This commit is contained in:
iceman1001 2024-02-03 16:05:58 +01:00
commit 7c6d60e7ef
15 changed files with 321 additions and 208 deletions

View file

@ -261,17 +261,6 @@ const static vocabulary_t vocabulary[] = {
{ 0, "hf gallagher delete" }, { 0, "hf gallagher delete" },
{ 1, "hf gallagher diversifykey" }, { 1, "hf gallagher diversifykey" },
{ 1, "hf gallagher decode" }, { 1, "hf gallagher decode" },
{ 1, "hf ksx6924 help" },
{ 0, "hf ksx6924 select" },
{ 0, "hf ksx6924 info" },
{ 0, "hf ksx6924 balance" },
{ 0, "hf ksx6924 init" },
{ 0, "hf ksx6924 prec" },
{ 1, "hf jooki help" },
{ 0, "hf jooki clone" },
{ 1, "hf jooki decode" },
{ 1, "hf jooki encode" },
{ 0, "hf jooki sim" },
{ 1, "hf iclass help" }, { 1, "hf iclass help" },
{ 1, "hf iclass list" }, { 1, "hf iclass list" },
{ 0, "hf iclass dump" }, { 0, "hf iclass dump" },
@ -299,6 +288,22 @@ const static vocabulary_t vocabulary[] = {
{ 1, "hf iclass managekeys" }, { 1, "hf iclass managekeys" },
{ 1, "hf iclass permutekey" }, { 1, "hf iclass permutekey" },
{ 0, "hf iclass sam" }, { 0, "hf iclass sam" },
{ 1, "hf ict help" },
{ 0, "hf ict credential" },
{ 0, "hf ict info" },
{ 1, "hf ict list" },
{ 1, "hf ict reader" },
{ 1, "hf jooki help" },
{ 0, "hf jooki clone" },
{ 1, "hf jooki decode" },
{ 1, "hf jooki encode" },
{ 0, "hf jooki sim" },
{ 1, "hf ksx6924 help" },
{ 0, "hf ksx6924 select" },
{ 0, "hf ksx6924 info" },
{ 0, "hf ksx6924 balance" },
{ 0, "hf ksx6924 init" },
{ 0, "hf ksx6924 prec" },
{ 1, "hf legic help" }, { 1, "hf legic help" },
{ 0, "hf legic dump" }, { 0, "hf legic dump" },
{ 0, "hf legic info" }, { 0, "hf legic info" },
@ -529,6 +534,7 @@ const static vocabulary_t vocabulary[] = {
{ 0, "hw readmem" }, { 0, "hw readmem" },
{ 0, "hw reset" }, { 0, "hw reset" },
{ 0, "hw setlfdivisor" }, { 0, "hw setlfdivisor" },
{ 0, "hw sethfthresh" },
{ 0, "hw setmux" }, { 0, "hw setmux" },
{ 0, "hw standalone" }, { 0, "hw standalone" },
{ 0, "hw status" }, { 0, "hw status" },
@ -595,9 +601,10 @@ const static vocabulary_t vocabulary[] = {
{ 0, "lf em 4x50 rdbl" }, { 0, "lf em 4x50 rdbl" },
{ 0, "lf em 4x50 reader" }, { 0, "lf em 4x50 reader" },
{ 0, "lf em 4x50 restore" }, { 0, "lf em 4x50 restore" },
{ 1, "lf em 4x50 view" },
{ 0, "lf em 4x50 wipe" },
{ 0, "lf em 4x50 wrbl" }, { 0, "lf em 4x50 wrbl" },
{ 0, "lf em 4x50 wrpwd" }, { 0, "lf em 4x50 wrpwd" },
{ 0, "lf em 4x50 wipe" },
{ 0, "lf em 4x50 eload" }, { 0, "lf em 4x50 eload" },
{ 0, "lf em 4x50 esave" }, { 0, "lf em 4x50 esave" },
{ 0, "lf em 4x50 eview" }, { 0, "lf em 4x50 eview" },
@ -637,11 +644,13 @@ const static vocabulary_t vocabulary[] = {
{ 0, "lf hitag info" }, { 0, "lf hitag info" },
{ 0, "lf hitag dump" }, { 0, "lf hitag dump" },
{ 0, "lf hitag read" }, { 0, "lf hitag read" },
{ 1, "lf hitag view" },
{ 0, "lf hitag wrbl" }, { 0, "lf hitag wrbl" },
{ 0, "lf hitag sniff" }, { 0, "lf hitag sniff" },
{ 0, "lf hitag cc" }, { 0, "lf hitag cc" },
{ 0, "lf hitag ta" }, { 0, "lf hitag ta" },
{ 0, "lf hitag eload" }, { 0, "lf hitag eload" },
{ 0, "lf hitag eview" },
{ 0, "lf hitag sim" }, { 0, "lf hitag sim" },
{ 1, "lf idteck help" }, { 1, "lf idteck help" },
{ 1, "lf idteck demod" }, { 1, "lf idteck demod" },

View file

@ -3056,7 +3056,7 @@
}, },
"hf help": { "hf help": {
"command": "hf help", "command": "hf help",
"description": "-------- ----------------------- High Frequency ----------------------- 14a { ISO14443A RFIDs... } 14b { ISO14443B RFIDs... } 15 { ISO15693 RFIDs... } cipurse { Cipurse transport Cards... } epa { German Identification Card... } emrtd { Machine Readable Travel Document... } felica { ISO18092 / FeliCa RFIDs... } fido { FIDO and FIDO2 authenticators... } fudan { Fudan RFIDs... } gallagher { Gallagher DESFire RFIDs... } ksx6924 { KS X 6924 (T-Money, Snapper+) RFIDs } jooki { Jooki RFIDs... } iclass { ICLASS RFIDs... } legic { LEGIC RFIDs... } lto { LTO Cartridge Memory RFIDs... } mf { MIFARE RFIDs... } mfp { MIFARE Plus RFIDs... } mfu { MIFARE Ultralight RFIDs... } mfdes { MIFARE Desfire RFIDs... } ntag424 { NXP NTAG 4242 DNA RFIDs... } seos { SEOS RFIDs... } st25ta { ST25TA RFIDs... } tesla { TESLA Cards... } texkom { Texkom RFIDs... } thinfilm { Thinfilm RFIDs... } topaz { TOPAZ (NFC Type 1) RFIDs... } vas { Apple Value Added Service } waveshare { Waveshare NFC ePaper... } xerox { Fuji/Xerox cartridge RFIDs... } ----------- --------------------- General --------------------- help This help list List protocol data in trace buffer search Search for known HF tags --------------------------------------------------------------------------------------- hf list available offline: yes Alias of `trace list -t raw` with selected protocol data to annotate trace buffer You can load a trace from file (see `trace load -h`) or it be downloaded from device by default It accepts all other arguments of `trace list`. Note that some might not be relevant for this specific protocol", "description": "-------- ----------------------- High Frequency ----------------------- 14a { ISO14443A RFIDs... } 14b { ISO14443B RFIDs... } 15 { ISO15693 RFIDs... } cipurse { Cipurse transport Cards... } epa { German Identification Card... } emrtd { Machine Readable Travel Document... } felica { ISO18092 / FeliCa RFIDs... } fido { FIDO and FIDO2 authenticators... } fudan { Fudan RFIDs... } gallagher { Gallagher DESFire RFIDs... } iclass { ICLASS RFIDs... } ict { ICT MFC/DESfire RFIDs... } jooki { Jooki RFIDs... } ksx6924 { KS X 6924 (T-Money, Snapper+) RFIDs } legic { LEGIC RFIDs... } lto { LTO Cartridge Memory RFIDs... } mf { MIFARE RFIDs... } mfp { MIFARE Plus RFIDs... } mfu { MIFARE Ultralight RFIDs... } mfdes { MIFARE Desfire RFIDs... } ntag424 { NXP NTAG 4242 DNA RFIDs... } seos { SEOS RFIDs... } st25ta { ST25TA RFIDs... } tesla { TESLA Cards... } texkom { Texkom RFIDs... } thinfilm { Thinfilm RFIDs... } topaz { TOPAZ (NFC Type 1) RFIDs... } vas { Apple Value Added Service } waveshare { Waveshare NFC ePaper... } xerox { Fuji/Xerox cartridge RFIDs... } ----------- --------------------- General --------------------- help This help list List protocol data in trace buffer search Search for known HF tags --------------------------------------------------------------------------------------- hf list available offline: yes Alias of `trace list -t raw` with selected protocol data to annotate trace buffer You can load a trace from file (see `trace load -h`) or it be downloaded from device by default It accepts all other arguments of `trace list`. Note that some might not be relevant for this specific protocol",
"notes": [ "notes": [
"hf list --frame -> show frame delay times", "hf list --frame -> show frame delay times",
"hf list -1 -> use trace buffer" "hf list -1 -> use trace buffer"
@ -3564,6 +3564,52 @@
], ],
"usage": "hf iclass wrbl [-hv] [-k <hex>] [--ki <dec>] --blk <dec> -d <hex> [-m <hex>] [--credit] [--elite] [--raw] [--nr] [--shallow]" "usage": "hf iclass wrbl [-hv] [-k <hex>] [--ki <dec>] --blk <dec> -d <hex> [-m <hex>] [--credit] [--elite] [--raw] [--nr] [--shallow]"
}, },
"hf ict help": {
"command": "hf ict help",
"description": "help This help list List ICT history reader Act like an IS14443-a reader --------------------------------------------------------------------------------------- hf ict credential available offline: no Read ICT sector from tag and decode",
"notes": [
"hf ict credential"
],
"offline": true,
"options": [
"-h, --help This help",
"-v, --verbose verbose output"
],
"usage": "hf ict credential [-hv]"
},
"hf ict info": {
"command": "hf ict info",
"description": "Get info from ICT encoded credential tags (MIFARE Classic / DESfire)",
"notes": [
"hf ict info"
],
"offline": false,
"options": [
"-h, --help This help"
],
"usage": "hf ict info [-h]"
},
"hf ict list": {
"command": "hf ict list",
"description": "Alias of `trace list -t 14a -c` with selected protocol data to annotate trace buffer You can load a trace from file (see `trace load -h`) or it be downloaded from device by default It accepts all other arguments of `trace list`. Note that some might not be relevant for this specific protocol",
"notes": [
"hf ict list --frame -> show frame delay times",
"hf ict list -1 -> use trace buffer"
],
"offline": true,
"options": [
"-h, --help This help",
"-1, --buffer use data from trace buffer",
"--frame show frame delay times",
"-c mark CRC bytes",
"-r show relative times (gap and duration)",
"-u display times in microseconds instead of clock cycles",
"-x show hexdump to convert to pcap(ng)",
"or to import into Wireshark using encapsulation type \"ISO 14443\"",
"-f, --file <fn> filename of dictionary"
],
"usage": "hf ict list [-h1crux] [--frame] [-f <fn>]"
},
"hf jooki decode": { "hf jooki decode": {
"command": "hf jooki decode", "command": "hf jooki decode",
"description": "Decode a base64-encode Jooki token in NDEF URI format", "description": "Decode a base64-encode Jooki token in NDEF URI format",
@ -8523,7 +8569,7 @@
}, },
"lf em 4x05 view": { "lf em 4x05 view": {
"command": "lf em 4x05 view", "command": "lf em 4x05 view",
"description": "Print a EM4205/4305/4369/4469 dump file (bin/eml/json) note: We don't track if password is known in current dump file formats. All zeros password block might be filler data", "description": "Print a EM4205/4305/4369/4469 dump file note: We don't track if password is known in current dump file formats. All zeros password block might be filler data",
"notes": [ "notes": [
"lf em 4x05 view -f lf-4x05-01020304-dump.json" "lf em 4x05 view -f lf-4x05-01020304-dump.json"
], ],
@ -8599,9 +8645,10 @@
"options": [ "options": [
"-h, --help This help", "-h, --help This help",
"-f, --file <fn> specify dump filename", "-f, --file <fn> specify dump filename",
"-p, --pwd <hex> password, 4 hex bytes, lsb" "-p, --pwd <hex> password, 4 hex bytes, lsb",
"--ns no save to file"
], ],
"usage": "lf em 4x50 dump [-h] [-f <fn>] [-p <hex>]" "usage": "lf em 4x50 dump [-h] [-f <fn>] [-p <hex>] [--ns]"
}, },
"lf em 4x50 eload": { "lf em 4x50 eload": {
"command": "lf em 4x50 eload", "command": "lf em 4x50 eload",
@ -8644,7 +8691,7 @@
}, },
"lf em 4x50 help": { "lf em 4x50 help": {
"command": "lf em 4x50 help", "command": "lf em 4x50 help",
"description": "help This help ----------- --------------------- operations --------------------- ----------- --------------------- simulation --------------------- --------------------------------------------------------------------------------------- lf em 4x50 brute available offline: no Tries to bruteforce the password of a EM4x50 card. Function can be stopped by pressing pm3 button.", "description": "help This help ----------- --------------------- operations --------------------- view Display content from tag dump file ----------- --------------------- simulation --------------------- --------------------------------------------------------------------------------------- lf em 4x50 brute available offline: no Tries to bruteforce the password of a EM4x50 card. Function can be stopped by pressing pm3 button.",
"notes": [ "notes": [
"lf em 4x50 brute --mode range --begin 12330000 --end 12340000 -> tries pwds from 0x12330000 to 0x12340000", "lf em 4x50 brute --mode range --begin 12330000 --end 12340000 -> tries pwds from 0x12330000 to 0x12340000",
"lf em 4x50 brute --mode charset --digits --uppercase -> tries all combinations of ASCII codes for digits and uppercase letters", "lf em 4x50 brute --mode charset --digits --uppercase -> tries all combinations of ASCII codes for digits and uppercase letters",
@ -8751,6 +8798,19 @@
], ],
"usage": "lf em 4x50 sim [-h] [-p <hex>]" "usage": "lf em 4x50 sim [-h] [-p <hex>]"
}, },
"lf em 4x50 view": {
"command": "lf em 4x50 view",
"description": "Print a EM4x50 dump file",
"notes": [
"lf em 4x50 view -f lf-4x50-01020304-dump.json"
],
"offline": true,
"options": [
"-h, --help This help",
"-f, --file <fn> specify a filename for dump file"
],
"usage": "lf em 4x50 view [-h] [-f <fn>]"
},
"lf em 4x50 wipe": { "lf em 4x50 wipe": {
"command": "lf em 4x50 wipe", "command": "lf em 4x50 wipe",
"description": "Wipes EM4x50 tag by filling it with zeros, including the new password Must give a password.", "description": "Wipes EM4x50 tag by filling it with zeros, including the new password Must give a password.",
@ -9285,9 +9345,10 @@
"--nrar <hex> nonce / answer reader, 8 hex bytes", "--nrar <hex> nonce / answer reader, 8 hex bytes",
"--crypto crypto mode", "--crypto crypto mode",
"-k, --key <hex> key, 4 or 6 hex bytes", "-k, --key <hex> key, 4 or 6 hex bytes",
"-f, --file <fn> specify file name" "-f, --file <fn> specify file name",
"--ns no save to file"
], ],
"usage": "lf hitag dump [-h] [--pwd] [--nrar <hex>] [--crypto] [-k <hex>] [-f <fn>]" "usage": "lf hitag dump [-h] [--pwd] [--nrar <hex>] [--crypto] [-k <hex>] [-f <fn>] [--ns]"
}, },
"lf hitag eload": { "lf hitag eload": {
"command": "lf hitag eload", "command": "lf hitag eload",
@ -9306,9 +9367,22 @@
], ],
"usage": "lf hitag eload [-h12sm] -f <fn>" "usage": "lf hitag eload [-h12sm] -f <fn>"
}, },
"lf hitag eview": {
"command": "lf hitag eview",
"description": "It displays emulator memory",
"notes": [
"lf hitag eview"
],
"offline": false,
"options": [
"-h, --help This help",
"-v, --verbose Verbose output"
],
"usage": "lf hitag eview [-hv]"
},
"lf hitag help": { "lf hitag help": {
"command": "lf hitag help", "command": "lf hitag help",
"description": "help This help list List Hitag trace history --------------------------------------------------------------------------------------- lf hitag list available offline: yes Alias of `trace list -t hitag2` with selected protocol data to annotate trace buffer You can load a trace from file (see `trace load -h`) or it be downloaded from device by default It accepts all other arguments of `trace list`. Note that some might not be relevant for this specific protocol", "description": "help This help list List Hitag trace history view Display content from tag dump file --------------------------------------------------------------------------------------- lf hitag list available offline: yes Alias of `trace list -t hitag2` with selected protocol data to annotate trace buffer You can load a trace from file (see `trace load -h`) or it be downloaded from device by default It accepts all other arguments of `trace list`. Note that some might not be relevant for this specific protocol",
"notes": [ "notes": [
"lf hitag list --frame -> show frame delay times", "lf hitag list --frame -> show frame delay times",
"lf hitag list -1 -> use trace buffer" "lf hitag list -1 -> use trace buffer"
@ -9402,6 +9476,20 @@
], ],
"usage": "lf hitag sniff [-h]" "usage": "lf hitag sniff [-h]"
}, },
"lf hitag view": {
"command": "lf hitag view",
"description": "Print a HITAG dump file (bin/eml/json)",
"notes": [
"lf hitag view -f lf-hitag-01020304-dump.bin"
],
"offline": true,
"options": [
"-h, --help This help",
"-f, --file <fn> Specify a filename for dump file",
"-v, --verbose Verbose output"
],
"usage": "lf hitag view [-hv] -f <fn>"
},
"lf hitag wrbl": { "lf hitag wrbl": {
"command": "lf hitag wrbl", "command": "lf hitag wrbl",
"description": "Write a page in Hitag memory Crypto mode key format: ISK high + ISK low", "description": "Write a page in Hitag memory Crypto mode key format: ISK high + ISK low",
@ -12401,8 +12489,8 @@
} }
}, },
"metadata": { "metadata": {
"commands_extracted": 714, "commands_extracted": 721,
"extracted_by": "PM3Help2JSON v1.00", "extracted_by": "PM3Help2JSON v1.00",
"extracted_on": "2024-01-28T10:16:20" "extracted_on": "2024-02-03T15:03:29"
} }
} }

View file

@ -246,8 +246,8 @@ Check column "offline" for their availability.
|`hf 15 wipe `|N |`Wipe card to zeros` |`hf 15 wipe `|N |`Wipe card to zeros`
|`hf 15 wrbl `|N |`Write a block` |`hf 15 wrbl `|N |`Write a block`
|`hf 15 sim `|N |`Fake an ISO-15693 tag` |`hf 15 sim `|N |`Fake an ISO-15693 tag`
|`hf 15 eload `|N |`Load image file into emulator to be used by 'sim' command` |`hf 15 eload `|N |`Upload file into emulator memory`
|`hf 15 esave `|N |`Save emulator memory into image file` |`hf 15 esave `|N |`Save emulator memory to file`
|`hf 15 eview `|N |`View emulator memory` |`hf 15 eview `|N |`View emulator memory`
|`hf 15 slixwritepwd `|N |`Writes a password on a SLIX ISO-15693 tag` |`hf 15 slixwritepwd `|N |`Writes a password on a SLIX ISO-15693 tag`
|`hf 15 slixeasdisable `|N |`Disable EAS mode on SLIX ISO-15693 tag` |`hf 15 slixeasdisable `|N |`Disable EAS mode on SLIX ISO-15693 tag`
@ -378,33 +378,6 @@ Check column "offline" for their availability.
|`hf gallagher decode `|Y |`Decode Gallagher credential block` |`hf gallagher decode `|Y |`Decode Gallagher credential block`
### hf ksx6924
{ KS X 6924 (T-Money, Snapper+) RFIDs }
|command |offline |description
|------- |------- |-----------
|`hf ksx6924 help `|Y |`This help`
|`hf ksx6924 select `|N |`Select application, and leave field up`
|`hf ksx6924 info `|N |`Get info about a KS X 6924 (T-Money, Snapper+) transit card`
|`hf ksx6924 balance `|N |`Get current purse balance`
|`hf ksx6924 init `|N |`Perform transaction initialization with Mpda`
|`hf ksx6924 prec `|N |`Send proprietary get record command (CLA=90, INS=4C)`
### hf jooki
{ Jooki RFIDs... }
|command |offline |description
|------- |------- |-----------
|`hf jooki help `|Y |`This help`
|`hf jooki clone `|N |`Write a Jooki token`
|`hf jooki decode `|Y |`Decode Jooki token`
|`hf jooki encode `|Y |`Encode Jooki token`
|`hf jooki sim `|N |`Simulate Jooki token`
### hf iclass ### hf iclass
{ ICLASS RFIDs... } { ICLASS RFIDs... }
@ -426,7 +399,7 @@ Check column "offline" for their availability.
|`hf iclass loclass `|Y |`Use loclass to perform bruteforce reader attack` |`hf iclass loclass `|Y |`Use loclass to perform bruteforce reader attack`
|`hf iclass lookup `|Y |`Uses authentication trace to check for key in dictionary file` |`hf iclass lookup `|Y |`Uses authentication trace to check for key in dictionary file`
|`hf iclass sim `|N |`Simulate iCLASS tag` |`hf iclass sim `|N |`Simulate iCLASS tag`
|`hf iclass eload `|N |`Load Picopass / iCLASS dump file into emulator memory` |`hf iclass eload `|N |`Upload file into emulator memory`
|`hf iclass esave `|N |`Save emulator memory to file` |`hf iclass esave `|N |`Save emulator memory to file`
|`hf iclass esetblk `|N |`Set emulator memory block data` |`hf iclass esetblk `|N |`Set emulator memory block data`
|`hf iclass eview `|N |`View emulator memory` |`hf iclass eview `|N |`View emulator memory`
@ -440,6 +413,46 @@ Check column "offline" for their availability.
|`hf iclass sam `|N |`SAM tests` |`hf iclass sam `|N |`SAM tests`
### hf ict
{ ICT MFC/DESfire RFIDs... }
|command |offline |description
|------- |------- |-----------
|`hf ict help `|Y |`This help`
|`hf ict credential `|N |`Read ICT credential and decode`
|`hf ict info `|N |`Tag information`
|`hf ict list `|Y |`List ICT history`
|`hf ict reader `|Y |`Act like an IS14443-a reader`
### hf jooki
{ Jooki RFIDs... }
|command |offline |description
|------- |------- |-----------
|`hf jooki help `|Y |`This help`
|`hf jooki clone `|N |`Write a Jooki token`
|`hf jooki decode `|Y |`Decode Jooki token`
|`hf jooki encode `|Y |`Encode Jooki token`
|`hf jooki sim `|N |`Simulate Jooki token`
### hf ksx6924
{ KS X 6924 (T-Money, Snapper+) RFIDs }
|command |offline |description
|------- |------- |-----------
|`hf ksx6924 help `|Y |`This help`
|`hf ksx6924 select `|N |`Select application, and leave field up`
|`hf ksx6924 info `|N |`Get info about a KS X 6924 (T-Money, Snapper+) transit card`
|`hf ksx6924 balance `|N |`Get current purse balance`
|`hf ksx6924 init `|N |`Perform transaction initialization with Mpda`
|`hf ksx6924 prec `|N |`Send proprietary get record command (CLA=90, INS=4C)`
### hf legic ### hf legic
{ LEGIC RFIDs... } { LEGIC RFIDs... }
@ -456,8 +469,8 @@ Check column "offline" for their availability.
|`hf legic wipe `|N |`Wipe a LEGIC Prime tag` |`hf legic wipe `|N |`Wipe a LEGIC Prime tag`
|`hf legic wrbl `|N |`Write data to a LEGIC Prime tag` |`hf legic wrbl `|N |`Write data to a LEGIC Prime tag`
|`hf legic sim `|N |`Start tag simulator` |`hf legic sim `|N |`Start tag simulator`
|`hf legic eload `|N |`Load binary dump to emulator memory` |`hf legic eload `|N |`Upload file into emulator memory`
|`hf legic esave `|N |`Save emulator memory to binary file` |`hf legic esave `|N |`Save emulator memory to file`
|`hf legic eview `|N |`View emulator memory` |`hf legic eview `|N |`View emulator memory`
|`hf legic einfo `|N |`Display deobfuscated and decoded emulator memory` |`hf legic einfo `|N |`Display deobfuscated and decoded emulator memory`
|`hf legic crc `|Y |`Calculate Legic CRC over given bytes` |`hf legic crc `|Y |`Calculate Legic CRC over given bytes`
@ -519,8 +532,8 @@ Check column "offline" for their availability.
|`hf mf egetblk `|N |`Get emulator memory block` |`hf mf egetblk `|N |`Get emulator memory block`
|`hf mf egetsc `|N |`Get emulator memory sector` |`hf mf egetsc `|N |`Get emulator memory sector`
|`hf mf ekeyprn `|N |`Print keys from emulator memory` |`hf mf ekeyprn `|N |`Print keys from emulator memory`
|`hf mf eload `|N |`Load from file emul dump` |`hf mf eload `|N |`Upload file into emulator memory`
|`hf mf esave `|N |`Save to file emul dump` |`hf mf esave `|N |`Save emulator memory to file`
|`hf mf esetblk `|N |`Set emulator memory block` |`hf mf esetblk `|N |`Set emulator memory block`
|`hf mf eview `|N |`View emulator memory` |`hf mf eview `|N |`View emulator memory`
|`hf mf cgetblk `|N |`Read block from card` |`hf mf cgetblk `|N |`Read block from card`
@ -597,8 +610,8 @@ Check column "offline" for their availability.
|`hf mfu view `|Y |`Display content from tag dump file` |`hf mfu view `|Y |`Display content from tag dump file`
|`hf mfu wrbl `|N |`Write block` |`hf mfu wrbl `|N |`Write block`
|`hf mfu tamper `|N |`Configure the tamper feature on an NTAG 213TT` |`hf mfu tamper `|N |`Configure the tamper feature on an NTAG 213TT`
|`hf mfu eload `|N |`Load Ultralight dump file into emulator memory` |`hf mfu eload `|N |`Upload file into emulator memory`
|`hf mfu esave `|N |`Save Ultralight dump file from emulator memory` |`hf mfu esave `|N |`Save emulator memory to file`
|`hf mfu eview `|N |`View emulator memory` |`hf mfu eview `|N |`View emulator memory`
|`hf mfu sim `|N |`Simulate MIFARE Ultralight from emulator memory` |`hf mfu sim `|N |`Simulate MIFARE Ultralight from emulator memory`
|`hf mfu setpwd `|N |`Set 3DES key - Ultralight-C` |`hf mfu setpwd `|N |`Set 3DES key - Ultralight-C`
@ -935,12 +948,13 @@ Check column "offline" for their availability.
|`lf em 4x50 rdbl `|N |`Read EM4x50 word data` |`lf em 4x50 rdbl `|N |`Read EM4x50 word data`
|`lf em 4x50 reader `|N |`Show standard read mode data` |`lf em 4x50 reader `|N |`Show standard read mode data`
|`lf em 4x50 restore `|N |`Restore EM4x50 dump to tag` |`lf em 4x50 restore `|N |`Restore EM4x50 dump to tag`
|`lf em 4x50 view `|Y |`Display content from tag dump file`
|`lf em 4x50 wipe `|N |`Wipe EM4x50 tag`
|`lf em 4x50 wrbl `|N |`Write EM4x50 word data` |`lf em 4x50 wrbl `|N |`Write EM4x50 word data`
|`lf em 4x50 wrpwd `|N |`Change EM4x50 password` |`lf em 4x50 wrpwd `|N |`Change EM4x50 password`
|`lf em 4x50 wipe `|N |`Wipe EM4x50 tag` |`lf em 4x50 eload `|N |`Upload file into emulator memory`
|`lf em 4x50 eload `|N |`Upload EM4x50 dump to emulator memory`
|`lf em 4x50 esave `|N |`Save emulator memory to file` |`lf em 4x50 esave `|N |`Save emulator memory to file`
|`lf em 4x50 eview `|N |`View EM4x50 content in emulator memory` |`lf em 4x50 eview `|N |`View emulator memory`
|`lf em 4x50 sim `|N |`Simulate EM4x50 tag` |`lf em 4x50 sim `|N |`Simulate EM4x50 tag`
@ -1025,11 +1039,13 @@ Check column "offline" for their availability.
|`lf hitag info `|N |`Hitag 2 tag information` |`lf hitag info `|N |`Hitag 2 tag information`
|`lf hitag dump `|N |`Dump Hitag 2 tag` |`lf hitag dump `|N |`Dump Hitag 2 tag`
|`lf hitag read `|N |`Read Hitag memory` |`lf hitag read `|N |`Read Hitag memory`
|`lf hitag view `|Y |`Display content from tag dump file`
|`lf hitag wrbl `|N |`Write a block (page) in Hitag memory` |`lf hitag wrbl `|N |`Write a block (page) in Hitag memory`
|`lf hitag sniff `|N |`Eavesdrop Hitag communication` |`lf hitag sniff `|N |`Eavesdrop Hitag communication`
|`lf hitag cc `|N |`Hitag S: test all provided challenges` |`lf hitag cc `|N |`Hitag S: test all provided challenges`
|`lf hitag ta `|N |`Hitag 2: test all recorded authentications` |`lf hitag ta `|N |`Hitag 2: test all recorded authentications`
|`lf hitag eload `|N |`Load Hitag dump file into emulator memory` |`lf hitag eload `|N |`Upload file into emulator memory`
|`lf hitag eview `|N |`View emulator memory`
|`lf hitag sim `|N |`Simulate Hitag transponder` |`lf hitag sim `|N |`Simulate Hitag transponder`