2018-12-19 00:57:22 +08:00
|
|
|
local cmds = require('commands')
|
|
|
|
local lib15 = require('read15')
|
|
|
|
local getopt = require('getopt')
|
|
|
|
local utils = require('utils')
|
|
|
|
|
|
|
|
copyright = 'Copyright (c) 2018 IceSQL AB. All rights reserved.'
|
|
|
|
author = 'Christian Herrmann'
|
2019-01-21 16:59:47 +08:00
|
|
|
version = 'v1.0.4'
|
2018-12-19 00:57:22 +08:00
|
|
|
desc = [[
|
2019-03-09 17:34:43 +08:00
|
|
|
This script tries to set UID on a IS15693 SLIX magic card
|
2018-12-19 00:57:22 +08:00
|
|
|
Remember the UID ->MUST<- start with 0xE0
|
|
|
|
]]
|
|
|
|
example = [[
|
|
|
|
|
2019-03-09 17:34:43 +08:00
|
|
|
-- ISO15693 slix magic tag
|
2018-12-19 00:57:22 +08:00
|
|
|
|
2019-03-09 17:34:43 +08:00
|
|
|
script run iso15_magic -u E004013344556677
|
|
|
|
|
|
|
|
script run iso15_magic -u E004013344556677 -a
|
2018-12-19 00:57:22 +08:00
|
|
|
]]
|
|
|
|
usage = [[
|
|
|
|
script run iso15_magic -h -u <uid>
|
|
|
|
|
|
|
|
Arguments:
|
2019-03-09 17:34:43 +08:00
|
|
|
-h : this help
|
|
|
|
-u <UID> : UID (16 hexsymbols)
|
|
|
|
-a : use offical pm3 repo ISO15 commands instead of iceman fork.
|
2018-12-19 00:57:22 +08:00
|
|
|
]]
|
|
|
|
|
|
|
|
local DEBUG = true
|
2019-03-09 17:34:43 +08:00
|
|
|
---
|
2018-12-19 00:57:22 +08:00
|
|
|
-- A debug printout-function
|
|
|
|
local function dbg(args)
|
|
|
|
if not DEBUG then return end
|
|
|
|
if type(args) == "table" then
|
2019-03-09 17:34:43 +08:00
|
|
|
local i = 1
|
|
|
|
while args[i] do
|
|
|
|
dbg(args[i])
|
|
|
|
i = i+1
|
|
|
|
end
|
|
|
|
else
|
|
|
|
print("###", args)
|
|
|
|
end
|
|
|
|
end
|
|
|
|
---
|
2018-12-19 00:57:22 +08:00
|
|
|
-- This is only meant to be used when errors occur
|
|
|
|
local function oops(err)
|
2019-03-09 17:34:43 +08:00
|
|
|
print("ERROR: ",err)
|
|
|
|
return nil, err
|
2018-12-19 00:57:22 +08:00
|
|
|
end
|
2019-03-09 17:34:43 +08:00
|
|
|
---
|
2018-12-19 00:57:22 +08:00
|
|
|
-- Usage help
|
|
|
|
local function help()
|
2019-03-09 17:34:43 +08:00
|
|
|
print(copyright)
|
|
|
|
print(author)
|
|
|
|
print(version)
|
|
|
|
print(desc)
|
|
|
|
print('Example usage')
|
|
|
|
print(example)
|
2018-12-19 00:57:22 +08:00
|
|
|
end
|
|
|
|
--
|
|
|
|
--- Set UID on magic command enabled on a ICEMAN based REPO
|
|
|
|
local function magicUID_iceman(b0, b1)
|
2019-03-09 17:34:43 +08:00
|
|
|
print('Using backdoor Magic tag function')
|
|
|
|
core.console("hf 15 raw -2 -c 02213E00000000")
|
|
|
|
core.console("hf 15 raw -2 -c 02213F69960000")
|
|
|
|
core.console("hf 15 raw -2 -c 022138"..b1)
|
|
|
|
core.console("hf 15 raw -2 -c 022139"..b0)
|
2018-12-19 00:57:22 +08:00
|
|
|
end
|
|
|
|
--
|
|
|
|
--- Set UID on magic command enabled, OFFICAL REPO
|
|
|
|
local function magicUID_offical(b0, b1)
|
2019-03-09 17:34:43 +08:00
|
|
|
print('Using backdoor Magic tag function OFFICAL REPO')
|
|
|
|
core.console("hf 15 cmd raw -c 02213E00000000")
|
|
|
|
core.console("hf 15 cmd raw -c 02213F69960000")
|
|
|
|
core.console("hf 15 cmd raw -c 022138"..b1)
|
|
|
|
core.console("hf 15 cmd raw -c 022139"..b0)
|
2018-12-19 00:57:22 +08:00
|
|
|
end
|
2019-03-09 17:34:43 +08:00
|
|
|
---
|
2018-12-19 00:57:22 +08:00
|
|
|
-- The main entry point
|
|
|
|
function main(args)
|
|
|
|
|
2019-03-09 17:34:43 +08:00
|
|
|
print( string.rep('--',20) )
|
|
|
|
print( string.rep('--',20) )
|
|
|
|
print()
|
|
|
|
|
|
|
|
local uid = 'E004013344556677'
|
|
|
|
local use_iceman = true
|
|
|
|
|
|
|
|
-- Read the parameters
|
|
|
|
for o, a in getopt.getopt(args, 'hu:a') do
|
|
|
|
if o == "h" then return help() end
|
|
|
|
if o == "u" then uid = a end
|
|
|
|
if o == "a" then use_iceman = false end
|
|
|
|
end
|
|
|
|
|
|
|
|
-- uid string checks
|
|
|
|
if uid == nil then return oops('empty uid string') end
|
|
|
|
if #uid == 0 then return oops('empty uid string') end
|
|
|
|
if #uid ~= 16 then return oops('uid wrong length. Should be 8 hex bytes') end
|
|
|
|
|
|
|
|
local bytes = utils.ConvertHexToBytes(uid)
|
|
|
|
|
|
|
|
local block0 = string.format('%02X%02X%02X%02X', bytes[4], bytes[3], bytes[2], bytes[1])
|
|
|
|
local block1 = string.format('%02X%02X%02X%02X', bytes[8], bytes[7], bytes[6], bytes[5])
|
|
|
|
|
|
|
|
print('new UID | '..uid)
|
|
|
|
|
|
|
|
core.clearCommandBuffer()
|
|
|
|
|
|
|
|
if use_iceman then
|
|
|
|
magicUID_iceman(block0, block1)
|
|
|
|
else
|
|
|
|
magicUID_offical(block0, block1)
|
|
|
|
end
|
2018-12-19 00:57:22 +08:00
|
|
|
end
|
|
|
|
|
|
|
|
main(args)
|