mirror of
https://github.com/RfidResearchGroup/proxmark3.git
synced 2024-11-16 14:50:07 +08:00
270 lines
7.1 KiB
Lua
270 lines
7.1 KiB
Lua
local cmds = require('commands')
|
|
local getopt = require('getopt')
|
|
local lib14b = require('read14b')
|
|
local utils = require('utils')
|
|
local iso7816 = require('7816_error')
|
|
local ansicolors = require('ansicolors')
|
|
|
|
copyright = ''
|
|
author = 'Iceman'
|
|
version = 'v1.0.2'
|
|
desc = [[
|
|
This is a script to communicate with a CALYSPO / 14443b tag using the '14b raw' commands
|
|
]]
|
|
example = [[
|
|
script run calypso -b 11223344
|
|
|
|
]]
|
|
usage = [[
|
|
script run calypso -h -b
|
|
]]
|
|
arguments = [[
|
|
h this helptext
|
|
b raw bytes to send
|
|
]]
|
|
|
|
--[[
|
|
This script communicates with /armsrc/iso14443b.c,
|
|
Check there for details about data format and how commands are interpreted on the
|
|
device-side.
|
|
]]
|
|
|
|
local function calypso_parse(result)
|
|
local r = Command.parse(result)
|
|
local len = r.arg2 * 2
|
|
r.data = string.sub(r.data, 0, len);
|
|
print('GOT:', r.data)
|
|
if r.arg1 == 0 then
|
|
return r, nil
|
|
end
|
|
return nil,nil
|
|
end
|
|
---
|
|
-- A debug printout-function
|
|
local function dbg(args)
|
|
if not DEBUG then return end
|
|
if type(args) == 'table' then
|
|
local i = 1
|
|
while args[i] do
|
|
dbg(args[i])
|
|
i = i+1
|
|
end
|
|
else
|
|
print('###', args)
|
|
end
|
|
end
|
|
---
|
|
-- This is only meant to be used when errors occur
|
|
local function oops(err)
|
|
print('ERROR: ', err)
|
|
lib14b.disconnect()
|
|
return nil, err
|
|
end
|
|
---
|
|
-- Usage help
|
|
local function help()
|
|
print(copyright)
|
|
print(author)
|
|
print(version)
|
|
print(desc)
|
|
print(ansicolors.cyan..'Usage'..ansicolors.reset)
|
|
print(usage)
|
|
print(ansicolors.cyan..'Arguments'..ansicolors.reset)
|
|
print(arguments)
|
|
print(ansicolors.cyan..'Example usage'..ansicolors.reset)
|
|
print(example)
|
|
end
|
|
--
|
|
-- helper function, give current count of items in lua-table.
|
|
local function tablelen(T)
|
|
local count = 0
|
|
for _ in pairs(T) do count = count + 1 end
|
|
return count
|
|
end
|
|
---
|
|
-- helper function, gives a sorted table from table t,
|
|
-- order can be a seperate sorting-order function.
|
|
local function spairs(t, order)
|
|
-- collect the keys
|
|
local keys = {}
|
|
for k in pairs(t) do keys[#keys+1] = k end
|
|
|
|
-- if order function given, sort by it by passing the table and keys a, b,
|
|
-- otherwise just sort the keys
|
|
if order then
|
|
table.sort(keys, function(a,b) return order(t, a, b) end)
|
|
else
|
|
table.sort(keys)
|
|
end
|
|
|
|
-- return the iterator function
|
|
local i = 0
|
|
return function()
|
|
i = i + 1
|
|
if keys[i] then
|
|
return keys[i], t[keys[i]]
|
|
end
|
|
end
|
|
end
|
|
---
|
|
-- Sends a usbpackage , "hf 14b raw"
|
|
-- if it reads the response, it converts it to a lua object "Command" first and the Data is cut to correct length.
|
|
local function calypso_send_cmd_raw(data, ignoreresponse )
|
|
|
|
local command, flags, result, err
|
|
flags = lib14b.ISO14B_COMMAND.ISO14B_RAW +
|
|
lib14b.ISO14B_COMMAND.ISO14B_APPEND_CRC
|
|
|
|
data = data or "00"
|
|
|
|
command = Command:newMIX{
|
|
cmd = cmds.CMD_HF_ISO14443B_COMMAND,
|
|
arg1 = flags,
|
|
arg2 = #data/2, -- LEN of data, half the length of the ASCII-string hex string
|
|
data = data} -- data bytes (commands etc)
|
|
|
|
result, err = command:sendMIX(ignoreresponse)
|
|
if result then
|
|
local r = calypso_parse(result)
|
|
return r, nil
|
|
end
|
|
return respone, err
|
|
end
|
|
---
|
|
-- calypso_card_num : Reads card number from ATR and
|
|
-- writes it in the tree in decimal format.
|
|
local function calypso_card_num(card)
|
|
if not card then return end
|
|
local card_num = tonumber( card.uid:sub(1,8),16 )
|
|
print('Card UID', card.uid)
|
|
print('Card Number', card_num)
|
|
end
|
|
---
|
|
-- analyse CALYPSO apdu status bytes.
|
|
local function calypso_apdu_status(apdu)
|
|
-- last two is CRC
|
|
-- next two is APDU status bytes.
|
|
local status = false
|
|
local mess = 'FAIL'
|
|
local sw = apdu:sub( #apdu-7, #apdu-4)
|
|
desc, err = iso7816.tostring(sw)
|
|
print ('SW', sw, desc, err )
|
|
|
|
status = ( sw == '9000' )
|
|
|
|
return status
|
|
end
|
|
|
|
local _calypso_cmds = {
|
|
|
|
-- Break down of command bytes:
|
|
-- A4 = select
|
|
-- Master File 3F00
|
|
-- 0x3F = master file
|
|
-- 0x00 = master file id, is constant to 0x00.
|
|
|
|
-- DF Dedicated File 38nn
|
|
-- can be seen as directories
|
|
-- 0x38
|
|
-- 0xNN id
|
|
-- ["01.Select ICC file"] = '0294 a4 080004 3f00 0002',
|
|
|
|
-- EF Elementary File
|
|
-- EF1 Pin file
|
|
-- EF2 Key file
|
|
-- Grey Lock file
|
|
-- Electronic deposit file
|
|
-- Electronic Purse file
|
|
-- Electronic Transaction log file
|
|
|
|
|
|
--['01.Select ICC file'] = '0294 a4 00 0002 3f00',
|
|
['01.Select ICC file'] = '0294 a4 080004 3f00 0002',
|
|
['02.ICC'] = '0394 b2 01 041d',
|
|
['03.Select EnvHol file'] = '0294 a4 080004 2000 2001',
|
|
['04.EnvHol1'] = '0394 b2 01 041d',
|
|
['05.Select EvLog file'] = '0294 a4 080004 2000 2010',
|
|
['06.EvLog1'] = '0394 b2 01 041d',
|
|
['07.EvLog2'] = '0294 b2 02 041d',
|
|
['08.EvLog3'] = '0394 b2 03 041d',
|
|
['09.Select ConList file']= '0294 a4 080004 2000 2050',
|
|
['10.ConList'] = '0394 b2 01 041d',
|
|
['11.Select Contra file'] = '0294 a4 080004 2000 2020',
|
|
['12.Contra1'] = '0394 b2 01 041d',
|
|
['13.Contra2'] = '0294 b2 02 041d',
|
|
['14.Contra3'] = '0394 b2 03 041d',
|
|
['15.Contra4'] = '0294 b2 04 041d',
|
|
['16.Select Counter file']= '0394 a4 080004 2000 2069',
|
|
['17.Counter'] = '0294 b2 01 041d',
|
|
['18.Select SpecEv file'] = '0394 a4 080004 2000 2040',
|
|
['19.SpecEv1'] = '0294 b2 01 041d',
|
|
}
|
|
|
|
---
|
|
-- The main entry point
|
|
function main(args)
|
|
|
|
print( string.rep('--',20) )
|
|
print( string.rep('--',20) )
|
|
print()
|
|
|
|
local data, apdu, flags, uid, cid, result, err, card
|
|
-- Read the parameters
|
|
for o, a in getopt.getopt(args, 'h') do
|
|
if o == 'h' then return help() end
|
|
if o == 'b' then bytes = a end
|
|
end
|
|
|
|
lib14b.connect()
|
|
|
|
-- Select 14b tag.
|
|
card, err = lib14b.waitFor14443b()
|
|
if not card then return oops(err) end
|
|
|
|
calypso_card_num(card)
|
|
cid = card.cid
|
|
|
|
--[[
|
|
NAME VALUE APDU_POS
|
|
PCB 0x0A 0
|
|
CID 0x00 1
|
|
CLA 0x94 2
|
|
SELECT FILE 0xA4 3
|
|
READ FILE 0xB2 3
|
|
P1 4
|
|
P2 5
|
|
LEN_
|
|
0 1 2 3 4 5 6 7
|
|
apdu = '02 94 a4 08 00 04 3f 00 00 02' --select ICC file
|
|
DF_NAME = "1TIC.ICA"
|
|
--]]
|
|
--for i = 1,10 do
|
|
--result, err = calypso_send_cmd_raw('0294a40800043f000002',false) --select ICC file
|
|
for i, apdu in spairs(_calypso_cmds) do
|
|
print('>>', i )
|
|
apdu = apdu:gsub('%s+', '')
|
|
result, err = calypso_send_cmd_raw(apdu , false)
|
|
if result then
|
|
calypso_apdu_status(result.data)
|
|
print('<<', result.data )
|
|
else
|
|
print('<< no answer')
|
|
end
|
|
end
|
|
lib14b.disconnect()
|
|
end
|
|
---
|
|
-- a simple selftest function, tries to convert
|
|
function selftest()
|
|
DEBUG = true
|
|
dbg('Performing test')
|
|
dbg('Tests done')
|
|
end
|
|
-- Flip the switch here to perform a sanity check.
|
|
-- It read a nonce in two different ways, as specified in the usage-section
|
|
if '--test'==args then
|
|
selftest()
|
|
else
|
|
-- Call the main
|
|
main(args)
|
|
end
|