 hex characters)");
make style
2019-10-13 06:48:26 +08:00
print_usage_t55xx_downloadlink(T55XX_DLMODE_ALL, T55XX_DLMODE_ALL);
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
PrintAndLogEx(NORMAL, "");
PrintAndLogEx(NORMAL, "Examples:");
textual
2020-08-21 23:15:58 +08:00
PrintAndLogEx(NORMAL, _YELLOW_(" lf t55xx detect"));
PrintAndLogEx(NORMAL, _YELLOW_(" lf t55xx detect 1"));
PrintAndLogEx(NORMAL, _YELLOW_(" lf t55xx detect p 11223344"));
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
PrintAndLogEx(NORMAL, "");
chg: cmdlft55xx return codes
2019-05-22 20:48:23 +08:00
return PM3_SUCCESS;
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
lf t55xx wakeup - now uses cliparser
2021-02-05 15:58:19 +08:00
fix lf em 4x05 write - pwd/data. t55xx chk - now uses cliparser, and color to cliparser empty message
2021-01-28 05:52:08 +08:00
stricter warnings, wip
2020-05-03 07:13:28 +08:00
static int usage_t55xx_dangerraw(void) {
usage
2019-10-13 07:21:59 +08:00
PrintAndLogEx(NORMAL, "This command allows to emit arbitrary raw commands on T5577 and cut the field after arbitrary duration.");
PrintAndLogEx(NORMAL, _RED_("WARNING:") " this may lock definitively the tag in an unusable state!");
PrintAndLogEx(NORMAL, "Uncontrolled usage can easily write an invalid configuration, activate lock bits,");
PrintAndLogEx(NORMAL, "OTP bit, password protection bit, deactivate test-mode, lock your card forever.");
PrintAndLogEx(NORMAL, "Uncontrolled usage is known to the State of California to cause cancer.");
PrintAndLogEx(NORMAL, "");
PrintAndLogEx(NORMAL, "Usage: lf t55xx dangerraw [h] [b <bitstream> t <timing>]");
PrintAndLogEx(NORMAL, "Options:");
PrintAndLogEx(NORMAL, " h - This help");
PrintAndLogEx(NORMAL, " b <bitstream> - raw bitstream");
PrintAndLogEx(NORMAL, " t <timing> - time in microseconds before dropping the field");
PrintAndLogEx(NORMAL, "");
return PM3_SUCCESS;
}
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
stricter warnings, wip
2020-05-03 07:13:28 +08:00
static int usage_t55xx_clonehelp(void) {
add xrefs between t55 menu and lf clone commands
2019-10-16 16:43:32 +08:00
PrintAndLogEx(NORMAL, "For cloning specific techs on T55xx tags, see commands available in corresponding LF sub-menus, e.g.:");
PrintAndLogEx(NORMAL, _GREEN_("lf awid clone"));
Add Destron
2020-10-12 18:27:00 +08:00
PrintAndLogEx(NORMAL, _GREEN_("lf destron clone"));
Rename em 410x_write into 410x_clone
2020-09-29 02:31:45 +08:00
PrintAndLogEx(NORMAL, _GREEN_("lf em 410x_clone"));
textual
2019-10-16 16:57:14 +08:00
// todo: implement restore
// PrintAndLogEx(NORMAL, _GREEN_("lf em 4x05_write"));
// PrintAndLogEx(NORMAL, _GREEN_("lf em 4x50_write"));
Make clear current FDX in Pm3 is FDX-B only
2020-10-12 04:38:52 +08:00
PrintAndLogEx(NORMAL, _GREEN_("lf fdxb clone"));
add xrefs between t55 menu and lf clone commands
2019-10-16 16:43:32 +08:00
PrintAndLogEx(NORMAL, _GREEN_("lf gallagher clone"));
PrintAndLogEx(NORMAL, _GREEN_("lf gproxii clone"));
PrintAndLogEx(NORMAL, _GREEN_("lf hid clone"));
PrintAndLogEx(NORMAL, _GREEN_("lf indala clone"));
PrintAndLogEx(NORMAL, _GREEN_("lf io clone"));
PrintAndLogEx(NORMAL, _GREEN_("lf jablotron clone"));
PrintAndLogEx(NORMAL, _GREEN_("lf keri clone"));
PrintAndLogEx(NORMAL, _GREEN_("lf nedap clone"));
PrintAndLogEx(NORMAL, _GREEN_("lf noralsy clone"));
PrintAndLogEx(NORMAL, _GREEN_("lf motorola clone"));
PrintAndLogEx(NORMAL, _GREEN_("lf pac clone"));
PrintAndLogEx(NORMAL, _GREEN_("lf paradox clone"));
PrintAndLogEx(NORMAL, _GREEN_("lf presco clone"));
PrintAndLogEx(NORMAL, _GREEN_("lf pyramid clone"));
PrintAndLogEx(NORMAL, _GREEN_("lf securakey clone"));
PrintAndLogEx(NORMAL, _GREEN_("lf viking clone"));
PrintAndLogEx(NORMAL, _GREEN_("lf visa2000 clone"));
return PM3_SUCCESS;
}
lf t55xx sniff - now uses cliparser
2021-01-10 19:52:57 +08:00
textual
2019-10-16 16:57:14 +08:00
static int CmdHelp(const char *Cmd);
static int CmdT55xxCloneHelp(const char *Cmd) {
(void)Cmd; // Cmd is not used so far
return usage_t55xx_clonehelp();
}
stricter warnings, wip
2020-05-03 07:13:28 +08:00
static void T55x7_SaveBlockData(uint8_t idx, uint32_t data) {
t55x7 save and restore eml/bin
2019-10-10 18:27:48 +08:00
if (idx < T55x7_BLOCK_COUNT) {
make style
2019-10-13 06:48:26 +08:00
cardmem[idx].valid = true;
T55xx Save and Restore
2019-10-11 17:29:20 +08:00
cardmem[idx].blockdata = data;
t55x7 save and restore eml/bin
2019-10-10 18:27:48 +08:00
}
}
stricter warnings, wip
2020-05-03 07:13:28 +08:00
static void T55x7_ClearAllBlockData(void) {
t55x7 save and restore eml/bin
2019-10-10 18:27:48 +08:00
for (uint8_t idx = 0; idx < T55x7_BLOCK_COUNT; idx++) {
make style
2019-10-13 06:48:26 +08:00
cardmem[idx].valid = false;
T55xx Save and Restore
2019-10-11 17:29:20 +08:00
cardmem[idx].blockdata = 0x00;
t55x7 save and restore eml/bin
2019-10-10 18:27:48 +08:00
}
}
add 'lf paradox clone' - take raw hex and clone to t55x7
2019-09-27 02:31:02 +08:00
int clone_t55xx_tag(uint32_t *blockdata, uint8_t numblocks) {
Update cmdlft55xx.c
2019-10-10 19:07:57 +08:00
if (blockdata == NULL)
add 'lf paradox clone' - take raw hex and clone to t55x7
2019-09-27 02:31:02 +08:00
return PM3_EINVARG;
fix: 'lf indala clone' - now write long id again
2019-10-07 23:18:56 +08:00
if (numblocks < 1 || numblocks > 8)
add 'lf paradox clone' - take raw hex and clone to t55x7
2019-09-27 02:31:02 +08:00
return PM3_EINVARG;
PacketResponseNG resp;
// fast push mode
conn.block_after_ACK = true;
for (int8_t i = 0; i < numblocks; i++) {
// Disable fast mode on last packet
if (i == numblocks - 1) {
conn.block_after_ACK = false;
}
clearCommandBuffer();
t55xx_write_block_t ng;
ng.data = blockdata[i];
ng.pwd = 0;
ng.blockno = i;
ng.flags = 0;
SendCommandNG(CMD_LF_T55XX_WRITEBL, (uint8_t *)&ng, sizeof(ng));
if (!WaitForResponseTimeout(CMD_LF_T55XX_WRITEBL, &resp, T55XX_WRITE_TIMEOUT)) {
PrintAndLogEx(ERR, "Error occurred, device did not respond during write operation.");
return PM3_ETIMEOUT;
}
}
Update cmdlft55xx.c
2019-10-10 19:07:57 +08:00
make style
2019-10-13 06:48:26 +08:00
uint8_t res = 0;
add 'lf paradox clone' - take raw hex and clone to t55x7
2019-09-27 02:31:02 +08:00
for (int8_t i = 0; i < numblocks; i++) {
if (i == 0) {
SetConfigWithBlock0(blockdata[0]);
if (t55xxAquireAndCompareBlock0(false, 0, blockdata[0], false))
continue;
}
if (t55xxVerifyWrite(i, 0, false, false, 0, 0xFF, blockdata[i]) == false)
res++;
}
if (res == 0)
more clear message (thanks @amal!)
2020-11-20 22:45:14 +08:00
PrintAndLogEx(SUCCESS, "Data written and verified");
Update cmdlft55xx.c
2019-10-10 19:07:57 +08:00
add 'lf paradox clone' - take raw hex and clone to t55x7
2019-09-27 02:31:02 +08:00
return PM3_SUCCESS;
}
style
2019-09-19 16:54:34 +08:00
static bool t55xxProtect(bool lock, bool usepwd, uint8_t override, uint32_t password, uint8_t downlink_mode, uint32_t new_password) {
chg: 'lf t55 write v' - validation of data. After a write, the command tries to read the block and see if it matches the data entered. This can fail because of password, not correct configuration settings before. Also validating a block0 write is harder, some modulations are not that perfect. This is however a nice step forward.
2019-09-14 03:25:39 +08:00
Messy messy. I probably lost my commit texts now... Merge branch 'master' of https://github.com/RfidResearchGroup/proxmark3
2019-09-15 01:02:13 +08:00
PrintAndLogEx(INFO, "Checking current configuration");
style
2019-09-19 16:54:34 +08:00
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
bool testmode = false;
uint32_t block0 = 0;
int res = T55xxReadBlockEx(T55x7_CONFIGURATION_BLOCK, T55x7_PAGE0, usepwd, override, password, downlink_mode, false);
if (res != PM3_SUCCESS) {
Fix prompt colors in log -> spurious space in color macros -> adjust lots of files...
2020-04-22 08:22:55 +08:00
PrintAndLogEx(WARNING, "Failed to read block0, use " _YELLOW_("`p`") " password parameter?");
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
return false;
chg: 'lf t55 write v' - validation of data. After a write, the command tries to read the block and see if it matches the data entered. This can fail because of password, not correct configuration settings before. Also validating a block0 write is harder, some modulations are not that perfect. This is however a nice step forward.
2019-09-14 03:25:39 +08:00
}
style
2019-09-19 16:54:34 +08:00
textual
2020-03-24 18:31:23 +08:00
if (GetT55xxBlockData(&block0) == false) {
PrintAndLogEx(DEBUG, "ERROR decoded block0 == %08x", block0);
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
return false;
textual
2020-03-24 18:31:23 +08:00
}
PrintAndLogEx(DEBUG, "OK read block0 == %08x", block0);
chg: 'lf t55 write v' - validation of data. After a write, the command tries to read the block and see if it matches the data entered. This can fail because of password, not correct configuration settings before. Also validating a block0 write is harder, some modulations are not that perfect. This is however a nice step forward.
2019-09-14 03:25:39 +08:00
style
2019-09-19 16:54:34 +08:00
bool isPwdBitAlreadySet = (block0 >> (32 - 28) & 1);
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
if (isPwdBitAlreadySet) {
PrintAndLogEx(INFO, "PWD bit is already set");
usepwd = true;
}
chg: 'lf t55 write v' - validation of data. After a write, the command tries to read the block and see if it matches the data entered. This can fail because of password, not correct configuration settings before. Also validating a block0 write is harder, some modulations are not that perfect. This is however a nice step forward.
2019-09-14 03:25:39 +08:00
style
2019-09-19 16:54:34 +08:00
// set / clear pwd bit
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
if (lock) {
block0 |= 1 << 4;
} else {
block0 &= ~(1 << 4);
}
style
2019-09-19 16:54:34 +08:00
// write new password
if (t55xxWrite(T55x7_PWD_BLOCK, T55x7_PAGE0, usepwd, testmode, password, downlink_mode, new_password) != PM3_SUCCESS) {
Messy messy. I probably lost my commit texts now... Merge branch 'master' of https://github.com/RfidResearchGroup/proxmark3
2019-09-15 01:02:13 +08:00
PrintAndLogEx(ERR, "Failed to write new password");
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
return false;
} else {
PrintAndLogEx(SUCCESS, "Wrote new password");
}
// validate new password
uint32_t curr_password = (isPwdBitAlreadySet) ? new_password : password;
style
2019-09-19 16:54:34 +08:00
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
if (t55xxVerifyWrite(T55x7_PWD_BLOCK, T55x7_PAGE0, usepwd, override, curr_password, downlink_mode, new_password) == false) {
Messy messy. I probably lost my commit texts now... Merge branch 'master' of https://github.com/RfidResearchGroup/proxmark3
2019-09-15 01:02:13 +08:00
PrintAndLogEx(WARNING, "Failed to validate the password write. aborting.");
chg: 'lf t55 write v' - validation of data. After a write, the command tries to read the block and see if it matches the data entered. This can fail because of password, not correct configuration settings before. Also validating a block0 write is harder, some modulations are not that perfect. This is however a nice step forward.
2019-09-14 03:25:39 +08:00
return false;
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
} else {
PrintAndLogEx(SUCCESS, "Validated new password");
}
style
2019-09-19 16:54:34 +08:00
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
// write config
style
2019-09-19 16:54:34 +08:00
if (t55xxWrite(T55x7_CONFIGURATION_BLOCK, T55x7_PAGE0, usepwd, testmode, curr_password, downlink_mode, block0) != PM3_SUCCESS) {
Messy messy. I probably lost my commit texts now... Merge branch 'master' of https://github.com/RfidResearchGroup/proxmark3
2019-09-15 01:02:13 +08:00
PrintAndLogEx(ERR, "Failed to write modified configuration block %08X", block0);
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
return false;
} else {
PrintAndLogEx(SUCCESS, "Wrote modified configuration block");
}
style
2019-09-19 16:54:34 +08:00
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
// validate new config. If all went well, card should now demand pwd, hence override = 0.
override = 0;
if (t55xxVerifyWrite(T55x7_CONFIGURATION_BLOCK, T55x7_PAGE0, true, override, new_password, downlink_mode, block0) == false) {
Messy messy. I probably lost my commit texts now... Merge branch 'master' of https://github.com/RfidResearchGroup/proxmark3
2019-09-15 01:02:13 +08:00
PrintAndLogEx(WARNING, "Failed to validate pwd bit set on configuration block. aborting.");
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
return false;
} else {
Fix prompt colors in log -> spurious space in color macros -> adjust lots of files...
2020-04-22 08:22:55 +08:00
PrintAndLogEx(SUCCESS, "New configuration block " _YELLOW_("%08X")" password " _YELLOW_("%08X"), block0, new_password);
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
PrintAndLogEx(SUCCESS, "Success, tag is locked");
return true;
}
}
chg: 'lf t55 write v' - validation of data. After a write, the command tries to read the block and see if it matches the data entered. This can fail because of password, not correct configuration settings before. Also validating a block0 write is harder, some modulations are not that perfect. This is however a nice step forward.
2019-09-14 03:25:39 +08:00
chg: enhanced verify t55xx write. We set config to the cloned block0, whats left is to identify the offset, which we try to do.
2019-09-16 17:11:54 +08:00
bool t55xxAquireAndCompareBlock0(bool usepwd, uint32_t password, uint32_t known_block0, bool verbose) {
if (verbose)
PrintAndLogEx(INFO, "Block0 write detected, running `detect` to see if validation is possible");
style
2019-09-19 16:54:34 +08:00
for (uint8_t m = 0; m < 4; m++) {
Update cmdlft55xx.c
2019-10-10 19:07:57 +08:00
if (AcquireData(T55x7_PAGE0, T55x7_CONFIGURATION_BLOCK, usepwd, password, m) == false) {
chg: enhanced verify t55xx write. We set config to the cloned block0, whats left is to identify the offset, which we try to do.
2019-09-16 17:11:54 +08:00
continue;
}
style
2019-09-19 16:54:34 +08:00
chg: enhanced verify t55xx write. We set config to the cloned block0, whats left is to identify the offset, which we try to do.
2019-09-16 17:11:54 +08:00
if (DecodeT55xxBlock() == false) {
continue;
}
style
2019-09-19 16:54:34 +08:00
for (uint16_t i = 0; DemodBufferLen - 32; i++) {
chg: enhanced verify t55xx write. We set config to the cloned block0, whats left is to identify the offset, which we try to do.
2019-09-16 17:11:54 +08:00
uint32_t tmp = PackBits(i, 32, DemodBuffer);
style
2019-09-19 16:54:34 +08:00
if (tmp == known_block0) {
chg: enhanced verify t55xx write. We set config to the cloned block0, whats left is to identify the offset, which we try to do.
2019-09-16 17:11:54 +08:00
config.offset = i;
config.downlink_mode = m;
return true;
}
}
}
style
2019-09-19 16:54:34 +08:00
return false;
chg: enhanced verify t55xx write. We set config to the cloned block0, whats left is to identify the offset, which we try to do.
2019-09-16 17:11:54 +08:00
}
adjusting beahavior for auto detection
2019-09-16 02:30:05 +08:00
bool t55xxAquireAndDetect(bool usepwd, uint32_t password, uint32_t known_block0, bool verbose) {
if (verbose)
PrintAndLogEx(INFO, "Block0 write detected, running `detect` to see if validation is possible");
style
2019-09-19 16:54:34 +08:00
for (uint8_t m = 0; m < 4; m++) {
Update cmdlft55xx.c
2019-10-10 19:07:57 +08:00
if (AcquireData(T55x7_PAGE0, T55x7_CONFIGURATION_BLOCK, usepwd, password, m) == false)
adjusting beahavior for auto detection
2019-09-16 02:30:05 +08:00
continue;
rename t55xx trydetectmod
2020-10-09 21:31:27 +08:00
if (t55xxTryDetectModulationEx(m, verbose, known_block0, (usepwd) ? password : -1) == false)
adjusting beahavior for auto detection
2019-09-16 02:30:05 +08:00
continue;
chg: enhanced verify t55xx write. We set config to the cloned block0, whats left is to identify the offset, which we try to do.
2019-09-16 17:11:54 +08:00
config.downlink_mode = m;
adjusting beahavior for auto detection
2019-09-16 02:30:05 +08:00
return true;
}
lf t55xx detect and help Added lf t55xx detect to try without password first and try password if still not detected. Added password status to detected output. Updated lf t55xx help to show current default downlink mode. typo fixed in win10 color help
2019-10-08 18:46:36 +08:00
config.usepwd = false; // unknown so assume no password
config.pwd = 0x00;
style
2019-09-19 16:54:34 +08:00
return false;
adjusting beahavior for auto detection
2019-09-16 02:30:05 +08:00
}
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
bool t55xxVerifyWrite(uint8_t block, bool page1, bool usepwd, uint8_t override, uint32_t password, uint8_t downlink_mode, uint32_t data) {
uint32_t read_data = 0;
style
2019-09-19 16:54:34 +08:00
if (downlink_mode == 0xFF)
adjusting beahavior for auto detection
2019-09-16 02:30:05 +08:00
downlink_mode = config.downlink_mode;
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
int res = T55xxReadBlockEx(block, page1, usepwd, override, password, downlink_mode, false);
if (res == PM3_SUCCESS) {
if (GetT55xxBlockData(&read_data) == false)
chg: 'lf t55 write v' - validation of data. After a write, the command tries to read the block and see if it matches the data entered. This can fail because of password, not correct configuration settings before. Also validating a block0 write is harder, some modulations are not that perfect. This is however a nice step forward.
2019-09-14 03:25:39 +08:00
return false;
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
typo
2020-04-29 01:58:07 +08:00
} else if (res == PM3_EWRONGANSWER) {
style
2019-09-19 16:54:34 +08:00
// could't decode. Lets see if this was a block 0 write and try read/detect it auto.
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
// this messes up with ppls config..
if (block == 0 && page1 == false) {
adjusting beahavior for auto detection
2019-09-16 02:30:05 +08:00
if (t55xxAquireAndDetect(usepwd, password, data, true) == false)
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
return false;
style
2019-09-19 16:54:34 +08:00
adjusting beahavior for auto detection
2019-09-16 02:30:05 +08:00
return t55xxVerifyWrite(block, page1, usepwd, 2, password, config.downlink_mode, data);
chg: 'lf t55 write v' - validation of data. After a write, the command tries to read the block and see if it matches the data entered. This can fail because of password, not correct configuration settings before. Also validating a block0 write is harder, some modulations are not that perfect. This is however a nice step forward.
2019-09-14 03:25:39 +08:00
}
}
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
return (read_data == data);
}
int t55xxWrite(uint8_t block, bool page1, bool usepwd, bool testMode, uint32_t password, uint8_t downlink_mode, uint32_t data) {
style
2019-09-19 16:54:34 +08:00
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
uint8_t flags;
flags = (usepwd) ? 0x1 : 0;
flags |= (page1) ? 0x2 : 0;
flags |= (testMode) ? 0x4 : 0;
flags |= (downlink_mode << 3);
chg: 'lf t55 write v' - validation of data. After a write, the command tries to read the block and see if it matches the data entered. This can fail because of password, not correct configuration settings before. Also validating a block0 write is harder, some modulations are not that perfect. This is however a nice step forward.
2019-09-14 03:25:39 +08:00
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
/*
OLD style
arg0 = data, (4 bytes)
arg1 = block (1 byte)
arg2 = password (4 bytes)
flags = data[0] (1 byte)
new style
uses struct in pm3_cmd.h
*/
t55xx_write_block_t ng;
ng.data = data;
ng.pwd = password;
ng.blockno = block;
ng.flags = flags;
PacketResponseNG resp;
clearCommandBuffer();
SendCommandNG(CMD_LF_T55XX_WRITEBL, (uint8_t *)&ng, sizeof(ng));
if (!WaitForResponseTimeout(CMD_LF_T55XX_WRITEBL, &resp, 2000)) {
PrintAndLogEx(ERR, "Error occurred, device did not ACK write operation.");
return PM3_ETIMEOUT;
}
return resp.status;
chg: 'lf t55 write v' - validation of data. After a write, the command tries to read the block and see if it matches the data entered. This can fail because of password, not correct configuration settings before. Also validating a block0 write is harder, some modulations are not that perfect. This is however a nice step forward.
2019-09-14 03:25:39 +08:00
}
changing {} style to match majority of previous style
2019-03-10 18:20:22 +08:00
void printT5xxHeader(uint8_t page) {
chg some printing of blocks
2019-09-16 02:46:21 +08:00
PrintAndLogEx(SUCCESS, "Reading Page %d:", page);
PrintAndLogEx(SUCCESS, "blk | hex data | binary | ascii");
PrintAndLogEx(SUCCESS, "----+----------+----------------------------------+-------");
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
chg: enhanced verify t55xx write. We set config to the cloned block0, whats left is to identify the offset, which we try to do.
2019-09-16 17:11:54 +08:00
void SetConfigWithBlock0(uint32_t block0) {
chg: 'lf t55xx config' - can set config based on a block0, offset and Q5 lf t55xx config c 000880E0 o 10 - sets a T55x7 w offset 10 lf t55xx config c 000880E0 o 6 Q5 - sets a Q5/T5555 w offset 6
2019-09-16 18:36:04 +08:00
SetConfigWithBlock0Ex(block0, 0, false);
}
void SetConfigWithBlock0Ex(uint32_t block0, uint8_t offset, bool Q5) {
chg: enhanced verify t55xx write. We set config to the cloned block0, whats left is to identify the offset, which we try to do.
2019-09-16 17:11:54 +08:00
// T55x7
uint32_t extend = (block0 >> (32 - 15)) & 0x01;
uint32_t dbr;
if (extend)
dbr = (block0 >> (32 - 14)) & 0x3F;
else
dbr = (block0 >> (32 - 14)) & 0x07;
uint32_t datamod = (block0 >> (32 - 20)) & 0x1F;
bool pwd = (bool)((block0 >> (32 - 28)) & 0x01);
bool sst = (bool)((block0 >> (32 - 29)) & 0x01);
bool inv = (bool)((block0 >> (32 - 31)) & 0x01);
style
2019-09-19 16:54:34 +08:00
chg: enhanced verify t55xx write. We set config to the cloned block0, whats left is to identify the offset, which we try to do.
2019-09-16 17:11:54 +08:00
config.modulation = datamod;
config.bitrate = dbr;
style
2019-09-19 16:54:34 +08:00
chg: enhanced verify t55xx write. We set config to the cloned block0, whats left is to identify the offset, which we try to do.
2019-09-16 17:11:54 +08:00
// FSK1a, FSK2a
style
2019-09-19 16:54:34 +08:00
if (datamod == DEMOD_FSK1a || datamod == DEMOD_FSK2a || datamod == DEMOD_BIa)
chg: enhanced verify t55xx write. We set config to the cloned block0, whats left is to identify the offset, which we try to do.
2019-09-16 17:11:54 +08:00
config.inverted = 1;
else
config.inverted = inv;
style
2019-09-19 16:54:34 +08:00
chg: 'lf t55xx config' - can set config based on a block0, offset and Q5 lf t55xx config c 000880E0 o 10 - sets a T55x7 w offset 10 lf t55xx config c 000880E0 o 6 Q5 - sets a Q5/T5555 w offset 6
2019-09-16 18:36:04 +08:00
config.Q5 = Q5;
chg: enhanced verify t55xx write. We set config to the cloned block0, whats left is to identify the offset, which we try to do.
2019-09-16 17:11:54 +08:00
config.ST = sst;
config.usepwd = pwd;
chg: 'lf t55xx config' - can set config based on a block0, offset and Q5 lf t55xx config c 000880E0 o 10 - sets a T55x7 w offset 10 lf t55xx config c 000880E0 o 6 Q5 - sets a Q5/T5555 w offset 6
2019-09-16 18:36:04 +08:00
config.offset = offset;
chg: enhanced verify t55xx write. We set config to the cloned block0, whats left is to identify the offset, which we try to do.
2019-09-16 17:11:54 +08:00
config.block0 = block0;
}
Rework Cmd exposed API, use more static and fix [-Wmissing-prototypes], ongoing...
2019-04-12 08:07:11 +08:00
static int CmdT55xxSetConfig(const char *Cmd) {
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
// No args
if (strlen(Cmd) == 0) return printConfiguration(config);
styles
2019-04-08 16:01:57 +08:00
uint8_t offset = 0, bitRate = 0;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
char modulation[6] = {0x00};
make style
2019-03-10 07:00:59 +08:00
uint8_t rates[9] = {8, 16, 32, 40, 50, 64, 100, 128, 0};
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
uint8_t cmdp = 0;
T55xx DLMode Update
2019-09-14 12:13:55 +08:00
uint8_t downlink_mode = 0;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
bool errors = false;
chg: 'lf t55xx info c' - renamed from "d" to "c", takes a block0 and print info. chg: 'lf t55xx config c' - now takes a block0 and use as configuration. usage: lf t55xx config c 000880E8 lf t55xx info c 000880E8
2019-09-14 02:50:00 +08:00
uint32_t block0 = 0;
bool gotconf = false;
style
2019-09-19 16:54:34 +08:00
make style
2019-03-10 07:00:59 +08:00
while (param_getchar(Cmd, cmdp) != 0x00 && !errors) {
styles
2019-04-08 16:01:57 +08:00
char tmp = tolower(param_getchar(Cmd, cmdp));
make style
2019-03-10 07:00:59 +08:00
switch (tmp) {
case 'h':
return usage_t55xx_config();
case 'b':
errors |= param_getdec(Cmd, cmdp + 1, &bitRate);
if (!errors) {
uint8_t i = 0;
for (; i < 9; i++) {
if (rates[i] == bitRate) {
config.bitrate = i;
Fix issue #844
2020-12-07 20:55:11 +08:00
config.block0 = ((config.block0 & ~(0x1c0000)) | (i << 18));
make style
2019-03-10 07:00:59 +08:00
break;
}
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
}
make style
2019-03-10 07:00:59 +08:00
if (i == 9) errors = true;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
}
make style
2019-03-10 07:00:59 +08:00
cmdp += 2;
break;
chg: 'lf t55xx info c' - renamed from "d" to "c", takes a block0 and print info. chg: 'lf t55xx config c' - now takes a block0 and use as configuration. usage: lf t55xx config c 000880E8 lf t55xx info c 000880E8
2019-09-14 02:50:00 +08:00
case 'c':
block0 = param_get32ex(Cmd, cmdp + 1, 0, 16);
gotconf = true;
cmdp += 2;
break;
make style
2019-03-10 07:00:59 +08:00
case 'd':
param_getstr(Cmd, cmdp + 1, modulation, sizeof(modulation));
cmdp += 2;
if (strcmp(modulation, "FSK") == 0) {
config.modulation = DEMOD_FSK;
} else if (strcmp(modulation, "FSK1") == 0) {
config.modulation = DEMOD_FSK1;
config.inverted = 1;
} else if (strcmp(modulation, "FSK1a") == 0) {
config.modulation = DEMOD_FSK1a;
config.inverted = 0;
} else if (strcmp(modulation, "FSK2") == 0) {
config.modulation = DEMOD_FSK2;
config.inverted = 0;
} else if (strcmp(modulation, "FSK2a") == 0) {
config.modulation = DEMOD_FSK2a;
config.inverted = 1;
} else if (strcmp(modulation, "ASK") == 0) {
config.modulation = DEMOD_ASK;
} else if (strcmp(modulation, "NRZ") == 0) {
config.modulation = DEMOD_NRZ;
} else if (strcmp(modulation, "PSK1") == 0) {
config.modulation = DEMOD_PSK1;
} else if (strcmp(modulation, "PSK2") == 0) {
config.modulation = DEMOD_PSK2;
} else if (strcmp(modulation, "PSK3") == 0) {
config.modulation = DEMOD_PSK3;
} else if (strcmp(modulation, "BIa") == 0) {
config.modulation = DEMOD_BIa;
config.inverted = 1;
} else if (strcmp(modulation, "BI") == 0) {
config.modulation = DEMOD_BI;
config.inverted = 0;
} else {
PrintAndLogEx(WARNING, "Unknown modulation '%s'", modulation);
errors = true;
}
fixed incorrect bitmask on modulation
2020-12-08 07:33:58 +08:00
config.block0 = ((config.block0 & ~(0x1f000)) | (config.modulation << 12));
make style
2019-03-10 07:00:59 +08:00
break;
case 'i':
t55xx config: allow to toggle on/off i/q5/st
2019-04-01 01:42:36 +08:00
if ((param_getchar(Cmd, cmdp + 1) == '0') || (param_getchar(Cmd, cmdp + 1) == '1')) {
config.inverted = param_getchar(Cmd, cmdp + 1) == '1';
cmdp += 2;
} else {
config.inverted = true;
cmdp += 1;
}
make style
2019-03-10 07:00:59 +08:00
break;
case 'o':
errors |= param_getdec(Cmd, cmdp + 1, &offset);
if (!errors)
config.offset = offset;
cmdp += 2;
break;
case 'q':
t55xx config: allow to toggle on/off i/q5/st
2019-04-01 01:42:36 +08:00
if ((param_getchar(Cmd, cmdp + 1) == '0') || (param_getchar(Cmd, cmdp + 1) == '1')) {
config.Q5 = param_getchar(Cmd, cmdp + 1) == '1';
cmdp += 2;
} else {
config.Q5 = true;
cmdp += 1;
}
make style
2019-03-10 07:00:59 +08:00
break;
case 's':
t55xx config: allow to toggle on/off i/q5/st
2019-04-01 01:42:36 +08:00
if ((param_getchar(Cmd, cmdp + 1) == '0') || (param_getchar(Cmd, cmdp + 1) == '1')) {
config.ST = param_getchar(Cmd, cmdp + 1) == '1';
cmdp += 2;
} else {
config.ST = true;
cmdp += 1;
}
Fix issue #844
2020-12-07 20:55:11 +08:00
config.block0 = ((config.block0 & ~(0x8)) | (config.ST << 3));
make style
2019-03-10 07:00:59 +08:00
break;
T55xx DLMode Update
2019-09-14 12:13:55 +08:00
case 'r':
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
errors = param_getdec(Cmd, cmdp + 1, &downlink_mode);
T55xx DLMode Update
2019-09-14 12:13:55 +08:00
if (downlink_mode > 3)
downlink_mode = 0;
if (!errors)
config.downlink_mode = downlink_mode;
cmdp += 2;
break;
make style
2019-03-10 07:00:59 +08:00
default:
PrintAndLogEx(WARNING, "Unknown parameter '%c'", param_getchar(Cmd, cmdp));
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
errors = true;
make style
2019-03-10 07:00:59 +08:00
break;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
}
}
//Validations
if (errors) return usage_t55xx_config();
Block0 source explicit in lf t55xx config and color coded
2020-12-09 06:54:29 +08:00
config.block0Status = userSet;
style
2019-09-19 16:54:34 +08:00
if (gotconf) {
SetConfigWithBlock0Ex(block0, config.offset, config.Q5);
chg: 'lf t55xx info c' - renamed from "d" to "c", takes a block0 and print info. chg: 'lf t55xx config c' - now takes a block0 and use as configuration. usage: lf t55xx config c 000880E8 lf t55xx info c 000880E8
2019-09-14 02:50:00 +08:00
}
make style
2019-03-10 07:00:59 +08:00
return printConfiguration(config);
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
Added T55 downlink mode support
2019-07-23 07:50:28 +08:00
int T55xxReadBlock(uint8_t block, bool page1, bool usepwd, uint8_t override, uint32_t password, uint8_t downlink_mode) {
t55 output
2020-09-11 17:02:19 +08:00
return T55xxReadBlockEx(block, page1, usepwd, override, password, downlink_mode, true);
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
}
int T55xxReadBlockEx(uint8_t block, bool page1, bool usepwd, uint8_t override, uint32_t password, uint8_t downlink_mode, bool verbose) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
//Password mode
make style
2019-03-10 07:00:59 +08:00
if (usepwd) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
// try reading the config block and verify that PWD bit is set before doing this!
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
// override = 1 (override and display)
// override = 2 (override and no display)
chg: 'lf t55xx dump p 11223344' - less verbose output.
2019-09-09 21:19:00 +08:00
if (override == 0) {
Update cmdlft55xx.c
2019-10-10 19:07:57 +08:00
if (AcquireData(T55x7_PAGE0, T55x7_CONFIGURATION_BLOCK, false, 0, downlink_mode) == false)
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
return PM3_ERFTRANS;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
rename t55xx trydetectmod
2020-10-09 21:31:27 +08:00
if (t55xxTryDetectModulationEx(downlink_mode, false, 0, password) == false) {
Messy messy. I probably lost my commit texts now... Merge branch 'master' of https://github.com/RfidResearchGroup/proxmark3
2019-09-15 01:02:13 +08:00
PrintAndLogEx(WARNING, "Safety check: Could not detect if PWD bit is set in config block. Exits.");
typo
2020-04-29 01:58:07 +08:00
return PM3_EWRONGANSWER;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
} else {
Messy messy. I probably lost my commit texts now... Merge branch 'master' of https://github.com/RfidResearchGroup/proxmark3
2019-09-15 01:02:13 +08:00
PrintAndLogEx(WARNING, "Safety check: PWD bit is NOT set in config block. Reading without password...");
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
usepwd = false;
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
page1 = false; // ??
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
}
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
} else if (override == 1) {
Messy messy. I probably lost my commit texts now... Merge branch 'master' of https://github.com/RfidResearchGroup/proxmark3
2019-09-15 01:02:13 +08:00
PrintAndLogEx(INFO, "Safety check overridden - proceeding despite risk");
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
}
}
Update cmdlft55xx.c
2019-10-10 19:07:57 +08:00
if (AcquireData(page1, block, usepwd, password, downlink_mode) == false)
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
return PM3_ERFTRANS;
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
if (DecodeT55xxBlock() == false)
typo
2020-04-29 01:58:07 +08:00
return PM3_EWRONGANSWER;
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
if (verbose)
make style
2019-10-13 06:48:26 +08:00
printT55xxBlock(block, page1);
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
chg: cmdlft55xx return codes
2019-05-22 20:48:23 +08:00
return PM3_SUCCESS;
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
Rework Cmd exposed API, use more static and fix [-Wmissing-prototypes], ongoing...
2019-04-12 08:07:11 +08:00
static int CmdT55xxReadBlock(const char *Cmd) {
chg: 'lf t55xx dump p 11223344' - less verbose output.
2019-09-09 21:19:00 +08:00
uint8_t block = REGULAR_READ_MODE_BLOCK;
uint8_t override = 0;
uint8_t cmdp = 0;
T55xx DLMode Update
2019-09-14 12:13:55 +08:00
uint8_t downlink_mode = config.downlink_mode;
chg: 'lf t55xx dump p 11223344' - less verbose output.
2019-09-09 21:19:00 +08:00
uint32_t password = 0; //default to blank Block 7
bool usepwd = false;
bool page1 = false;
bool errors = false;
make style
2019-07-24 05:43:30 +08:00
make style
2019-03-10 07:00:59 +08:00
while (param_getchar(Cmd, cmdp) != 0x00 && !errors) {
switch (tolower(param_getchar(Cmd, cmdp))) {
case 'h':
return usage_t55xx_read();
case 'b':
errors |= param_getdec(Cmd, cmdp + 1, &block);
cmdp += 2;
break;
case 'o':
chg: 'lf t55xx dump p 11223344' - less verbose output.
2019-09-09 21:19:00 +08:00
override = 1;
make style
2019-03-10 07:00:59 +08:00
cmdp++;
break;
case 'p':
password = param_get32ex(Cmd, cmdp + 1, 0, 16);
usepwd = true;
cmdp += 2;
break;
case '1':
page1 = true;
cmdp++;
break;
make style
2019-07-24 05:43:30 +08:00
case 'r':
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
downlink_mode = param_get8ex(Cmd, cmdp + 1, 0, 10);
if (downlink_mode > 3)
style
2019-09-13 22:32:37 +08:00
downlink_mode = 0;
make style
2019-07-24 05:43:30 +08:00
cmdp += 2;
break;
make style
2019-03-10 07:00:59 +08:00
default:
PrintAndLogEx(WARNING, "Unknown parameter '%c'", param_getchar(Cmd, cmdp));
errors = true;
break;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
}
}
chg: 'lf t55xx wipe p' - now takes a password for wipe chg: 'lf t55xx wakeup' - uses NG
2019-09-13 03:20:40 +08:00
if (errors || cmdp == 0) return usage_t55xx_read();
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
if (block > 7 && block != REGULAR_READ_MODE_BLOCK) {
PrintAndLogEx(NORMAL, "Block must be between 0 and 7");
chg: cmdlft55xx return codes
2019-05-22 20:48:23 +08:00
return PM3_ESOFT;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
}
printT5xxHeader(page1);
Added T55 downlink mode support
2019-07-23 07:50:28 +08:00
return T55xxReadBlock(block, page1, usepwd, override, password, downlink_mode);
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
Add: new lua scripting support for some t55xx commands. core.t55xx_detect() - same as 'lf t55xx detect' core.t55xx_readblock() - read t55xx block, don't forget to run detect before. Returns actual blockdata.
2019-04-04 01:48:00 +08:00
bool DecodeT55xxBlock(void) {
remove spurious spaces & tabs at end of lines
2019-03-09 15:59:13 +08:00
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
int ans = 0;
bool ST = config.ST;
make style
2019-03-10 07:00:59 +08:00
uint8_t bitRate[8] = {8, 16, 32, 40, 50, 64, 100, 128};
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
DemodBufferLen = 0x00;
make style
2019-03-10 07:00:59 +08:00
switch (config.modulation) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
case DEMOD_FSK:
LF: rework internal APIs
2020-09-28 17:50:20 +08:00
ans = FSKrawDemod(bitRate[config.bitrate], config.inverted, 0, 0, false);
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
break;
case DEMOD_FSK1:
case DEMOD_FSK1a:
LF: rework internal APIs
2020-09-28 17:50:20 +08:00
ans = FSKrawDemod(bitRate[config.bitrate], config.inverted, 8, 5, false);
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
break;
case DEMOD_FSK2:
case DEMOD_FSK2a:
LF: rework internal APIs
2020-09-28 17:50:20 +08:00
ans = FSKrawDemod(bitRate[config.bitrate], config.inverted, 10, 8, false);
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
break;
case DEMOD_ASK:
LF: rework internal APIs
2020-09-28 17:50:20 +08:00
ans = ASKDemod_ext(bitRate[config.bitrate], config.inverted, 1, 0, false, false, false, 1, &ST);
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
break;
case DEMOD_PSK1:
LF: rework internal APIs
2020-09-28 17:50:20 +08:00
ans = PSKDemod(bitRate[config.bitrate], config.inverted, 6, false);
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
break;
case DEMOD_PSK2: //inverted won't affect this
case DEMOD_PSK3: //not fully implemented
LF: rework internal APIs
2020-09-28 17:50:20 +08:00
ans = PSKDemod(bitRate[config.bitrate], 0, 6, false);
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
psk1TOpsk2(DemodBuffer, DemodBufferLen);
break;
case DEMOD_NRZ:
LF: rework internal APIs
2020-09-28 17:50:20 +08:00
ans = NRZrawDemod(bitRate[config.bitrate], config.inverted, 1, false);
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
break;
case DEMOD_BI:
case DEMOD_BIa:
LF: rework internal APIs
2020-09-28 17:50:20 +08:00
ans = ASKbiphaseDemod(0, bitRate[config.bitrate], config.inverted, 1, false);
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
break;
default:
return false;
}
chg: lf em 410x_sim - reworked to NG\n chg: lf em 410x_demod - now can demod the simulation data.
2019-05-22 20:32:30 +08:00
return (ans == PM3_SUCCESS);
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
use more static and fix [-Wmissing-prototypes]
2019-04-14 03:54:04 +08:00
static bool DecodeT5555TraceBlock(void) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
DemodBufferLen = 0x00;
remove spurious spaces & tabs at end of lines
2019-03-09 15:59:13 +08:00
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
// According to datasheet. Always: RF/64, not inverted, Manchester
LF: rework internal APIs
2020-09-28 17:50:20 +08:00
bool st = false;
return (ASKDemod_ext(64, 0, 1, 0, false, false, false, 1, &st) == PM3_SUCCESS);
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
// sanity check. Don't use proxmark if it is offline and you didn't specify useGraphbuf
changing {} style to match majority of previous style
2019-03-10 18:20:22 +08:00
static int SanityOfflineCheck(bool useGraphBuffer) {
better offline mode
2019-05-01 05:52:40 +08:00
if (!useGraphBuffer && !session.pm3_present) {
unified Proxmark3 text
2019-04-17 02:00:25 +08:00
PrintAndLogEx(WARNING, "Your proxmark3 device is offline. Specify [1] to use graphbuffer data instead");
chg: cmdlft55xx return codes
2019-05-22 20:48:23 +08:00
return PM3_ENODATA;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
}
chg: cmdlft55xx return codes
2019-05-22 20:48:23 +08:00
return PM3_SUCCESS;
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
stricter warnings, wip
2020-05-03 07:13:28 +08:00
static void T55xx_Print_DownlinkMode(uint8_t downlink_mode) {
chg: 'codestyle'
2019-07-27 16:25:03 +08:00
char msg[80];
style
2020-09-07 16:35:09 +08:00
snprintf(msg, sizeof(msg), "Downlink Mode used : ");
make style
2019-07-24 05:43:30 +08:00
switch (downlink_mode) {
case 1 :
chg: 'codestyle'
2019-07-27 16:25:03 +08:00
strcat(msg, _YELLOW_("long leading reference"));
make style
2019-07-24 05:43:30 +08:00
break;
case 2 :
chg: 'codestyle'
2019-07-27 16:25:03 +08:00
strcat(msg, _YELLOW_("leading zero reference"));
make style
2019-07-24 05:43:30 +08:00
break;
case 3 :
chg: 'codestyle'
2019-07-27 16:25:03 +08:00
strcat(msg, _YELLOW_("1 of 4 coding reference"));
make style
2019-07-24 05:43:30 +08:00
break;
default :
chg: 'codestyle'
2019-07-27 16:25:03 +08:00
strcat(msg, _YELLOW_("default/fixed bit length"));
make style
2019-07-24 05:43:30 +08:00
break;
}
chg: 'codestyle'
2019-07-27 16:25:03 +08:00
PrintAndLogEx(NORMAL, msg);
Added T55 downlink mode support
2019-07-23 07:50:28 +08:00
}
T55xx DLMode Update
2019-09-14 12:13:55 +08:00
Detect with wakeup Detect with wake option to address init deley or AOR set.
2020-11-08 18:03:33 +08:00
// Define prototype to call from within detect.
make style
2020-11-23 08:39:54 +08:00
static int CmdT55xxWakeUp(const char *Cmd);
Detect with wakeup Detect with wake option to address init deley or AOR set.
2020-11-08 18:03:33 +08:00
Rework Cmd exposed API, use more static and fix [-Wmissing-prototypes], ongoing...
2019-04-12 08:07:11 +08:00
static int CmdT55xxDetect(const char *Cmd) {
Added T55 downlink mode support
2019-07-23 07:50:28 +08:00
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
bool errors = false;
bool useGB = false;
bool usepwd = false;
lf t55xx detect and help Added lf t55xx detect to try without password first and try password if still not detected. Added password status to detected output. Updated lf t55xx help to show current default downlink mode. typo fixed in win10 color help
2019-10-08 18:46:36 +08:00
bool try_with_pwd = false;
T55xx DLMode Update
2019-09-14 12:13:55 +08:00
bool try_all_dl_modes = true;
bool found = false;
Detect with wakeup Detect with wake option to address init deley or AOR set.
2020-11-08 18:03:33 +08:00
bool usewake = false;
textual
2020-08-21 23:15:58 +08:00
uint64_t password = -1;
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
uint8_t cmdp = 0;
uint8_t downlink_mode = 0;
Detect with wakeup Detect with wake option to address init deley or AOR set.
2020-11-08 18:03:33 +08:00
char wakecmd[20] = { 0x00 };
struct timespec sleepperiod;
// Setup the 90ms time value to sleep for after the wake, to allow delay init to complete (~70ms)
sleepperiod.tv_sec = 0;
sleepperiod.tv_nsec = 90000000;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
while (param_getchar(Cmd, cmdp) != 0x00 && !errors) {
make style
2019-03-10 07:00:59 +08:00
switch (tolower(param_getchar(Cmd, cmdp))) {
case 'h':
return usage_t55xx_detect();
case 'p':
password = param_get32ex(Cmd, cmdp + 1, 0, 16);
make style
2020-11-23 08:39:54 +08:00
sprintf(wakecmd, "p %08x q", (uint32_t)(password & 0xFFFFFFFF));
make style
2019-03-10 07:00:59 +08:00
usepwd = true;
cmdp += 2;
break;
case '1':
useGB = true;
cmdp++;
break;
make style
2019-07-24 05:43:30 +08:00
case 'r':
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
downlink_mode = param_get8ex(Cmd, cmdp + 1, 0, 10);
T55xx DLMode Update
2019-09-14 12:13:55 +08:00
if (downlink_mode <= 3) try_all_dl_modes = false; // User selected ONLY 1 so honor.
if (downlink_mode == 4) try_all_dl_modes = true;
if (downlink_mode > 3) downlink_mode = 0;
make style
2019-07-24 05:43:30 +08:00
cmdp += 2;
break;
make style
2019-03-10 07:00:59 +08:00
default:
PrintAndLogEx(WARNING, "Unknown parameter '%c'", param_getchar(Cmd, cmdp));
errors = true;
break;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
}
}
if (errors) return usage_t55xx_detect();
make style
2020-11-23 08:39:54 +08:00
t55x7 save and restore eml/bin
2019-10-10 18:27:48 +08:00
// detect called so clear data blocks
make style
2019-10-13 06:48:26 +08:00
T55x7_ClearAllBlockData();
t55x7 save and restore eml/bin
2019-10-10 18:27:48 +08:00
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
// sanity check.
chg: 'lf t55xx wipe p' - now takes a password for wipe chg: 'lf t55xx wakeup' - uses NG
2019-09-13 03:20:40 +08:00
if (SanityOfflineCheck(useGB) != PM3_SUCCESS)
return PM3_ESOFT;
if (useGB == false) {
Detect with wakeup Detect with wake option to address init deley or AOR set.
2020-11-08 18:03:33 +08:00
// do ... while not found and not yet tried with wake (for AOR or Init Delay)
lf t55xx detect and help Added lf t55xx detect to try without password first and try password if still not detected. Added password status to detected output. Updated lf t55xx help to show current default downlink mode. typo fixed in win10 color help
2019-10-08 18:46:36 +08:00
do {
Detect with wakeup Detect with wake option to address init deley or AOR set.
2020-11-08 18:03:33 +08:00
// do ... while to check without password then loop back if password supplied
do {
if (try_all_dl_modes) {
for (uint8_t m = downlink_mode; m < 4; m++) {
if (usewake) {
// call wake
if (try_with_pwd)
make style
2020-11-23 08:39:54 +08:00
CmdT55xxWakeUp(wakecmd);
Detect with wakeup Detect with wake option to address init deley or AOR set.
2020-11-08 18:03:33 +08:00
else
make style
2020-11-23 08:39:54 +08:00
CmdT55xxWakeUp("q");
Detect with wakeup Detect with wake option to address init deley or AOR set.
2020-11-08 18:03:33 +08:00
// sleep 90 ms
make style
2020-11-23 08:39:54 +08:00
nanosleep(&sleepperiod, &sleepperiod);
Detect with wakeup Detect with wake option to address init deley or AOR set.
2020-11-08 18:03:33 +08:00
}
make style
2019-10-13 06:48:26 +08:00
Detect with wakeup Detect with wake option to address init deley or AOR set.
2020-11-08 18:03:33 +08:00
if (AcquireData(T55x7_PAGE0, T55x7_CONFIGURATION_BLOCK, (try_with_pwd && usepwd), password, m) == false)
continue;
make style
2019-10-13 06:48:26 +08:00
Detect with wakeup Detect with wake option to address init deley or AOR set.
2020-11-08 18:03:33 +08:00
if (t55xxTryDetectModulationEx(m, T55XX_PrintConfig, 0, (try_with_pwd && usepwd) ? password : -1) == false)
continue;
lf t55xx detect and help Added lf t55xx detect to try without password first and try password if still not detected. Added password status to detected output. Updated lf t55xx help to show current default downlink mode. typo fixed in win10 color help
2019-10-08 18:46:36 +08:00
Detect with wakeup Detect with wake option to address init deley or AOR set.
2020-11-08 18:03:33 +08:00
found = true;
lf t55xx detect and help Added lf t55xx detect to try without password first and try password if still not detected. Added password status to detected output. Updated lf t55xx help to show current default downlink mode. typo fixed in win10 color help
2019-10-08 18:46:36 +08:00
Detect with wakeup Detect with wake option to address init deley or AOR set.
2020-11-08 18:03:33 +08:00
break;
}
} else {
if (usewake) {
// call wake
if (try_with_pwd)
make style
2020-11-23 08:39:54 +08:00
CmdT55xxWakeUp(wakecmd);
Detect with wakeup Detect with wake option to address init deley or AOR set.
2020-11-08 18:03:33 +08:00
else
make style
2020-11-23 08:39:54 +08:00
CmdT55xxWakeUp("q");
Detect with wakeup Detect with wake option to address init deley or AOR set.
2020-11-08 18:03:33 +08:00
// sleep 90 ms
make style
2020-11-23 08:39:54 +08:00
nanosleep(&sleepperiod, &sleepperiod);
Detect with wakeup Detect with wake option to address init deley or AOR set.
2020-11-08 18:03:33 +08:00
}
style
2020-09-07 16:35:09 +08:00
Detect with wakeup Detect with wake option to address init deley or AOR set.
2020-11-08 18:03:33 +08:00
if (AcquireData(T55x7_PAGE0, T55x7_CONFIGURATION_BLOCK, usepwd, password, downlink_mode)) {
found = t55xxTryDetectModulationEx(downlink_mode, T55XX_PrintConfig, 0, (usepwd) ? password : -1);
}
lf t55xx detect and help Added lf t55xx detect to try without password first and try password if still not detected. Added password status to detected output. Updated lf t55xx help to show current default downlink mode. typo fixed in win10 color help
2019-10-08 18:46:36 +08:00
}
style
2019-09-19 16:54:34 +08:00
Detect with wakeup Detect with wake option to address init deley or AOR set.
2020-11-08 18:03:33 +08:00
// toggle so we loop back if not found and try with pwd
if (!found && usepwd)
try_with_pwd = !try_with_pwd;
make style
2019-10-13 06:48:26 +08:00
Detect with wakeup Detect with wake option to address init deley or AOR set.
2020-11-08 18:03:33 +08:00
// force exit as detect block has been found
if (found)
try_with_pwd = false;
adjusting beahavior for auto detection
2019-09-16 02:30:05 +08:00
Detect with wakeup Detect with wake option to address init deley or AOR set.
2020-11-08 18:03:33 +08:00
} while (try_with_pwd);
// Toggle so we loop back and try with wakeup.
usewake = !usewake;
} while (!found && usewake);
T55xx DLMode Update
2019-09-14 12:13:55 +08:00
} else {
rename t55xx trydetectmod
2020-10-09 21:31:27 +08:00
found = t55xxTryDetectModulation(downlink_mode, T55XX_PrintConfig);
make style
2019-07-24 05:43:30 +08:00
}
style
2019-09-19 16:54:34 +08:00
lf t55xx detect and help Added lf t55xx detect to try without password first and try password if still not detected. Added password status to detected output. Updated lf t55xx help to show current default downlink mode. typo fixed in win10 color help
2019-10-08 18:46:36 +08:00
if (found == false) {
config.usepwd = false;
config.pwd = 0x00;
make style
2019-04-07 01:09:01 +08:00
PrintAndLogEx(WARNING, "Could not detect modulation automatically. Try setting it manually with " _YELLOW_("\'lf t55xx config\'"));
lf t55xx detect and help Added lf t55xx detect to try without password first and try password if still not detected. Added password status to detected output. Updated lf t55xx help to show current default downlink mode. typo fixed in win10 color help
2019-10-08 18:46:36 +08:00
}
chg: cmdlft55xx return codes
2019-05-22 20:48:23 +08:00
return PM3_SUCCESS;
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
T55xx DLMode Update
2019-09-14 12:13:55 +08:00
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
// detect configuration?
rename t55xx trydetectmod
2020-10-09 21:31:27 +08:00
bool t55xxTryDetectModulation(uint8_t downlink_mode, bool print_config) {
return t55xxTryDetectModulationEx(downlink_mode, print_config, 0, -1);
adjusting beahavior for auto detection
2019-09-16 02:30:05 +08:00
}
rename t55xx trydetectmod
2020-10-09 21:31:27 +08:00
bool t55xxTryDetectModulationEx(uint8_t downlink_mode, bool print_config, uint32_t wanted_conf, uint64_t pwd) {
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
t55xx_conf_block_t tests[15];
int bitRate = 0, clk = 0, firstClockEdge = 0;
uint8_t hits = 0, fc1 = 0, fc2 = 0, ans = 0;
ans = fskClocks(&fc1, &fc2, (uint8_t *)&clk, &firstClockEdge);
make style
2019-03-10 07:00:59 +08:00
if (ans && ((fc1 == 10 && fc2 == 8) || (fc1 == 8 && fc2 == 5))) {
LF: rework internal APIs
2020-09-28 17:50:20 +08:00
if ((FSKrawDemod(0, 0, 0, 0, false) == PM3_SUCCESS) && test(DEMOD_FSK, &tests[hits].offset, &bitRate, clk, &tests[hits].Q5)) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
tests[hits].modulation = DEMOD_FSK;
make style
2019-03-10 07:00:59 +08:00
if (fc1 == 8 && fc2 == 5)
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
tests[hits].modulation = DEMOD_FSK1a;
make style
2019-03-10 07:00:59 +08:00
else if (fc1 == 10 && fc2 == 8)
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
tests[hits].modulation = DEMOD_FSK2;
tests[hits].bitrate = bitRate;
tests[hits].inverted = false;
tests[hits].block0 = PackBits(tests[hits].offset, 32, DemodBuffer);
tests[hits].ST = false;
T55xx DLMode Update
2019-09-14 12:13:55 +08:00
tests[hits].downlink_mode = downlink_mode;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
++hits;
}
LF: rework internal APIs
2020-09-28 17:50:20 +08:00
if ((FSKrawDemod(0, 1, 0, 0, false) == PM3_SUCCESS) && test(DEMOD_FSK, &tests[hits].offset, &bitRate, clk, &tests[hits].Q5)) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
tests[hits].modulation = DEMOD_FSK;
if (fc1 == 8 && fc2 == 5)
tests[hits].modulation = DEMOD_FSK1;
else if (fc1 == 10 && fc2 == 8)
tests[hits].modulation = DEMOD_FSK2a;
tests[hits].bitrate = bitRate;
tests[hits].inverted = true;
tests[hits].block0 = PackBits(tests[hits].offset, 32, DemodBuffer);
tests[hits].ST = false;
T55xx DLMode Update
2019-09-14 12:13:55 +08:00
tests[hits].downlink_mode = downlink_mode;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
++hits;
}
} else {
clk = GetAskClock("", false);
if (clk > 0) {
tests[hits].ST = true;
// "0 0 1 " == clock auto, invert false, maxError 1.
// false = no verbose
// false = no emSearch
// 1 = Ask/Man
// st = true
LF: rework internal APIs
2020-09-28 17:50:20 +08:00
if ((ASKDemod_ext(0, 0, 1, 0, false, false, false, 1, &tests[hits].ST) == PM3_SUCCESS) && test(DEMOD_ASK, &tests[hits].offset, &bitRate, clk, &tests[hits].Q5)) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
tests[hits].modulation = DEMOD_ASK;
tests[hits].bitrate = bitRate;
tests[hits].inverted = false;
tests[hits].block0 = PackBits(tests[hits].offset, 32, DemodBuffer);
T55xx DLMode Update
2019-09-14 12:13:55 +08:00
tests[hits].downlink_mode = downlink_mode;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
++hits;
}
tests[hits].ST = true;
// "0 0 1 " == clock auto, invert true, maxError 1.
// false = no verbose
// false = no emSearch
// 1 = Ask/Man
// st = true
LF: rework internal APIs
2020-09-28 17:50:20 +08:00
if ((ASKDemod_ext(0, 1, 1, 0, false, false, false, 1, &tests[hits].ST) == PM3_SUCCESS) && test(DEMOD_ASK, &tests[hits].offset, &bitRate, clk, &tests[hits].Q5)) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
tests[hits].modulation = DEMOD_ASK;
tests[hits].bitrate = bitRate;
tests[hits].inverted = true;
tests[hits].block0 = PackBits(tests[hits].offset, 32, DemodBuffer);
T55xx DLMode Update
2019-09-14 12:13:55 +08:00
tests[hits].downlink_mode = downlink_mode;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
++hits;
}
LF: rework internal APIs
2020-09-28 17:50:20 +08:00
if ((ASKbiphaseDemod(0, 0, 0, 2, false) == PM3_SUCCESS) && test(DEMOD_BI, &tests[hits].offset, &bitRate, clk, &tests[hits].Q5)) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
tests[hits].modulation = DEMOD_BI;
tests[hits].bitrate = bitRate;
tests[hits].inverted = false;
tests[hits].block0 = PackBits(tests[hits].offset, 32, DemodBuffer);
tests[hits].ST = false;
T55xx DLMode Update
2019-09-14 12:13:55 +08:00
tests[hits].downlink_mode = downlink_mode;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
++hits;
}
LF: rework internal APIs
2020-09-28 17:50:20 +08:00
if ((ASKbiphaseDemod(0, 0, 1, 2, false) == PM3_SUCCESS) && test(DEMOD_BIa, &tests[hits].offset, &bitRate, clk, &tests[hits].Q5)) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
tests[hits].modulation = DEMOD_BIa;
tests[hits].bitrate = bitRate;
tests[hits].inverted = true;
tests[hits].block0 = PackBits(tests[hits].offset, 32, DemodBuffer);
tests[hits].ST = false;
T55xx DLMode Update
2019-09-14 12:13:55 +08:00
tests[hits].downlink_mode = downlink_mode;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
++hits;
}
}
clk = GetNrzClock("", false);
if (clk > 8) { //clock of rf/8 is likely a false positive, so don't use it.
LF: rework internal APIs
2020-09-28 17:50:20 +08:00
if ((NRZrawDemod(0, 0, 1, false) == PM3_SUCCESS) && test(DEMOD_NRZ, &tests[hits].offset, &bitRate, clk, &tests[hits].Q5)) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
tests[hits].modulation = DEMOD_NRZ;
tests[hits].bitrate = bitRate;
tests[hits].inverted = false;
tests[hits].block0 = PackBits(tests[hits].offset, 32, DemodBuffer);
tests[hits].ST = false;
T55xx DLMode Update
2019-09-14 12:13:55 +08:00
tests[hits].downlink_mode = downlink_mode;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
++hits;
}
LF: rework internal APIs
2020-09-28 17:50:20 +08:00
if ((NRZrawDemod(0, 1, 1, false) == PM3_SUCCESS) && test(DEMOD_NRZ, &tests[hits].offset, &bitRate, clk, &tests[hits].Q5)) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
tests[hits].modulation = DEMOD_NRZ;
tests[hits].bitrate = bitRate;
tests[hits].inverted = true;
tests[hits].block0 = PackBits(tests[hits].offset, 32, DemodBuffer);
tests[hits].ST = false;
T55xx DLMode Update
2019-09-14 12:13:55 +08:00
tests[hits].downlink_mode = downlink_mode;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
++hits;
}
}
clk = GetPskClock("", false);
if (clk > 0) {
// allow undo
save_restoreGB(GRAPH_SAVE);
// skip first 160 samples to allow antenna to settle in (psk gets inverted occasionally otherwise)
CmdLtrim("160");
LF: rework internal APIs
2020-09-28 17:50:20 +08:00
if ((PSKDemod(0, 0, 6, false) == PM3_SUCCESS) && test(DEMOD_PSK1, &tests[hits].offset, &bitRate, clk, &tests[hits].Q5)) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
tests[hits].modulation = DEMOD_PSK1;
tests[hits].bitrate = bitRate;
tests[hits].inverted = false;
tests[hits].block0 = PackBits(tests[hits].offset, 32, DemodBuffer);
tests[hits].ST = false;
T55xx DLMode Update
2019-09-14 12:13:55 +08:00
tests[hits].downlink_mode = downlink_mode;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
++hits;
}
LF: rework internal APIs
2020-09-28 17:50:20 +08:00
if ((PSKDemod(0, 1, 6, false) == PM3_SUCCESS) && test(DEMOD_PSK1, &tests[hits].offset, &bitRate, clk, &tests[hits].Q5)) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
tests[hits].modulation = DEMOD_PSK1;
tests[hits].bitrate = bitRate;
tests[hits].inverted = true;
tests[hits].block0 = PackBits(tests[hits].offset, 32, DemodBuffer);
tests[hits].ST = false;
T55xx DLMode Update
2019-09-14 12:13:55 +08:00
tests[hits].downlink_mode = downlink_mode;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
++hits;
}
//ICEMAN: are these PSKDemod calls needed?
// PSK2 - needs a call to psk1TOpsk2.
LF: rework internal APIs
2020-09-28 17:50:20 +08:00
if (PSKDemod(0, 0, 6, false) == PM3_SUCCESS) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
psk1TOpsk2(DemodBuffer, DemodBufferLen);
make style
2019-03-10 07:00:59 +08:00
if (test(DEMOD_PSK2, &tests[hits].offset, &bitRate, clk, &tests[hits].Q5)) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
tests[hits].modulation = DEMOD_PSK2;
tests[hits].bitrate = bitRate;
tests[hits].inverted = false;
tests[hits].block0 = PackBits(tests[hits].offset, 32, DemodBuffer);
tests[hits].ST = false;
T55xx DLMode Update
2019-09-14 12:13:55 +08:00
tests[hits].downlink_mode = downlink_mode;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
++hits;
}
} // inverse waves does not affect this demod
// PSK3 - needs a call to psk1TOpsk2.
LF: rework internal APIs
2020-09-28 17:50:20 +08:00
if (PSKDemod(0, 0, 6, false) == PM3_SUCCESS) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
psk1TOpsk2(DemodBuffer, DemodBufferLen);
make style
2019-03-10 07:00:59 +08:00
if (test(DEMOD_PSK3, &tests[hits].offset, &bitRate, clk, &tests[hits].Q5)) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
tests[hits].modulation = DEMOD_PSK3;
tests[hits].bitrate = bitRate;
tests[hits].inverted = false;
tests[hits].block0 = PackBits(tests[hits].offset, 32, DemodBuffer);
tests[hits].ST = false;
T55xx DLMode Update
2019-09-14 12:13:55 +08:00
tests[hits].downlink_mode = downlink_mode;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
++hits;
}
} // inverse waves does not affect this demod
make style
2019-03-10 07:00:59 +08:00
//undo trim samples
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
save_restoreGB(GRAPH_RESTORE);
}
}
make style
2019-03-10 07:00:59 +08:00
if (hits == 1) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
config.modulation = tests[0].modulation;
config.bitrate = tests[0].bitrate;
config.inverted = tests[0].inverted;
config.offset = tests[0].offset;
config.block0 = tests[0].block0;
config.Q5 = tests[0].Q5;
config.ST = tests[0].ST;
T55xx DLMode Update
2019-09-14 12:13:55 +08:00
config.downlink_mode = downlink_mode;
lf t55 chk m (works again!). lf t55 config (prints correct pwd if used)
2020-08-21 20:10:32 +08:00
if (pwd != -1) {
config.usepwd = true;
config.pwd = pwd & 0xffffffff;
}
make style
2020-05-14 07:04:26 +08:00
Block0 source explicit in lf t55xx config and color coded
2020-12-09 06:54:29 +08:00
config.block0Status = autoDetect;
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
if (print_config)
printConfiguration(config);
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
return true;
}
bool retval = false;
make style
2019-03-10 07:00:59 +08:00
if (hits > 1) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
PrintAndLogEx(SUCCESS, "Found [%d] possible matches for modulation.", hits);
make style
2019-03-10 07:00:59 +08:00
for (int i = 0; i < hits; ++i) {
style
2019-09-19 16:54:34 +08:00
adjusting beahavior for auto detection
2019-09-16 02:30:05 +08:00
bool wanted = false;
if (wanted_conf > 0)
wanted = (wanted_conf == tests[i].block0);
style
2019-09-19 16:54:34 +08:00
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
retval = testKnownConfigBlock(tests[i].block0);
style
2019-09-19 16:54:34 +08:00
if (retval || wanted) {
make style
2019-03-10 07:00:59 +08:00
PrintAndLogEx(NORMAL, "--[%d]--------------- << selected this", i + 1);
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
config.modulation = tests[i].modulation;
config.bitrate = tests[i].bitrate;
config.inverted = tests[i].inverted;
config.offset = tests[i].offset;
config.block0 = tests[i].block0;
config.Q5 = tests[i].Q5;
config.ST = tests[i].ST;
T55xx DLMode Update
2019-09-14 12:13:55 +08:00
config.downlink_mode = tests[i].downlink_mode;
lf t55 chk m (works again!). lf t55 config (prints correct pwd if used)
2020-08-21 20:10:32 +08:00
if (pwd != -1) {
config.usepwd = true;
config.pwd = pwd & 0xffffffff;
}
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
} else {
make style
2019-03-10 07:00:59 +08:00
PrintAndLogEx(NORMAL, "--[%d]---------------", i + 1);
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
}
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
Block0 source explicit in lf t55xx config and color coded
2020-12-09 06:54:29 +08:00
config.block0Status = autoDetect;
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
if (print_config)
style
2019-09-19 16:54:34 +08:00
printConfiguration(tests[i]);
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
}
}
return retval;
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
changing {} style to match majority of previous style
2019-03-10 18:20:22 +08:00
bool testKnownConfigBlock(uint32_t block0) {
make style
2019-03-10 07:00:59 +08:00
switch (block0) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
case T55X7_DEFAULT_CONFIG_BLOCK:
case T55X7_RAW_CONFIG_BLOCK:
case T55X7_EM_UNIQUE_CONFIG_BLOCK:
case T55X7_FDXB_CONFIG_BLOCK:
fix #833 - missing some configblocks and spelling
2020-07-09 02:30:53 +08:00
case T55X7_FDXB_2_CONFIG_BLOCK:
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
case T55X7_HID_26_CONFIG_BLOCK:
case T55X7_PYRAMID_CONFIG_BLOCK:
case T55X7_INDALA_64_CONFIG_BLOCK:
case T55X7_INDALA_224_CONFIG_BLOCK:
case T55X7_GUARDPROXII_CONFIG_BLOCK:
case T55X7_VIKING_CONFIG_BLOCK:
fix #833 - missing some configblocks and spelling
2020-07-09 02:30:53 +08:00
case T55X7_NORALSY_CONFIG_BLOCK:
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
case T55X7_IOPROX_CONFIG_BLOCK:
case T55X7_PRESCO_CONFIG_BLOCK:
Add: new lua scripting support for some t55xx commands. core.t55xx_detect() - same as 'lf t55xx detect' core.t55xx_readblock() - read t55xx block, don't forget to run detect before. Returns actual blockdata.
2019-04-04 01:48:00 +08:00
case T55X7_NEDAP_64_CONFIG_BLOCK:
case T55X7_NEDAP_128_CONFIG_BLOCK:
fix #833 - missing some configblocks and spelling
2020-07-09 02:30:53 +08:00
case T55X7_VISA2000_CONFIG_BLOCK:
case T55X7_SECURAKEY_CONFIG_BLOCK:
make style
2020-08-13 18:25:04 +08:00
case T55X7_PAC_CONFIG_BLOCK:
case T55X7_VERICHIP_CONFIG_BLOCK:
fix #833 - missing some configblocks and spelling
2020-07-09 02:30:53 +08:00
case T55X7_KERI_CONFIG_BLOCK:
case T55X7_NEXWATCH_CONFIG_BLOCK:
case T55X7_JABLOTRON_CONFIG_BLOCK:
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
return true;
}
return false;
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
Add: new lua scripting support for some t55xx commands. core.t55xx_detect() - same as 'lf t55xx detect' core.t55xx_readblock() - read t55xx block, don't forget to run detect before. Returns actual blockdata.
2019-04-04 01:48:00 +08:00
bool GetT55xxBlockData(uint32_t *blockdata) {
if (DemodBufferLen == 0)
return false;
uint8_t idx = config.offset;
make style
2019-04-07 01:09:01 +08:00
Add: new lua scripting support for some t55xx commands. core.t55xx_detect() - same as 'lf t55xx detect' core.t55xx_readblock() - read t55xx block, don't forget to run detect before. Returns actual blockdata.
2019-04-04 01:48:00 +08:00
if (idx + 32 > DemodBufferLen) {
fix few printf arg types
2019-10-06 05:56:19 +08:00
PrintAndLogEx(WARNING, "The configured offset %d is too big. Possible offset: %zu)", idx, DemodBufferLen - 32);
Add: new lua scripting support for some t55xx commands. core.t55xx_detect() - same as 'lf t55xx detect' core.t55xx_readblock() - read t55xx block, don't forget to run detect before. Returns actual blockdata.
2019-04-04 01:48:00 +08:00
return false;
}
*blockdata = PackBits(0, 32, DemodBuffer + idx);
return true;
}
t55x7 save and restore eml/bin
2019-10-10 18:27:48 +08:00
void printT55xxBlock(uint8_t blockNum, bool page1) {
Add: new lua scripting support for some t55xx commands. core.t55xx_detect() - same as 'lf t55xx detect' core.t55xx_readblock() - read t55xx block, don't forget to run detect before. Returns actual blockdata.
2019-04-04 01:48:00 +08:00
uint32_t blockData = 0;
uint8_t bytes[4] = {0};
if (GetT55xxBlockData(&blockData) == false)
return;
num_to_bytes(blockData, 4, bytes);
make style
2019-10-13 06:48:26 +08:00
T55x7_SaveBlockData((page1) ? blockNum + 8 : blockNum, blockData);
t55x7 save and restore eml/bin
2019-10-10 18:27:48 +08:00
chg some printing of blocks
2019-09-16 02:46:21 +08:00
PrintAndLogEx(SUCCESS, " %02d | %08X | %s | %s", blockNum, blockData, sprint_bin(DemodBuffer + config.offset, 32), sprint_ascii(bytes, 4));
Add: new lua scripting support for some t55xx commands. core.t55xx_detect() - same as 'lf t55xx detect' core.t55xx_readblock() - read t55xx block, don't forget to run detect before. Returns actual blockdata.
2019-04-04 01:48:00 +08:00
}
use more static and fix [-Wmissing-prototypes]
2019-04-14 03:54:04 +08:00
static bool testModulation(uint8_t mode, uint8_t modread) {
make style
2019-03-10 07:00:59 +08:00
switch (mode) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
case DEMOD_FSK:
if (modread >= DEMOD_FSK1 && modread <= DEMOD_FSK2a) return true;
break;
case DEMOD_ASK:
if (modread == DEMOD_ASK) return true;
break;
case DEMOD_PSK1:
if (modread == DEMOD_PSK1) return true;
break;
case DEMOD_PSK2:
if (modread == DEMOD_PSK2) return true;
break;
case DEMOD_PSK3:
if (modread == DEMOD_PSK3) return true;
break;
case DEMOD_NRZ:
if (modread == DEMOD_NRZ) return true;
break;
case DEMOD_BI:
if (modread == DEMOD_BI) return true;
break;
case DEMOD_BIa:
if (modread == DEMOD_BIa) return true;
break;
default:
return false;
}
return false;
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
use more static and fix [-Wmissing-prototypes]
2019-04-14 03:54:04 +08:00
static bool testQ5Modulation(uint8_t mode, uint8_t modread) {
make style
2019-03-10 07:00:59 +08:00
switch (mode) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
case DEMOD_FSK:
if (modread >= 4 && modread <= 5) return true;
break;
case DEMOD_ASK:
if (modread == 0) return true;
break;
case DEMOD_PSK1:
if (modread == 1) return true;
break;
case DEMOD_PSK2:
if (modread == 2) return true;
break;
case DEMOD_PSK3:
if (modread == 3) return true;
break;
case DEMOD_NRZ:
if (modread == 7) return true;
break;
case DEMOD_BI:
if (modread == 6) return true;
break;
default:
return false;
}
return false;
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
use more static and fix [-Wmissing-prototypes]
2019-04-14 03:54:04 +08:00
static int convertQ5bitRate(uint8_t bitRateRead) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
uint8_t expected[] = {8, 16, 32, 40, 50, 64, 100, 128};
make style
2019-03-10 07:00:59 +08:00
for (int i = 0; i < 8; i++)
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
if (expected[i] == bitRateRead)
return i;
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
return -1;
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
use more static and fix [-Wmissing-prototypes]
2019-04-14 03:54:04 +08:00
static bool testQ5(uint8_t mode, uint8_t *offset, int *fndBitRate, uint8_t clk) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
make style
2019-03-10 07:00:59 +08:00
if (DemodBufferLen < 64) return false;
styles
2019-04-08 16:01:57 +08:00
make style
2019-03-10 07:00:59 +08:00
for (uint8_t idx = 28; idx < 64; idx++) {
styles
2019-04-08 16:01:57 +08:00
uint8_t si = idx;
make style
2019-03-10 07:00:59 +08:00
if (PackBits(si, 28, DemodBuffer) == 0x00) continue;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
make style
2019-03-10 07:00:59 +08:00
uint8_t safer = PackBits(si, 4, DemodBuffer);
si += 4; //master key
uint8_t resv = PackBits(si, 8, DemodBuffer);
si += 8;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
// 2nibble must be zeroed.
if (safer != 0x6 && safer != 0x9) continue;
make style
2019-03-10 07:00:59 +08:00
if (resv > 0x00) continue;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
//uint8_t pageSel = PackBits(si, 1, DemodBuffer); si += 1;
//uint8_t fastWrite = PackBits(si, 1, DemodBuffer); si += 1;
make style
2019-03-10 07:00:59 +08:00
si += 1 + 1;
int bitRate = PackBits(si, 6, DemodBuffer) * 2 + 2;
si += 6; //bit rate
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
if (bitRate > 128 || bitRate < 8) continue;
//uint8_t AOR = PackBits(si, 1, DemodBuffer); si += 1;
//uint8_t PWD = PackBits(si, 1, DemodBuffer); si += 1;
//uint8_t pskcr = PackBits(si, 2, DemodBuffer); si += 2; //could check psk cr
//uint8_t inverse = PackBits(si, 1, DemodBuffer); si += 1;
make style
2019-03-10 07:00:59 +08:00
si += 1 + 1 + 2 + 1;
uint8_t modread = PackBits(si, 3, DemodBuffer);
si += 3;
uint8_t maxBlk = PackBits(si, 3, DemodBuffer);
si += 3;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
//uint8_t ST = PackBits(si, 1, DemodBuffer); si += 1;
if (maxBlk == 0) continue;
style
2019-09-19 16:54:34 +08:00
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
//test modulation
if (!testQ5Modulation(mode, modread)) continue;
if (bitRate != clk) continue;
style
2019-09-19 16:54:34 +08:00
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
*fndBitRate = convertQ5bitRate(bitRate);
if (*fndBitRate < 0) continue;
style
2019-09-19 16:54:34 +08:00
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
*offset = idx;
return true;
}
return false;
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
use more static and fix [-Wmissing-prototypes]
2019-04-14 03:54:04 +08:00
static bool testBitRate(uint8_t readRate, uint8_t clk) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
uint8_t expected[] = {8, 16, 32, 40, 50, 64, 100, 128};
if (expected[readRate] == clk)
return true;
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
return false;
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
changing {} style to match majority of previous style
2019-03-10 18:20:22 +08:00
bool test(uint8_t mode, uint8_t *offset, int *fndBitRate, uint8_t clk, bool *Q5) {
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
make style
2019-03-10 07:00:59 +08:00
if (DemodBufferLen < 64) return false;
for (uint8_t idx = 28; idx < 64; idx++) {
Reduce some var scopes
2019-06-08 00:41:39 +08:00
uint8_t si = idx;
make style
2019-03-10 07:00:59 +08:00
if (PackBits(si, 28, DemodBuffer) == 0x00) continue;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
make style
2019-03-10 07:00:59 +08:00
uint8_t safer = PackBits(si, 4, DemodBuffer);
si += 4; //master key
uint8_t resv = PackBits(si, 4, DemodBuffer);
si += 4; //was 7 & +=7+3 //should be only 4 bits if extended mode
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
// 2nibble must be zeroed.
// moved test to here, since this gets most faults first.
make style
2019-03-10 07:00:59 +08:00
if (resv > 0x00) continue;
int bitRate = PackBits(si, 6, DemodBuffer);
si += 6; //bit rate (includes extended mode part of rate)
uint8_t extend = PackBits(si, 1, DemodBuffer);
si += 1; //bit 15 extended mode
uint8_t modread = PackBits(si, 5, DemodBuffer);
si += 5 + 2 + 1;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
//uint8_t pskcr = PackBits(si, 2, DemodBuffer); si += 2+1; //could check psk cr
//uint8_t nml01 = PackBits(si, 1, DemodBuffer); si += 1+5; //bit 24, 30, 31 could be tested for 0 if not extended mode
//uint8_t nml02 = PackBits(si, 2, DemodBuffer); si += 2;
//if extended mode
make style
2019-03-10 07:00:59 +08:00
bool extMode = ((safer == 0x6 || safer == 0x9) && extend) ? true : false;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
make style
2019-03-10 07:00:59 +08:00
if (!extMode) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
if (bitRate > 7) continue;
if (!testBitRate(bitRate, clk)) continue;
} else { //extended mode bitrate = same function to calc bitrate as em4x05
if (EM4x05_GET_BITRATE(bitRate) != clk) continue;
}
//test modulation
if (!testModulation(mode, modread)) continue;
*fndBitRate = bitRate;
*offset = idx;
*Q5 = false;
return true;
}
if (testQ5(mode, offset, fndBitRate, clk)) {
*Q5 = true;
return true;
}
return false;
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
lf t55xx special - now uses cliparser
2021-01-29 23:06:26 +08:00
int CmdT55xxSpecial(const char *Cmd) {
CLIParserContext *ctx;
CLIParserInit(&ctx, "lf t55xx special",
"Show block changes with 64 different offsets, data taken from Demod buffer.",
"lf t55xx special\n"
);
void *argtable[] = {
arg_param_begin,
arg_param_end
};
CLIExecWithReturn(ctx, Cmd, argtable, true);
CLIParserFree(ctx);
styles
2019-04-08 16:01:57 +08:00
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
uint8_t bits[32] = {0x00};
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
PrintAndLogEx(NORMAL, "OFFSET | DATA | BINARY | ASCII");
PrintAndLogEx(NORMAL, "-------+-------+-------------------------------------+------");
make style
2019-03-10 07:00:59 +08:00
int i, j = 0;
for (; j < 64; ++j) {
remove spurious spaces & tabs at end of lines
2019-03-09 15:59:13 +08:00
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
for (i = 0; i < 32; ++i)
make style
2019-03-10 07:00:59 +08:00
bits[i] = DemodBuffer[j + i];
remove spurious spaces & tabs at end of lines
2019-03-09 15:59:13 +08:00
styles
2019-04-08 16:01:57 +08:00
uint32_t blockData = PackBits(0, 32, bits);
remove spurious spaces & tabs at end of lines
2019-03-09 15:59:13 +08:00
make style
2019-03-10 07:00:59 +08:00
PrintAndLogEx(NORMAL, "%02d | 0x%08X | %s", j, blockData, sprint_bin(bits, 32));
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
}
chg: cmdlft55xx return codes
2019-05-22 20:48:23 +08:00
return PM3_SUCCESS;
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
changing {} style to match majority of previous style
2019-03-10 18:20:22 +08:00
int printConfiguration(t55xx_conf_block_t b) {
textual Q5
2020-08-28 21:53:34 +08:00
PrintAndLogEx(INFO, " Chip Type : " _GREEN_("%s"), (b.Q5) ? "Q5/T5555" : "T55x7");
textual
2020-05-11 17:45:45 +08:00
PrintAndLogEx(INFO, " Modulation : " _GREEN_("%s"), GetSelectedModulationStr(b.modulation));
PrintAndLogEx(INFO, " Bit Rate : %s", GetBitRateStr(b.bitrate, (b.block0 & T55x7_X_MODE && (b.block0 >> 28 == 6 || b.block0 >> 28 == 9))));
PrintAndLogEx(INFO, " Inverted : %s", (b.inverted) ? _GREEN_("Yes") : "No");
PrintAndLogEx(INFO, " Offset : %d", b.offset);
PrintAndLogEx(INFO, " Seq. Term. : %s", (b.ST) ? _GREEN_("Yes") : "No");
Block0 source explicit in lf t55xx config and color coded
2020-12-09 06:54:29 +08:00
PrintAndLogEx(INFO, " Block0 : 0x%08X %s", b.block0, GetConfigBlock0Source(b.block0Status));
textual
2020-05-11 17:45:45 +08:00
PrintAndLogEx(INFO, " Downlink Mode : %s", GetDownlinkModeStr(b.downlink_mode));
PrintAndLogEx(INFO, " Password Set : %s", (b.usepwd) ? _RED_("Yes") : _GREEN_("No"));
if (b.usepwd) {
PrintAndLogEx(INFO, " Password : %08X", b.pwd);
}
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
PrintAndLogEx(NORMAL, "");
chg: cmdlft55xx return codes
2019-05-22 20:48:23 +08:00
return PM3_SUCCESS;
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
Rework Cmd exposed API, use more static and fix [-Wmissing-prototypes], ongoing...
2019-04-12 08:07:11 +08:00
static int CmdT55xxWakeUp(const char *Cmd) {
lf t55xx wakeup - now uses cliparser
2021-02-05 15:58:19 +08:00
CLIParserContext *ctx;
CLIParserInit(&ctx, "lf t55xx wakeup",
"This commands sends the Answer-On-Request command and leaves the readerfield ON afterwards",
"lf t55xx wakeup -p 11223344 --> send wakeup with password\n"
);
// 3 + (5 or 6)
void *argtable[8] = {
arg_param_begin,
arg_str1("p", "pwd", "<hex>", "password (4 hex bytes)"),
arg_lit0("v", "verbose", "verbose output"),
};
uint8_t idx = 3;
arg_add_t55xx_downloadlink(argtable, &idx, T55XX_DLMODE_SINGLE, config.downlink_mode);
CLIExecWithReturn(ctx, Cmd, argtable, true);
make style
2019-07-24 05:43:30 +08:00
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
uint32_t password = 0;
lf t55xx wakeup - now uses cliparser
2021-02-05 15:58:19 +08:00
int res = arg_get_u32_hexstr_def(ctx, 1, 0, &password);
if (res == 0 || res == 2) {
PrintAndLogEx(ERR, "Password should be 4 hex bytes");
CLIParserFree(ctx);
return PM3_EINVARG;
}
Added T55 downlink mode support
2019-07-23 07:50:28 +08:00
lf t55xx wakeup - now uses cliparser
2021-02-05 15:58:19 +08:00
bool verbose = arg_get_lit(ctx, 2);
bool r0 = arg_get_lit(ctx, 3);
bool r1 = arg_get_lit(ctx, 4);
bool r2 = arg_get_lit(ctx, 5);
bool r3 = arg_get_lit(ctx, 6);
CLIParserFree(ctx);
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
lf t55xx wakeup - now uses cliparser
2021-02-05 15:58:19 +08:00
if ((r0 + r1 + r2 + r3) > 1) {
PrintAndLogEx(FAILED, "Error multiple downlink encoding");
return PM3_EINVARG;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
}
Added T55 downlink mode support
2019-07-23 07:50:28 +08:00
lf t55xx wakeup - now uses cliparser
2021-02-05 15:58:19 +08:00
uint8_t downlink_mode = config.downlink_mode;
if (r0)
downlink_mode = refFixedBit;
else if (r1)
downlink_mode = refLongLeading;
else if (r2)
downlink_mode = refLeading0;
else if (r3)
downlink_mode = ref1of4;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
chg: 'lf t55xx wipe p' - now takes a password for wipe chg: 'lf t55xx wakeup' - uses NG
2019-09-13 03:20:40 +08:00
struct p {
uint32_t password;
uint8_t flags;
} PACKED payload;
style
2019-09-13 22:32:37 +08:00
chg: 'lf t55xx wipe p' - now takes a password for wipe chg: 'lf t55xx wakeup' - uses NG
2019-09-13 03:20:40 +08:00
payload.password = password;
lf t55xx wakeup - now uses cliparser
2021-02-05 15:58:19 +08:00
payload.flags = (downlink_mode << 3);
style
2019-09-13 22:32:37 +08:00
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
clearCommandBuffer();
chg: 'lf t55xx wipe p' - now takes a password for wipe chg: 'lf t55xx wakeup' - uses NG
2019-09-13 03:20:40 +08:00
SendCommandNG(CMD_LF_T55XX_WAKEUP, (uint8_t *)&payload, sizeof(payload));
lf t55xx wakeup - now uses cliparser
2021-02-05 15:58:19 +08:00
if (WaitForResponseTimeout(CMD_LF_T55XX_WAKEUP, NULL, 1000) == false) {
chg: 'lf t55xx wipe p' - now takes a password for wipe chg: 'lf t55xx wakeup' - uses NG
2019-09-13 03:20:40 +08:00
PrintAndLogEx(WARNING, "command execution time out");
return PM3_ETIMEOUT;
}
style
2019-09-13 22:32:37 +08:00
lf t55xx wakeup - now uses cliparser
2021-02-05 15:58:19 +08:00
if (verbose)
Detect with wakeup Detect with wake option to address init deley or AOR set.
2020-11-08 18:03:33 +08:00
PrintAndLogEx(SUCCESS, "Wake up command sent. Try read now");
chg: cmdlft55xx return codes
2019-05-22 20:48:23 +08:00
return PM3_SUCCESS;
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
Rework Cmd exposed API, use more static and fix [-Wmissing-prototypes], ongoing...
2019-04-12 08:07:11 +08:00
static int CmdT55xxWriteBlock(const char *Cmd) {
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
uint8_t block = 0xFF; // default to invalid block
uint32_t data = 0; // default to blank Block
uint32_t password = 0; // default to blank Block 7
bool usepwd = false;
bool page1 = false;
bool gotdata = false;
bool testMode = false;
bool errors = false;
chg: 'lf t55 write v' - validation of data. After a write, the command tries to read the block and see if it matches the data entered. This can fail because of password, not correct configuration settings before. Also validating a block0 write is harder, some modulations are not that perfect. This is however a nice step forward.
2019-09-14 03:25:39 +08:00
bool validate = false;
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
uint8_t cmdp = 0;
redundant
2020-05-12 16:30:14 +08:00
uint32_t downlink_mode = config.downlink_mode;
make style
2019-07-24 05:43:30 +08:00
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
while (param_getchar(Cmd, cmdp) != 0x00 && !errors) {
switch (tolower(param_getchar(Cmd, cmdp))) {
make style
2019-03-10 07:00:59 +08:00
case 'h':
return usage_t55xx_write();
case 'b':
errors |= param_getdec(Cmd, cmdp + 1, &block);
cmdp += 2;
chg: lf em 410x_sim - reworked to NG\n chg: lf em 410x_demod - now can demod the simulation data.
2019-05-22 20:32:30 +08:00
chg: lf t55xx write - now uses NG frames.
2019-05-13 19:23:53 +08:00
if (block > 7) {
PrintAndLogEx(WARNING, "Block number must be between 0 and 7");
errors = true;
}
make style
2019-03-10 07:00:59 +08:00
break;
case 'd':
data = param_get32ex(Cmd, cmdp + 1, 0, 16);
gotdata = true;
cmdp += 2;
break;
case 'p':
password = param_get32ex(Cmd, cmdp + 1, 0, 16);
usepwd = true;
cmdp += 2;
break;
case 't':
testMode = true;
cmdp++;
break;
case '1':
page1 = true;
cmdp++;
break;
make style
2019-07-24 05:43:30 +08:00
case 'r':
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
downlink_mode = param_get8ex(Cmd, cmdp + 1, 0, 10);
if (downlink_mode > 3)
downlink_mode = 0;
style
2019-09-13 22:32:37 +08:00
make style
2019-07-24 05:43:30 +08:00
cmdp += 2;
break;
chg: 'lf t55 write v' - validation of data. After a write, the command tries to read the block and see if it matches the data entered. This can fail because of password, not correct configuration settings before. Also validating a block0 write is harder, some modulations are not that perfect. This is however a nice step forward.
2019-09-14 03:25:39 +08:00
case 'v':
validate = true;
cmdp++;
break;
make style
2019-03-10 07:00:59 +08:00
default:
PrintAndLogEx(WARNING, "Unknown parameter '%c'", param_getchar(Cmd, cmdp));
errors = true;
break;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
}
}
if (errors || !gotdata) return usage_t55xx_write();
char pwdStr[16] = {0};
snprintf(pwdStr, sizeof(pwdStr), "pwd: 0x%08X", password);
make style
2019-03-10 07:00:59 +08:00
PrintAndLogEx(INFO, "Writing page %d block: %02d data: 0x%08X %s", page1, block, data, (usepwd) ? pwdStr : "");
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
style
2019-09-19 16:54:34 +08:00
if (t55xxWrite(block, page1, usepwd, testMode, password, downlink_mode, data) != PM3_SUCCESS) {
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
PrintAndLogEx(ERR, "Write failed");
return PM3_ESOFT;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
}
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
chg: 'lf t55 write v' - validation of data. After a write, the command tries to read the block and see if it matches the data entered. This can fail because of password, not correct configuration settings before. Also validating a block0 write is harder, some modulations are not that perfect. This is however a nice step forward.
2019-09-14 03:25:39 +08:00
if (validate) {
bool isOK = t55xxVerifyWrite(block, page1, usepwd, 1, password, downlink_mode, data);
style
2019-09-19 16:54:34 +08:00
if (isOK)
Fix typos Thanks to Debian lintian for the reports: I: proxmark3: spelling-error-in-binary usr/share/proxmark3/firmware/fullimage.elf dont don't I: proxmark3: spelling-error-in-binary usr/share/proxmark3/firmware/fullimage.elf succesful successful I: proxmark3: spelling-error-in-binary usr/share/proxmark3/firmware/fullimage.elf Uknown Unknown I: proxmark3: spelling-error-in-binary usr/share/proxmark3/firmware/fullimage.elf requestes requests I: proxmark3: spelling-error-in-binary usr/share/proxmark3/firmware/fullimage.elf unkown unknown I: proxmark3: spelling-error-in-binary usr/share/proxmark3/firmware/fullimage.elf ambigous ambiguous
2019-09-14 23:50:58 +08:00
PrintAndLogEx(SUCCESS, "Write OK, validation successful");
chg: 'lf t55 write v' - validation of data. After a write, the command tries to read the block and see if it matches the data entered. This can fail because of password, not correct configuration settings before. Also validating a block0 write is harder, some modulations are not that perfect. This is however a nice step forward.
2019-09-14 03:25:39 +08:00
else
PrintAndLogEx(WARNING, "Write could not validate the written data");
}
style
2019-09-19 16:54:34 +08:00
chg: cmdlft55xx return codes
2019-05-22 20:48:23 +08:00
return PM3_SUCCESS;
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
Update cmdlft55xx.c
2019-10-10 19:07:57 +08:00
static int CmdT55xxDangerousRaw(const char *Cmd) {
// supports only default downlink mode
t55xx_test_block_t ng;
ng.time = 0;
ng.bitlen = 0;
memset(ng.data, 0x00, sizeof(ng.data));
bool errors = false;
uint8_t cmdp = 0;
while (param_getchar(Cmd, cmdp) != 0x00 && !errors) {
switch (tolower(param_getchar(Cmd, cmdp))) {
usage
2019-10-13 07:21:59 +08:00
case 'h':
return usage_t55xx_dangerraw();
Update cmdlft55xx.c
2019-10-10 19:07:57 +08:00
case 't':
ng.time = param_get32ex(Cmd, cmdp + 1, 0, 10);
if (ng.time == 0 || ng.time > 200000) {
PrintAndLogEx(ERR, "Timing off 1..200000 limits, got %i", ng.time);
errors = true;
break;
}
cmdp += 2;
break;
case 'b': {
uint32_t n = param_getlength(Cmd, cmdp + 1);
if (n > 128) {
PrintAndLogEx(ERR, "Bitstream too long, max 128 bits, got %i", n);
errors = true;
break;
}
for (uint8_t i = 0; i < n; i++) {
char c = param_getchar_indx(Cmd, i, cmdp + 1);
if (c == '0')
ng.data[i] = 0;
else if (c == '1')
ng.data[i] = 1;
else {
PrintAndLogEx(ERR, "Unknown bit char '%c'", c);
errors = true;
break;
}
}
ng.bitlen = n;
cmdp += 2;
break;
}
default:
PrintAndLogEx(ERR, "Unknown parameter '%c'", param_getchar(Cmd, cmdp));
errors = true;
break;
}
}
if (errors || ng.bitlen == 0 || ng.time == 0) {
usage
2019-10-13 07:21:59 +08:00
return usage_t55xx_dangerraw();
Update cmdlft55xx.c
2019-10-10 19:07:57 +08:00
}
PacketResponseNG resp;
clearCommandBuffer();
SendCommandNG(CMD_LF_T55XX_DANGERRAW, (uint8_t *)&ng, sizeof(ng));
if (!WaitForResponseTimeout(CMD_LF_T55XX_DANGERRAW, &resp, 2000)) {
PrintAndLogEx(ERR, "Error occurred, device did not ACK write operation.");
return PM3_ETIMEOUT;
}
return resp.status;
}
Rework Cmd exposed API, use more static and fix [-Wmissing-prototypes], ongoing...
2019-04-12 08:07:11 +08:00
static int CmdT55xxReadTrace(const char *Cmd) {
make style
2019-07-24 05:43:30 +08:00
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
bool frombuff = false;
redundant
2020-05-12 16:30:14 +08:00
uint8_t downlink_mode = config.downlink_mode;
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
uint8_t cmdp = 0;
bool errors = false;
T55xx DLMode Update
2019-09-14 12:13:55 +08:00
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
while (param_getchar(Cmd, cmdp) != 0x00 && !errors) {
switch (tolower(param_getchar(Cmd, cmdp))) {
case 'h':
return usage_t55xx_trace();
case 'r':
downlink_mode = param_get8ex(Cmd, cmdp + 1, 0, 10);
style
2019-09-13 22:32:37 +08:00
if (downlink_mode > 3)
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
downlink_mode = 0;
style
2019-09-13 22:32:37 +08:00
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
cmdp += 2;
break;
case '1':
frombuff = true;
cmdp += 2;
break;
default:
PrintAndLogEx(WARNING, "Unknown parameter '%c'", param_getchar(Cmd, cmdp));
errors = true;
break;
}
make style
2019-07-24 05:43:30 +08:00
}
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
if (errors) return usage_t55xx_trace();
if (!frombuff) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
// sanity check.
chg: lf t55 - fixes / read block uses NG
2019-05-22 23:59:39 +08:00
if (SanityOfflineCheck(false) != PM3_SUCCESS) return PM3_ENODATA;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
styles
2019-04-08 16:01:57 +08:00
bool pwdmode = false;
uint32_t password = 0;
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
// REGULAR_READ_MODE_BLOCK - yeilds correct Page 1 Block 2 data i.e. + 32 bit offset.
Update cmdlft55xx.c
2019-10-10 19:07:57 +08:00
if (!AcquireData(T55x7_PAGE1, REGULAR_READ_MODE_BLOCK, pwdmode, password, downlink_mode))
chg: cmdlft55xx return codes
2019-05-22 20:48:23 +08:00
return PM3_ENODATA;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
}
style
2019-09-13 22:32:37 +08:00
make style
2019-03-10 07:00:59 +08:00
if (config.Q5) {
chg: cmdlft55xx return codes
2019-05-22 20:48:23 +08:00
if (!DecodeT5555TraceBlock()) return PM3_ESOFT;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
} else {
chg: cmdlft55xx return codes
2019-05-22 20:48:23 +08:00
if (!DecodeT55xxBlock()) return PM3_ESOFT;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
}
chg: cmdlft55xx return codes
2019-05-22 20:48:23 +08:00
if (!DemodBufferLen) return PM3_ESOFT;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
RepaintGraphWindow();
uint8_t repeat = (config.offset > 5) ? 32 : 0;
uint8_t si = config.offset + repeat;
uint32_t bl1 = PackBits(si, 32, DemodBuffer);
make style
2019-03-10 07:00:59 +08:00
uint32_t bl2 = PackBits(si + 32, 32, DemodBuffer);
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
if (config.Q5) {
make style
2019-03-10 07:00:59 +08:00
uint32_t hdr = PackBits(si, 9, DemodBuffer);
si += 9;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
if (hdr != 0x1FF) {
textual Q5
2020-08-28 21:53:34 +08:00
PrintAndLogEx(FAILED, "Invalid Q5/T5555 Trace data header (expected 0x1FF, found %X)", hdr);
chg: cmdlft55xx return codes
2019-05-22 20:48:23 +08:00
return PM3_ESOFT;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
}
make style
2019-03-10 07:00:59 +08:00
t5555_tracedata_t data = {.bl1 = bl1, .bl2 = bl2, .icr = 0, .lotidc = '?', .lotid = 0, .wafer = 0, .dw = 0};
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
make style
2019-03-10 07:00:59 +08:00
data.icr = PackBits(si, 2, DemodBuffer);
si += 2;
data.lotidc = 'Z' - PackBits(si, 2, DemodBuffer);
si += 3;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
make style
2019-03-10 07:00:59 +08:00
data.lotid = PackBits(si, 4, DemodBuffer);
si += 5;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
data.lotid <<= 4;
make style
2019-03-10 07:00:59 +08:00
data.lotid |= PackBits(si, 4, DemodBuffer);
si += 5;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
data.lotid <<= 4;
make style
2019-03-10 07:00:59 +08:00
data.lotid |= PackBits(si, 4, DemodBuffer);
si += 5;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
data.lotid <<= 4;
make style
2019-03-10 07:00:59 +08:00
data.lotid |= PackBits(si, 4, DemodBuffer);
si += 5;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
data.lotid <<= 1;
make style
2019-03-10 07:00:59 +08:00
data.lotid |= PackBits(si, 1, DemodBuffer);
si += 1;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
make style
2019-03-10 07:00:59 +08:00
data.wafer = PackBits(si, 3, DemodBuffer);
si += 4;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
data.wafer <<= 2;
make style
2019-03-10 07:00:59 +08:00
data.wafer |= PackBits(si, 2, DemodBuffer);
si += 2;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
make style
2019-03-10 07:00:59 +08:00
data.dw = PackBits(si, 2, DemodBuffer);
si += 3;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
data.dw <<= 4;
make style
2019-03-10 07:00:59 +08:00
data.dw |= PackBits(si, 4, DemodBuffer);
si += 5;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
data.dw <<= 4;
make style
2019-03-10 07:00:59 +08:00
data.dw |= PackBits(si, 4, DemodBuffer);
si += 5;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
data.dw <<= 4;
make style
2019-03-10 07:00:59 +08:00
data.dw |= PackBits(si, 4, DemodBuffer);
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
printT5555Trace(data, repeat);
} else {
t55x7_tracedata_t data = {.bl1 = bl1, .bl2 = bl2, .acl = 0, .mfc = 0, .cid = 0, .year = 0, .quarter = 0, .icr = 0, .lotid = 0, .wafer = 0, .dw = 0};
make style
2019-03-10 07:00:59 +08:00
data.acl = PackBits(si, 8, DemodBuffer);
si += 8;
if (data.acl != 0xE0) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
PrintAndLogEx(FAILED, "The modulation is most likely wrong since the ACL is not 0xE0. ");
chg: cmdlft55xx return codes
2019-05-22 20:48:23 +08:00
return PM3_ESOFT;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
}
make style
2019-03-10 07:00:59 +08:00
data.mfc = PackBits(si, 8, DemodBuffer);
si += 8;
data.cid = PackBits(si, 5, DemodBuffer);
si += 5;
data.icr = PackBits(si, 3, DemodBuffer);
si += 3;
data.year = PackBits(si, 4, DemodBuffer);
si += 4;
data.quarter = PackBits(si, 2, DemodBuffer);
si += 2;
data.lotid = PackBits(si, 14, DemodBuffer);
si += 14;
data.wafer = PackBits(si, 5, DemodBuffer);
si += 5;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
data.dw = PackBits(si, 15, DemodBuffer);
times times times
2019-04-13 09:01:31 +08:00
struct tm *ct, tm_buf;
time_t now = time(NULL);
#if defined(_WIN32)
ct = localtime_s(&tm_buf, &now) == 0 ? &tm_buf : NULL;
#else
ct = localtime_r(&now, &tm_buf);
style
2019-04-14 19:37:53 +08:00
#endif
times times times
2019-04-13 09:01:31 +08:00
if (data.year > ct->tm_year - 110)
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
data.year += 2000;
else
data.year += 2010;
printT55x7Trace(data, repeat);
}
chg: cmdlft55xx return codes
2019-05-22 20:48:23 +08:00
return PM3_SUCCESS;
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
changing {} style to match majority of previous style
2019-03-10 18:20:22 +08:00
void printT55x7Trace(t55x7_tracedata_t data, uint8_t repeat) {
textual Q5
2020-08-28 21:53:34 +08:00
PrintAndLogEx(NORMAL, "--- " _CYAN_("T55x7 Trace Information") " ----------------------------------");
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
PrintAndLogEx(NORMAL, "-------------------------------------------------------------");
PrintAndLogEx(NORMAL, " ACL Allocation class (ISO/IEC 15963-1) : 0x%02X (%d)", data.acl, data.acl);
PrintAndLogEx(NORMAL, " MFC Manufacturer ID (ISO/IEC 7816-6) : 0x%02X (%d) - %s", data.mfc, data.mfc, getTagInfo(data.mfc));
PrintAndLogEx(NORMAL, " CID : 0x%02X (%d) - %s", data.cid, data.cid, GetModelStrFromCID(data.cid));
make style
2019-03-10 07:00:59 +08:00
PrintAndLogEx(NORMAL, " ICR IC Revision : %d", data.icr);
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
PrintAndLogEx(NORMAL, " Manufactured");
PrintAndLogEx(NORMAL, " Year/Quarter : %d/%d", data.year, data.quarter);
make style
2019-03-10 07:00:59 +08:00
PrintAndLogEx(NORMAL, " Lot ID : %d", data.lotid);
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
PrintAndLogEx(NORMAL, " Wafer number : %d", data.wafer);
PrintAndLogEx(NORMAL, " Die Number : %d", data.dw);
PrintAndLogEx(NORMAL, "-------------------------------------------------------------");
PrintAndLogEx(NORMAL, " Raw Data - Page 1");
make style
2019-03-10 07:00:59 +08:00
PrintAndLogEx(NORMAL, " Block 1 : 0x%08X %s", data.bl1, sprint_bin(DemodBuffer + config.offset + repeat, 32));
PrintAndLogEx(NORMAL, " Block 2 : 0x%08X %s", data.bl2, sprint_bin(DemodBuffer + config.offset + repeat + 32, 32));
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
PrintAndLogEx(NORMAL, "-------------------------------------------------------------");
/*
make style
2019-10-13 06:48:26 +08:00
Trace info.
M1, M2 has the about ATMEL defintion of trace data.
M3 has unique format following industry defacto standard with row/col parity
t5577-M3 ATMEL info, thanks @doegox
2019-10-08 17:49:23 +08:00
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
TRACE - BLOCK O
Bits Definition HEX
1-8 ACL Allocation class (ISO/IEC 15963-1) 0xE0
9-16 MFC Manufacturer ID (ISO/IEC 7816-6) 0x15 Atmel Corporation
t5577-M3 ATMEL info, thanks @doegox
2019-10-08 17:49:23 +08:00
17-21 CID 0x1 = Atmel ATA5577M1
0x2 = Atmel ATA5577M2
0x3 = Atmel ATA5577M3
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
22-24 ICR IC revision
25-28 YEAR (BCD encoded) 9 (= 2009)
29-30 QUARTER 1,2,3,4
31-32 LOT ID
TRACE - BLOCK 1
1-12 LOT ID
13-17 Wafer number
18-32 DW, die number sequential
make style
2019-10-13 06:48:26 +08:00
t5577-M3 ATMEL info, thanks @doegox
2019-10-08 17:49:23 +08:00
Startup times (FC)
make style
2019-10-13 06:48:26 +08:00
M1, M2 = 192
M3 = 128
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
*/
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
changing {} style to match majority of previous style
2019-03-10 18:20:22 +08:00
void printT5555Trace(t5555_tracedata_t data, uint8_t repeat) {
textual Q5
2020-08-28 21:53:34 +08:00
PrintAndLogEx(NORMAL, "--- " _CYAN_("Q5/T5555 Trace Information") " ---------------------------");
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
PrintAndLogEx(NORMAL, "-------------------------------------------------------------");
make style
2019-03-10 07:00:59 +08:00
PrintAndLogEx(NORMAL, " ICR IC Revision : %d", data.icr);
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
PrintAndLogEx(NORMAL, " Lot : %c%d", data.lotidc, data.lotid);
PrintAndLogEx(NORMAL, " Wafer number : %d", data.wafer);
PrintAndLogEx(NORMAL, " Die Number : %d", data.dw);
PrintAndLogEx(NORMAL, "-------------------------------------------------------------");
PrintAndLogEx(NORMAL, " Raw Data - Page 1");
make style
2019-03-10 07:00:59 +08:00
PrintAndLogEx(NORMAL, " Block 1 : 0x%08X %s", data.bl1, sprint_bin(DemodBuffer + config.offset + repeat, 32));
PrintAndLogEx(NORMAL, " Block 2 : 0x%08X %s", data.bl2, sprint_bin(DemodBuffer + config.offset + repeat + 32, 32));
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
/*
** Q5 **
TRACE - BLOCK O and BLOCK1
Bits Definition HEX
1-9 Header 0x1FF
10-11 IC Revision
12-13 Lot ID char
15-35 Lot ID (NB parity)
36-41 Wafer number (NB parity)
42-58 DW, die number sequential (NB parity)
60-63 Parity bits
64 Always zero
*/
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
Chg: 'lf t55xx info' - now prints if its a known config block
2019-04-02 16:33:25 +08:00
static void printT5x7KnownBlock0(uint32_t b0) {
make style
2019-04-03 04:32:45 +08:00
Chg: 'lf t55xx info' - now prints if its a known config block
2019-04-02 16:33:25 +08:00
char s[40];
memset(s, 0, sizeof(s));
make style
2019-04-03 04:32:45 +08:00
switch (b0) {
Chg: 'lf t55xx info' - now prints if its a known config block
2019-04-02 16:33:25 +08:00
case T55X7_DEFAULT_CONFIG_BLOCK:
make style
2019-04-03 04:32:45 +08:00
snprintf(s, sizeof(s) - strlen(s), "T55x7 Default ");
Chg: 'lf t55xx info' - now prints if its a known config block
2019-04-02 16:33:25 +08:00
break;
case T55X7_RAW_CONFIG_BLOCK:
make style
2019-04-03 04:32:45 +08:00
snprintf(s + strlen(s), sizeof(s) - strlen(s), "T55x7 Raw ");
Chg: 'lf t55xx info' - now prints if its a known config block
2019-04-02 16:33:25 +08:00
break;
case T55X7_EM_UNIQUE_CONFIG_BLOCK:
chg: 'lf t55xx info' - text layout
2019-04-05 02:06:15 +08:00
snprintf(s + strlen(s), sizeof(s) - strlen(s), "EM unique, Paxton ");
Chg: 'lf t55xx info' - now prints if its a known config block
2019-04-02 16:33:25 +08:00
break;
lf t55 configblock detection updated
2020-07-08 19:41:38 +08:00
case T55X7_FDXB_2_CONFIG_BLOCK:
Chg: 'lf t55xx info' - now prints if its a known config block
2019-04-02 16:33:25 +08:00
case T55X7_FDXB_CONFIG_BLOCK:
make style
2019-04-03 04:32:45 +08:00
snprintf(s + strlen(s), sizeof(s) - strlen(s), "FDXB ");
Chg: 'lf t55xx info' - now prints if its a known config block
2019-04-02 16:33:25 +08:00
break;
case T55X7_HID_26_CONFIG_BLOCK:
chg 'lf t55xx info' - detection of t55x7 configuration blocks
2020-07-09 00:04:51 +08:00
snprintf(s + strlen(s), sizeof(s) - strlen(s), "HID 26b (ProxCard), Paradox, AWID ");
Chg: 'lf t55xx info' - now prints if its a known config block
2019-04-02 16:33:25 +08:00
break;
case T55X7_PYRAMID_CONFIG_BLOCK:
make style
2019-04-03 04:32:45 +08:00
snprintf(s + strlen(s), sizeof(s) - strlen(s), "Pyramid ");
Chg: 'lf t55xx info' - now prints if its a known config block
2019-04-02 16:33:25 +08:00
break;
case T55X7_INDALA_64_CONFIG_BLOCK:
chg 'lf t55xx info' - detection of t55x7 configuration blocks
2020-07-09 00:04:51 +08:00
snprintf(s + strlen(s), sizeof(s) - strlen(s), "Indala 64, Motorola");
Chg: 'lf t55xx info' - now prints if its a known config block
2019-04-02 16:33:25 +08:00
break;
case T55X7_INDALA_224_CONFIG_BLOCK:
make style
2019-04-03 04:32:45 +08:00
snprintf(s + strlen(s), sizeof(s) - strlen(s), "Indala 224 ");
Chg: 'lf t55xx info' - now prints if its a known config block
2019-04-02 16:33:25 +08:00
break;
case T55X7_GUARDPROXII_CONFIG_BLOCK:
make style
2019-04-03 04:32:45 +08:00
snprintf(s + strlen(s), sizeof(s) - strlen(s), "Guard Prox II ");
Chg: 'lf t55xx info' - now prints if its a known config block
2019-04-02 16:33:25 +08:00
break;
case T55X7_VIKING_CONFIG_BLOCK:
make style
2019-04-03 04:32:45 +08:00
snprintf(s + strlen(s), sizeof(s) - strlen(s), "Viking ");
Chg: 'lf t55xx info' - now prints if its a known config block
2019-04-02 16:33:25 +08:00
break;
chg 'lf t55xx info' - detection of t55x7 configuration blocks
2020-07-09 00:04:51 +08:00
case T55X7_NORALSY_CONFIG_BLOCK:
make style
2019-04-03 04:32:45 +08:00
snprintf(s + strlen(s), sizeof(s) - strlen(s), "Noralys ");
Chg: 'lf t55xx info' - now prints if its a known config block
2019-04-02 16:33:25 +08:00
break;
case T55X7_IOPROX_CONFIG_BLOCK:
make style
2019-04-03 04:32:45 +08:00
snprintf(s + strlen(s), sizeof(s) - strlen(s), "IO Prox ");
Chg: 'lf t55xx info' - now prints if its a known config block
2019-04-02 16:33:25 +08:00
break;
case T55X7_PRESCO_CONFIG_BLOCK:
make style
2019-04-03 04:32:45 +08:00
snprintf(s + strlen(s), sizeof(s) - strlen(s), "Presco ");
Chg: 'lf t55xx info' - now prints if its a known config block
2019-04-02 16:33:25 +08:00
break;
case T55X7_NEDAP_64_CONFIG_BLOCK:
make style
2019-04-03 04:32:45 +08:00
snprintf(s + strlen(s), sizeof(s) - strlen(s), "Nedap 64 ");
Chg: 'lf t55xx info' - now prints if its a known config block
2019-04-02 16:33:25 +08:00
break;
case T55X7_NEDAP_128_CONFIG_BLOCK:
make style
2019-04-03 04:32:45 +08:00
snprintf(s + strlen(s), sizeof(s) - strlen(s), "Nedap 128 ");
break;
lf t55 configblock detection updated
2020-07-08 19:41:38 +08:00
case T55X7_PAC_CONFIG_BLOCK:
chg 'lf t55xx info' - detection of t55x7 configuration blocks
2020-07-09 00:04:51 +08:00
snprintf(s + strlen(s), sizeof(s) - strlen(s), "PAC/Stanley ");
lf t55 configblock detection updated
2020-07-08 19:41:38 +08:00
break;
case T55X7_VERICHIP_CONFIG_BLOCK:
snprintf(s + strlen(s), sizeof(s) - strlen(s), "Verichip ");
break;
case T55X7_VISA2000_CONFIG_BLOCK:
snprintf(s + strlen(s), sizeof(s) - strlen(s), "VISA2000 ");
chg 'lf t55xx info' - detection of t55x7 configuration blocks
2020-07-09 00:04:51 +08:00
break;
case T55X7_JABLOTRON_CONFIG_BLOCK:
snprintf(s + strlen(s), sizeof(s) - strlen(s), "Jablotron ");
break;
case T55X7_KERI_CONFIG_BLOCK:
snprintf(s + strlen(s), sizeof(s) - strlen(s), "KERI ");
break;
case T55X7_SECURAKEY_CONFIG_BLOCK:
snprintf(s + strlen(s), sizeof(s) - strlen(s), "SecuraKey ");
break;
case T55X7_NEXWATCH_CONFIG_BLOCK:
snprintf(s + strlen(s), sizeof(s) - strlen(s), "NexWatch, Quadrakey ");
make style
2020-08-13 18:25:04 +08:00
break;
make style
2019-04-03 04:32:45 +08:00
default:
Chg: 'lf t55xx info' - now prints if its a known config block
2019-04-02 16:33:25 +08:00
break;
}
make style
2019-04-03 04:32:45 +08:00
chg: 'lf t55xx info' - text layout
2019-04-05 02:06:15 +08:00
if (strlen(s) > 0)
chg 'lf t55xx info' - detection of t55x7 configuration blocks
2020-07-09 00:04:51 +08:00
PrintAndLogEx(SUCCESS, "\nConfig block match : " _YELLOW_("%s"), s);
Chg: 'lf t55xx info' - now prints if its a known config block
2019-04-02 16:33:25 +08:00
}
Rework Cmd exposed API, use more static and fix [-Wmissing-prototypes], ongoing...
2019-04-12 08:07:11 +08:00
static int CmdT55xxInfo(const char *Cmd) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
/*
Page 0 Block 0 Configuration data.
Normal mode
Extended mode
*/
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
bool frombuff = false, gotdata = false, dataasq5 = false, usepwd = false;
uint8_t cmdp = 0;
T55xx DLMode Update
2019-09-14 12:13:55 +08:00
uint8_t downlink_mode = config.downlink_mode;
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
uint32_t block0 = 0, password = 0;
make style
2019-07-24 05:43:30 +08:00
Revamped t55xx info: support offline block0, Q5, fix extended, add warns etc
2019-04-01 01:06:36 +08:00
while (param_getchar(Cmd, cmdp) != 0x00) {
switch (tolower(param_getchar(Cmd, cmdp))) {
case 'h':
return usage_t55xx_info();
chg: 'lf t55xx info c' - renamed from "d" to "c", takes a block0 and print info. chg: 'lf t55xx config c' - now takes a block0 and use as configuration. usage: lf t55xx config c 000880E8 lf t55xx info c 000880E8
2019-09-14 02:50:00 +08:00
case 'c':
Revamped t55xx info: support offline block0, Q5, fix extended, add warns etc
2019-04-01 01:06:36 +08:00
block0 = param_get32ex(Cmd, cmdp + 1, 0, 16);
gotdata = true;
cmdp += 2;
break;
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
case 'p':
password = param_get32ex(Cmd, cmdp + 1, 0, 16);
usepwd = true;
cmdp += 2;
break;
Revamped t55xx info: support offline block0, Q5, fix extended, add warns etc
2019-04-01 01:06:36 +08:00
case '1':
frombuff = true;
cmdp += 2;
break;
case 'q':
dataasq5 = true;
cmdp += 2;
break;
make style
2019-07-24 05:43:30 +08:00
case 'r':
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
downlink_mode = param_get8ex(Cmd, cmdp + 1, 0, 10);
style
2019-09-13 22:32:37 +08:00
if (downlink_mode > 3)
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
downlink_mode = 0;
style
2019-09-13 22:32:37 +08:00
make style
2019-07-24 05:43:30 +08:00
cmdp += 2;
break;
Revamped t55xx info: support offline block0, Q5, fix extended, add warns etc
2019-04-01 01:06:36 +08:00
default:
PrintAndLogEx(WARNING, "Unknown parameter '%c'", param_getchar(Cmd, cmdp));
return usage_t55xx_info();
}
}
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
Revamped t55xx info: support offline block0, Q5, fix extended, add warns etc
2019-04-01 01:06:36 +08:00
if (gotdata && frombuff)
return usage_t55xx_info();
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
Revamped t55xx info: support offline block0, Q5, fix extended, add warns etc
2019-04-01 01:06:36 +08:00
if (dataasq5 && !gotdata)
return usage_t55xx_info();
if (!frombuff && !gotdata) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
// sanity check.
chg: lf t55 - fixes / read block uses NG
2019-05-22 23:59:39 +08:00
if (SanityOfflineCheck(false) != PM3_SUCCESS) return PM3_ENODATA;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
Update cmdlft55xx.c
2019-10-10 19:07:57 +08:00
if (!AcquireData(T55x7_PAGE0, T55x7_CONFIGURATION_BLOCK, usepwd, password, downlink_mode))
chg: cmdlft55xx return codes
2019-05-22 20:48:23 +08:00
return PM3_ENODATA;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
}
style
2019-09-13 22:32:37 +08:00
Revamped t55xx info: support offline block0, Q5, fix extended, add warns etc
2019-04-01 01:06:36 +08:00
if (!gotdata) {
chg: cmdlft55xx return codes
2019-05-22 20:48:23 +08:00
if (!DecodeT55xxBlock()) return PM3_ESOFT;
Revamped t55xx info: support offline block0, Q5, fix extended, add warns etc
2019-04-01 01:06:36 +08:00
// too little space to start with
chg: cmdlft55xx return codes
2019-05-22 20:48:23 +08:00
if (DemodBufferLen < 32 + config.offset) return PM3_ESOFT;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
Revamped t55xx info: support offline block0, Q5, fix extended, add warns etc
2019-04-01 01:06:36 +08:00
//PrintAndLogEx(NORMAL, "Offset+32 ==%d\n DemodLen == %d", config.offset + 32, DemodBufferLen);
chg: 'lf t55xx info c' - renamed from "d" to "c", takes a block0 and print info. chg: 'lf t55xx config c' - now takes a block0 and use as configuration. usage: lf t55xx config c 000880E8 lf t55xx info c 000880E8
2019-09-14 02:50:00 +08:00
block0 = PackBits(config.offset, 32, DemodBuffer);
Revamped t55xx info: support offline block0, Q5, fix extended, add warns etc
2019-04-01 01:06:36 +08:00
}
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
PrintAndLogEx(NORMAL, "");
t55xx info: fix q5 condition
2019-04-03 04:08:50 +08:00
if (((!gotdata) && config.Q5) || (gotdata && dataasq5)) {
Revamped t55xx info: support offline block0, Q5, fix extended, add warns etc
2019-04-01 01:06:36 +08:00
uint32_t header = (block0 >> (32 - 12)) & 0xFFF;
uint32_t ps = (block0 >> (32 - 13)) & 0x01;
uint32_t fw = (block0 >> (32 - 14)) & 0x01;
uint32_t dbr = (block0 >> (32 - 20)) & 0x3F;
uint32_t aor = (block0 >> (32 - 21)) & 0x01;
uint32_t pwd = (block0 >> (32 - 22)) & 0x01;
uint32_t pskcf = (block0 >> (32 - 24)) & 0x03;
uint32_t inv = (block0 >> (32 - 25)) & 0x01;
uint32_t datamod = (block0 >> (32 - 28)) & 0x07;
uint32_t maxblk = (block0 >> (32 - 31)) & 0x07;
emphase warnings
2019-10-05 18:07:28 +08:00
uint32_t st = block0 & 0x01;
textual
2020-05-11 17:45:45 +08:00
PrintAndLogEx(NORMAL, "--- " _CYAN_("Q5 Configuration & Information") " ------------");
Revamped t55xx info: support offline block0, Q5, fix extended, add warns etc
2019-04-01 01:06:36 +08:00
PrintAndLogEx(NORMAL, "-------------------------------------------------------------");
PrintAndLogEx(NORMAL, " Header : 0x%03X%s", header, (header != 0x600) ? _RED_(" - Warning") : "");
PrintAndLogEx(NORMAL, " Page select : %d", ps);
PrintAndLogEx(NORMAL, " Fast Write : %s", (fw) ? _GREEN_("Yes") : "No");
PrintAndLogEx(NORMAL, " Data bit rate : %s", GetBitRateStr(dbr, 1));
PrintAndLogEx(NORMAL, " AOR - Answer on Request : %s", (aor) ? _GREEN_("Yes") : "No");
PrintAndLogEx(NORMAL, " Password mode : %s", (pwd) ? _GREEN_("Yes") : "No");
PrintAndLogEx(NORMAL, " PSK clock frequency : %s", GetPskCfStr(pskcf, 1));
PrintAndLogEx(NORMAL, " Inverse data : %s", (inv) ? _GREEN_("Yes") : "No");
PrintAndLogEx(NORMAL, " Modulation : %s", GetQ5ModulationStr(datamod));
PrintAndLogEx(NORMAL, " Max block : %d", maxblk);
PrintAndLogEx(NORMAL, " Sequence Terminator : %s", (st) ? _GREEN_("Yes") : "No");
} else {
uint32_t safer = (block0 >> (32 - 4)) & 0x0F;
uint32_t extend = (block0 >> (32 - 15)) & 0x01;
uint32_t resv, dbr;
if (extend) {
resv = (block0 >> (32 - 8)) & 0x0F;
dbr = (block0 >> (32 - 14)) & 0x3F;
} else {
resv = (block0 >> (32 - 11)) & 0x7F;
dbr = (block0 >> (32 - 14)) & 0x07;
}
uint32_t datamod = (block0 >> (32 - 20)) & 0x1F;
uint32_t pskcf = (block0 >> (32 - 22)) & 0x03;
uint32_t aor = (block0 >> (32 - 23)) & 0x01;
uint32_t otp = (block0 >> (32 - 24)) & 0x01;
uint32_t maxblk = (block0 >> (32 - 27)) & 0x07;
uint32_t pwd = (block0 >> (32 - 28)) & 0x01;
uint32_t sst = (block0 >> (32 - 29)) & 0x01;
uint32_t fw = (block0 >> (32 - 30)) & 0x01;
uint32_t inv = (block0 >> (32 - 31)) & 0x01;
uint32_t por = (block0 >> (32 - 32)) & 0x01;
textual
2020-05-11 17:45:45 +08:00
PrintAndLogEx(NORMAL, "--- " _CYAN_("T55x7 Configuration & Information") " ---------");
Revamped t55xx info: support offline block0, Q5, fix extended, add warns etc
2019-04-01 01:06:36 +08:00
PrintAndLogEx(NORMAL, "-------------------------------------------------------------");
PrintAndLogEx(NORMAL, " Safer key : %s", GetSaferStr(safer));
PrintAndLogEx(NORMAL, " reserved : %d", resv);
PrintAndLogEx(NORMAL, " Data bit rate : %s", GetBitRateStr(dbr, extend));
PrintAndLogEx(NORMAL, " eXtended mode : %s", (extend) ? _YELLOW_("Yes - Warning") : "No");
t55xx info: tag out of spec FSKa modulations in standard mode
2019-04-01 03:30:30 +08:00
PrintAndLogEx(NORMAL, " Modulation : %s", GetModulationStr(datamod, extend));
Revamped t55xx info: support offline block0, Q5, fix extended, add warns etc
2019-04-01 01:06:36 +08:00
PrintAndLogEx(NORMAL, " PSK clock frequency : %s", GetPskCfStr(pskcf, 0));
PrintAndLogEx(NORMAL, " AOR - Answer on Request : %s", (aor) ? _GREEN_("Yes") : "No");
PrintAndLogEx(NORMAL, " OTP - One Time Pad : %s", (otp) ? ((extend) ? _YELLOW_("Yes - Warning") : _RED_("Yes - Warning")) : "No");
PrintAndLogEx(NORMAL, " Max block : %d", maxblk);
PrintAndLogEx(NORMAL, " Password mode : %s", (pwd) ? _GREEN_("Yes") : "No");
PrintAndLogEx(NORMAL, " Sequence %-12s : %s", (extend) ? "Start Marker" : "Terminator", (sst) ? _GREEN_("Yes") : "No");
PrintAndLogEx(NORMAL, " Fast Write : %s", (fw) ? ((extend) ? _GREEN_("Yes") : _RED_("Yes - Warning")) : "No");
PrintAndLogEx(NORMAL, " Inverse data : %s", (inv) ? ((extend) ? _GREEN_("Yes") : _RED_("Yes - Warning")) : "No");
PrintAndLogEx(NORMAL, " POR-Delay : %s", (por) ? _GREEN_("Yes") : "No");
}
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
PrintAndLogEx(NORMAL, "-------------------------------------------------------------");
lf t55 configblock detection updated
2020-07-08 19:41:38 +08:00
PrintAndLogEx(NORMAL, " Raw Data - Page 0, block 0");
Revamped t55xx info: support offline block0, Q5, fix extended, add warns etc
2019-04-01 01:06:36 +08:00
if (gotdata)
lf t55 configblock detection updated
2020-07-08 19:41:38 +08:00
PrintAndLogEx(NORMAL, " 0x" _GREEN_("%08X"), block0);
Revamped t55xx info: support offline block0, Q5, fix extended, add warns etc
2019-04-01 01:06:36 +08:00
else
lf t55 configblock detection updated
2020-07-08 19:41:38 +08:00
PrintAndLogEx(NORMAL, " 0x" _GREEN_("%08X") " %s", block0, sprint_bin(DemodBuffer + config.offset, 32));
chg: 'lf t55xx info' - text layout
2019-04-05 02:06:15 +08:00
t55xx info: fix q5 condition
2019-04-03 04:08:50 +08:00
if (((!gotdata) && (!config.Q5)) || (gotdata && (!dataasq5)))
printT5x7KnownBlock0(block0);
make style
2019-04-07 01:09:01 +08:00
chg: 'lf t55xx info' - text layout
2019-04-05 02:06:15 +08:00
PrintAndLogEx(NORMAL, "-------------------------------------------------------------");
chg: cmdlft55xx return codes
2019-05-22 20:48:23 +08:00
return PM3_SUCCESS;
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
Rework Cmd exposed API, use more static and fix [-Wmissing-prototypes], ongoing...
2019-04-12 08:07:11 +08:00
static int CmdT55xxDump(const char *Cmd) {
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
chg: 'lf t55xx dump p 11223344' - less verbose output.
2019-09-09 21:19:00 +08:00
uint32_t password = 0;
uint8_t override = 0;
redundant
2020-05-12 16:30:14 +08:00
uint8_t downlink_mode = config.downlink_mode;
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
bool usepwd = false;
bool errors = false;
uint8_t cmdp = 0;
t55x7 save and restore eml/bin
2019-10-10 18:27:48 +08:00
char preferredName[FILE_PATH_SIZE] = {0};
bool success = true;
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
while (param_getchar(Cmd, cmdp) != 0x00 && !errors) {
switch (tolower(param_getchar(Cmd, cmdp))) {
case 'h':
style
2019-09-13 22:32:37 +08:00
return usage_t55xx_dump();
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
case 'r':
downlink_mode = param_get8ex(Cmd, cmdp + 1, 0, 10);
style
2019-09-13 22:32:37 +08:00
if (downlink_mode > 3)
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
downlink_mode = 0;
cmdp += 2;
break;
case 'p':
password = param_get32ex(Cmd, cmdp + 1, 0, 16);
usepwd = true;
cmdp += 2;
break;
case 'o':
override = 1;
cmdp++;
break;
t55x7 save and restore eml/bin
2019-10-10 18:27:48 +08:00
case 'f':
make style
2019-10-13 06:48:26 +08:00
param_getstr(Cmd, cmdp + 1, preferredName, FILE_PATH_SIZE);
cmdp += 2;
if (strlen(preferredName) == 0)
errors = true;
break;
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
default:
PrintAndLogEx(WARNING, "Unknown parameter '%c'", param_getchar(Cmd, cmdp));
errors = true;
break;
}
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
}
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
if (errors) return usage_t55xx_dump();
remove spurious spaces & tabs at end of lines
2019-03-09 15:59:13 +08:00
t55x7 save and restore eml/bin
2019-10-10 18:27:48 +08:00
// Due to the few different T55xx cards and number of blocks supported
// will save the dump file if ALL page 0 is OK
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
printT5xxHeader(0);
Added T55 downlink mode support
2019-07-23 07:50:28 +08:00
for (uint8_t i = 0; i < 8; ++i) {
t55x7 save and restore eml/bin
2019-10-10 18:27:48 +08:00
if (T55xxReadBlock(i, 0, usepwd, override, password, downlink_mode) != PM3_SUCCESS)
success = false;
make style
2019-07-24 05:43:30 +08:00
// idea for better user experience and display.
// only show override warning on the first block read
chg: 'lf t55xx dump p 11223344' - less verbose output.
2019-09-09 21:19:00 +08:00
if (override == 1) override++; // flag not to show safty for 2nd and on.
make style
2019-07-24 05:43:30 +08:00
}
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
printT5xxHeader(1);
make style
2019-10-13 06:48:26 +08:00
for (uint8_t i = 0; i < 4; i++)
t55x7 save and restore eml/bin
2019-10-10 18:27:48 +08:00
if (T55xxReadBlock(i, 1, usepwd, override, password, downlink_mode) != PM3_SUCCESS)
make style
2019-10-13 06:48:26 +08:00
T55x7_SaveBlockData(8 + i, 0x00);
t55x7 save and restore eml/bin
2019-10-10 18:27:48 +08:00
if (success) { // all ok save dump to file
// saveFileEML will add .eml extension to filename
// saveFile (binary) passes in the .bin extension.
make style
2019-10-13 06:48:26 +08:00
if (strcmp(preferredName, "") == 0) { // Set default filename, if not set by user
strcpy(preferredName, "lf-t55xx");
t55x7 save and restore eml/bin
2019-10-10 18:27:48 +08:00
for (uint8_t i = 1; i <= 7; i++) {
T55xx Save and Restore
2019-10-11 17:29:20 +08:00
if ((cardmem[i].blockdata != 0x00) && (cardmem[i].blockdata != 0xFFFFFFFF))
style
2020-09-07 16:35:09 +08:00
snprintf(preferredName + strlen(preferredName), sizeof(preferredName) - strlen(preferredName), "-%08X", cardmem[i].blockdata);
t55x7 save and restore eml/bin
2019-10-10 18:27:48 +08:00
else
break;
}
chg: unify dump file template used in this repo. hf-mf-(uid)-dump.(bin/eml/json) is the prefeered style.
2020-03-22 03:58:20 +08:00
strcat(preferredName, "-dump");
t55x7 save and restore eml/bin
2019-10-10 18:27:48 +08:00
}
// Swap endian so the files match the txt display
uint32_t data[T55x7_BLOCK_COUNT];
make style
2019-10-13 06:48:26 +08:00
t55x7 save and restore eml/bin
2019-10-10 18:27:48 +08:00
for (int i = 0; i < T55x7_BLOCK_COUNT; i++)
T55xx Save and Restore
2019-10-11 17:29:20 +08:00
data[i] = BSWAP_32(cardmem[i].blockdata);
t55x7 save and restore eml/bin
2019-10-10 18:27:48 +08:00
Implement real callbacks for load/save prefs
2020-06-02 05:44:41 +08:00
saveFileJSON(preferredName, jsfT55x7, (uint8_t *)data, T55x7_BLOCK_COUNT * sizeof(uint32_t), NULL);
make style
2019-10-13 06:48:26 +08:00
saveFileEML(preferredName, (uint8_t *)data, T55x7_BLOCK_COUNT * sizeof(uint32_t), sizeof(uint32_t));
saveFile(preferredName, ".bin", data, sizeof(data));
t55x7 save and restore eml/bin
2019-10-10 18:27:48 +08:00
}
make style
2019-10-13 06:48:26 +08:00
t55x7 save and restore eml/bin
2019-10-10 18:27:48 +08:00
return PM3_SUCCESS;
}
static int CmdT55xxRestore(const char *Cmd) {
bool errors = false;
uint8_t cmdp = 0;
char preferredName[FILE_PATH_SIZE] = {0};
char ext[FILE_PATH_SIZE] = {0};
int success = PM3_ESOFT;
uint32_t password = 0x00;
bool usepwd = false;
uint32_t data[12] = {0};
size_t datalen = 0;
uint8_t blockidx;
uint8_t downlink_mode;
char writeCmdOpt[100];
char pwdOpt [11] = {0}; // p XXXXXXXX
while (param_getchar(Cmd, cmdp) != 0x00 && !errors) {
switch (tolower(param_getchar(Cmd, cmdp))) {
case 'h':
return usage_t55xx_restore();
make style
2019-10-13 06:48:26 +08:00
case 'f':
param_getstr(Cmd, cmdp + 1, preferredName, FILE_PATH_SIZE);
if (strlen(preferredName) == 0)
errors = true;
cmdp += 2;
break;
t55x7 save and restore eml/bin
2019-10-10 18:27:48 +08:00
case 'p':
password = param_get32ex(Cmd, cmdp + 1, 0, 16);
usepwd = true;
cmdp += 2;
make style
2019-10-13 06:48:26 +08:00
break;
t55x7 save and restore eml/bin
2019-10-10 18:27:48 +08:00
default:
PrintAndLogEx(WARNING, "Unknown parameter '%c'", param_getchar(Cmd, cmdp));
errors = true;
break;
}
}
// File name expected to be .eml .bin or .json so sould be at least 4
make style
2019-10-13 06:48:26 +08:00
if (errors || (strlen(preferredName) == 0)) return usage_t55xx_restore();
t55x7 save and restore eml/bin
2019-10-10 18:27:48 +08:00
// split file name into prefix and ext.
int fnLength;
make style
2019-10-13 06:48:26 +08:00
fnLength = strlen(preferredName);
T55xx Save and Restore
2019-10-11 17:29:20 +08:00
success = PM3_ESOFT;
if (fnLength > 4) { // Holds extension [.bin|.eml]
make style
2019-10-13 06:48:26 +08:00
memcpy(ext, &preferredName[fnLength - 4], 4);
t55x7 save and restore eml/bin
2019-10-10 18:27:48 +08:00
ext[5] = 0x00;
T55xx Save and Restore
2019-10-11 17:29:20 +08:00
// check if valid file extension and attempt to load data
make style
2019-10-13 06:48:26 +08:00
if (memcmp(ext, ".bin", 4) == 0) {
preferredName[fnLength - 4] = 0x00;
success = loadFile(preferredName, ".bin", data, sizeof(data), &datalen);
} else if (memcmp(ext, ".eml", 4) == 0) {
preferredName[fnLength - 4] = 0x00;
t55x7 save and restore eml/bin
2019-10-10 18:27:48 +08:00
datalen = 12;
success = loadFileEML(preferredName, (uint8_t *)data, &datalen);
T55xx Save and Restore
2019-10-11 17:29:20 +08:00
make style
2019-10-13 06:48:26 +08:00
} else
Fix prompt colors in log -> spurious space in color macros -> adjust lots of files...
2020-04-22 08:22:55 +08:00
PrintAndLogEx(WARNING, "\nWarning: invalid dump filename "_YELLOW_("%s")" to restore!\n", preferredName);
t55x7 save and restore eml/bin
2019-10-10 18:27:48 +08:00
}
if (success == PM3_SUCCESS) { // Got data, so write to cards
if (datalen == T55x7_BLOCK_COUNT * 4) { // 12 blocks * 4 bytes per block
if (usepwd)
no printf, sprintf
2020-08-29 20:13:18 +08:00
snprintf(pwdOpt, sizeof(pwdOpt), "p %08X", password);
t55x7 save and restore eml/bin
2019-10-10 18:27:48 +08:00
// Restore endien for writing to card
make style
2019-10-13 06:48:26 +08:00
for (blockidx = 0; blockidx < 12; blockidx++)
t55x7 save and restore eml/bin
2019-10-10 18:27:48 +08:00
data[blockidx] = BSWAP_32(data[blockidx]);
// Have data ready, lets write
// Order
// write blocks 1..7 page 0
// write blocks 1..3 page 1
// update downlink mode (if needed) and write b 0
downlink_mode = 0;
if ((((data[11] >> 28) & 0xf) == 6) || (((data[11] >> 28) & 0xf) == 9))
downlink_mode = (data[11] >> 10) & 3;
make style
2019-10-13 06:48:26 +08:00
t55x7 save and restore eml/bin
2019-10-10 18:27:48 +08:00
// write out blocks 1-7 page 0
for (blockidx = 1; blockidx <= 7; blockidx++) {
no printf, sprintf
2020-08-29 20:13:18 +08:00
snprintf(writeCmdOpt, sizeof(writeCmdOpt), "b %d d %08X %s", blockidx, data[blockidx], pwdOpt);
t55x7 save and restore eml/bin
2019-10-10 18:27:48 +08:00
if (CmdT55xxWriteBlock(writeCmdOpt) != PM3_SUCCESS)
make style
2019-10-13 06:48:26 +08:00
PrintAndLogEx(WARNING, "Warning: error writing blk %d", blockidx);
t55x7 save and restore eml/bin
2019-10-10 18:27:48 +08:00
}
// if password was set on the "blank" update as we may have just changed it
if (usepwd)
no printf, sprintf
2020-08-29 20:13:18 +08:00
snprintf(pwdOpt, sizeof(pwdOpt), "p %08X", data[7]);
t55x7 save and restore eml/bin
2019-10-10 18:27:48 +08:00
// write out blocks 1-3 page 1
for (blockidx = 9; blockidx <= 11; blockidx++) {
no printf, sprintf
2020-08-29 20:13:18 +08:00
snprintf(writeCmdOpt, sizeof(writeCmdOpt), "b %d 1 d %08X %s", blockidx - 8, data[blockidx], pwdOpt);
t55x7 save and restore eml/bin
2019-10-10 18:27:48 +08:00
if (CmdT55xxWriteBlock(writeCmdOpt) != PM3_SUCCESS)
make style
2019-10-13 06:48:26 +08:00
PrintAndLogEx(WARNING, "Warning: error writing blk %d", blockidx);
t55x7 save and restore eml/bin
2019-10-10 18:27:48 +08:00
}
// Update downlink mode for the page 0 config write.
config.downlink_mode = downlink_mode;
make style
2019-10-13 06:48:26 +08:00
t55x7 save and restore eml/bin
2019-10-10 18:27:48 +08:00
// Write the page 0 config
no printf, sprintf
2020-08-29 20:13:18 +08:00
snprintf(writeCmdOpt, sizeof(writeCmdOpt), "b 0 d %08X %s", data[0], pwdOpt);
t55x7 save and restore eml/bin
2019-10-10 18:27:48 +08:00
if (CmdT55xxWriteBlock(writeCmdOpt) != PM3_SUCCESS)
PrintAndLogEx(WARNING, "Warning: error writing blk 0");
}
}
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
chg: cmdlft55xx return codes
2019-05-22 20:48:23 +08:00
return PM3_SUCCESS;
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
T55xx Save and Restore
2019-10-11 17:29:20 +08:00
/*
Update cmdlft55xx.c
2019-10-10 19:07:57 +08:00
static int CmdT55xxRestore(const char *Cmd) {
uint32_t password = 0;
uint8_t override = 0;
redundant
2020-05-12 16:30:14 +08:00
uint8_t downlink_mode = config.downlink_mode;
Update cmdlft55xx.c
2019-10-10 19:07:57 +08:00
bool usepwd = false;
bool errors = false;
uint8_t cmdp = 0;
while (param_getchar(Cmd, cmdp) != 0x00 && !errors) {
switch (tolower(param_getchar(Cmd, cmdp))) {
case 'h':
return usage_t55xx_restore();
case 'r':
downlink_mode = param_get8ex(Cmd, cmdp + 1, 0, 10);
if (downlink_mode > 3)
downlink_mode = 0;
cmdp += 2;
break;
case 'p':
password = param_get32ex(Cmd, cmdp + 1, 0, 16);
usepwd = true;
cmdp += 2;
break;
case 'o':
override = 1;
cmdp++;
break;
default:
PrintAndLogEx(WARNING, "Unknown parameter '%c'", param_getchar(Cmd, cmdp));
errors = true;
break;
}
}
if (errors) return usage_t55xx_restore();
PrintAndLogEx(INFO, "Work in progress. To be implemented");
if (usepwd || password || override ) {
}
// load file name (json/eml/bin)
// Print dump data?
uint32_t res = PM3_SUCCESS;
// page0.
// res = clone_t55xx_tag(blockdata, numblocks);
return res;
}
T55xx Save and Restore
2019-10-11 17:29:20 +08:00
*/
Update cmdlft55xx.c
2019-10-10 19:07:57 +08:00
bool AcquireData(uint8_t page, uint8_t block, bool pwdmode, uint32_t password, uint8_t downlink_mode) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
// arg0 bitmodes:
chg: lf t55 - fixes / read block uses NG
2019-05-22 23:59:39 +08:00
// b0 = pwdmode
// b1 = page to read from
// b2 = brute_mem (armside function)
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
// arg1: which block to read
// arg2: password
chg: lf t55 - fixes / read block uses NG
2019-05-22 23:59:39 +08:00
struct p {
uint32_t password;
Added T55 downlink mode support
2019-07-23 07:50:28 +08:00
uint8_t blockno;
uint8_t page;
bool pwdmode;
make style
2019-07-24 05:43:30 +08:00
uint8_t downlink_mode;
chg: lf t55 - fixes / read block uses NG
2019-05-22 23:59:39 +08:00
} PACKED;
struct p payload;
Added T55 downlink mode support
2019-07-23 07:50:28 +08:00
payload.password = password;
payload.blockno = block;
payload.page = page & 0x1;
payload.pwdmode = pwdmode;
make style
2019-07-24 05:43:30 +08:00
payload.downlink_mode = downlink_mode;
chg: lf t55 - fixes / read block uses NG
2019-05-22 23:59:39 +08:00
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
clearCommandBuffer();
rename few CMD_* to get some less diversity
2019-08-04 01:17:00 +08:00
SendCommandNG(CMD_LF_T55XX_READBL, (uint8_t *)&payload, sizeof(payload));
if (!WaitForResponseTimeout(CMD_LF_T55XX_READBL, NULL, 2500)) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
PrintAndLogEx(WARNING, "command execution time out");
return false;
}
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
chg: adapted lfsampling, and swapped from 'silent' logic to the more natural 'verbose' logic
2020-01-08 05:05:01 +08:00
getSamples(12000, false);
lf t55 chk m (works again!). lf t55 config (prints correct pwd if used)
2020-08-21 20:10:32 +08:00
bool ok = !getSignalProperties()->isnoise;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
lf t55 chk m (works again!). lf t55 config (prints correct pwd if used)
2020-08-21 20:10:32 +08:00
config.usepwd = pwdmode;
return ok;
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
Revamped t55xx info: support offline block0, Q5, fix extended, add warns etc
2019-04-01 01:06:36 +08:00
char *GetPskCfStr(uint32_t id, bool q5) {
cmdlft55xx : Fix buf overrun (gcc 10 error) src/cmdlft55xx.c:2560:43: error: ‘ - (Unknown)’ directive output may be truncated writing 21 bytes into a region of size between 15 and 24 [-Werror=format-truncation=] 2560 | snprintf(retStr, sizeof(buf), "%u - " _RED_("(Unknown)"), id); | ^~~~~~~ src/cmdlft55xx.c:2560:13: note: ‘snprintf’ output between 23 and 32 bytes into a destination of size 25 2560 | snprintf(retStr, sizeof(buf), "%u - " _RED_("(Unknown)"), id); | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
2020-05-11 19:58:38 +08:00
static char buf[40];
Revamped t55xx info: support offline block0, Q5, fix extended, add warns etc
2019-04-01 01:06:36 +08:00
char *retStr = buf;
switch (id) {
case 0:
snprintf(retStr, sizeof(buf), "%u - RF/2", id);
break;
case 1:
snprintf(retStr, sizeof(buf), "%u - RF/4", id);
break;
case 2:
snprintf(retStr, sizeof(buf), "%u - RF/8", id);
break;
case 3:
if (q5)
snprintf(retStr, sizeof(buf), "%u - RF/8", id);
else
snprintf(retStr, sizeof(buf), "%u - " _RED_("(Unknown)"), id);
break;
default:
snprintf(retStr, sizeof(buf), "%u - " _RED_("(Unknown)"), id);
break;
}
return buf;
}
changing {} style to match majority of previous style
2019-03-10 18:20:22 +08:00
char *GetBitRateStr(uint32_t id, bool xmode) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
static char buf[25];
char *retStr = buf;
if (xmode) { //xmode bitrate calc is same as em4x05 calc
style
2019-03-19 06:55:39 +08:00
snprintf(retStr, sizeof(buf), "%u - RF/%d", id, EM4x05_GET_BITRATE(id));
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
} else {
make style
2019-03-10 07:00:59 +08:00
switch (id) {
case 0:
fix: lf em 4x05 - use correct paritytest (@marshmellow)\nchg: lf em 4x05_read\n chg: lf em 4x05_write - uses NG
2019-05-28 17:15:12 +08:00
snprintf(retStr, sizeof(buf), "%u - "_GREEN_("RF/8"), id);
make style
2019-03-10 07:00:59 +08:00
break;
case 1:
fix: lf em 4x05 - use correct paritytest (@marshmellow)\nchg: lf em 4x05_read\n chg: lf em 4x05_write - uses NG
2019-05-28 17:15:12 +08:00
snprintf(retStr, sizeof(buf), "%u - "_GREEN_("RF/16"), id);
make style
2019-03-10 07:00:59 +08:00
break;
case 2:
fix: lf em 4x05 - use correct paritytest (@marshmellow)\nchg: lf em 4x05_read\n chg: lf em 4x05_write - uses NG
2019-05-28 17:15:12 +08:00
snprintf(retStr, sizeof(buf), "%u - "_GREEN_("RF/32"), id);
make style
2019-03-10 07:00:59 +08:00
break;
case 3:
fix: lf em 4x05 - use correct paritytest (@marshmellow)\nchg: lf em 4x05_read\n chg: lf em 4x05_write - uses NG
2019-05-28 17:15:12 +08:00
snprintf(retStr, sizeof(buf), "%u - "_GREEN_("RF/40"), id);
make style
2019-03-10 07:00:59 +08:00
break;
case 4:
fix: lf em 4x05 - use correct paritytest (@marshmellow)\nchg: lf em 4x05_read\n chg: lf em 4x05_write - uses NG
2019-05-28 17:15:12 +08:00
snprintf(retStr, sizeof(buf), "%u - "_GREEN_("RF/50"), id);
make style
2019-03-10 07:00:59 +08:00
break;
case 5:
fix: lf em 4x05 - use correct paritytest (@marshmellow)\nchg: lf em 4x05_read\n chg: lf em 4x05_write - uses NG
2019-05-28 17:15:12 +08:00
snprintf(retStr, sizeof(buf), "%u - "_GREEN_("RF/64"), id);
make style
2019-03-10 07:00:59 +08:00
break;
case 6:
fix: lf em 4x05 - use correct paritytest (@marshmellow)\nchg: lf em 4x05_read\n chg: lf em 4x05_write - uses NG
2019-05-28 17:15:12 +08:00
snprintf(retStr, sizeof(buf), "%u - "_GREEN_("RF/100"), id);
make style
2019-03-10 07:00:59 +08:00
break;
case 7:
fix: lf em 4x05 - use correct paritytest (@marshmellow)\nchg: lf em 4x05_read\n chg: lf em 4x05_write - uses NG
2019-05-28 17:15:12 +08:00
snprintf(retStr, sizeof(buf), "%u - "_GREEN_("RF/128"), id);
make style
2019-03-10 07:00:59 +08:00
break;
default:
Revamped t55xx info: support offline block0, Q5, fix extended, add warns etc
2019-04-01 01:06:36 +08:00
snprintf(retStr, sizeof(buf), "%u - " _RED_("(Unknown)"), id);
make style
2019-03-10 07:00:59 +08:00
break;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
}
}
return buf;
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
changing {} style to match majority of previous style
2019-03-10 18:20:22 +08:00
char *GetSaferStr(uint32_t id) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
static char buf[40];
char *retStr = buf;
string formats
2019-03-19 00:46:52 +08:00
snprintf(retStr, sizeof(buf), "%u", id);
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
if (id == 6) {
string formats
2019-03-19 00:46:52 +08:00
snprintf(retStr, sizeof(buf), "%u - " _YELLOW_("passwd"), id);
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
}
make style
2019-03-10 07:00:59 +08:00
if (id == 9) {
string formats
2019-03-19 00:46:52 +08:00
snprintf(retStr, sizeof(buf), "%u - " _YELLOW_("testmode"), id);
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
}
return buf;
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
t55xx info: tag out of spec FSKa modulations in standard mode
2019-04-01 03:30:30 +08:00
char *GetModulationStr(uint32_t id, bool xmode) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
static char buf[60];
char *retStr = buf;
make style
2019-03-10 07:00:59 +08:00
switch (id) {
case 0:
string formats
2019-03-19 00:46:52 +08:00
snprintf(retStr, sizeof(buf), "%u - DIRECT (ASK/NRZ)", id);
make style
2019-03-10 07:00:59 +08:00
break;
case 1:
string formats
2019-03-19 00:46:52 +08:00
snprintf(retStr, sizeof(buf), "%u - PSK 1 phase change when input changes", id);
make style
2019-03-10 07:00:59 +08:00
break;
case 2:
string formats
2019-03-19 00:46:52 +08:00
snprintf(retStr, sizeof(buf), "%u - PSK 2 phase change on bitclk if input high", id);
make style
2019-03-10 07:00:59 +08:00
break;
case 3:
string formats
2019-03-19 00:46:52 +08:00
snprintf(retStr, sizeof(buf), "%u - PSK 3 phase change on rising edge of input", id);
make style
2019-03-10 07:00:59 +08:00
break;
case 4:
string formats
2019-03-19 00:46:52 +08:00
snprintf(retStr, sizeof(buf), "%u - FSK 1 RF/8 RF/5", id);
make style
2019-03-10 07:00:59 +08:00
break;
case 5:
string formats
2019-03-19 00:46:52 +08:00
snprintf(retStr, sizeof(buf), "%u - FSK 2 RF/8 RF/10", id);
make style
2019-03-10 07:00:59 +08:00
break;
case 6:
t55xx info: tag out of spec FSKa modulations in standard mode
2019-04-01 03:30:30 +08:00
snprintf(retStr, sizeof(buf), "%u - %s RF/5 RF/8", id, (xmode) ? "FSK 1a" : _YELLOW_("FSK 1a"));
make style
2019-03-10 07:00:59 +08:00
break;
case 7:
t55xx info: tag out of spec FSKa modulations in standard mode
2019-04-01 03:30:30 +08:00
snprintf(retStr, sizeof(buf), "%u - %s RF/10 RF/8", id, (xmode) ? "FSK 2a" : _YELLOW_("FSK 2a"));
make style
2019-03-10 07:00:59 +08:00
break;
case 8:
string formats
2019-03-19 00:46:52 +08:00
snprintf(retStr, sizeof(buf), "%u - Manchester", id);
make style
2019-03-10 07:00:59 +08:00
break;
case 16:
string formats
2019-03-19 00:46:52 +08:00
snprintf(retStr, sizeof(buf), "%u - Biphase", id);
make style
2019-03-10 07:00:59 +08:00
break;
t55xx info: tag out of spec FSKa modulations in standard mode
2019-04-01 03:30:30 +08:00
case 24:
snprintf(retStr, sizeof(buf), "%u - %s", id, (xmode) ? "Biphase a - AKA Conditional Dephase Encoding(CDP)" : _YELLOW_("Reserved"));
make style
2019-03-10 07:00:59 +08:00
break;
default:
Revamped t55xx info: support offline block0, Q5, fix extended, add warns etc
2019-04-01 01:06:36 +08:00
snprintf(retStr, sizeof(buf), "0x%02X " _RED_("(Unknown)"), id);
break;
}
return buf;
}
style
2019-09-19 16:54:34 +08:00
char *GetDownlinkModeStr(uint8_t downlink_mode) {
T55xx DLMode Update
2019-09-14 12:13:55 +08:00
static char buf[30];
char *retStr = buf;
switch (downlink_mode) {
case T55XX_DLMODE_FIXED :
style
2019-09-19 16:54:34 +08:00
snprintf(retStr, sizeof(buf), "default/fixed bit length");
T55xx DLMode Update
2019-09-14 12:13:55 +08:00
break;
case T55XX_DLMODE_LLR :
style
2019-09-19 16:54:34 +08:00
snprintf(retStr, sizeof(buf), "long leading reference");
T55xx DLMode Update
2019-09-14 12:13:55 +08:00
break;
case T55XX_DLMODE_LEADING_ZERO :
style
2019-09-19 16:54:34 +08:00
snprintf(retStr, sizeof(buf), "leading zero reference");
T55xx DLMode Update
2019-09-14 12:13:55 +08:00
break;
case T55XX_DLMODE_1OF4 :
style
2019-09-19 16:54:34 +08:00
snprintf(retStr, sizeof(buf), "1 of 4 coding reference");
T55xx DLMode Update
2019-09-14 12:13:55 +08:00
break;
default:
snprintf(retStr, sizeof(buf), _RED_("(Unknown)"));
break;
}
return buf;
}
Revamped t55xx info: support offline block0, Q5, fix extended, add warns etc
2019-04-01 01:06:36 +08:00
char *GetQ5ModulationStr(uint32_t id) {
static char buf[60];
char *retStr = buf;
switch (id) {
case 0:
snprintf(retStr, sizeof(buf), "%u - Manchester", id);
break;
case 1:
snprintf(retStr, sizeof(buf), "%u - PSK 1 phase change when input changes", id);
break;
case 2:
snprintf(retStr, sizeof(buf), "%u - PSK 2 phase change on bitclk if input high", id);
break;
case 3:
snprintf(retStr, sizeof(buf), "%u - PSK 3 phase change on rising edge of input", id);
break;
case 4:
snprintf(retStr, sizeof(buf), "%u - FSK 1a RF/5 RF/8", id);
break;
case 5:
snprintf(retStr, sizeof(buf), "%u - FSK 2a RF/10 RF/8", id);
break;
case 6:
snprintf(retStr, sizeof(buf), "%u - Biphase", id);
break;
case 7:
snprintf(retStr, sizeof(buf), "%u - NRZ / Direct", id);
make style
2019-03-10 07:00:59 +08:00
break;
}
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
return buf;
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
changing {} style to match majority of previous style
2019-03-10 18:20:22 +08:00
char *GetModelStrFromCID(uint32_t cid) {
remove spurious spaces & tabs at end of lines
2019-03-09 15:59:13 +08:00
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
static char buf[10];
char *retStr = buf;
remove spurious spaces & tabs at end of lines
2019-03-09 15:59:13 +08:00
make style
2019-03-10 07:00:59 +08:00
if (cid == 1) snprintf(retStr, sizeof(buf), "ATA5577M1");
if (cid == 2) snprintf(retStr, sizeof(buf), "ATA5577M2");
t5577-M3 ATMEL info, thanks @doegox
2019-10-08 17:49:23 +08:00
if (cid == 3) snprintf(retStr, sizeof(buf), "ATA5577M3");
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
return buf;
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
Block0 source explicit in lf t55xx config and color coded
2020-12-09 06:54:29 +08:00
char *GetConfigBlock0Source(uint8_t id) {
#makestyleday
2020-12-12 21:46:40 +08:00
Made GetConfigBlock0Source string buf larger to acomodate ASCII color escape expansion
2020-12-09 07:32:23 +08:00
static char buf[40];
Block0 source explicit in lf t55xx config and color coded
2020-12-09 06:54:29 +08:00
char *retStr = buf;
switch (id) {
case autoDetect:
snprintf(retStr, sizeof(buf), _YELLOW_("(Auto detect)"));
break;
case userSet:
snprintf(retStr, sizeof(buf), _YELLOW_("(User set)"));
break;
case tagRead:
snprintf(retStr, sizeof(buf), _GREEN_("(Tag read)"));
break;
default:
snprintf(retStr, sizeof(buf), _RED_("(Unknown)"));
break;
}
return buf;
}
changing {} style to match majority of previous style
2019-03-10 18:20:22 +08:00
char *GetSelectedModulationStr(uint8_t id) {
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
static char buf[20];
char *retStr = buf;
make style
2019-03-10 07:00:59 +08:00
switch (id) {
case DEMOD_FSK:
snprintf(retStr, sizeof(buf), "FSK");
break;
case DEMOD_FSK1:
snprintf(retStr, sizeof(buf), "FSK1");
break;
case DEMOD_FSK1a:
snprintf(retStr, sizeof(buf), "FSK1a");
break;
case DEMOD_FSK2:
snprintf(retStr, sizeof(buf), "FSK2");
break;
case DEMOD_FSK2a:
snprintf(retStr, sizeof(buf), "FSK2a");
break;
case DEMOD_ASK:
snprintf(retStr, sizeof(buf), "ASK");
break;
case DEMOD_NRZ:
snprintf(retStr, sizeof(buf), "DIRECT/NRZ");
break;
case DEMOD_PSK1:
snprintf(retStr, sizeof(buf), "PSK1");
break;
case DEMOD_PSK2:
snprintf(retStr, sizeof(buf), "PSK2");
break;
case DEMOD_PSK3:
snprintf(retStr, sizeof(buf), "PSK3");
break;
case DEMOD_BI:
snprintf(retStr, sizeof(buf), "BIPHASE");
break;
case DEMOD_BIa:
snprintf(retStr, sizeof(buf), "BIPHASEa - (CDP)");
break;
default:
Revamped t55xx info: support offline block0, Q5, fix extended, add warns etc
2019-04-01 01:06:36 +08:00
snprintf(retStr, sizeof(buf), _RED_("(Unknown)"));
make style
2019-03-10 07:00:59 +08:00
break;
}
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
return buf;
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
use more static and fix [-Wmissing-prototypes]
2019-04-14 03:54:04 +08:00
/*
static void t55x7_create_config_block(int tagtype) {
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
use more static and fix [-Wmissing-prototypes]
2019-04-14 03:54:04 +08:00
// T55X7_DEFAULT_CONFIG_BLOCK, T55X7_RAW_CONFIG_BLOCK
// T55X7_EM_UNIQUE_CONFIG_BLOCK, T55X7_FDXB_CONFIG_BLOCK,
// T55X7_FDXB_CONFIG_BLOCK, T55X7_HID_26_CONFIG_BLOCK, T55X7_INDALA_64_CONFIG_BLOCK, T55X7_INDALA_224_CONFIG_BLOCK
// T55X7_GUARDPROXII_CONFIG_BLOCK, T55X7_VIKING_CONFIG_BLOCK, T55X7_NORALYS_CONFIG_BLOCK, T55X7_IOPROX_CONFIG_BLOCK
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
static char buf[60];
char *retStr = buf;
make style
2019-03-10 07:00:59 +08:00
switch (tagtype) {
case 0:
snprintf(retStr, sizeof(buf), "%08X - T55X7 Default", T55X7_DEFAULT_CONFIG_BLOCK);
break;
case 1:
snprintf(retStr, sizeof(buf), "%08X - T55X7 Raw", T55X7_RAW_CONFIG_BLOCK);
break;
case 2:
textual Q5
2020-08-28 21:53:34 +08:00
snprintf(retStr, sizeof(buf), "%08X - Q5/T5555 Default", T5555_DEFAULT_CONFIG_BLOCK);
make style
2019-03-10 07:00:59 +08:00
break;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
default:
break;
}
PrintAndLogEx(NORMAL, buf);
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
use more static and fix [-Wmissing-prototypes]
2019-04-14 03:54:04 +08:00
*/
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
Rework Cmd exposed API, use more static and fix [-Wmissing-prototypes], ongoing...
2019-04-12 08:07:11 +08:00
static int CmdResetRead(const char *Cmd) {
Added T55 downlink mode support
2019-07-23 07:50:28 +08:00
redundant
2020-05-12 16:30:14 +08:00
uint8_t downlink_mode = config.downlink_mode;
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
uint8_t flags = 0;
uint8_t cmdp = 0;
bool errors = false;
make style
2019-07-24 05:43:30 +08:00
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
while (param_getchar(Cmd, cmdp) != 0x00 && !errors) {
switch (tolower(param_getchar(Cmd, cmdp))) {
case 'h':
return usage_t55xx_resetread();
case 'r':
downlink_mode = param_get8ex(Cmd, cmdp + 1, 0, 10);
style
2019-09-13 22:32:37 +08:00
if (downlink_mode > 3)
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
downlink_mode = 0;
style
2019-09-13 22:32:37 +08:00
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
cmdp += 2;
break;
default:
PrintAndLogEx(WARNING, "Unknown parameter '%c'", param_getchar(Cmd, cmdp));
errors = true;
break;
}
}
make style
2019-07-24 05:43:30 +08:00
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
if (errors) return usage_t55xx_resetread();
make style
2019-07-24 05:43:30 +08:00
flags = downlink_mode << 3;
style
2019-09-13 22:32:37 +08:00
fix 'lf t55xx resetread' - NG and better fault handling
2019-10-01 01:47:36 +08:00
PacketResponseNG resp;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
clearCommandBuffer();
rename few CMD_* to get some less diversity
2019-08-04 01:17:00 +08:00
SendCommandNG(CMD_LF_T55XX_RESET_READ, &flags, sizeof(flags));
fix 'lf t55xx resetread' - NG and better fault handling
2019-10-01 01:47:36 +08:00
if (!WaitForResponseTimeout(CMD_LF_T55XX_RESET_READ, &resp, 2500)) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
PrintAndLogEx(WARNING, "command execution time out");
chg: cmdlft55xx return codes
2019-05-22 20:48:23 +08:00
return PM3_ETIMEOUT;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
}
fix 'lf t55xx resetread' - NG and better fault handling
2019-10-01 01:47:36 +08:00
if (resp.status == PM3_SUCCESS) {
Add support for client getting bigbufsize
2020-06-11 05:03:03 +08:00
uint16_t gotsize = pm3_capabilities.bigbuf_size - 1;
Update cmdlft55xx.c
2019-10-10 19:07:57 +08:00
uint8_t *got = calloc(gotsize, sizeof(uint8_t));
fix 'lf t55xx resetread' - NG and better fault handling
2019-10-01 01:47:36 +08:00
if (got == NULL) {
PrintAndLogEx(WARNING, "failed to allocate memory");
return PM3_EMALLOC;
}
Update cmdlft55xx.c
2019-10-10 19:07:57 +08:00
if (!GetFromDevice(BIG_BUF, got, gotsize, 0, NULL, 0, NULL, 2500, false)) {
fix 'lf t55xx resetread' - NG and better fault handling
2019-10-01 01:47:36 +08:00
PrintAndLogEx(WARNING, "command execution time out");
fix few mem leaks
2019-10-06 07:18:04 +08:00
free(got);
fix 'lf t55xx resetread' - NG and better fault handling
2019-10-01 01:47:36 +08:00
return PM3_ETIMEOUT;
}
Update cmdlft55xx.c
2019-10-10 19:07:57 +08:00
setGraphBuf(got, gotsize);
fix 'lf t55xx resetread' - NG and better fault handling
2019-10-01 01:47:36 +08:00
free(got);
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
}
chg: cmdlft55xx return codes
2019-05-22 20:48:23 +08:00
return PM3_SUCCESS;
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
Rework Cmd exposed API, use more static and fix [-Wmissing-prototypes], ongoing...
2019-04-12 08:07:11 +08:00
static int CmdT55xxWipe(const char *Cmd) {
lf t55xx protect/sniff - now use cliparser
2021-01-12 07:11:40 +08:00
CLIParserContext *ctx;
CLIParserInit(&ctx, "lf t55xx wipe",
"This commands wipes a tag, fills blocks 1-7 with zeros and a default configuration block",
"lf t55xx wipe -> wipes a T55x7 tag, config block 0x000880E0\n"
"lf t55xx wipe --q5 -> wipes a Q5/T5555 tag, config block 0x6001F004\n"
"lf t55xx wipe -p 11223344 -> wipes a T55x7 tag, config block 0x000880E0, using pwd"
);
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
lf t55xx protect/sniff - now use cliparser
2021-01-12 07:11:40 +08:00
// 4 + (5 or 6)
make style
2021-01-14 18:39:45 +08:00
void *argtable[9] = {
lf t55xx protect/sniff - now use cliparser
2021-01-12 07:11:40 +08:00
arg_param_begin,
arg_str0("c", "cfg", "<hex>", "configuration block0 (4 hex bytes)"),
arg_str0("p", "pwd", "<hex>", "password (4 hex bytes)"),
arg_lit0(NULL, "q5", "specify writing to Q5/T5555 tag using dedicated config block"),
};
uint8_t idx = 4;
arg_add_t55xx_downloadlink(argtable, &idx, T55XX_DLMODE_SINGLE, config.downlink_mode);
CLIExecWithReturn(ctx, Cmd, argtable, true);
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
lf t55xx protect/sniff - now use cliparser
2021-01-12 07:11:40 +08:00
bool usepwd = false, gotconf = false;
make style
2021-01-14 18:39:45 +08:00
uint32_t block0 = 0;
lf t55xx protect/sniff - now use cliparser
2021-01-12 07:11:40 +08:00
int res = arg_get_u32_hexstr_def(ctx, 1, 0, &block0);
lf t55xx recoverpw .. - now uses cliparser
2021-01-13 03:38:55 +08:00
if (res == 1) {
lf t55xx protect/sniff - now use cliparser
2021-01-12 07:11:40 +08:00
gotconf = true;
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
}
lf t55xx recoverpw .. - now uses cliparser
2021-01-13 03:38:55 +08:00
if (res == 2) {
CLIParserFree(ctx);
PrintAndLogEx(WARNING, "config block needs to be 4 hex bytes");
return PM3_EINVARG;
}
lf t55xx protect/sniff - now use cliparser
2021-01-12 07:11:40 +08:00
uint32_t password = 0;
res = arg_get_u32_hexstr_def(ctx, 2, 0x51243648, &password);
if (res) {
usepwd = true;
lf t55xx wipe - better handling of wrong length pwd
2021-02-03 07:15:19 +08:00
}
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
lf t55xx wipe - better handling of wrong length pwd
2021-02-03 07:15:19 +08:00
if (res == 2) {
PrintAndLogEx(WARNING, "Password should be 4 bytes, using default pwd");
lf t55xx protect/sniff - now use cliparser
2021-01-12 07:11:40 +08:00
}
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
make style
2021-01-14 18:39:45 +08:00
bool Q5 = arg_get_lit(ctx, 3);
lf t55xx protect/sniff - now use cliparser
2021-01-12 07:11:40 +08:00
CLIParserFree(ctx);
remove spurious spaces & tabs at end of lines
2019-03-09 15:59:13 +08:00
lf t55xx recoverpw .. - now uses cliparser
2021-01-13 03:38:55 +08:00
PrintAndLogEx(INFO, "Target " _YELLOW_("%s")" tag", (Q5) ? "Q5/T5555" : "T55x7");
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
// default config blocks.
if (gotconf == false) {
block0 = (Q5) ? 0x6001F004 : 0x000880E0;
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
}
lf t55xx recoverpw .. - now uses cliparser
2021-01-13 03:38:55 +08:00
if (usepwd)
PrintAndLogEx(INFO, "Using password " _GREEN_("%08X"), password);
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
lf t55xx recoverpw .. - now uses cliparser
2021-01-13 03:38:55 +08:00
char msg[80] = {0};
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
if (gotconf)
lf t55xx recoverpw .. - now uses cliparser
2021-01-13 03:38:55 +08:00
snprintf(msg, sizeof(msg), "User provided configuration block " _GREEN_("%08X"), block0);
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
else
lf t55xx recoverpw .. - now uses cliparser
2021-01-13 03:38:55 +08:00
snprintf(msg, sizeof(msg), "Default configuration block " _GREEN_("%08X"), block0);
style
2019-09-19 16:54:34 +08:00
lf t55xx recoverpw .. - now uses cliparser
2021-01-13 03:38:55 +08:00
PrintAndLogEx(INFO, "%s\n", msg);
PrintAndLogEx(INFO, "Begin wiping...");
remove spurious spaces & tabs at end of lines
2019-03-09 15:59:13 +08:00
style
2019-09-19 16:54:34 +08:00
// Creating cmd string for write block :)
lf t55xx recoverpw .. - now uses cliparser
2021-01-13 03:38:55 +08:00
char writeData[36] = {0};
char *ptrData = writeData;
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
snprintf(ptrData, sizeof(writeData), "b 0 ");
if (usepwd) {
snprintf(ptrData + strlen(writeData), sizeof(writeData) - strlen(writeData), "p %08x ", password);
}
snprintf(ptrData + strlen(writeData), sizeof(writeData) - strlen(writeData), "d %08X", block0);
style
2019-09-19 16:54:34 +08:00
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
if (CmdT55xxWriteBlock(ptrData) != PM3_SUCCESS)
PrintAndLogEx(WARNING, "Warning: error writing blk 0");
remove spurious spaces & tabs at end of lines
2019-03-09 15:59:13 +08:00
make style
2019-03-10 07:00:59 +08:00
for (uint8_t blk = 1; blk < 8; blk++) {
remove spurious spaces & tabs at end of lines
2019-03-09 15:59:13 +08:00
make style
2019-03-10 07:00:59 +08:00
snprintf(ptrData, sizeof(writeData), "b %d d 0", blk);
remove spurious spaces & tabs at end of lines
2019-03-09 15:59:13 +08:00
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
if (CmdT55xxWriteBlock(ptrData) != PM3_SUCCESS)
PrintAndLogEx(WARNING, "Warning: error writing blk %d", blk);
remove spurious spaces & tabs at end of lines
2019-03-09 15:59:13 +08:00
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
memset(writeData, 0x00, sizeof(writeData));
}
style
2019-09-19 16:54:34 +08:00
T55xx DLMode Update
2019-09-14 12:13:55 +08:00
// Check and rest t55xx downlink mode.
if (config.downlink_mode != T55XX_DLMODE_FIXED) { // Detect found a different mode so card must support
snprintf(ptrData, sizeof(writeData), "b 3 1 d 00000000");
lf t55xx protect/sniff - now use cliparser
2021-01-12 07:11:40 +08:00
if (CmdT55xxWriteBlock(ptrData) != PM3_SUCCESS) {
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
PrintAndLogEx(WARNING, "Warning: failed writing block 3 page 1 (config)");
lf t55xx protect/sniff - now use cliparser
2021-01-12 07:11:40 +08:00
}
T55xx DLMode Update
2019-09-14 12:13:55 +08:00
memset(writeData, 0x00, sizeof(writeData));
}
chg: cmdlft55xx return codes
2019-05-22 20:48:23 +08:00
return PM3_SUCCESS;
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
use more static and fix [-Wmissing-prototypes]
2019-04-14 03:54:04 +08:00
static bool IsCancelled(void) {
Replace ukbhit by kbd_enter_pressed, not requiring tcgetattr: Note that it behaves differently now * it looks for Enter key only, not any key * it "eats" the input, no need for (void)getchar() after it * it works the same no matter the value of ICANON * the mingw version has been adapted to act the similarly This should fix its usage on Android where tcgetattr always returns -1
2019-07-11 19:01:34 +08:00
if (kbd_enter_pressed()) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
PrintAndLogEx(WARNING, "\naborted via keyboard!\n");
return true;
}
return false;
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
chg: 'lf t55xx chk' - refactored to use loadDictionary
2019-03-26 23:18:40 +08:00
// load a default pwd file.
Rework Cmd exposed API, use more static and fix [-Wmissing-prototypes], ongoing...
2019-04-12 08:07:11 +08:00
static int CmdT55xxChkPwds(const char *Cmd) {
fix lf em 4x05 write - pwd/data. t55xx chk - now uses cliparser, and color to cliparser empty message
2021-01-28 05:52:08 +08:00
CLIParserContext *ctx;
CLIParserInit(&ctx, "lf t55xx chk",
"This command uses a dictionary attack.\n"
"For some cloners, try '--em' for known pwdgen algo.\n"
"Try to reading Page 0 block 7 before.\n"
_RED_("WARNING:") _CYAN_(" this may brick non-password protected chips!"),
"lf t55xx chk -m -> use dictionary from flash memory (RDV4)\n"
"lf t55xx chk -f my_dictionary_pwds -> loads a default keys dictionary file\n"
"lf t55xx chk --em aa11223344 -> try known pwdgen algo from some cloners based on EM4100 ID"
);
coverity fix 309975
2021-01-28 22:29:52 +08:00
// Calculate size of argtable accordingly:
// 1 (help) + 3 (three user specified params) + ( 5 or 6 T55XX_DLMODE)
// 4 + (T55XX_DLMODE_xxx 5)
// 4 + (T55XX_DLMODE_ALL 6) == 10
void *argtable[10] = {
fix lf em 4x05 write - pwd/data. t55xx chk - now uses cliparser, and color to cliparser empty message
2021-01-28 05:52:08 +08:00
arg_param_begin,
arg_lit0("m", "fm", "use dictionary from flash memory (RDV4)"),
arg_str0("f", "file", "<filename>", "file name"),
arg_str0(NULL, "em", "<hex>", "EM4100 ID (5 hex bytes)"),
};
uint8_t idx = 4;
arg_add_t55xx_downloadlink(argtable, &idx, T55XX_DLMODE_ALL, T55XX_DLMODE_ALL);
CLIExecWithReturn(ctx, Cmd, argtable, true);
bool from_flash = arg_get_lit(ctx, 1);
chg: 'lf t55xx chk' - refactored to use loadDictionary
2019-03-26 23:18:40 +08:00
fix lf em 4x05 write - pwd/data. t55xx chk - now uses cliparser, and color to cliparser empty message
2021-01-28 05:52:08 +08:00
int fnlen = 0;
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
char filename[FILE_PATH_SIZE] = {0};
fix lf em 4x05 write - pwd/data. t55xx chk - now uses cliparser, and color to cliparser empty message
2021-01-28 05:52:08 +08:00
CLIParamStrToBuf(arg_get_str(ctx, 2), (uint8_t *)filename, sizeof(filename), &fnlen);
make style
2019-07-24 05:43:30 +08:00
White Cloner Password Based on the findings of paleopterix
2020-09-26 11:19:35 +08:00
// White cloner password based on EM4100 ID
fix lf em 4x05 write - pwd/data. t55xx chk - now uses cliparser, and color to cliparser empty message
2021-01-28 05:52:08 +08:00
bool use_calc_password = false;
uint32_t card_password = 0x00;
uint64_t cardid = 0;
int res = arg_get_u64_hexstr_def_nlen(ctx, 3, 0x00, &cardid, 5, true);
if (res == 1) {
use_calc_password = true;
uint32_t calc = cardid & 0xFFFFFFFF;
card_password = lf_t55xx_white_pwdgen(calc);
make style
2019-07-24 05:43:30 +08:00
}
fix lf em 4x05 write - pwd/data. t55xx chk - now uses cliparser, and color to cliparser empty message
2021-01-28 05:52:08 +08:00
if (res == 2) {
CLIParserFree(ctx);
PrintAndLogEx(WARNING, "EM4100 ID must be 5 hex bytes");
return PM3_EINVARG;
}
if (res == 0) {
CLIParserFree(ctx);
return PM3_EINVARG;
}
bool r0 = arg_get_lit(ctx, 4);
bool r1 = arg_get_lit(ctx, 5);
bool r2 = arg_get_lit(ctx, 6);
bool r3 = arg_get_lit(ctx, 7);
bool ra = arg_get_lit(ctx, 8);
CLIParserFree(ctx);
make style
2019-07-24 05:43:30 +08:00
fix lf em 4x05 write - pwd/data. t55xx chk - now uses cliparser, and color to cliparser empty message
2021-01-28 05:52:08 +08:00
if ((r0 + r1 + r2 + r3 + ra) > 1) {
PrintAndLogEx(FAILED, "Error multiple downlink encoding");
return PM3_EINVARG;
}
make style
2020-11-02 08:46:47 +08:00
fix lf em 4x05 write - pwd/data. t55xx chk - now uses cliparser, and color to cliparser empty message
2021-01-28 05:52:08 +08:00
uint8_t downlink_mode = config.downlink_mode;
if (r0)
downlink_mode = refFixedBit;
else if (r1)
downlink_mode = refLongLeading;
else if (r2)
downlink_mode = refLeading0;
else if (r3)
downlink_mode = ref1of4;
bool use_pwd_file = false;
make style
2020-11-02 08:46:47 +08:00
if (strlen(filename) == 0) {
lf t55xx chk - now uses default dictionary if none is specified
2020-10-31 00:34:19 +08:00
snprintf(filename, sizeof(filename), "t55xx_default_pwds");
use_pwd_file = true;
}
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
fix lf em 4x05 write - pwd/data. t55xx chk - now uses cliparser, and color to cliparser empty message
2021-01-28 05:52:08 +08:00
PrintAndLogEx(INFO, "press " _GREEN_("'enter'") " to cancel the command");
lf t55xx chk - now uses default dictionary if none is specified
2020-10-31 00:34:19 +08:00
PrintAndLogEx(NORMAL, "");
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
/*
fix: 'lf t55xx chk' fix: 'lf t55xx brute' fix: 'lf t55xx recoverpwd' - now works like they should again.
2019-03-27 03:21:10 +08:00
// block 7, page1 = false, usepwd = false, override = false, pwd = 00000000
chf: lf asksim - uses NG
2019-05-24 19:06:08 +08:00
if ( T55xxReadBlock(7, false, false, false, 0x00000000) == PM3_SUCCESS) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
// now try to validate it..
PrintAndLogEx(WARNING, "\n Block 7 was readable");
chg: cmdlft55xx return codes
2019-05-22 20:48:23 +08:00
return PM3_SUCCESS;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
}
*/
fix lf em 4x05 write - pwd/data. t55xx chk - now uses cliparser, and color to cliparser empty message
2021-01-28 05:52:08 +08:00
bool found = false;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
uint64_t t1 = msclock();
make style
2019-07-24 05:43:30 +08:00
uint8_t flags = downlink_mode << 3;
Added T55 downlink mode support
2019-07-23 07:50:28 +08:00
if (from_flash) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
clearCommandBuffer();
rename few CMD_* to get some less diversity
2019-08-04 01:17:00 +08:00
SendCommandNG(CMD_LF_T55XX_CHK_PWDS, &flags, sizeof(flags));
Rename few stuff for consistency
2019-04-18 18:43:35 +08:00
PacketResponseNG resp;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
fix lf em 4x05 write - pwd/data. t55xx chk - now uses cliparser, and color to cliparser empty message
2021-01-28 05:52:08 +08:00
uint8_t timeout = 0;
lf t55 chk m (works again!). lf t55 config (prints correct pwd if used)
2020-08-21 20:10:32 +08:00
while (!WaitForResponseTimeout(CMD_LF_T55XX_CHK_PWDS, &resp, 2000)) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
timeout++;
no printf, sprintf
2020-08-29 20:13:18 +08:00
PrintAndLogEx(NORMAL, "." NOLF);
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
if (timeout > 180) {
lf t55xx chk - now uses default dictionary if none is specified
2020-10-31 00:34:19 +08:00
PrintAndLogEx(WARNING, "\nno response from Proxmark3. Aborting...");
chg: cmdlft55xx return codes
2019-05-22 20:48:23 +08:00
return PM3_ENODATA;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
}
}
no printf, sprintf
2020-08-29 20:13:18 +08:00
PrintAndLogEx(NORMAL, "");
lf t55 chk m (works again!). lf t55 config (prints correct pwd if used)
2020-08-21 20:10:32 +08:00
struct p {
bool found;
uint32_t candidate;
} PACKED;
style
2020-09-07 16:35:09 +08:00
struct p *packet = (struct p *)resp.data.asBytes;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
lf t55 chk m (works again!). lf t55 config (prints correct pwd if used)
2020-08-21 20:10:32 +08:00
if (packet->found) {
lf t55xx chk - now uses default dictionary if none is specified
2020-10-31 00:34:19 +08:00
PrintAndLogEx(SUCCESS, "\nfound a candidate [ " _YELLOW_("%08"PRIX32) " ]", packet->candidate);
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
lf t55 chk m (works again!). lf t55 config (prints correct pwd if used)
2020-08-21 20:10:32 +08:00
if (AcquireData(T55x7_PAGE0, T55x7_CONFIGURATION_BLOCK, true, packet->candidate, downlink_mode)) {
rename t55xx trydetectmod
2020-10-09 21:31:27 +08:00
found = t55xxTryDetectModulationEx(downlink_mode, T55XX_PrintConfig, 0, packet->candidate);
check returnvalue
2019-04-08 20:41:06 +08:00
if (found) {
lf t55xx chk - now uses default dictionary if none is specified
2020-10-31 00:34:19 +08:00
PrintAndLogEx(SUCCESS, "found valid password [ " _GREEN_("%08"PRIX32) " ]", packet->candidate);
Added T55 downlink mode support
2019-07-23 07:50:28 +08:00
check returnvalue
2019-04-08 20:41:06 +08:00
} else {
lf t55xx chk - now uses default dictionary if none is specified
2020-10-31 00:34:19 +08:00
PrintAndLogEx(WARNING, "check pwd failed");
check returnvalue
2019-04-08 20:41:06 +08:00
}
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
} else {
lf t55xx chk - now uses default dictionary if none is specified
2020-10-31 00:34:19 +08:00
PrintAndLogEx(WARNING, "check pwd failed");
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
}
} else {
lf t55xx chk - now uses default dictionary if none is specified
2020-10-31 00:34:19 +08:00
PrintAndLogEx(WARNING, "check pwd failed");
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
}
goto out;
}
fix lf em 4x05 write - pwd/data. t55xx chk - now uses cliparser, and color to cliparser empty message
2021-01-28 05:52:08 +08:00
// to try each downlink mode for each password
int dl_mode;
White Cloner Password Based on the findings of paleopterix
2020-09-26 11:19:35 +08:00
// try calculated password
fix lf em 4x05 write - pwd/data. t55xx chk - now uses cliparser, and color to cliparser empty message
2021-01-28 05:52:08 +08:00
if (use_calc_password) {
White Cloner Password Based on the findings of paleopterix
2020-09-26 11:19:35 +08:00
fix lf em 4x05 write - pwd/data. t55xx chk - now uses cliparser, and color to cliparser empty message
2021-01-28 05:52:08 +08:00
PrintAndLogEx(INFO, "testing %08"PRIX32" generated ", card_password);
White Cloner Password Based on the findings of paleopterix
2020-09-26 11:19:35 +08:00
for (dl_mode = downlink_mode; dl_mode <= 3; dl_mode++) {
fix lf em 4x05 write - pwd/data. t55xx chk - now uses cliparser, and color to cliparser empty message
2021-01-28 05:52:08 +08:00
if (!AcquireData(T55x7_PAGE0, T55x7_CONFIGURATION_BLOCK, true, card_password, dl_mode)) {
White Cloner Password Based on the findings of paleopterix
2020-09-26 11:19:35 +08:00
continue;
}
fix lf em 4x05 write - pwd/data. t55xx chk - now uses cliparser, and color to cliparser empty message
2021-01-28 05:52:08 +08:00
found = t55xxTryDetectModulationEx(dl_mode, T55XX_PrintConfig, 0, card_password);
White Cloner Password Based on the findings of paleopterix
2020-09-26 11:19:35 +08:00
if (found) {
fix lf em 4x05 write - pwd/data. t55xx chk - now uses cliparser, and color to cliparser empty message
2021-01-28 05:52:08 +08:00
PrintAndLogEx(SUCCESS, "found valid password : [ " _GREEN_("%08"PRIX32) " ]", card_password);
break;
White Cloner Password Based on the findings of paleopterix
2020-09-26 11:19:35 +08:00
}
fix lf em 4x05 write - pwd/data. t55xx chk - now uses cliparser, and color to cliparser empty message
2021-01-28 05:52:08 +08:00
if (ra == false)
break;
White Cloner Password Based on the findings of paleopterix
2020-09-26 11:19:35 +08:00
}
}
lf t55xx chk - now uses default dictionary if none is specified
2020-10-31 00:34:19 +08:00
if ((found == false) && use_pwd_file) {
expanded from u16 -> u32 for keys to be loaded
2020-05-20 14:58:28 +08:00
uint32_t keycount = 0;
fix lf em 4x05 write - pwd/data. t55xx chk - now uses cliparser, and color to cliparser empty message
2021-01-28 05:52:08 +08:00
uint8_t *keyblock = NULL;
make style
2019-03-28 21:19:41 +08:00
fix lf em 4x05 write - pwd/data. t55xx chk - now uses cliparser, and color to cliparser empty message
2021-01-28 05:52:08 +08:00
res = loadFileDICTIONARY_safe(filename, (void **) &keyblock, 4, &keycount);
if (res != PM3_SUCCESS || keycount == 0 || keyblock == NULL) {
lf t55xx chk - now uses default dictionary if none is specified
2020-10-31 00:34:19 +08:00
PrintAndLogEx(WARNING, "no keys found in file");
fix lf em 4x05 write - pwd/data. t55xx chk - now uses cliparser, and color to cliparser empty message
2021-01-28 05:52:08 +08:00
if (keyblock != NULL)
free(keyblock);
fix: uint cant be negative..
2019-08-29 03:16:09 +08:00
chg: cmdlft55xx return codes
2019-05-22 20:48:23 +08:00
return PM3_ESOFT;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
}
make style
2020-11-02 08:46:47 +08:00
fix lf em 4x05 write - pwd/data. t55xx chk - now uses cliparser, and color to cliparser empty message
2021-01-28 05:52:08 +08:00
PrintAndLogEx(INFO, "press " _GREEN_("'enter'") " to cancel the command");
make style
2020-11-02 08:46:47 +08:00
fix lf em 4x05 write - pwd/data. t55xx chk - now uses cliparser, and color to cliparser empty message
2021-01-28 05:52:08 +08:00
for (uint32_t c = 0; c < keycount && found == false; ++c) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
better offline mode
2019-05-01 05:52:40 +08:00
if (!session.pm3_present) {
lf t55xx chk - now uses default dictionary if none is specified
2020-10-31 00:34:19 +08:00
PrintAndLogEx(WARNING, "device offline\n");
fix lf em 4x05 write - pwd/data. t55xx chk - now uses cliparser, and color to cliparser empty message
2021-01-28 05:52:08 +08:00
free(keyblock);
chg: cmdlft55xx return codes
2019-05-22 20:48:23 +08:00
return PM3_ENODATA;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
}
if (IsCancelled()) {
fix lf em 4x05 write - pwd/data. t55xx chk - now uses cliparser, and color to cliparser empty message
2021-01-28 05:52:08 +08:00
free(keyblock);
chg: cmdlft55xx return codes
2019-05-22 20:48:23 +08:00
return PM3_EOPABORTED;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
}
fix lf em 4x05 write - pwd/data. t55xx chk - now uses cliparser, and color to cliparser empty message
2021-01-28 05:52:08 +08:00
uint32_t curr_password = bytes_to_num(keyblock + 4 * c, 4);
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
lf t55xx chk - now uses default dictionary if none is specified
2020-10-31 00:34:19 +08:00
PrintAndLogEx(INFO, "testing %08"PRIX32, curr_password);
make style
2019-07-24 05:43:30 +08:00
for (dl_mode = downlink_mode; dl_mode <= 3; dl_mode++) {
Update cmdlft55xx.c
2019-10-10 19:07:57 +08:00
if (!AcquireData(T55x7_PAGE0, T55x7_CONFIGURATION_BLOCK, true, curr_password, dl_mode)) {
make style
2019-07-24 05:43:30 +08:00
continue;
}
rename t55xx trydetectmod
2020-10-09 21:31:27 +08:00
found = t55xxTryDetectModulationEx(dl_mode, T55XX_PrintConfig, 0, curr_password);
make style
2019-07-24 05:43:30 +08:00
if (found) {
lf t55xx chk - now uses default dictionary if none is specified
2020-10-31 00:34:19 +08:00
PrintAndLogEx(SUCCESS, "found valid password: [ " _GREEN_("%08"PRIX32) " ]", curr_password);
fix lf em 4x05 write - pwd/data. t55xx chk - now uses cliparser, and color to cliparser empty message
2021-01-28 05:52:08 +08:00
break;
make style
2019-07-24 05:43:30 +08:00
}
fix lf em 4x05 write - pwd/data. t55xx chk - now uses cliparser, and color to cliparser empty message
2021-01-28 05:52:08 +08:00
if (ra == false) // Exit loop if not trying all downlink modes
break;
make style
2019-07-24 05:43:30 +08:00
}
}
fix lf em 4x05 write - pwd/data. t55xx chk - now uses cliparser, and color to cliparser empty message
2021-01-28 05:52:08 +08:00
free(keyblock);
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
}
lf t55xx chk - now uses default dictionary if none is specified
2020-10-31 00:34:19 +08:00
if (found == false)
fix lf em 4x05 write - pwd/data. t55xx chk - now uses cliparser, and color to cliparser empty message
2021-01-28 05:52:08 +08:00
PrintAndLogEx(WARNING, "failed to find password");
remove spurious spaces & tabs at end of lines
2019-03-09 15:59:13 +08:00
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
out:
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
t1 = msclock() - t1;
textual
2020-08-21 22:47:18 +08:00
PrintAndLogEx(SUCCESS, "\ntime in check pwd " _YELLOW_("%.0f") " seconds\n", (float)t1 / 1000.0);
chg: cmdlft55xx return codes
2019-05-22 20:48:23 +08:00
return PM3_SUCCESS;
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
fix: 'lf t55xx chk' fix: 'lf t55xx brute' fix: 'lf t55xx recoverpwd' - now works like they should again.
2019-03-27 03:21:10 +08:00
// Bruteforce - incremental password range search
Rework Cmd exposed API, use more static and fix [-Wmissing-prototypes], ongoing...
2019-04-12 08:07:11 +08:00
static int CmdT55xxBruteForce(const char *Cmd) {
lf t55 bruteforce - now use cliparser
2021-01-13 03:59:44 +08:00
CLIParserContext *ctx;
CLIParserInit(&ctx, "lf t55xx bruteforce",
"This command uses bruteforce to scan a number range.\n"
"Try reading Page 0, block 7 before.\n\n"
_RED_("WARNING") _CYAN_(" this may brick non-password protected chips!"),
"lf t55xx bruteforce --r2 -s aaaaaa77 -e aaaaaa99\n"
);
remove spurious spaces & tabs at end of lines
2019-03-09 15:59:13 +08:00
make style
2021-01-14 18:39:45 +08:00
void *argtable[3 + 6] = {
lf t55 bruteforce - now use cliparser
2021-01-13 03:59:44 +08:00
arg_param_begin,
arg_str1("s", "start", "<hex>", "search start password (4 hex bytes)"),
arg_str1("e", "end", "<hex>", "search end password (4 hex bytes)"),
};
uint8_t idx = 3;
arg_add_t55xx_downloadlink(argtable, &idx, T55XX_DLMODE_ALL, T55XX_DLMODE_ALL);
CLIExecWithReturn(ctx, Cmd, argtable, true);
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
lf t55 bruteforce - now use cliparser
2021-01-13 03:59:44 +08:00
uint32_t start_password = 0;
int res = arg_get_u32_hexstr_def(ctx, 1, 0, &start_password);
if (res == 2) {
CLIParserFree(ctx);
PrintAndLogEx(FAILED, "start password should be 4 bytes");
return PM3_EINVARG;
}
style
2019-09-13 22:32:37 +08:00
lf t55 bruteforce - now use cliparser
2021-01-13 03:59:44 +08:00
uint32_t end_password = 0xFFFFFFFF;
res = arg_get_u32_hexstr_def(ctx, 2, 0xFFFFFFFF, &end_password);
if (res == 2) {
CLIParserFree(ctx);
PrintAndLogEx(FAILED, "end password should be 4 bytes");
return PM3_EINVARG;
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
}
make style
2019-07-24 05:43:30 +08:00
lf t55 bruteforce - now use cliparser
2021-01-13 03:59:44 +08:00
bool r0 = arg_get_lit(ctx, 3);
bool r1 = arg_get_lit(ctx, 4);
bool r2 = arg_get_lit(ctx, 5);
bool r3 = arg_get_lit(ctx, 6);
bool ra = arg_get_lit(ctx, 7);
CLIParserFree(ctx);
Update cmdlft55xx.c
2019-10-10 19:07:57 +08:00
lf t55 bruteforce - now use cliparser
2021-01-13 03:59:44 +08:00
if ((r0 + r1 + r2 + r3 + ra) > 1) {
PrintAndLogEx(FAILED, "Error multiple downlink encoding");
return PM3_EINVARG;
}
remove spurious spaces & tabs at end of lines
2019-03-09 15:59:13 +08:00
lf t55 bruteforce - now use cliparser
2021-01-13 03:59:44 +08:00
uint8_t downlink_mode = config.downlink_mode;
if (r0)
downlink_mode = refFixedBit;
else if (r1)
downlink_mode = refLongLeading;
else if (r2)
downlink_mode = refLeading0;
else if (r3)
downlink_mode = ref1of4;
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
lf t55 bruteforce - now use cliparser
2021-01-13 03:59:44 +08:00
uint32_t curr = 0;
uint8_t found = 0; // > 0 if found xx1 xx downlink needed, 1 found
remove spurious spaces & tabs at end of lines
2019-03-09 15:59:13 +08:00
lf t55 bruteforce - now use cliparser
2021-01-13 03:59:44 +08:00
if (start_password >= end_password) {
PrintAndLogEx(FAILED, "Error, start larger then end password");
return PM3_EINVARG;
}
PrintAndLogEx(INFO, "press " _GREEN_("'enter'") " to cancel the command");
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
PrintAndLogEx(INFO, "Search password range [%08X -> %08X]", start_password, end_password);
lf t55 bruteforce - now use cliparser
2021-01-13 03:59:44 +08:00
uint64_t t1 = msclock();
curr = start_password;
make style
2019-03-28 21:19:41 +08:00
lf t55 bruteforce - now use cliparser
2021-01-13 03:59:44 +08:00
while (found == 0) {
make style
2021-01-14 18:39:45 +08:00
no printf, sprintf
2020-08-29 20:13:18 +08:00
PrintAndLogEx(NORMAL, "." NOLF);
remove spurious spaces & tabs at end of lines
2019-03-09 15:59:13 +08:00
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
if (IsCancelled()) {
chg: cmdlft55xx return codes
2019-05-22 20:48:23 +08:00
return PM3_EOPABORTED;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
}
remove spurious spaces & tabs at end of lines
2019-03-09 15:59:13 +08:00
lf t55 bruteforce - now use cliparser
2021-01-13 03:59:44 +08:00
found = t55xx_try_one_password(curr, downlink_mode, ra);
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
if (curr == end_password)
break;
make style
2019-03-28 21:19:41 +08:00
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
curr++;
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
remove spurious spaces & tabs at end of lines
2019-03-09 15:59:13 +08:00
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
PrintAndLogEx(NORMAL, "");
remove spurious spaces & tabs at end of lines
2019-03-09 15:59:13 +08:00
Added T55 downlink mode support
2019-07-23 07:50:28 +08:00
if (found) {
Fix prompt colors in log -> spurious space in color macros -> adjust lots of files...
2020-04-22 08:22:55 +08:00
PrintAndLogEx(SUCCESS, "Found valid password: [ " _GREEN_("%08X") " ]", curr - 1);
make style
2019-07-24 05:43:30 +08:00
T55xx_Print_DownlinkMode((found >> 1) & 3);
} else
Fix prompt colors in log -> spurious space in color macros -> adjust lots of files...
2020-04-22 08:22:55 +08:00
PrintAndLogEx(WARNING, "Bruteforce failed, last tried: [ " _YELLOW_("%08X") " ]", curr);
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
t1 = msclock() - t1;
textual
2020-08-21 22:47:18 +08:00
PrintAndLogEx(SUCCESS, "\ntime in bruteforce " _YELLOW_("%.0f") " seconds\n", (float)t1 / 1000.0);
chg: cmdlft55xx return codes
2019-05-22 20:48:23 +08:00
return PM3_SUCCESS;
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
lf t55xx recoverpw .. - now uses cliparser
2021-01-13 03:38:55 +08:00
uint8_t t55xx_try_one_password(uint32_t password, uint8_t downlink_mode, bool try_all_dl_modes) {
make style
2019-07-24 05:43:30 +08:00
PrintAndLogEx(INFO, "Trying password %08X", password);
lf t55xx recoverpw .. - now uses cliparser
2021-01-13 03:38:55 +08:00
// ensure 0-3
downlink_mode = (downlink_mode & 3);
make style
2019-07-24 05:43:30 +08:00
// check if dl mode 4 and loop if needed
lf t55xx recoverpw .. - now uses cliparser
2021-01-13 03:38:55 +08:00
for (uint8_t dl_mode = downlink_mode; dl_mode < 4; dl_mode++) {
make style
2019-07-24 05:43:30 +08:00
Update cmdlft55xx.c
2019-10-10 19:07:57 +08:00
if (AcquireData(T55x7_PAGE0, T55x7_CONFIGURATION_BLOCK, true, password, dl_mode)) {
// if (getSignalProperties()->isnoise == false) {
// } else {
rename t55xx trydetectmod
2020-10-09 21:31:27 +08:00
if (t55xxTryDetectModulationEx(dl_mode, T55XX_PrintConfig, 0, password)) {
Update cmdlft55xx.c
2019-10-10 19:07:57 +08:00
return 1 + (dl_mode << 1);
}
// }
make style
2019-07-24 05:43:30 +08:00
}
lf t55xx recoverpw .. - now uses cliparser
2021-01-13 03:38:55 +08:00
if (try_all_dl_modes == false) {
break;
}
make style
2019-07-24 05:43:30 +08:00
}
return 0;
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
Rework Cmd exposed API, use more static and fix [-Wmissing-prototypes], ongoing...
2019-04-12 08:07:11 +08:00
static int CmdT55xxRecoverPW(const char *Cmd) {
lf t55xx recoverpw .. - now uses cliparser
2021-01-13 03:38:55 +08:00
CLIParserContext *ctx;
CLIParserInit(&ctx, "lf t55xx recoverpw",
"This command uses a few tricks to try to recover mangled password.\n"
"Try reading Page 0, block 7 before.\n\n"
_RED_("WARNING") _CYAN_(" this may brick non-password protected chips!"),
"lf t55xx recoverpw\n"
"lf t55xx recoverpw -p 11223344\n"
"lf t55xx recoverpw -p 11223344 --r3\n"
);
// 2 + (5 or 6)
make style
2021-01-14 18:39:45 +08:00
void *argtable[8] = {
lf t55xx recoverpw .. - now uses cliparser
2021-01-13 03:38:55 +08:00
arg_param_begin,
fix t55xx protect/recoverpw - make param pwd optional
2021-01-27 16:09:42 +08:00
arg_str0("p", "pwd", "<hex>", "password (4 hex bytes)"),
lf t55xx recoverpw .. - now uses cliparser
2021-01-13 03:38:55 +08:00
};
uint8_t idx = 2;
arg_add_t55xx_downloadlink(argtable, &idx, T55XX_DLMODE_ALL, T55XX_DLMODE_ALL);
CLIExecWithReturn(ctx, Cmd, argtable, true);
uint32_t orig_password = 0;
int res = arg_get_u32_hexstr_def(ctx, 1, 0x51243648, &orig_password);
if (res == 2) {
PrintAndLogEx(INFO, "Password should be 4 bytes, using default pwd instead");
}
bool r0 = arg_get_lit(ctx, 2);
bool r1 = arg_get_lit(ctx, 3);
bool r2 = arg_get_lit(ctx, 4);
bool r3 = arg_get_lit(ctx, 5);
bool ra = arg_get_lit(ctx, 6);
CLIParserFree(ctx);
if ((r0 + r1 + r2 + r3 + ra) > 1) {
PrintAndLogEx(FAILED, "Error multiple downlink encoding");
return PM3_EINVARG;
}
uint8_t downlink_mode = config.downlink_mode;
if (r0)
downlink_mode = refFixedBit;
else if (r1)
downlink_mode = refLongLeading;
else if (r2)
downlink_mode = refLeading0;
else if (r3)
downlink_mode = ref1of4;
lf t55 bruteforce - now use cliparser
2021-01-13 03:59:44 +08:00
PrintAndLogEx(NORMAL, "press " _GREEN_("'enter'") " to cancel the command");
lf t55xx recoverpw .. - now uses cliparser
2021-01-13 03:38:55 +08:00
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
int bit = 0;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
uint32_t curr_password = 0x0;
uint32_t prev_password = 0xffffffff;
chg: 'lf t55xx info p' - got some more love, now can read with password :) chg: 'lf t55xx dump p' - less outputs and now can read with password :) chg: 'lf t55xx trace 1' - can now decode trace from a saved trace. However you must have correct configuration set in order to work. chg: 'lf t55xx wipe p' - now can use a password to write to configblock first.
2019-09-12 23:34:55 +08:00
uint32_t mask = 0x0;
uint8_t found = 0;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
// first try fliping each bit in the expected password
while (bit < 32) {
fix: shifting signed 32-bit value by 31 bits is undefined behaviour
2019-03-13 06:59:43 +08:00
curr_password = orig_password ^ (1u << bit);
lf t55xx recoverpw .. - now uses cliparser
2021-01-13 03:38:55 +08:00
found = t55xx_try_one_password(curr_password, downlink_mode, ra);
Added T55 downlink mode support
2019-07-23 07:50:28 +08:00
if (found > 0) // xx1 for found xx = dl mode used
fix: 'lf t55xx chk' fix: 'lf t55xx brute' fix: 'lf t55xx recoverpwd' - now works like they should again.
2019-03-27 03:21:10 +08:00
goto out;
make style
2019-03-28 21:19:41 +08:00
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
bit++;
make style
2019-03-28 21:19:41 +08:00
if (IsCancelled())
chg: cmdlft55xx return codes
2019-05-22 20:48:23 +08:00
return PM3_EOPABORTED;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
}
// now try to use partial original password, since block 7 should have been completely
// erased during the write sequence and it is possible that only partial password has been
// written
// not sure from which end the bit bits are written, so try from both ends
// from low bit to high bit
bit = 0;
while (bit < 32) {
fix: shifting signed 32-bit value by 31 bits is undefined behaviour
2019-03-13 06:59:43 +08:00
mask += (1u << bit);
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
curr_password = orig_password & mask;
// if updated mask didn't change the password, don't try it again
if (prev_password == curr_password) {
bit++;
continue;
}
make style
2019-03-28 21:19:41 +08:00
lf t55xx recoverpw .. - now uses cliparser
2021-01-13 03:38:55 +08:00
found = t55xx_try_one_password(curr_password, downlink_mode, ra);
Added T55 downlink mode support
2019-07-23 07:50:28 +08:00
if (found > 0)
make style
2019-03-28 21:19:41 +08:00
goto out;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
bit++;
prev_password = curr_password;
make style
2019-03-28 21:19:41 +08:00
if (IsCancelled())
chg: cmdlft55xx return codes
2019-05-22 20:48:23 +08:00
return PM3_EOPABORTED;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
}
// from high bit to low
bit = 0;
mask = 0xffffffff;
while (bit < 32) {
fix: shifting signed 32-bit value by 31 bits is undefined behaviour
2019-03-13 06:59:43 +08:00
mask -= (1u << bit);
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
curr_password = orig_password & mask;
// if updated mask didn't change the password, don't try it again
if (prev_password == curr_password) {
bit++;
continue;
}
lf t55xx recoverpw .. - now uses cliparser
2021-01-13 03:38:55 +08:00
found = t55xx_try_one_password(curr_password, downlink_mode, ra);
Added T55 downlink mode support
2019-07-23 07:50:28 +08:00
if (found > 0)
fix: 'lf t55xx chk' fix: 'lf t55xx brute' fix: 'lf t55xx recoverpwd' - now works like they should again.
2019-03-27 03:21:10 +08:00
goto out;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
bit++;
prev_password = curr_password;
make style
2019-03-28 21:19:41 +08:00
if (IsCancelled())
chg: cmdlft55xx return codes
2019-05-22 20:48:23 +08:00
return PM3_EOPABORTED;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
}
fix: 'lf t55xx chk' fix: 'lf t55xx brute' fix: 'lf t55xx recoverpwd' - now works like they should again.
2019-03-27 03:21:10 +08:00
out:
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
PrintAndLogEx(NORMAL, "");
Added T55 downlink mode support
2019-07-23 07:50:28 +08:00
if (found > 0) {
Fix prompt colors in log -> spurious space in color macros -> adjust lots of files...
2020-04-22 08:22:55 +08:00
PrintAndLogEx(SUCCESS, "Found valid password: [ " _GREEN_("%08X") " ]", curr_password);
make style
2019-07-24 05:43:30 +08:00
T55xx_Print_DownlinkMode((found >> 1) & 3);
lf t55xx recoverpw .. - now uses cliparser
2021-01-13 03:38:55 +08:00
} else {
PrintAndLogEx(FAILED, "Recover password failed");
}
chg: cmdlft55xx return codes
2019-05-22 20:48:23 +08:00
return PM3_SUCCESS;
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
remove spurious spaces & tabs at end of lines
2019-03-09 15:59:13 +08:00
// note length of data returned is different for different chips.
// some return all page 1 (64 bits) and others return just that block (32 bits)
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
// unfortunately the 64 bits makes this more likely to get a false positive...
changing {} style to match majority of previous style
2019-03-10 18:20:22 +08:00
bool tryDetectP1(bool getData) {
Added T55 downlink mode support
2019-07-23 07:50:28 +08:00
uint8_t preamble[] = {1, 1, 1, 0, 0, 0, 0, 0, 0, 0, 0, 1, 0, 1, 0, 1};
size_t startIdx = 0;
uint8_t fc1 = 0, fc2 = 0, ans = 0;
int clk = 0, firstClockEdge = 0;
bool st = true;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
make style
2019-03-10 07:00:59 +08:00
if (getData) {
Update cmdlft55xx.c
2019-10-10 19:07:57 +08:00
if (!AcquireData(T55x7_PAGE1, T55x7_TRACE_BLOCK1, false, 0, 0))
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
return false;
}
// try fsk clock detect. if successful it cannot be any other type of modulation... (in theory...)
ans = fskClocks(&fc1, &fc2, (uint8_t *)&clk, &firstClockEdge);
make style
2019-03-10 07:00:59 +08:00
if (ans && ((fc1 == 10 && fc2 == 8) || (fc1 == 8 && fc2 == 5))) {
LF: rework internal APIs
2020-09-28 17:50:20 +08:00
if ((FSKrawDemod(0, 0, 0, 0, false) == PM3_SUCCESS) &&
changing {} style to match majority of previous style
2019-03-10 18:20:22 +08:00
preambleSearchEx(DemodBuffer, preamble, sizeof(preamble), &DemodBufferLen, &startIdx, false) &&
(DemodBufferLen == 32 || DemodBufferLen == 64)) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
return true;
}
LF: rework internal APIs
2020-09-28 17:50:20 +08:00
if ((FSKrawDemod(0, 1, 0, 0, false) == PM3_SUCCESS) &&
changing {} style to match majority of previous style
2019-03-10 18:20:22 +08:00
preambleSearchEx(DemodBuffer, preamble, sizeof(preamble), &DemodBufferLen, &startIdx, false) &&
(DemodBufferLen == 32 || DemodBufferLen == 64)) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
return true;
}
return false;
}
make style
2019-07-13 06:38:30 +08:00
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
// try ask clock detect. it could be another type even if successful.
clk = GetAskClock("", false);
if (clk > 0) {
LF: rework internal APIs
2020-09-28 17:50:20 +08:00
if ((ASKDemod_ext(0, 0, 1, 0, false, false, false, 1, &st) == PM3_SUCCESS) &&
changing {} style to match majority of previous style
2019-03-10 18:20:22 +08:00
preambleSearchEx(DemodBuffer, preamble, sizeof(preamble), &DemodBufferLen, &startIdx, false) &&
(DemodBufferLen == 32 || DemodBufferLen == 64)) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
return true;
}
make style
2019-07-13 06:38:30 +08:00
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
st = true;
LF: rework internal APIs
2020-09-28 17:50:20 +08:00
if ((ASKDemod_ext(0, 1, 1, 0, false, false, false, 1, &st) == PM3_SUCCESS) &&
changing {} style to match majority of previous style
2019-03-10 18:20:22 +08:00
preambleSearchEx(DemodBuffer, preamble, sizeof(preamble), &DemodBufferLen, &startIdx, false) &&
(DemodBufferLen == 32 || DemodBufferLen == 64)) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
return true;
}
make style
2019-07-13 06:38:30 +08:00
LF: rework internal APIs
2020-09-28 17:50:20 +08:00
if ((ASKbiphaseDemod(0, 0, 0, 2, false) == PM3_SUCCESS) &&
changing {} style to match majority of previous style
2019-03-10 18:20:22 +08:00
preambleSearchEx(DemodBuffer, preamble, sizeof(preamble), &DemodBufferLen, &startIdx, false) &&
(DemodBufferLen == 32 || DemodBufferLen == 64)) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
return true;
}
style
2019-06-08 22:11:18 +08:00
LF: rework internal APIs
2020-09-28 17:50:20 +08:00
if ((ASKbiphaseDemod(0, 0, 1, 2, false) == PM3_SUCCESS) &&
changing {} style to match majority of previous style
2019-03-10 18:20:22 +08:00
preambleSearchEx(DemodBuffer, preamble, sizeof(preamble), &DemodBufferLen, &startIdx, false) &&
(DemodBufferLen == 32 || DemodBufferLen == 64)) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
return true;
}
}
make style
2019-07-13 06:38:30 +08:00
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
// try NRZ clock detect. it could be another type even if successful.
clk = GetNrzClock("", false); //has the most false positives :(
if (clk > 0) {
LF: rework internal APIs
2020-09-28 17:50:20 +08:00
if ((NRZrawDemod(0, 0, 1, false) == PM3_SUCCESS) &&
changing {} style to match majority of previous style
2019-03-10 18:20:22 +08:00
preambleSearchEx(DemodBuffer, preamble, sizeof(preamble), &DemodBufferLen, &startIdx, false) &&
(DemodBufferLen == 32 || DemodBufferLen == 64)) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
return true;
}
LF: rework internal APIs
2020-09-28 17:50:20 +08:00
if ((NRZrawDemod(0, 1, 1, false) == PM3_SUCCESS) &&
changing {} style to match majority of previous style
2019-03-10 18:20:22 +08:00
preambleSearchEx(DemodBuffer, preamble, sizeof(preamble), &DemodBufferLen, &startIdx, false) &&
(DemodBufferLen == 32 || DemodBufferLen == 64)) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
return true;
}
}
// Fewer card uses PSK
// try psk clock detect. if successful it cannot be any other type of modulation... (in theory...)
clk = GetPskClock("", false);
if (clk > 0) {
// allow undo
// save_restoreGB(GRAPH_SAVE);
// skip first 160 samples to allow antenna to settle in (psk gets inverted occasionally otherwise)
//CmdLtrim("160");
LF: rework internal APIs
2020-09-28 17:50:20 +08:00
if ((PSKDemod(0, 0, 6, false) == PM3_SUCCESS) &&
changing {} style to match majority of previous style
2019-03-10 18:20:22 +08:00
preambleSearchEx(DemodBuffer, preamble, sizeof(preamble), &DemodBufferLen, &startIdx, false) &&
(DemodBufferLen == 32 || DemodBufferLen == 64)) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
//save_restoreGB(GRAPH_RESTORE);
return true;
}
LF: rework internal APIs
2020-09-28 17:50:20 +08:00
if ((PSKDemod(0, 1, 6, false) == PM3_SUCCESS) &&
changing {} style to match majority of previous style
2019-03-10 18:20:22 +08:00
preambleSearchEx(DemodBuffer, preamble, sizeof(preamble), &DemodBufferLen, &startIdx, false) &&
(DemodBufferLen == 32 || DemodBufferLen == 64)) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
//save_restoreGB(GRAPH_RESTORE);
return true;
}
// PSK2 - needs a call to psk1TOpsk2.
LF: rework internal APIs
2020-09-28 17:50:20 +08:00
if (PSKDemod(0, 0, 6, false) == PM3_SUCCESS) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
psk1TOpsk2(DemodBuffer, DemodBufferLen);
if (preambleSearchEx(DemodBuffer, preamble, sizeof(preamble), &DemodBufferLen, &startIdx, false) &&
changing {} style to match majority of previous style
2019-03-10 18:20:22 +08:00
(DemodBufferLen == 32 || DemodBufferLen == 64)) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
//save_restoreGB(GRAPH_RESTORE);
return true;
}
} // inverse waves does not affect PSK2 demod
//undo trim samples
//save_restoreGB(GRAPH_RESTORE);
// no other modulation clocks = 2 or 4 so quit searching
if (fc1 != 8) return false;
}
return false;
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
// does this need to be a callable command?
Rework Cmd exposed API, use more static and fix [-Wmissing-prototypes], ongoing...
2019-04-12 08:07:11 +08:00
static int CmdT55xxDetectPage1(const char *Cmd) {
lf t55xx recoverpw .. - now uses cliparser
2021-01-13 03:38:55 +08:00
CLIParserContext *ctx;
CLIParserInit(&ctx, "lf t55xx p1detect",
"Detect Page 1 of a T55xx chip",
"lf t55xx p1detect\n"
"lf t55xx p1detect -1\n"
"lf t55xx p1detect -p 11223344 --r3\n"
);
// 2 + (5 or 6)
make style
2021-01-14 18:39:45 +08:00
void *argtable[7] = {
lf t55xx recoverpw .. - now uses cliparser
2021-01-13 03:38:55 +08:00
arg_param_begin,
arg_lit0("1", NULL, "extract using data from graphbuffer"),
arg_str0("p", "pwd", "<hex>", "password (4 hex bytes)"),
};
uint8_t idx = 3;
arg_add_t55xx_downloadlink(argtable, &idx, T55XX_DLMODE_SINGLE, config.downlink_mode);
CLIExecWithReturn(ctx, Cmd, argtable, true);
bool use_graphbuf = arg_get_lit(ctx, 1);
adjusting beahavior for auto detection
2019-09-16 02:30:05 +08:00
bool usepwd = false;
uint32_t password = 0;
lf t55xx recoverpw .. - now uses cliparser
2021-01-13 03:38:55 +08:00
int res = arg_get_u32_hexstr_def(ctx, 2, 0, &password);
if (res == 2) {
PrintAndLogEx(INFO, "Password should be 4 hex bytes");
coverity fix #308455
2021-01-29 23:06:45 +08:00
CLIParserFree(ctx);
lf t55xx recoverpw .. - now uses cliparser
2021-01-13 03:38:55 +08:00
return PM3_EINVARG;
make style
2021-01-14 18:39:45 +08:00
} else if (res == 1) {
lf t55xx recoverpw .. - now uses cliparser
2021-01-13 03:38:55 +08:00
usepwd = true;
}
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
lf t55xx recoverpw .. - now uses cliparser
2021-01-13 03:38:55 +08:00
bool r0 = arg_get_lit(ctx, 3);
bool r1 = arg_get_lit(ctx, 4);
bool r2 = arg_get_lit(ctx, 5);
bool r3 = arg_get_lit(ctx, 6);
CLIParserFree(ctx);
style
2019-09-13 22:32:37 +08:00
lf t55xx recoverpw .. - now uses cliparser
2021-01-13 03:38:55 +08:00
if ((r0 + r1 + r2 + r3) > 1) {
PrintAndLogEx(FAILED, "Error multiple downlink encoding");
return PM3_EINVARG;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
}
lf t55xx recoverpw .. - now uses cliparser
2021-01-13 03:38:55 +08:00
uint8_t downlink_mode = config.downlink_mode;
if (r0)
downlink_mode = refFixedBit;
else if (r1)
downlink_mode = refLongLeading;
else if (r2)
downlink_mode = refLeading0;
else if (r3)
downlink_mode = ref1of4;
bool try_all_dl_modes = true;
//ICEMAN STRANGE
if (downlink_mode == 4)
try_all_dl_modes = true;
if (downlink_mode < 4)
try_all_dl_modes = false;
if (downlink_mode > 3)
downlink_mode = 0;
bool found = false;
uint8_t found_mode = 0;
if (use_graphbuf == false) {
for (uint8_t dl_mode = downlink_mode; dl_mode < 4; dl_mode++) {
make style
2021-01-14 18:39:45 +08:00
lf t55xx recoverpw .. - now uses cliparser
2021-01-13 03:38:55 +08:00
if (AcquireData(T55x7_PAGE1, T55x7_TRACE_BLOCK1, usepwd, password, dl_mode) == false)
cppcheck
2020-01-03 02:52:23 +08:00
continue;
chg: adapted lfsampling, and swapped from 'silent' logic to the more natural 'verbose' logic
2020-01-08 05:05:01 +08:00
cppcheck
2020-01-03 02:52:23 +08:00
if (tryDetectP1(false)) {
T55xx DLMode Update
2019-09-14 12:13:55 +08:00
found = true;
found_mode = dl_mode;
lf t55xx recoverpw .. - now uses cliparser
2021-01-13 03:38:55 +08:00
break;
cppcheck
2020-01-03 02:52:23 +08:00
} else {
found = false;
}
make style
2019-07-24 05:43:30 +08:00
lf t55xx recoverpw .. - now uses cliparser
2021-01-13 03:38:55 +08:00
if (try_all_dl_modes == false) {
break;
cppcheck
2020-01-03 02:52:23 +08:00
}
make style
2019-07-24 05:43:30 +08:00
}
T55xx DLMode Update
2019-09-14 12:13:55 +08:00
} else {
found = tryDetectP1(false);
make style
2019-07-24 05:43:30 +08:00
}
style
2019-09-19 16:54:34 +08:00
make style
2019-07-24 05:43:30 +08:00
if (found) {
PrintAndLogEx(SUCCESS, "T55xx chip found!");
T55xx DLMode Update
2019-09-14 12:13:55 +08:00
T55xx_Print_DownlinkMode(found_mode);
make style
2019-07-24 05:43:30 +08:00
} else
PrintAndLogEx(WARNING, "Could not detect modulation automatically. Try setting it manually with " _YELLOW_("\'lf t55xx config\'"));
chg: cmdlft55xx return codes
2019-05-22 20:48:23 +08:00
return PM3_SUCCESS;
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
Rework Cmd exposed API, use more static and fix [-Wmissing-prototypes], ongoing...
2019-04-12 08:07:11 +08:00
static int CmdT55xxSetDeviceConfig(const char *Cmd) {
lf t55xx recoverpw .. - now uses cliparser
2021-01-13 03:38:55 +08:00
CLIParserContext *ctx;
CLIParserInit(&ctx, "lf t55xx deviceconfig",
"Sets t55x7 timings for direct commands.\n"
"The timings are set here in Field Clocks (FC) which is converted to (US) on device.",
"lf t55xx deviceconfig -a 29 -b 17 -c 15 -d 47 -e 15 -> default T55XX\n"
"lf t55xx deviceconfig -a 55 -b 14 -c 21 -d 30 -> default EM4305"
);
make style
2019-07-24 05:43:30 +08:00
make style
2021-01-14 18:39:45 +08:00
void *argtable[10 + 5] = {
lf t55xx recoverpw .. - now uses cliparser
2021-01-13 03:38:55 +08:00
arg_param_begin,
arg_int0("a", NULL, "<8..255>", "Set start gap"),
arg_int0("b", NULL, "<8..255>", "Set write gap"),
arg_int0("c", NULL, "<8..255>", "Set write ZERO gap"),
arg_int0("d", NULL, "<8..255>", "Set write ONE gap"),
arg_int0("e", NULL, "<8..255>", "Set read gap"),
arg_int0("f", NULL, "<8..255>", "Set write TWO gap (1 of 4 only)"),
arg_int0("g", NULL, "<8..255>", "Set write THREE gap (1 of 4 only)"),
arg_lit0("p", "persist", "persist to flash memory (RDV4)"),
arg_lit0("z", NULL, "Set default t55x7 timings (use `-p` to save if required)"),
};
uint8_t idx = 10;
arg_add_t55xx_downloadlink(argtable, &idx, T55XX_DLMODE_SINGLE, config.downlink_mode);
CLIExecWithReturn(ctx, Cmd, argtable, false);
uint8_t startgap = arg_get_int(ctx, 1);
uint8_t writegap = arg_get_int(ctx, 2);
uint8_t write0 = arg_get_int(ctx, 3);
uint8_t write1 = arg_get_int(ctx, 4);
uint8_t readgap = arg_get_int(ctx, 5);
uint8_t write2 = arg_get_int(ctx, 6);
uint8_t write3 = arg_get_int(ctx, 7);
bool shall_persist = arg_get_lit(ctx, 8);
bool set_defaults = arg_get_lit(ctx, 9);
bool r0 = arg_get_lit(ctx, 10);
bool r1 = arg_get_lit(ctx, 11);
bool r2 = arg_get_lit(ctx, 12);
bool r3 = arg_get_lit(ctx, 13);
CLIParserFree(ctx);
if ((r0 + r1 + r2 + r3) > 1) {
PrintAndLogEx(FAILED, "Error multiple downlink encoding");
make style
2021-01-14 18:39:45 +08:00
return PM3_EINVARG;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
}
lf t55xx recoverpw .. - now uses cliparser
2021-01-13 03:38:55 +08:00
uint8_t downlink_mode = 0;
if (r0)
downlink_mode = refFixedBit;
else if (r1)
downlink_mode = refLongLeading;
else if (r2)
downlink_mode = refLeading0;
else if (r3)
downlink_mode = ref1of4;
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
make style
2019-08-12 05:53:45 +08:00
t55xx_configurations_t configurations = {{{0}, {0}, {0}, {0}}};
chg: 'codestyle'
2019-07-27 16:25:03 +08:00
style
2019-07-27 14:39:30 +08:00
if (set_defaults) {
// fixed bit length
chg: renaming a struct
2019-07-28 03:15:43 +08:00
configurations.m[T55XX_DLMODE_FIXED].start_gap = 29 * 8;
configurations.m[T55XX_DLMODE_FIXED].write_gap = 17 * 8;
configurations.m[T55XX_DLMODE_FIXED].write_0 = 15 * 8;
configurations.m[T55XX_DLMODE_FIXED].write_1 = 47 * 8;
configurations.m[T55XX_DLMODE_FIXED].read_gap = 15 * 8;
configurations.m[T55XX_DLMODE_FIXED].write_2 = 0;
configurations.m[T55XX_DLMODE_FIXED].write_3 = 0;
style
2019-07-27 14:39:30 +08:00
// long leading reference
chg t55 timings to match offical repo when compiling for PM3OTHER
2019-11-13 02:27:34 +08:00
configurations.m[T55XX_DLMODE_LLR].start_gap = 29 * 8;
configurations.m[T55XX_DLMODE_LLR].write_gap = 17 * 8;
configurations.m[T55XX_DLMODE_LLR].write_0 = 15 * 8;
configurations.m[T55XX_DLMODE_LLR].write_1 = 47 * 8;
chg: renaming a struct
2019-07-28 03:15:43 +08:00
configurations.m[T55XX_DLMODE_LLR].read_gap = 15 * 8;
configurations.m[T55XX_DLMODE_LLR].write_2 = 0;
configurations.m[T55XX_DLMODE_LLR].write_3 = 0;
style
2019-07-27 14:39:30 +08:00
// leading zero
chg t55 timings to match offical repo when compiling for PM3OTHER
2019-11-13 02:27:34 +08:00
configurations.m[T55XX_DLMODE_LEADING_ZERO].start_gap = 29 * 8;
configurations.m[T55XX_DLMODE_LEADING_ZERO].write_gap = 17 * 8;
configurations.m[T55XX_DLMODE_LEADING_ZERO].write_0 = 15 * 8;
chg: renaming a struct
2019-07-28 03:15:43 +08:00
configurations.m[T55XX_DLMODE_LEADING_ZERO].write_1 = 40 * 8;
configurations.m[T55XX_DLMODE_LEADING_ZERO].read_gap = 15 * 8;
configurations.m[T55XX_DLMODE_LEADING_ZERO].write_2 = 0;
configurations.m[T55XX_DLMODE_LEADING_ZERO].write_3 = 0;
style
2019-07-27 14:39:30 +08:00
// 1 of 4 coding reference
chg: renaming a struct
2019-07-28 03:15:43 +08:00
configurations.m[T55XX_DLMODE_1OF4].start_gap = 29 * 8;
configurations.m[T55XX_DLMODE_1OF4].write_gap = 17 * 8;
configurations.m[T55XX_DLMODE_1OF4].write_0 = 15 * 8;
configurations.m[T55XX_DLMODE_1OF4].write_1 = 31 * 8;
configurations.m[T55XX_DLMODE_1OF4].read_gap = 15 * 8;
configurations.m[T55XX_DLMODE_1OF4].write_2 = 47 * 8;
configurations.m[T55XX_DLMODE_1OF4].write_3 = 63 * 8;
style
2019-07-27 14:39:30 +08:00
} else {
chg: renaming a struct
2019-07-28 03:15:43 +08:00
configurations.m[downlink_mode].start_gap = startgap * 8;
configurations.m[downlink_mode].write_gap = writegap * 8;
configurations.m[downlink_mode].write_0 = write0 * 8;
configurations.m[downlink_mode].write_1 = write1 * 8;
configurations.m[downlink_mode].read_gap = readgap * 8;
configurations.m[downlink_mode].write_2 = write2 * 8;
configurations.m[downlink_mode].write_3 = write3 * 8;
style
2019-07-27 14:39:30 +08:00
}
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
clearCommandBuffer();
OLD-MIX
2020-05-27 17:59:24 +08:00
SendCommandMIX(CMD_LF_T55XX_SET_CONFIG, shall_persist, 0, 0, &configurations, sizeof(t55xx_configurations_t));
chg: cmdlft55xx return codes
2019-05-22 20:48:23 +08:00
return PM3_SUCCESS;
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
static int CmdT55xxProtect(const char *Cmd) {
lf t55xx protect/sniff - now use cliparser
2021-01-12 07:11:40 +08:00
CLIParserContext *ctx;
CLIParserInit(&ctx, "lf t55xx protect",
"This command sets the pwd bit on T5577.\n"
lf t55xx recoverpw .. - now uses cliparser
2021-01-13 03:38:55 +08:00
_RED_("WARNING") _CYAN_(" this locks the tag!"),
"lf t55xx protect -n 01020304 -> sets new pwd 01020304\n"
"lf t55xx protect -p 11223344 -n 00000000 -> use pwd 11223344, sets new pwd 00000000"
lf t55xx protect/sniff - now use cliparser
2021-01-12 07:11:40 +08:00
);
// 4 + (5 or 6)
make style
2021-01-14 18:39:45 +08:00
void *argtable[4 + 5] = {
lf t55xx protect/sniff - now use cliparser
2021-01-12 07:11:40 +08:00
arg_param_begin,
arg_lit0("o", "override", "override safety check"),
fix t55xx protect/recoverpw - make param pwd optional
2021-01-27 16:09:42 +08:00
arg_str0("p", "pwd", "<hex>", "password (4 hex bytes)"),
lf t55xx protect/sniff - now use cliparser
2021-01-12 07:11:40 +08:00
arg_str1("n", "new", "<hex>", "new password (4 hex bytes)"),
};
uint8_t idx = 4;
arg_add_t55xx_downloadlink(argtable, &idx, T55XX_DLMODE_SINGLE, config.downlink_mode);
CLIExecWithReturn(ctx, Cmd, argtable, true);
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
uint8_t override = 0;
make style
2021-01-14 18:39:45 +08:00
if (arg_get_lit(ctx, 1))
lf t55xx protect/sniff - now use cliparser
2021-01-12 07:11:40 +08:00
override = 2;
lf t55xx recoverpw .. - now uses cliparser
2021-01-13 03:38:55 +08:00
uint32_t password = 0;
make style
2021-01-14 18:39:45 +08:00
bool usepwd = false;
lf t55xx recoverpw .. - now uses cliparser
2021-01-13 03:38:55 +08:00
int res = arg_get_u32_hexstr_def(ctx, 2, 0, &password);
if (res == 2) {
lf t55xx protect/sniff - now use cliparser
2021-01-12 07:11:40 +08:00
CLIParserFree(ctx);
PrintAndLogEx(FAILED, "Error parsing password bytes");
return PM3_EINVARG;
make style
2021-01-14 18:39:45 +08:00
} else if (res == 1) {
lf t55xx recoverpw .. - now uses cliparser
2021-01-13 03:38:55 +08:00
usepwd = true;
override = 1;
lf t55xx protect/sniff - now use cliparser
2021-01-12 07:11:40 +08:00
}
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
lf t55xx recoverpw .. - now uses cliparser
2021-01-13 03:38:55 +08:00
uint32_t new_password = 0;
res = arg_get_u32_hexstr_def(ctx, 3, 0, &new_password);
if (res == 2) {
CLIParserFree(ctx);
PrintAndLogEx(FAILED, "Error parsing new password bytes");
return PM3_EINVARG;
} else if (res == 0) {
PrintAndLogEx(FAILED, "Must specify new password param");
lf t55xx protect/sniff - now use cliparser
2021-01-12 07:11:40 +08:00
CLIParserFree(ctx);
return PM3_EINVARG;
}
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
lf t55xx protect/sniff - now use cliparser
2021-01-12 07:11:40 +08:00
bool r0 = arg_get_lit(ctx, 4);
bool r1 = arg_get_lit(ctx, 5);
bool r2 = arg_get_lit(ctx, 6);
bool r3 = arg_get_lit(ctx, 7);
CLIParserFree(ctx);
if ((r0 + r1 + r2 + r3) > 1) {
PrintAndLogEx(FAILED, "Error multiple downlink encoding");
return PM3_EINVARG;
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
}
lf t55xx protect/sniff - now use cliparser
2021-01-12 07:11:40 +08:00
uint8_t downlink_mode = config.downlink_mode;
if (r0)
downlink_mode = refFixedBit;
else if (r1)
downlink_mode = refLongLeading;
else if (r2)
downlink_mode = refLeading0;
else if (r3)
downlink_mode = ref1of4;
style
2019-09-19 16:54:34 +08:00
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
// sanity check.
if (SanityOfflineCheck(false) != PM3_SUCCESS)
return PM3_ESOFT;
style
2019-09-19 16:54:34 +08:00
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
// lock
style
2019-09-19 16:54:34 +08:00
if (t55xxProtect(true, usepwd, override, password, downlink_mode, new_password) == false) {
Fix prompt colors in log -> spurious space in color macros -> adjust lots of files...
2020-04-22 08:22:55 +08:00
PrintAndLogEx(WARNING, "Command failed. Did you run " _YELLOW_("`lf t55xx detect`") " before?");
CHG: 'lf t55xx wipe c' - now accepts user provided configuration block to configure a wiped tag with. ADD: 'lf t55xx protect' - Sets password and enables password protection in configuration block. It tries to validate its writes aswell. Samples: lf t55xx protect n 11223344 - set pwd to 11223344 lf t55xx protect n 01020304 p 11223344 - change a password protected tag from 11223344 to 01020304 To remove the password protection, you need to remember the password :) lf t55xx wipe p 11223344 - wipes whole tag, removes password protection bits.
2019-09-15 00:27:58 +08:00
return PM3_ESOFT;
}
return PM3_SUCCESS;
}
lf t55xx sniff - now uses cliparser
2021-01-10 19:52:57 +08:00
// if the difference between a and b is less then or eq to d i.e. does a = b +/- d
#define APPROX_EQ(a, b, d) ((abs(a - b) <= d) ? true : false)
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
lf t55xx sniff - now uses cliparser
2021-01-10 19:52:57 +08:00
static uint8_t t55sniff_get_packet(int *pulseBuffer, char *data, uint8_t width0, uint8_t width1, uint8_t tolerance) {
fixes warnings
2020-09-19 21:04:57 +08:00
int i = 0;
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
bool ok = true;
lf t55xx sniff - now uses cliparser
2021-01-10 19:52:57 +08:00
uint8_t len = 0;
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
fixes warnings
2020-09-19 21:04:57 +08:00
while (ok && (i < 73)) { // 70 bits max Fixed bit packet
lf t55xx sniff - now uses cliparser
2021-01-10 19:52:57 +08:00
if (APPROX_EQ(width0, pulseBuffer[i], tolerance)) {
data[len++] = '0';
fixes warnings
2020-09-19 21:04:57 +08:00
i++;
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
continue;
}
lf t55xx sniff - now uses cliparser
2021-01-10 19:52:57 +08:00
if (APPROX_EQ(width1, pulseBuffer[i], tolerance)) {
data[len++] = '1';
fixes warnings
2020-09-19 21:04:57 +08:00
i++;
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
continue;
}
ok = false;
}
lf t55xx sniff - now uses cliparser
2021-01-10 19:52:57 +08:00
data[len] = 0x00;
return len;
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
}
lf t55xx sniff - now uses cliparser
2021-01-10 19:52:57 +08:00
static uint8_t t55sniff_trim_samples(int *pulseBuffer, int *pulseIdx, uint8_t len) {
for (uint8_t i = 0; i < (80 - len); i++) {
pulseBuffer[i] = pulseBuffer[i + len];
fixes warnings
2020-09-19 21:04:57 +08:00
}
make style
2020-09-30 20:27:19 +08:00
fixes warnings
2020-09-19 21:04:57 +08:00
*pulseIdx -= len;
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
return PM3_SUCCESS;
}
Update cmdlft55xx.c Add lf t55xx sniff to attemp to extract commands sent from a cloner/writter.
2020-09-17 07:49:03 +08:00
static int CmdT55xxSniff(const char *Cmd) {
lf t55xx sniff - now uses cliparser
2021-01-10 19:52:57 +08:00
CLIParserContext *ctx;
CLIParserInit(&ctx, "lf t55xx sniff",
"Sniff LF t55xx based trafic and decode possible cmd / blocks.\n"
"Lower tolerance means tighter pulses. ",
"lf t55xx sniff\n"
"lf t55xx sniff -1 -t 2 -> use buffer with tolernace of 2\n"
"lf t55xx sniff -1 --zero 7 --one 14 -> use buffer, zero pulse width 7, one pulse width 15"
);
void *argtable[] = {
arg_param_begin,
arg_lit0("1", NULL, "extract using data from graphbuffer"),
arg_int0("t", "tol", "<dec>", "set tolerance level (default 5)"),
// arg_int0(NULL, "signal", "<dec>", "set minimum signal level (default 20)"),
arg_int0("o", "one", "<dec>", "set samples width for ONE pulse (default auto)"),
arg_int0("z", "zero", "<dec>", "set samples width for ZERO pulse (default auto)"),
arg_param_end
};
CLIExecWithReturn(ctx, Cmd, argtable, true);
bool use_graphbuf = arg_get_lit(ctx, 1);
uint8_t tolerance = arg_get_int_def(ctx, 2, 5);
fix 'lf t55 sniff' input params
2021-01-27 05:26:19 +08:00
int opt_width1 = arg_get_int_def(ctx, 3, -1);
int opt_width0 = arg_get_int_def(ctx, 4, -1);
lf t55xx sniff - now uses cliparser
2021-01-10 19:52:57 +08:00
CLIParserFree(ctx);
fix 'lf t55 sniff' input params
2021-01-27 05:26:19 +08:00
if (opt_width0 > 0 && opt_width1 == -1) {
lf t55xx sniff - now uses cliparser
2021-01-10 19:52:57 +08:00
PrintAndLogEx(ERR, _RED_("Missing sample width for ONE"));
return PM3_EINVARG;
}
fixes warnings
2020-09-19 21:04:57 +08:00
fix 'lf t55 sniff' input params
2021-01-27 05:26:19 +08:00
if (opt_width1 > 0 && opt_width0 == -1) {
lf t55xx sniff - now uses cliparser
2021-01-10 19:52:57 +08:00
PrintAndLogEx(ERR, _RED_("Missing sample width for ZERO"));
return PM3_EINVARG;
}
fixes warnings
2020-09-19 21:04:57 +08:00
fix 'lf t55 sniff' input params
2021-01-27 05:26:19 +08:00
if (opt_width0 == 0) {
PrintAndLogEx(ERR, "Must call with --zero larger than 0");
lf t55xx sniff - now uses cliparser
2021-01-10 19:52:57 +08:00
return PM3_EINVARG;
}
fix 'lf t55 sniff' input params
2021-01-27 05:26:19 +08:00
if ((opt_width0 == 0) || (opt_width1 == 0)) {
PrintAndLogEx(ERR, "Must call with --one larger than 0");
return PM3_EINVARG;
}
uint8_t width1 = 0;
uint8_t width0 = 0;
if (opt_width0 > -1)
width0 = (uint8_t)opt_width0 & 0xFF;
if (opt_width1 > -1)
width1 = (uint8_t)opt_width1 & 0xFF;
Update cmdlft55xx.c Add lf t55xx sniff to attemp to extract commands sent from a cloner/writter.
2020-09-17 07:49:03 +08:00
/*
Notes:
T55xx packet lengths (1 of 4 needs to be checked)
-----------------------------------------------
| Default | LL 0 | Leading 0 | 1 of 4 |
----------------------------------------------------------------|
| Standard Write | 38 | 39 | 39 | 40 |
| Protect Write | 70 | 71 | 73 | 74 |
| AOR | 34 | 35 | 37 | 38 |
| Standard Read | 5 | 6 | 7 | 8 |
| Protect Read | 38 | 39 | 41 | 42 |
| Regular Read | 2 | 3 | 3 | 4 |
| Reset | 2 | 3 | 3 | 4 |
----------------------------------------------------------------
make style
2020-09-30 20:27:19 +08:00
Update cmdlft55xx.c Add lf t55xx sniff to attemp to extract commands sent from a cloner/writter.
2020-09-17 07:49:03 +08:00
T55xx bit widths (decimation 1) - Expected, but may vary a little
Reference 0 for LL0 and Leading 0 can be longer
-----------------------------------------------
| Default | LL 0 | Leading 0 | 1 of 4 |
----------------------------------------------------|
| 0 | 16 - 32 | 9 - 33 | 5 - 80 | tbc |
| 1 | 48 - 64 | 41 - 72 | 21 - 96 | tbc |
----------------------------------------------------
00 01 10 11
*/
lf t55xx protect/sniff - now use cliparser
2021-01-12 07:11:40 +08:00
bool have_data = false;
lf t55xx sniff - now uses cliparser
2021-01-10 19:52:57 +08:00
uint8_t page, blockAddr;
uint16_t dataLen = 0;
size_t idx = 0;
uint32_t usedPassword, blockData;
int pulseSamples = 0;
int pulseIdx = 0;
int minWidth = 1000;
int maxWidth = 0;
char modeText [100];
char pwdText [100];
char dataText [100];
int pulseBuffer[80] = { 0 }; // max should be 73 +/- - Holds Pulse widths
char data[80]; // linked to pulseBuffer. - Holds 0/1 from pulse widths
make style
2021-01-14 18:39:45 +08:00
fixes warnings
2020-09-19 21:04:57 +08:00
// setup and sample data from Proxmark
// if not directed to existing sample/graphbuffer
lf t55xx sniff - now uses cliparser
2021-01-10 19:52:57 +08:00
if (use_graphbuf == false) {
make style
2020-09-30 20:27:19 +08:00
CmdLFSniff("");
Update cmdlft55xx.c Add lf t55xx sniff to attemp to extract commands sent from a cloner/writter.
2020-09-17 07:49:03 +08:00
}
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
// Headings
Update cmdlft55xx.c Add lf t55xx sniff to attemp to extract commands sent from a cloner/writter.
2020-09-17 07:49:03 +08:00
PrintAndLogEx(NORMAL, "");
make style
2020-09-30 20:27:19 +08:00
PrintAndLogEx(INFO, _CYAN_("T55xx command detection"));
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
PrintAndLogEx(SUCCESS, "Downlink mode | password | Data | blk | page | 0 | 1 | raw");
PrintAndLogEx(SUCCESS, "----------------------+----------+----------+-----+------+-----+-----+-------------------------------------------------------------------------------");
Update cmdlft55xx.c Add lf t55xx sniff to attemp to extract commands sent from a cloner/writter.
2020-09-17 07:49:03 +08:00
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
idx = 0;
// loop though sample buffer
fixes warnings
2020-09-19 21:04:57 +08:00
while (idx < GraphTraceLen) {
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
Update cmdlft55xx.c Add lf t55xx sniff to attemp to extract commands sent from a cloner/writter.
2020-09-17 07:49:03 +08:00
minWidth = 1000;
maxWidth = 0;
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
dataLen = 0;
data[0] = 0;
lf t55xx protect/sniff - now use cliparser
2021-01-12 07:11:40 +08:00
have_data = false;
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
sprintf(modeText, "Default");
sprintf(pwdText, " ");
sprintf(dataText, " ");
Update cmdlft55xx.c Add lf t55xx sniff to attemp to extract commands sent from a cloner/writter.
2020-09-17 07:49:03 +08:00
fixes warnings
2020-09-19 21:04:57 +08:00
if (pulseSamples == 0) {
idx++;
}
Update cmdlft55xx.c Add lf t55xx sniff to attemp to extract commands sent from a cloner/writter.
2020-09-17 07:49:03 +08:00
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
// find high
fixes warnings
2020-09-19 21:04:57 +08:00
while ((idx < GraphTraceLen) && (GraphBuffer[idx] < 0)) {
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
idx++;
fixes warnings
2020-09-19 21:04:57 +08:00
}
Update cmdlft55xx.c Add lf t55xx sniff to attemp to extract commands sent from a cloner/writter.
2020-09-17 07:49:03 +08:00
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
// count high samples
pulseSamples = 0;
while ((idx < GraphTraceLen) && (GraphBuffer[idx] > 0)) { // last bit seems to be high to zero, but can vary in width..
pulseSamples++;
idx++;
}
Update cmdlft55xx.c Add lf t55xx sniff to attemp to extract commands sent from a cloner/writter.
2020-09-17 07:49:03 +08:00
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
if (pulseSamples > 0) {
pulseBuffer[pulseIdx++] = pulseSamples;
if (pulseIdx > 79) { // make room for next sample - if not used by now, it wont be.
lf t55xx sniff - now uses cliparser
2021-01-10 19:52:57 +08:00
t55sniff_trim_samples(pulseBuffer, &pulseIdx, 1);
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
}
Update cmdlft55xx.c Add lf t55xx sniff to attemp to extract commands sent from a cloner/writter.
2020-09-17 07:49:03 +08:00
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
// Check Samples for valid packets;
// We should find (outside of leading bits) we have a packet of "1" and "0" at same widths.
if (pulseIdx >= 6) {// min size for a read - ignoring 1of4 10 0 <adr>
make style
2020-09-30 20:27:19 +08:00
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
// We auto find widths
if ((width0 == 0) && (width1 == 0)) {
// We ignore bit 0 for the moment as it may be a ref. pulse, so check last
uint8_t ii = 2;
minWidth = pulseBuffer[1];
maxWidth = pulseBuffer[1];
bool done = false;
make style
2020-09-30 20:27:19 +08:00
lf t55xx sniff - now uses cliparser
2021-01-10 19:52:57 +08:00
while ((!done) && (ii < pulseIdx) && ((maxWidth <= minWidth) || (APPROX_EQ(minWidth, maxWidth, tolerance)))) { // min should be 8, 16-32 more normal
make style
2020-09-30 20:27:19 +08:00
if (pulseBuffer[ii] + 3 < minWidth) {
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
minWidth = pulseBuffer[ii];
done = true;
}
make style
2020-09-30 20:27:19 +08:00
if (pulseBuffer[ii] - 1 > maxWidth) {
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
maxWidth = pulseBuffer[ii];
done = true;
}
ii++;
Update cmdlft55xx.c Add lf t55xx sniff to attemp to extract commands sent from a cloner/writter.
2020-09-17 07:49:03 +08:00
}
} else {
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
minWidth = width0;
maxWidth = width1;
Update cmdlft55xx.c Add lf t55xx sniff to attemp to extract commands sent from a cloner/writter.
2020-09-17 07:49:03 +08:00
}
}
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
// out of bounds... min max far enough appart and minWidth is large enough
make style
2020-09-30 20:27:19 +08:00
if (((maxWidth - minWidth) < 6) || (minWidth < 6)) // min 8 +/-
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
continue;
make style
2020-09-30 20:27:19 +08:00
// At this point we should have
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
// - a min of 6 samples
// - the 0 and 1 sample widths
// - min 0 and min seperations (worst case)
// No max checks done (yet) as have seen samples > then specs in use.
make style
2020-09-30 20:27:19 +08:00
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
// Check first bit.
make style
2020-09-30 20:27:19 +08:00
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
// Long leading 0
lf t55xx protect/sniff - now use cliparser
2021-01-12 07:11:40 +08:00
if (have_data == false && (APPROX_EQ(pulseBuffer[0], 136 + minWidth, tolerance) && APPROX_EQ(pulseBuffer[1], maxWidth, tolerance))) {
make style
2020-09-30 20:27:19 +08:00
// printf ("Long Leading 0 - not yet hanled | have 1 Fisrt bit | Min : %-3d - Max : %-3d : diff : %d\n",minWidth,maxWidth, maxWidth-minWidth);
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
continue;
}
Update cmdlft55xx.c Add lf t55xx sniff to attemp to extract commands sent from a cloner/writter.
2020-09-17 07:49:03 +08:00
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
// Fixed bit - Default
lf t55xx protect/sniff - now use cliparser
2021-01-12 07:11:40 +08:00
if (have_data == false && (APPROX_EQ(pulseBuffer[0], maxWidth, tolerance))) {
lf t55xx sniff - now uses cliparser
2021-01-10 19:52:57 +08:00
dataLen = t55sniff_get_packet(pulseBuffer, data, minWidth, maxWidth, tolerance);
Update cmdlft55xx.c Add lf t55xx sniff to attemp to extract commands sent from a cloner/writter.
2020-09-17 07:49:03 +08:00
make style
2020-09-30 20:27:19 +08:00
// if ((dataLen == 39) )
// printf ("Fixed | Data end of 80 samples | offset : %llu - datalen %-2d - data : %s --- - Bit 0 width : %d\n",idx,dataLen,data,pulseBuffer[0]);
Update cmdlft55xx.c Add lf t55xx sniff to attemp to extract commands sent from a cloner/writter.
2020-09-17 07:49:03 +08:00
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
if (data[0] == '0') { // should never get here..
make style
2020-09-30 20:27:19 +08:00
dataLen = 0;
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
data[0] = 0;
} else {
Update cmdlft55xx.c Add lf t55xx sniff to attemp to extract commands sent from a cloner/writter.
2020-09-17 07:49:03 +08:00
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
// Default Read
if (dataLen == 6) {
lf t55xx sniff - now uses cliparser
2021-01-10 19:52:57 +08:00
t55sniff_trim_samples(pulseBuffer, &pulseIdx, 4); // left 1 or 2 samples seemed to help
Update cmdlft55xx.c Add lf t55xx sniff to attemp to extract commands sent from a cloner/writter.
2020-09-17 07:49:03 +08:00
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
page = data[1] - '0';
blockAddr = 0;
for (uint8_t i = 3; i < 6; i++) {
blockAddr <<= 1;
make style
2020-09-30 20:27:19 +08:00
if (data[i] == '1')
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
blockAddr |= 1;
Update cmdlft55xx.c Add lf t55xx sniff to attemp to extract commands sent from a cloner/writter.
2020-09-17 07:49:03 +08:00
}
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
blockData = 0;
lf t55xx protect/sniff - now use cliparser
2021-01-12 07:11:40 +08:00
have_data = true;
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
sprintf(modeText, "Default Read");
Update cmdlft55xx.c Add lf t55xx sniff to attemp to extract commands sent from a cloner/writter.
2020-09-17 07:49:03 +08:00
}
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
// Password Write
if (dataLen == 70) {
lf t55xx sniff - now uses cliparser
2021-01-10 19:52:57 +08:00
t55sniff_trim_samples(pulseBuffer, &pulseIdx, 70);
Update cmdlft55xx.c Add lf t55xx sniff to attemp to extract commands sent from a cloner/writter.
2020-09-17 07:49:03 +08:00
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
page = data[1] - '0';
usedPassword = 0;
for (uint8_t i = 2; i <= 33; i++) {
usedPassword <<= 1;
make style
2020-09-30 20:27:19 +08:00
if (data[i] == '1')
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
usedPassword |= 1;
}
// Lock bit 34
blockData = 0;
for (uint8_t i = 35; i <= 66; i++) {
blockData <<= 1;
make style
2020-09-30 20:27:19 +08:00
if (data[i] == '1')
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
blockData |= 1;
}
blockAddr = 0;
for (uint8_t i = 67; i <= 69; i++) {
blockAddr <<= 1;
make style
2020-09-30 20:27:19 +08:00
if (data[i] == '1')
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
blockAddr |= 1;
}
lf t55xx protect/sniff - now use cliparser
2021-01-12 07:11:40 +08:00
have_data = true;
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
sprintf(modeText, "Default pwd write");
sprintf(pwdText, "%08X", usedPassword);
make style
2020-09-30 20:27:19 +08:00
sprintf(dataText, "%08X", blockData);
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
}
Update cmdlft55xx.c Add lf t55xx sniff to attemp to extract commands sent from a cloner/writter.
2020-09-17 07:49:03 +08:00
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
// Default Write (or password read ??)
fixes warnings
2020-09-19 21:04:57 +08:00
if (dataLen == 38) {
lf t55xx sniff - now uses cliparser
2021-01-10 19:52:57 +08:00
t55sniff_trim_samples(pulseBuffer, &pulseIdx, 38);
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
page = data[1] - '0';
usedPassword = 0;
blockData = 0;
for (uint8_t i = 3; i <= 34; i++) {
blockData <<= 1;
make style
2020-09-30 20:27:19 +08:00
if (data[i] == '1')
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
blockData |= 1;
}
blockAddr = 0;
for (uint8_t i = 35; i <= 37; i++) {
blockAddr <<= 1;
make style
2020-09-30 20:27:19 +08:00
if (data[i] == '1')
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
blockAddr |= 1;
}
lf t55xx protect/sniff - now use cliparser
2021-01-12 07:11:40 +08:00
have_data = true;
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
sprintf(modeText, "Default write");
make style
2020-09-30 20:27:19 +08:00
sprintf(dataText, "%08X", blockData);
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
}
Update cmdlft55xx.c Add lf t55xx sniff to attemp to extract commands sent from a cloner/writter.
2020-09-17 07:49:03 +08:00
}
}
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
// Leading 0
lf t55xx protect/sniff - now use cliparser
2021-01-12 07:11:40 +08:00
if (have_data == false && (APPROX_EQ(pulseBuffer[0], minWidth, tolerance))) {
make style
2020-09-30 20:27:19 +08:00
// leading 0 (should = 0 width)
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
// 1 of 4 (leads with 00)
lf t55xx sniff - now uses cliparser
2021-01-10 19:52:57 +08:00
dataLen = t55sniff_get_packet(pulseBuffer, data, minWidth, maxWidth, tolerance);
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
// **** Should check to 0 to be actual 0 as well i.e. 01 .... data ....
if ((data[0] == '0') && (data[1] == '1')) {
if (dataLen == 73) {
lf t55xx sniff - now uses cliparser
2021-01-10 19:52:57 +08:00
t55sniff_trim_samples(pulseBuffer, &pulseIdx, 73);
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
page = data[2] - '0';
usedPassword = 0;
for (uint8_t i = 5; i <= 36; i++) {
usedPassword <<= 1;
make style
2020-09-30 20:27:19 +08:00
if (data[i] == '1')
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
usedPassword |= 1;
}
blockData = 0;
for (uint8_t i = 38; i <= 69; i++) {
blockData <<= 1;
make style
2020-09-30 20:27:19 +08:00
if (data[i] == '1')
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
blockData |= 1;
}
blockAddr = 0;
for (uint8_t i = 70; i <= 72; i++) {
blockAddr <<= 1;
make style
2020-09-30 20:27:19 +08:00
if (data[i] == '1')
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
blockAddr |= 1;
}
lf t55xx protect/sniff - now use cliparser
2021-01-12 07:11:40 +08:00
have_data = true;
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
sprintf(modeText, "Leading 0 pwd write");
sprintf(pwdText, "%08X", usedPassword);
make style
2020-09-30 20:27:19 +08:00
sprintf(dataText, "%08X", blockData);
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
}
Update cmdlft55xx.c Add lf t55xx sniff to attemp to extract commands sent from a cloner/writter.
2020-09-17 07:49:03 +08:00
}
}
}
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
// Print results
make style
2021-01-14 18:39:45 +08:00
if (have_data) {
Update cmdlft55xx.c Add lf t55xx sniff to attemp to extract commands sent from a cloner/writter.
2020-09-17 07:49:03 +08:00
if (blockAddr == 7)
make style
2020-09-30 20:27:19 +08:00
PrintAndLogEx(SUCCESS, "%-20s | "_GREEN_("%8s")" | "_YELLOW_("%8s")" | "_YELLOW_("%d")" | "_GREEN_("%d")" | %3d | %3d | %s", modeText, pwdText, dataText, blockAddr, page, minWidth, maxWidth, data);
Update cmdlft55xx.c Add lf t55xx sniff to attemp to extract commands sent from a cloner/writter.
2020-09-17 07:49:03 +08:00
else
make style
2020-09-30 20:27:19 +08:00
PrintAndLogEx(SUCCESS, "%-20s | "_GREEN_("%8s")" | "_GREEN_("%8s")" | "_GREEN_("%d")" | "_GREEN_("%d")" | %3d | %3d | %s", modeText, pwdText, dataText, blockAddr, page, minWidth, maxWidth, data);
Update cmdlft55xx.c Add lf t55xx sniff to attemp to extract commands sent from a cloner/writter.
2020-09-17 07:49:03 +08:00
}
}
Update cmdlft55xx.c re-work to imporve bit detection. now works with keysy
2020-09-19 17:52:04 +08:00
// footer
make style
2020-09-30 20:27:19 +08:00
PrintAndLogEx(SUCCESS, "-----------------------------------------------------------------------------------------------------------------------------------------------------");
PrintAndLogEx(NORMAL, "");
Update cmdlft55xx.c Add lf t55xx sniff to attemp to extract commands sent from a cloner/writter.
2020-09-17 07:49:03 +08:00
return PM3_SUCCESS;
}
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
static command_t CommandTable[] = {
lf t55 bruteforce - now use cliparser
2021-01-13 03:59:44 +08:00
{"-----------", CmdHelp, AlwaysAvailable, "--------------------- " _CYAN_("operations") " ---------------------"},
Replace WITH_LF by dynamic detection in client
2019-05-02 06:02:38 +08:00
{"help", CmdHelp, AlwaysAvailable, "This help"},
add xrefs between t55 menu and lf clone commands
2019-10-16 16:43:32 +08:00
{"clonehelp", CmdT55xxCloneHelp, IfPm3Lf, "Shows the available clone commands"},
help commands grouped
2020-08-03 23:38:58 +08:00
{"config", CmdT55xxSetConfig, AlwaysAvailable, "Set/Get T55XX configuration (modulation, inverted, offset, rate)"},
lf t55 bruteforce - now use cliparser
2021-01-13 03:59:44 +08:00
{"dangerraw", CmdT55xxDangerousRaw, IfPm3Lf, "Sends raw bitstream. Dangerous, do not use!!"},
{"detect", CmdT55xxDetect, AlwaysAvailable, "Try detecting the tag modulation from reading the configuration block"},
lf t55xx recoverpw .. - now uses cliparser
2021-01-13 03:38:55 +08:00
{"deviceconfig", CmdT55xxSetDeviceConfig, IfPm3Lf, "Set/Get T55XX device configuration"},
lf t55 bruteforce - now use cliparser
2021-01-13 03:59:44 +08:00
{"dump", CmdT55xxDump, IfPm3Lf, "Dump T55xx card Page 0 block 0-7"},
{"info", CmdT55xxInfo, AlwaysAvailable, "Show T55x7 configuration data (page 0/ blk 0)"},
{"p1detect", CmdT55xxDetectPage1, IfPm3Lf, "Try detecting if this is a t55xx tag by reading page 1"},
{"read", CmdT55xxReadBlock, IfPm3Lf, "Read T55xx block data"},
Replace WITH_LF by dynamic detection in client
2019-05-02 06:02:38 +08:00
{"resetread", CmdResetRead, IfPm3Lf, "Send Reset Cmd then lf read the stream to attempt to identify the start of it (needs a demod and/or plot after)"},
lf t55 bruteforce - now use cliparser
2021-01-13 03:59:44 +08:00
{"restore", CmdT55xxRestore, IfPm3Lf, "Restore T55xx card Page 0 / Page 1 blocks"},
{"trace", CmdT55xxReadTrace, AlwaysAvailable, "Show T55x7 traceability data (page 1/ blk 0-1)"},
Replace WITH_LF by dynamic detection in client
2019-05-02 06:02:38 +08:00
{"wakeup", CmdT55xxWakeUp, IfPm3Lf, "Send AOR wakeup command"},
lf t55 bruteforce - now use cliparser
2021-01-13 03:59:44 +08:00
{"write", CmdT55xxWriteBlock, IfPm3Lf, "Write T55xx block data"},
{"-----------", CmdHelp, AlwaysAvailable, "--------------------- " _CYAN_("recovery") " ---------------------"},
{"bruteforce", CmdT55xxBruteForce, IfPm3Lf, "Simple bruteforce attack to find password"},
help commands grouped
2020-08-03 23:38:58 +08:00
{"chk", CmdT55xxChkPwds, IfPm3Lf, "Check passwords from dictionary/flash"},
{"protect", CmdT55xxProtect, IfPm3Lf, "Password protect tag"},
lf t55xx recoverpw .. - now uses cliparser
2021-01-13 03:38:55 +08:00
{"recoverpw", CmdT55xxRecoverPW, IfPm3Lf, "Try to recover from bad password write from a cloner"},
Update cmdlft55xx.c Add lf t55xx sniff to attemp to extract commands sent from a cloner/writter.
2020-09-17 07:49:03 +08:00
{"sniff", CmdT55xxSniff, AlwaysAvailable, "Attempt to recover T55xx commands from sample buffer"},
lf t55xx special - now uses cliparser
2021-01-29 23:06:26 +08:00
{"special", CmdT55xxSpecial, IfPm3Lf, "Show block changes with 64 different offsets"},
lf t55xx recoverpw .. - now uses cliparser
2021-01-13 03:38:55 +08:00
{"wipe", CmdT55xxWipe, IfPm3Lf, "Wipe a T55xx tag and set defaults (will destroy any data on tag)"},
begin of dynamic capabilities handling in client
2019-05-02 02:48:15 +08:00
{NULL, NULL, NULL, NULL}
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
};
Rework Cmd exposed API, use more static and fix [-Wmissing-prototypes], ongoing...
2019-04-12 08:07:11 +08:00
static int CmdHelp(const char *Cmd) {
(void)Cmd; // Cmd is not used so far
CmdsHelp(CommandTable);
chg: cmdlft55xx return codes
2019-05-22 20:48:23 +08:00
return PM3_SUCCESS;
Rework Cmd exposed API, use more static and fix [-Wmissing-prototypes], ongoing...
2019-04-12 08:07:11 +08:00
}
changing {} style to match majority of previous style
2019-03-10 18:20:22 +08:00
int CmdLFT55XX(const char *Cmd) {
client: fix mix of spaces & tabs
2019-03-10 06:35:06 +08:00
clearCommandBuffer();
propagate CmdsParse return value
2019-04-19 06:47:51 +08:00
return CmdsParse(CommandTable, Cmd);
Convert the few files with still Windows carriage returns
2019-03-09 15:49:41 +08:00
}
Reference in a new issue Copy permalink