iceman1001
cc17db26bf
ndef key
2025-06-17 18:28:23 +02:00
iceman1001
7fa9f7bdfe
change parameter, we like shorter parameter names remember... 'hf mfu aesauth --idx'
2025-06-17 18:28:23 +02:00
iceman1001
fc9f70c436
fix release name style
2025-06-17 18:28:22 +02:00
iceman1001
79400d0779
text and style
2025-06-17 18:28:22 +02:00
iceman1001
1f718683b3
Revert "Release v4.20469 - Daddy Iceman"
...
This reverts commit 9fa173c727
2025-06-16 16:18:01 +02:00
iceman1001
9fa173c727
Release v4.20469 - Daddy Iceman
2025-06-16 16:18:01 +02:00
Philippe Teuwen
a5d02c6ba2
style
2025-06-15 12:53:33 +02:00
EpicPlayerA10
ee674405bc
remove duplicates
...
Signed-off-by: EpicPlayerA10 <62206933+EpicPlayerA10@users.noreply.github.com>
2025-06-13 13:51:18 +02:00
EpicPlayerA10
5cb19b0645
Poland Warsaw public transport card keys
...
Signed-off-by: EpicPlayerA10 <62206933+EpicPlayerA10@users.noreply.github.com>
2025-06-13 13:05:32 +02:00
iceman1001
dc44d0fda5
fix error: variable length array folded to constant array as an extension [-Werror,-Wgnu-folding-constant] on MAC Xcode26.0
2025-06-12 17:37:02 +02:00
iceman1001
e917491d4a
fix error: variable length array folded to constant array as an extension [-Werror,-Wgnu-folding-constant] on MAC Xcode26.0
2025-06-12 17:21:18 +02:00
iceman1001
4725ae5c22
fix #2900 - bad compare
2025-06-12 13:56:49 +02:00
Antiklesys
0378d91595
Minor iclass sam comms tweaks
...
1- Removed timeout on client side to allow the sam to be slow in responding
2- Increased SIM_WAIT_DELAY to allow for bigger sam responses
2025-06-12 19:42:56 +08:00
iceman1001
2ca43e0e2d
text and style
2025-06-11 21:41:19 +02:00
iceman1001
2108ab6101
fix string formatter warning
2025-06-11 14:39:20 +02:00
Iceman
8156274007
Merge pull request #2896 from Antiklesys/master
...
Added hf iclass sam --info
2025-06-10 20:39:40 +02:00
Antiklesys
7fb5716ea3
Added hf iclass sam --info
...
Added hf iclass sam --info command that skips any card communication command and just interacts with the SAM to return:
1- Sam Firmware Version
2- Sam Firmware ID
3- Sam Serial Number
2025-06-11 01:06:38 +08:00
Henry Gabryjelski
9b37250453
em4x70 --par deprecation: Step 5: remove client parameters entirely
2025-06-09 15:05:28 -07:00
Henry Gabryjelski
69a2cc1ff0
em4x70 --par deprecation: Step 4: remove client references to client->arm field that used to store this
2025-06-09 14:03:05 -07:00
Henry Gabryjelski
4dcf12fd8d
em4x70 --par deprecation: Step 3: remove client-only variables, hard-code false for client->arm comms
2025-06-09 13:32:37 -07:00
Henry Gabryjelski
31b1117a51
em4x70 --par deprecation: Step 2: arm-side always uses false
2025-06-09 12:58:50 -07:00
Henry Gabryjelski
86bac8fe8c
em4x70 --par deprecation: Step 1: client-side always sets false
2025-06-09 12:18:34 -07:00
Antiklesys
b70d462a06
Updated iclass config cards readability
...
Updated config cards section readability
2025-06-10 01:07:04 +08:00
iceman1001
5f2edb9bb8
reworked and improved the hf mfp chk key handling. reworked the nxp_detect_card technology function to enable other parts of the client to benefit from detecting card types. Like hf mf info or hf mf autopwn - two most common used commands. Now less waiting and more easily to know what next steps to do.
2025-06-09 15:36:44 +02:00
iceman1001
1fa5e28a38
unify text and hints for static enc nonces a bit more
2025-06-08 21:46:31 +02:00
Jean-Michel Picod
7fd5730d89
Rollback em4x50_read() to remove a segv
...
Client was expecting a struct starting with an object count but ARM directly sends the array.
The struct is only used on this line in the whole repository, so reverting client is the easiest way to solve the issue.
Signed-off-by: Jean-Michel Picod <jmichel.p@gmail.com>
2025-06-08 21:10:02 +02:00
iceman1001
ec26b6d84f
style and text. unify some parameter names
2025-06-08 20:56:01 +02:00
iceman1001
add2eb8e9d
hf mf dump, does a guess the key file name, and if you ran for instance a autopwn against a 4K card but didnt mention it , it defaults to 1K. Meaning the recovered keyfile will have 32 keys. When trying to dump card and specifiy 4K, it would automatically find that keyfile and happily go out-of-bounds leading to client crash
2025-06-08 19:31:02 +02:00
iceman1001
3d8a15d361
text
2025-06-08 16:10:26 +02:00
iceman1001
bcec294606
fix the visual bug with when viewing larger mifare class dumps, 2k, 4k, it would mark the signature sectors... for the rest of the dumps.
2025-06-08 16:09:23 +02:00
iceman1001
27aa9a2085
hf mf rdsc - if a successful read was made , add the used key to the sector trailer output.\nhf mf info - after getting annoyed over command running tests on non mifare classic card, this fixes it.
2025-06-08 10:06:30 +02:00
iceman1001
387009ab6a
added a support function
2025-06-08 10:02:40 +02:00
iceman1001
2d610b8dc0
text & style
2025-06-08 10:02:00 +02:00
Antiklesys
80e1c7f0d4
Implemented hf iclass sim -t 7
...
Implemented an iclass sim function that prevents simulated card responses after updating block 3.
Block 3 gets updated with the XOR key as if it was in personalization mode.
2025-06-07 23:12:21 +08:00
BIOS9
fd3a644289
fix mad v2 cps offset
...
card publisher sector is an absolute sector index but the code compared it against a relative index of mifare 4k sectors
2025-06-07 23:04:34 +12:00
iceman1001
3a8c3174a8
text
2025-06-07 12:53:15 +02:00
iceman1001
88593f9b8b
updated the ATR list and organized the changelog to prefered style
2025-06-07 12:08:12 +02:00
iceman1001
6fbb13ba41
style
2025-06-07 11:50:03 +02:00
Antiklesys
b4edcb9510
Updated hf iclass sim -t 6
...
Updates to the functionality of iclass sim -t 6 to specifically target the last SIO block and to do it automatically.
It now checks the AIA to determine if the card is SR or SE and adjust the block to jam based on the SIO length declared in block 6 (if SE) or fixed length if SR.
2025-06-07 13:46:19 +08:00
Antiklesys
082bea661d
Update cmdhficlass.c
...
Signed-off-by: Antiklesys <syselkitna@gmail.com>
2025-06-07 02:23:40 +08:00
Antiklesys
94794f7519
Implemented a hf iclass sim variation
...
hf iclass sim -t 3 variation that glitches specific block responses during read/write operations based on the value of the last byte of block 31.
2025-06-07 02:15:01 +08:00
iceman1001
53e1e32409
text
2025-06-06 19:00:34 +02:00
iceman1001
23338b3f39
text
2025-06-06 17:55:46 +02:00
iceman1001
f41d6fad53
style
2025-06-06 13:27:02 +02:00
Antiklesys
e68be39a41
Updated hf iclass legrec to be able to use shorter delays
...
Added an option for hf iclass legrec to further increase speeds by using a shorter delay of 1500 vs the default of 3390.
This seems to be stable on new silicon especially now that we're keeping the field always on.
It may be more risky for the --fast operation.
2025-06-06 16:06:53 +08:00
Antiklesys
566d9957a8
Update cmdhficlass.c
...
Signed-off-by: Antiklesys <syselkitna@gmail.com>
2025-06-06 12:07:13 +08:00
Antiklesys
6a9c3d4dcd
Update cmdhficlass.c
...
Signed-off-by: Antiklesys <syselkitna@gmail.com>
2025-06-06 12:03:15 +08:00
Antiklesys
a79b1b9e82
Update cmdhficlass.c
...
Signed-off-by: Antiklesys <syselkitna@gmail.com>
2025-06-06 11:34:23 +08:00
Antiklesys
411c684e6a
Implemented working multithreading support in hf iclass legbrute
...
Implemented key nibble based multithreading support for hf iclass legbrute.
It takes the whole iclass keyspace based on the first 4 bits of the key value (from 0x0 to 0xF) and divides it across the number of available threads.
E.g. on a 8 threads implementation:
- thread 1 will test keys starting with 0x0 onwards
- thread 2 will test keys starting with 0x2 onwards
- thread 3 will test keys starting with 0x4 onwards
- thread 4 will test keys starting with 0x6 onwards
- thread 5 will test keys starting with 0x8 onwards
- thread 6 will test keys starting with 0xA onwards
- thread 7 will test keys starting with 0xC onwards
- thread 8 will test keys starting with 0XE onwards
2025-06-06 11:25:46 +08:00
Antiklesys
ab84cb459a
Update cmdhficlass.c
...
Signed-off-by: Antiklesys <syselkitna@gmail.com>
2025-06-05 20:57:47 +08:00
