Antiklesys
33c3988a94
Fix broken older functionality
...
Updated to still maintain older functionality when the macs field is passed
2025-07-05 19:26:22 +08:00
Antiklesys
7ad3f6eaf2
Updated hf iclass wrbl replay
...
replay behavior to use privilege escalation instead of having to generate specific block/content macs for hf iclass wrbl
2025-07-05 13:25:18 +08:00
Antiklesys
f8bd0b4bae
Updated iclass restore to support privilege escalation
...
Updated hf iclass restore to support privilege escalation to restore card's content using a single AA1 --nr mac value. This allows to write cards the debit key is not known.
2025-07-04 16:47:11 +08:00
iceman1001
7373c38388
hf 15 dump had an logic bug when reading the sysinfo response. It is always fixed size but the logic for handling the Information byte flags made it skip bytes when it wasnt 0x0F
CodeQL / Analyze (push) Waiting to run
MacOS Build and Test / macos-make (push) Waiting to run
MacOS Build and Test / macos-make-btaddon (push) Waiting to run
MacOS Build and Test / macos-cmake (push) Waiting to run
Ubuntu Build and Test / ubuntu-make (push) Waiting to run
Ubuntu Build and Test / ubuntu-make-btaddon (push) Waiting to run
Ubuntu Build and Test / ubuntu-cmake (push) Waiting to run
Windows Build and Test / proxspace (push) Waiting to run
Windows Build and Test / wsl (push) Waiting to run
2025-07-02 22:05:12 +02:00
iceman1001
a440fbabda
make clean - now removes all __pycache__ folders sprinkled all over the project when running some of the dedicated python scripts
CodeQL / Analyze (push) Waiting to run
MacOS Build and Test / macos-make (push) Waiting to run
MacOS Build and Test / macos-make-btaddon (push) Waiting to run
MacOS Build and Test / macos-cmake (push) Waiting to run
Ubuntu Build and Test / ubuntu-make (push) Waiting to run
Ubuntu Build and Test / ubuntu-make-btaddon (push) Waiting to run
Ubuntu Build and Test / ubuntu-cmake (push) Waiting to run
Windows Build and Test / proxspace (push) Waiting to run
Windows Build and Test / wsl (push) Waiting to run
2025-07-01 16:47:20 +02:00
iceman1001
21bae5c73f
fix hf 15 readmulti - wrong block count number. It is decreased before to be zero based, but in calc we need number of blocks
2025-07-01 16:45:18 +02:00
iceman1001
65607fc727
added Ultralight-C simulation. hf mfu sim -t 13. Use eload first. Also added support to upload UL-C dictionaries and UL-AES to spiffs memory. A lot of textual reworked across client. Unifiy texts and a bit more color ;)
2025-06-19 17:26:20 +02:00
iceman1001
7a9b3383d4
fix missing flushing bits also in thinfilm fct
2025-06-17 18:28:22 +02:00
iceman1001
508c8943e7
text
CodeQL / Analyze (push) Waiting to run
MacOS Build and Test / macos-make (push) Waiting to run
MacOS Build and Test / macos-make-btaddon (push) Waiting to run
MacOS Build and Test / macos-cmake (push) Waiting to run
Ubuntu Build and Test / ubuntu-make (push) Waiting to run
Ubuntu Build and Test / ubuntu-make-btaddon (push) Waiting to run
Ubuntu Build and Test / ubuntu-cmake (push) Waiting to run
Windows Build and Test / proxspace (push) Waiting to run
Windows Build and Test / wsl (push) Waiting to run
2025-06-16 16:20:56 +02:00
iceman1001
0792d05efa
Prep release text
2025-06-16 16:17:40 +02:00
Philippe Teuwen
3515370185
Update CHANGELOG.md
CodeQL / Analyze (push) Waiting to run
MacOS Build and Test / macos-make (push) Waiting to run
MacOS Build and Test / macos-make-btaddon (push) Waiting to run
MacOS Build and Test / macos-cmake (push) Waiting to run
Ubuntu Build and Test / ubuntu-make-btaddon (push) Waiting to run
Ubuntu Build and Test / ubuntu-make (push) Waiting to run
Ubuntu Build and Test / ubuntu-cmake (push) Waiting to run
Windows Build and Test / proxspace (push) Waiting to run
Windows Build and Test / wsl (push) Waiting to run
2025-06-15 14:58:34 +02:00
rfidgeek1337
4f682501f1
Update CHANGELOG.md
...
Signed-off-by: rfidgeek1337 <rfidgeek1337@proton.me>
2025-06-11 18:12:24 +02:00
Iceman
8156274007
Merge pull request #2896 from Antiklesys/master
...
Added hf iclass sam --info
2025-06-10 20:39:40 +02:00
Antiklesys
5b7e013f1a
Update CHANGELOG.md
2025-06-11 01:08:03 +08:00
Henry Gabryjelski
af7aa26c14
Update changelog
...
Parity was always used for commands, even when the code seemed to suggest it was optional. This was due to a bug in `LIW` delays sending 1.25 bits too early, coupled with the parity bit happening to align with non-transmission when needed.
Parity option was deprecated earlier, and now is fully removed.
2025-06-09 15:12:13 -07:00
iceman1001
5f2edb9bb8
reworked and improved the hf mfp chk
key handling. reworked the nxp_detect_card technology function to enable other parts of the client to benefit from detecting card types. Like hf mf info
or hf mf autopwn
- two most common used commands. Now less waiting and more easily to know what next steps to do.
2025-06-09 15:36:44 +02:00
iceman1001
add2eb8e9d
hf mf dump, does a guess the key file name, and if you ran for instance a autopwn against a 4K card but didnt mention it , it defaults to 1K. Meaning the recovered keyfile will have 32 keys. When trying to dump card and specifiy 4K, it would automatically find that keyfile and happily go out-of-bounds leading to client crash
2025-06-08 19:31:02 +02:00
iceman1001
bcec294606
fix the visual bug with when viewing larger mifare class dumps, 2k, 4k, it would mark the signature sectors... for the rest of the dumps.
2025-06-08 16:09:23 +02:00
iceman1001
27aa9a2085
hf mf rdsc - if a successful read was made , add the used key to the sector trailer output.\nhf mf info - after getting annoyed over command running tests on non mifare classic card, this fixes it.
2025-06-08 10:06:30 +02:00
iceman1001
2d610b8dc0
text & style
2025-06-08 10:02:00 +02:00
Antiklesys
80e1c7f0d4
Implemented hf iclass sim -t 7
...
Implemented an iclass sim function that prevents simulated card responses after updating block 3.
Block 3 gets updated with the XOR key as if it was in personalization mode.
2025-06-07 23:12:21 +08:00
BIOS9
73be29db44
update changelog
2025-06-08 00:00:56 +12:00
iceman1001
88593f9b8b
updated the ATR list and organized the changelog to prefered style
2025-06-07 12:08:12 +02:00
Antiklesys
94794f7519
Implemented a hf iclass sim variation
...
hf iclass sim -t 3 variation that glitches specific block responses during read/write operations based on the value of the last byte of block 31.
2025-06-07 02:15:01 +08:00
Antiklesys
411c684e6a
Implemented working multithreading support in hf iclass legbrute
...
Implemented key nibble based multithreading support for hf iclass legbrute.
It takes the whole iclass keyspace based on the first 4 bits of the key value (from 0x0 to 0xF) and divides it across the number of available threads.
E.g. on a 8 threads implementation:
- thread 1 will test keys starting with 0x0 onwards
- thread 2 will test keys starting with 0x2 onwards
- thread 3 will test keys starting with 0x4 onwards
- thread 4 will test keys starting with 0x6 onwards
- thread 5 will test keys starting with 0x8 onwards
- thread 6 will test keys starting with 0xA onwards
- thread 7 will test keys starting with 0xC onwards
- thread 8 will test keys starting with 0XE onwards
2025-06-06 11:25:46 +08:00
Antiklesys
b46930394a
Update CHANGELOG.md
2025-06-05 20:48:45 +08:00
Antiklesys
a5ee3f50b6
Update CHANGELOG.md
2025-06-04 22:35:49 +08:00
Antiklesys
db9667d0fb
Update CHANGELOG.md
...
Signed-off-by: Antiklesys <syselkitna@gmail.com>
2025-05-30 13:02:11 +08:00
Antiklesys
04cfe2a43e
Modified iclass recover operations
...
1- Renamed legreclookup to legbrute to be in line with the command name
2- Updated estimate values with speed increase gains
3- Improved some if statements readability in iclass.c and added start_time = eof_time + DELAY_ICLASS_VICC_TO_VCD_READER; to increase speed by ~8% (1.86 loops per second to 2.01 loops per second = ~560 more loops per hour).
Tried disabling some arm communications/comments but the speed increase was negligible (~1 sec / 1000 updates).
2025-05-30 12:36:42 +08:00
iceman1001
804acfbefa
the device side of iclass tear off is implemented. The base was done by @antiklesys. This version differs by the concept of trying to stabilize weak bits by performing a write operation in conjuction with the detected tear. Its untested but I can replicate most of the tears we performed client side. You will need to call the proxmark3 client with -f
, ./pm3 -f
to force flush out text which is needed for the inplace printing. I thought this was done automatically but it wasnt. hf iclass tear --arm + all the normal params
to run on device side
2025-05-30 01:37:13 +02:00
Iceman
90210fe588
Merge pull request #2853 from sup3rgiu/mfu-counters
...
Fixed SimulateIso14443aTag() to make MFU counter increments persistent in emulator memory.
2025-05-29 14:44:13 +02:00
Antiklesys
503c03caa2
Update CHANGELOG.md
2025-05-29 00:00:19 +08:00
iceman1001
473b5679e2
hf iclass dump - I got tired so now the command defaults to use AA1 key when called without a key or key index
2025-05-24 14:21:36 +02:00
iceman1001
d4bc190dd4
renamed the hf iclass trdbl -> hf iclass tear
2025-05-23 17:29:28 +02:00
iceman1001
c716467a7e
fixed output for hf iclass trbl
to not have tear off debug message and its more compact now
2025-05-23 10:52:09 +02:00
sup3rgiu
6765c2294c
Updated changelog
2025-05-22 20:10:58 +02:00
sup3rgiu
a753485054
Updated Changelog
2025-05-22 20:09:19 +02:00
iceman1001
b90348e66b
mingw and proxspace 3.xx environments would hang on Windows 11 24H2 since WMIC is no longer installed. This should enable the usage of powershell to enumerate serial ports on said environments
2025-05-19 22:27:50 +02:00
Antiklesys
c156e33ad9
Update CHANGELOG.md
2025-05-18 01:57:59 +08:00
Dmitry Malenok
8227834730
Added hf_mfu_ultra.lua
script enables restoring dump to ULTRA/UL-5 tags and clearing previously written ULTRA tags
2025-05-11 13:32:21 +03:00
iceman1001
c847896a15
fix #2835 due to wrong variable used to calculate the size of the emulator memory to download , all get memory from emulator memory failed with a block no larger that 30-ish
2025-05-01 08:34:39 +02:00
seclabz
19789381df
Added new standalone mode HF_ST25_TEAROFF
to store/restore ST25TB tags with tearoff for counters (@seclabz)
2025-04-16 14:05:10 +02:00
Philippe Teuwen
926fbe5354
Fixed hf mf fchk --mem to actually use flash dict
2025-04-12 13:22:27 +02:00
Philippe Teuwen
a8604e3ff9
fix make install on osx, thanks DaveItsLong
2025-03-25 22:38:39 +01:00
iceman1001
124c415679
text
2025-03-25 16:20:05 +01:00
iceman1001
037833675a
text
2025-03-25 16:18:30 +01:00
iceman1001
7dbf4cfbe0
text
2025-03-25 16:09:05 +01:00
iceman1001
1171127094
text
2025-03-25 14:56:04 +01:00
iceman1001
c8d46a2a7c
textual changes, one fix for overflows when sending OLD frames. Now inform and breaks like MIXED/NG does. Improved hf mf autopwn
to detect static encrypted nonces and inform user. Last fix is the user abort during check keys steps in autopwn. The device side now detects and cancels if no card is available and on client it also allows to user abort
2025-03-22 13:14:37 +01:00
Jean-Michel Picod
c5fcb97bc1
changelog
2025-03-21 18:06:48 +01:00