-- -- lf_hid_bulkclone.lua - A tool to clone a large number of tags at once. -- Updated 2017-04-18 -- Updated 2018-02-20 iceman local getopt = require('getopt') local ansicolors = require('ansicolors') copyright = '' author = "Brian Redbeard" version = 'v1.0.2' desc = [[ Perform bulk enrollment of 26 bit H10301 style RFID Tags For more info, check the comments in the code ]] example = [[ -- script run lf_hid_bulkclone.lua -f 1 -b 1000 -c 10 ]] usage = [[ script run lf_hid_bulkclone.lua -f facility -b base_id_num -c count ]] arguments = [[ -h : this help -f : facility id -b : starting card id -c : count, number of cards to make ]] local DEBUG = true --local bxor = bit32.bxor local bor = bit32.bor local lshift = bit32.lshift --- -- A debug printout-function local function dbg(args) if not DEBUG then return end if type(args) == 'table' then local i = 1 while args[i] do dbg(args[i]) i = i+1 end else print('###', args) end end --- -- This is only meant to be used when errors occur local function oops(err) print('ERROR:', err) core.clearCommandBuffer() return nil, errr end --- -- Usage help local function help() print(copyright) print(author) print(version) print(desc) print(ansicolors.cyan..'Usage'..ansicolors.reset) print(usage) print(ansicolors.cyan..'Arguments'..ansicolors.reset) print(arguments) print(ansicolors.cyan..'Example usage'..ansicolors.reset) print(example) end --- -- Exit message local function exitMsg(msg) print( string.rep('--',20) ) print( string.rep('--',20) ) print(msg) print() end --[[Implement a function to simply visualize the bitstream in a text format --This is especially helpful for troubleshooting bitwise math issues]]-- local function toBits(num,bits) -- returns a table of bits, most significant first. bits = bits or math.max(1, select(2, math.frexp(num))) local t = {} -- will contain the bits for b = bits, 1, -1 do t[b] = math.fmod(num, 2) num = math.floor((num - t[b]) / 2) end return table.concat(t) end --[[ Likely, I'm an idiot, but I couldn't find any parity functions in Lua This can also be done with a combination of bitwise operations (in fact, is the canonically "correct" way to do it, but my brain doesn't just default to this and so counting some ones is good enough for me ]]-- local function evenparity(s) local _, count = string.gsub(s, '1', '') local p = count % 2 if (p == 0) then return false else return true end end local function isempty(s) return s == nil or s == '' end --[[ The Proxmark3 "clone" functions expect the data to be in hex format so take the card id number and facility ID as arguments and construct the hex. This should be easy enough to extend to non 26bit formats ]]-- local function cardHex(i, f) fac = lshift(f, 16) id = bor(i, fac) stream = toBits(id, 24) --As the function defaults to even parity and returns a boolean, --perform a 'not' function to get odd parity high = evenparity(string.sub(stream,1,12)) and 1 or 0 low = not evenparity(string.sub(stream,13)) and 1 or 0 bits = bor( lshift(id, 1), low) bits = bor( bits, lshift(high, 25)) --Since the lua library bit32 is (obviously) 32 bits and we need to --encode 36 bits to properly do a 26 bit tag with the preamble we need --to create a higher order and lower order component which we will --then assemble in the return. The math above defines the proper --encoding as per HID/Weigand/etc. These bit flips are due to the --format length check on bit 38 (cmdlfhid.c:64) and --bit 31 (cmdlfhid.c:66). preamble = bor(0, lshift(1, 5)) bits = bor(bits, lshift(1, 26)) return ('%04x%08x'):format(preamble, bits) end --- -- main local function main(args) print( string.rep('--',20) ) print( string.rep('--',20) ) print() if #args == 0 then return help() end --I really wish a better getopt function would be brought in supporting --long arguments, but it seems this library was chosen for BSD style --compatibility for o, a in getopt.getopt(args, 'f:b:c:h') do if o == 'h' then return help() end if o == 'f' then if isempty(a) then print('You did not supply a facility code, using 0') facility = 0 else facility = a end end if o == 'b' then if isempty(a) then return oops('You must supply the flag -b (base id)') end baseid = a end if o == 'c' then if isempty(a) then return oops('You must supply the flag -c (count)') end count = a end end --Due to my earlier complaints about how this specific getopt library --works, specifying ':' does not enforce supplying a value, thus we --need to do these checks all over again. if isempty(baseid) then return oops('You must supply the flag -b (base id)') end if isempty(count) then return oops('You must supply the flag -c (count)') end --If the facility ID is non specified, ensure we code it as zero if isempty(facility) then print('Using 0 for the facility code as -f was not supplied') facility = 0 end --The next baseid + count function presents a logic/UX conflict --where users specifying -c 1 (count = 1) would try to program two --tags. This makes it so that -c 0 & -c 1 both code one tag, and all --other values encode the expected amount. if tonumber(count) > 0 then count = count - 1 end endid = baseid + count for cardnum = baseid, endid do local card = cardHex(cardnum, facility) print('Press enter to program card '..cardnum..':'..facility..' (hex: '..card..')') --This would be better with 'press Enter', but we'll take what we can get. io.read() core.console( ('lf hid clone %s'):format(card) ) end end main(args)