]> git.zerfleddert.de Git - proxmark3-svn/blame - client/cmdlf.c
Merge remote-tracking branch 'upstream/master'
[proxmark3-svn] / client / cmdlf.c
CommitLineData
a553f267 1//-----------------------------------------------------------------------------
2// Copyright (C) 2010 iZsh <izsh at fail0verflow.com>
3//
4// This code is licensed to you under the terms of the GNU GPL, version 2 or,
5// at your option, any later version. See the LICENSE.txt file for the text of
6// the license.
7//-----------------------------------------------------------------------------
8// Low frequency commands
9//-----------------------------------------------------------------------------
10
7fe9b0b7 11#include <stdio.h>
590f8ff9 12#include <stdlib.h>
7fe9b0b7 13#include <string.h>
393c3ef9 14#include <limits.h>
902cb3c0 15#include "proxmark3.h"
7fe9b0b7 16#include "data.h"
17#include "graph.h"
18#include "ui.h"
19#include "cmdparser.h"
040a7baa 20#include "cmdmain.h"
7fe9b0b7 21#include "cmddata.h"
31d1caa5 22#include "util.h"
7fe9b0b7 23#include "cmdlf.h"
24#include "cmdlfhid.h"
25#include "cmdlfti.h"
26#include "cmdlfem4x.h"
db09cb3a 27#include "cmdlfhitag.h"
54a942b0 28#include "cmdlft55xx.h"
29#include "cmdlfpcf7931.h"
a1f3bb12 30#include "cmdlfio.h"
7fe9b0b7 31
32static int CmdHelp(const char *Cmd);
33
34/* send a command before reading */
35int CmdLFCommandRead(const char *Cmd)
36{
37 static char dummy[3];
38
39 dummy[0]= ' ';
40
41 UsbCommand c = {CMD_MOD_THEN_ACQUIRE_RAW_ADC_SAMPLES_125K};
1a07fd51 42 sscanf(Cmd, "%"lli" %"lli" %"lli" %s %s", &c.arg[0], &c.arg[1], &c.arg[2],(char*)(&c.d.asBytes),(char*)(&dummy+1));
7fe9b0b7 43 // in case they specified 'h'
44 strcpy((char *)&c.d.asBytes + strlen((char *)c.d.asBytes), dummy);
45 SendCommand(&c);
46 return 0;
47}
48
49int CmdFlexdemod(const char *Cmd)
50{
51 int i;
52 for (i = 0; i < GraphTraceLen; ++i) {
53 if (GraphBuffer[i] < 0) {
54 GraphBuffer[i] = -1;
55 } else {
56 GraphBuffer[i] = 1;
57 }
58 }
59
60#define LONG_WAIT 100
61 int start;
62 for (start = 0; start < GraphTraceLen - LONG_WAIT; start++) {
63 int first = GraphBuffer[start];
64 for (i = start; i < start + LONG_WAIT; i++) {
65 if (GraphBuffer[i] != first) {
66 break;
67 }
68 }
69 if (i == (start + LONG_WAIT)) {
70 break;
71 }
72 }
73 if (start == GraphTraceLen - LONG_WAIT) {
74 PrintAndLog("nothing to wait for");
75 return 0;
76 }
77
78 GraphBuffer[start] = 2;
79 GraphBuffer[start+1] = -2;
3fe4ff4f 80 uint8_t bits[64] = {0x00};
7fe9b0b7 81
3fe4ff4f 82 int bit, sum;
7fe9b0b7 83 i = start;
84 for (bit = 0; bit < 64; bit++) {
3fe4ff4f 85 sum = 0;
86 for (int j = 0; j < 16; j++) {
7fe9b0b7 87 sum += GraphBuffer[i++];
88 }
3fe4ff4f 89
90 bits[bit] = (sum > 0) ? 1 : 0;
91
7fe9b0b7 92 PrintAndLog("bit %d sum %d", bit, sum);
93 }
94
95 for (bit = 0; bit < 64; bit++) {
96 int j;
97 int sum = 0;
98 for (j = 0; j < 16; j++) {
99 sum += GraphBuffer[i++];
100 }
101 if (sum > 0 && bits[bit] != 1) {
102 PrintAndLog("oops1 at %d", bit);
103 }
104 if (sum < 0 && bits[bit] != 0) {
105 PrintAndLog("oops2 at %d", bit);
106 }
107 }
108
3fe4ff4f 109 // HACK writing back to graphbuffer.
7fe9b0b7 110 GraphTraceLen = 32*64;
111 i = 0;
112 int phase = 0;
113 for (bit = 0; bit < 64; bit++) {
3fe4ff4f 114
115 phase = (bits[bit] == 0) ? 0 : 1;
116
7fe9b0b7 117 int j;
118 for (j = 0; j < 32; j++) {
119 GraphBuffer[i++] = phase;
120 phase = !phase;
121 }
122 }
123
124 RepaintGraphWindow();
125 return 0;
126}
a1f3bb12 127
7fe9b0b7 128int CmdIndalaDemod(const char *Cmd)
129{
130 // Usage: recover 64bit UID by default, specify "224" as arg to recover a 224bit UID
131
132 int state = -1;
133 int count = 0;
134 int i, j;
3fe4ff4f 135
7fe9b0b7 136 // worst case with GraphTraceLen=64000 is < 4096
137 // under normal conditions it's < 2048
3fe4ff4f 138
7fe9b0b7 139 uint8_t rawbits[4096];
140 int rawbit = 0;
141 int worst = 0, worstPos = 0;
d5a72d2f 142 // PrintAndLog("Expecting a bit less than %d raw bits", GraphTraceLen / 32);
7fe9b0b7 143 for (i = 0; i < GraphTraceLen-1; i += 2) {
144 count += 1;
145 if ((GraphBuffer[i] > GraphBuffer[i + 1]) && (state != 1)) {
146 if (state == 0) {
147 for (j = 0; j < count - 8; j += 16) {
148 rawbits[rawbit++] = 0;
149 }
150 if ((abs(count - j)) > worst) {
151 worst = abs(count - j);
152 worstPos = i;
153 }
154 }
155 state = 1;
156 count = 0;
157 } else if ((GraphBuffer[i] < GraphBuffer[i + 1]) && (state != 0)) {
158 if (state == 1) {
159 for (j = 0; j < count - 8; j += 16) {
160 rawbits[rawbit++] = 1;
161 }
162 if ((abs(count - j)) > worst) {
163 worst = abs(count - j);
164 worstPos = i;
165 }
166 }
167 state = 0;
168 count = 0;
169 }
170 }
3fe4ff4f 171
d5a72d2f 172 if (rawbit>0){
173 PrintAndLog("Recovered %d raw bits, expected: %d", rawbit, GraphTraceLen/32);
174 PrintAndLog("worst metric (0=best..7=worst): %d at pos %d", worst, worstPos);
3fe4ff4f 175 } else {
176 return 0;
177 }
178
7fe9b0b7 179 // Finding the start of a UID
180 int uidlen, long_wait;
181 if (strcmp(Cmd, "224") == 0) {
182 uidlen = 224;
183 long_wait = 30;
184 } else {
185 uidlen = 64;
186 long_wait = 29;
187 }
3fe4ff4f 188
7fe9b0b7 189 int start;
190 int first = 0;
191 for (start = 0; start <= rawbit - uidlen; start++) {
192 first = rawbits[start];
193 for (i = start; i < start + long_wait; i++) {
194 if (rawbits[i] != first) {
195 break;
196 }
197 }
198 if (i == (start + long_wait)) {
199 break;
200 }
201 }
3fe4ff4f 202
7fe9b0b7 203 if (start == rawbit - uidlen + 1) {
204 PrintAndLog("nothing to wait for");
205 return 0;
206 }
207
208 // Inverting signal if needed
209 if (first == 1) {
210 for (i = start; i < rawbit; i++) {
211 rawbits[i] = !rawbits[i];
212 }
213 }
214
215 // Dumping UID
3fe4ff4f 216 uint8_t bits[224] = {0x00};
217 char showbits[225] = {0x00};
7fe9b0b7 218 int bit;
219 i = start;
220 int times = 0;
3fe4ff4f 221
7fe9b0b7 222 if (uidlen > rawbit) {
223 PrintAndLog("Warning: not enough raw bits to get a full UID");
224 for (bit = 0; bit < rawbit; bit++) {
225 bits[bit] = rawbits[i++];
226 // As we cannot know the parity, let's use "." and "/"
227 showbits[bit] = '.' + bits[bit];
228 }
229 showbits[bit+1]='\0';
230 PrintAndLog("Partial UID=%s", showbits);
231 return 0;
232 } else {
233 for (bit = 0; bit < uidlen; bit++) {
234 bits[bit] = rawbits[i++];
235 showbits[bit] = '0' + bits[bit];
236 }
237 times = 1;
238 }
2414f978 239
240 //convert UID to HEX
241 uint32_t uid1, uid2, uid3, uid4, uid5, uid6, uid7;
242 int idx;
3fe4ff4f 243 uid1 = uid2 = 0;
244
2414f978 245 if (uidlen==64){
246 for( idx=0; idx<64; idx++) {
247 if (showbits[idx] == '0') {
248 uid1=(uid1<<1)|(uid2>>31);
249 uid2=(uid2<<1)|0;
250 } else {
251 uid1=(uid1<<1)|(uid2>>31);
252 uid2=(uid2<<1)|1;
253 }
254 }
255 PrintAndLog("UID=%s (%x%08x)", showbits, uid1, uid2);
256 }
257 else {
3fe4ff4f 258 uid3 = uid4 = uid5 = uid6 = uid7 = 0;
259
2414f978 260 for( idx=0; idx<224; idx++) {
261 uid1=(uid1<<1)|(uid2>>31);
262 uid2=(uid2<<1)|(uid3>>31);
263 uid3=(uid3<<1)|(uid4>>31);
264 uid4=(uid4<<1)|(uid5>>31);
265 uid5=(uid5<<1)|(uid6>>31);
266 uid6=(uid6<<1)|(uid7>>31);
3fe4ff4f 267
268 if (showbits[idx] == '0')
269 uid7 = (uid7<<1) | 0;
270 else
271 uid7 = (uid7<<1) | 1;
2414f978 272 }
273 PrintAndLog("UID=%s (%x%08x%08x%08x%08x%08x%08x)", showbits, uid1, uid2, uid3, uid4, uid5, uid6, uid7);
274 }
7fe9b0b7 275
0ff9a939 276 // Checking UID against next occurrences
7fe9b0b7 277 int failed = 0;
3fe4ff4f 278 for (; i + uidlen <= rawbit;) {
279 failed = 0;
7fe9b0b7 280 for (bit = 0; bit < uidlen; bit++) {
281 if (bits[bit] != rawbits[i++]) {
282 failed = 1;
283 break;
284 }
285 }
286 if (failed == 1) {
287 break;
288 }
289 times += 1;
290 }
3fe4ff4f 291
0ff9a939 292 PrintAndLog("Occurrences: %d (expected %d)", times, (rawbit - start) / uidlen);
7fe9b0b7 293
294 // Remodulating for tag cloning
3fe4ff4f 295 // HACK: 2015-01-04 this will have an impact on our new way of seening lf commands (demod)
296 // since this changes graphbuffer data.
7fe9b0b7 297 GraphTraceLen = 32*uidlen;
298 i = 0;
299 int phase = 0;
300 for (bit = 0; bit < uidlen; bit++) {
301 if (bits[bit] == 0) {
302 phase = 0;
303 } else {
304 phase = 1;
305 }
306 int j;
307 for (j = 0; j < 32; j++) {
308 GraphBuffer[i++] = phase;
309 phase = !phase;
310 }
311 }
312
313 RepaintGraphWindow();
d5a72d2f 314 return 1;
7fe9b0b7 315}
316
2414f978 317int CmdIndalaClone(const char *Cmd)
318{
2414f978 319 UsbCommand c;
3fe4ff4f 320 unsigned int uid1, uid2, uid3, uid4, uid5, uid6, uid7;
321
322 uid1 = uid2 = uid3 = uid4 = uid5 = uid6 = uid7 = 0;
2414f978 323 int n = 0, i = 0;
324
325 if (strchr(Cmd,'l') != 0) {
326 while (sscanf(&Cmd[i++], "%1x", &n ) == 1) {
327 uid1 = (uid1 << 4) | (uid2 >> 28);
328 uid2 = (uid2 << 4) | (uid3 >> 28);
329 uid3 = (uid3 << 4) | (uid4 >> 28);
330 uid4 = (uid4 << 4) | (uid5 >> 28);
331 uid5 = (uid5 << 4) | (uid6 >> 28);
332 uid6 = (uid6 << 4) | (uid7 >> 28);
333 uid7 = (uid7 << 4) | (n & 0xf);
334 }
335 PrintAndLog("Cloning 224bit tag with UID %x%08x%08x%08x%08x%08x%08x", uid1, uid2, uid3, uid4, uid5, uid6, uid7);
336 c.cmd = CMD_INDALA_CLONE_TAG_L;
337 c.d.asDwords[0] = uid1;
338 c.d.asDwords[1] = uid2;
339 c.d.asDwords[2] = uid3;
340 c.d.asDwords[3] = uid4;
341 c.d.asDwords[4] = uid5;
342 c.d.asDwords[5] = uid6;
343 c.d.asDwords[6] = uid7;
3fe4ff4f 344 } else {
2414f978 345 while (sscanf(&Cmd[i++], "%1x", &n ) == 1) {
346 uid1 = (uid1 << 4) | (uid2 >> 28);
347 uid2 = (uid2 << 4) | (n & 0xf);
348 }
349 PrintAndLog("Cloning 64bit tag with UID %x%08x", uid1, uid2);
350 c.cmd = CMD_INDALA_CLONE_TAG;
351 c.arg[0] = uid1;
352 c.arg[1] = uid2;
353 }
354
355 SendCommand(&c);
356 return 0;
357}
358
31abe49f 359int usage_lf_read()
f6d9fb17 360{
31abe49f 361 PrintAndLog("Usage: lf read");
f6d9fb17
MHS
362 PrintAndLog("Options: ");
363 PrintAndLog(" h This help");
31abe49f
MHS
364 PrintAndLog("This function takes no arguments. ");
365 PrintAndLog("Use 'lf config' to set parameters.");
366 return 0;
367}
368int usage_lf_snoop()
369{
370 PrintAndLog("Usage: lf snoop");
371 PrintAndLog("Options: ");
372 PrintAndLog(" h This help");
373 PrintAndLog("This function takes no arguments. ");
374 PrintAndLog("Use 'lf config' to set parameters.");
375 return 0;
376}
377
378int usage_lf_config()
379{
380 PrintAndLog("Usage: lf config [H|<divisor>] [b <bps>] [d <decim>] [a 0|1]");
381 PrintAndLog("Options: ");
382 PrintAndLog(" h This help");
383 PrintAndLog(" L Low frequency (125 KHz)");
384 PrintAndLog(" H High frequency (134 KHz)");
385 PrintAndLog(" q <divisor> Manually set divisor. 88-> 134KHz, 95-> 125 Hz");
386 PrintAndLog(" b <bps> Sets resolution of bits per sample. Default (max): 8");
387 PrintAndLog(" d <decim> Sets decimation. A value of N saves only 1 in N samples. Default: 1");
388 PrintAndLog(" a [0|1] Averaging - if set, will average the stored sample value when decimating. Default: 1");
389 PrintAndLog(" t <threshold> Sets trigger threshold. 0 means no threshold");
f6d9fb17 390 PrintAndLog("Examples:");
31abe49f 391 PrintAndLog(" lf config b 8 L");
f6d9fb17 392 PrintAndLog(" Samples at 125KHz, 8bps.");
31abe49f 393 PrintAndLog(" lf config H b 4 d 3");
f6d9fb17
MHS
394 PrintAndLog(" Samples at 134KHz, averages three samples into one, stored with ");
395 PrintAndLog(" a resolution of 4 bits per sample.");
31abe49f
MHS
396 PrintAndLog(" lf read");
397 PrintAndLog(" Performs a read (active field)");
398 PrintAndLog(" lf snoop");
399 PrintAndLog(" Performs a snoop (no active field)");
f6d9fb17
MHS
400 return 0;
401}
31abe49f
MHS
402
403int CmdLFSetConfig(const char *Cmd)
7fe9b0b7 404{
31abe49f
MHS
405
406 uint8_t divisor = 0;//Frequency divisor
407 uint8_t bps = 0; // Bits per sample
408 uint8_t decimation = 0; //How many to keep
409 bool averaging = 1; // Defaults to true
f6d9fb17 410 bool errors = FALSE;
31abe49f
MHS
411 int trigger_threshold =-1;//Means no change
412 uint8_t unsigned_trigg = 0;
f6d9fb17
MHS
413
414 uint8_t cmdp =0;
31abe49f 415 while(param_getchar(Cmd, cmdp) != 0x00)
f6d9fb17 416 {
31abe49f
MHS
417 PrintAndLog("working %c", param_getchar(Cmd, cmdp));
418 switch(param_getchar(Cmd, cmdp))
419 {
420 case 'h':
421 return usage_lf_config();
422 case 'H':
423 divisor = 88;
424 cmdp++;
425 break;
426 case 'L':
427 divisor = 95;
428 cmdp++;
429 break;
430 case 'q':
431 errors |= param_getdec(Cmd,cmdp+1,&divisor);
432 cmdp+=2;
433 break;
434 case 't':
435 errors |= param_getdec(Cmd,cmdp+1,&unsigned_trigg);
436 cmdp+=2;
437 if(!errors) trigger_threshold = unsigned_trigg;
438 break;
439 case 'b':
440 errors |= param_getdec(Cmd,cmdp+1,&bps);
441 cmdp+=2;
442 break;
443 case 'd':
444 errors |= param_getdec(Cmd,cmdp+1,&decimation);
445 cmdp+=2;
446 break;
447 case 'a':
448 averaging = param_getchar(Cmd,cmdp+1) == '1';
449 cmdp+=2;
450 break;
451 default:
452 PrintAndLog("Unknown parameter '%c'", param_getchar(Cmd, cmdp));
453 errors = 1;
454 break;
455 }
456 if(errors) break;
f6d9fb17 457 }
31abe49f 458 if(cmdp == 0)
f6d9fb17 459 {
31abe49f 460 errors = 1;// No args
f6d9fb17 461 }
31abe49f 462
f6d9fb17
MHS
463 //Validations
464 if(errors)
465 {
31abe49f 466 return usage_lf_config();
f6d9fb17 467 }
f6d9fb17 468 //Bps is limited to 8, so fits in lower half of arg1
31abe49f 469 if(bps >> 8) bps = 8;
f6d9fb17 470
31abe49f
MHS
471 sample_config config = {
472 decimation,bps,averaging,divisor,trigger_threshold
473 };
474 //Averaging is a flag on high-bit of arg[1]
475 UsbCommand c = {CMD_SET_LF_SAMPLING_CONFIG};
476 memcpy(c.d.asBytes,&config,sizeof(sample_config));
477 SendCommand(&c);
478 return 0;
479}
f6d9fb17 480
7fe9b0b7 481int CmdLFRead(const char *Cmd)
482{
31abe49f
MHS
483
484 uint8_t cmdp =0;
485 if(param_getchar(Cmd, cmdp) == 'h')
486 {
487 return usage_lf_read();
488 }
f6d9fb17 489 //And ship it to device
f6d9fb17 490 UsbCommand c = {CMD_ACQUIRE_RAW_ADC_SAMPLES_125K};
31abe49f
MHS
491 SendCommand(&c);
492 WaitForResponse(CMD_ACK,NULL);
493 return 0;
494}
f6d9fb17 495
31abe49f
MHS
496int CmdLFSnoop(const char *Cmd)
497{
498 uint8_t cmdp =0;
499 if(param_getchar(Cmd, cmdp) == 'h')
500 {
501 return usage_lf_snoop();
502 }
503
504 UsbCommand c = {CMD_LF_SNOOP_RAW_ADC_SAMPLES};
f6d9fb17
MHS
505 SendCommand(&c);
506 WaitForResponse(CMD_ACK,NULL);
507 return 0;
7fe9b0b7 508}
509
510static void ChkBitstream(const char *str)
511{
512 int i;
513
514 /* convert to bitstream if necessary */
b915fda3 515 for (i = 0; i < (int)(GraphTraceLen / 2); i++){
516 if (GraphBuffer[i] > 1 || GraphBuffer[i] < 0) {
7fe9b0b7 517 CmdBitstream(str);
518 break;
519 }
520 }
521}
1e090a61 522//appears to attempt to simulate manchester
7fe9b0b7 523int CmdLFSim(const char *Cmd)
524{
52ab55ab 525 int i,j;
7fe9b0b7 526 static int gap;
527
528 sscanf(Cmd, "%i", &gap);
529
530 /* convert to bitstream if necessary */
531 ChkBitstream(Cmd);
532
52ab55ab 533 printf("Sending [%d bytes]", GraphTraceLen);
534 for (i = 0; i < GraphTraceLen; i += USB_CMD_DATA_SIZE) {
7fe9b0b7 535 UsbCommand c={CMD_DOWNLOADED_SIM_SAMPLES_125K, {i, 0, 0}};
52ab55ab 536
537 for (j = 0; j < USB_CMD_DATA_SIZE; j++) {
7fe9b0b7 538 c.d.asBytes[j] = GraphBuffer[i+j];
539 }
540 SendCommand(&c);
902cb3c0 541 WaitForResponse(CMD_ACK,NULL);
52ab55ab 542 printf(".");
7fe9b0b7 543 }
544
52ab55ab 545 printf("\n");
546 PrintAndLog("Starting to simulate");
7fe9b0b7 547 UsbCommand c = {CMD_SIMULATE_TAG_125K, {GraphTraceLen, gap, 0}};
548 SendCommand(&c);
549 return 0;
550}
551
552int CmdLFSimBidir(const char *Cmd)
553{
3fe4ff4f 554 // Set ADC to twice the carrier for a slight supersampling
555 // HACK: not implemented in ARMSRC.
556 PrintAndLog("Not implemented yet.");
7fe9b0b7 557 UsbCommand c = {CMD_LF_SIMULATE_BIDIR, {47, 384, 0}};
558 SendCommand(&c);
559 return 0;
560}
561
562/* simulate an LF Manchester encoded tag with specified bitstream, clock rate and inter-id gap */
563int CmdLFSimManchester(const char *Cmd)
564{
565 static int clock, gap;
566 static char data[1024], gapstring[8];
567
7fe9b0b7 568 sscanf(Cmd, "%i %s %i", &clock, &data[0], &gap);
569
7fe9b0b7 570 ClearGraph(0);
571
7fe9b0b7 572 for (int i = 0; i < strlen(data) ; ++i)
573 AppendGraph(0, clock, data[i]- '0');
574
7fe9b0b7 575 CmdManchesterMod("");
576
7fe9b0b7 577 RepaintGraphWindow();
578
7fe9b0b7 579 sprintf(&gapstring[0], "%i", gap);
580 CmdLFSim(gapstring);
581 return 0;
582}
583
b014c96d 584
7fe9b0b7 585int CmdVchDemod(const char *Cmd)
586{
587 // Is this the entire sync pattern, or does this also include some
588 // data bits that happen to be the same everywhere? That would be
589 // lovely to know.
590 static const int SyncPattern[] = {
591 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1,
592 1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
593 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1,
594 1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
595 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1,
596 1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
597 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1,
598 1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
599 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1,
600 1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
601 };
602
603 // So first, we correlate for the sync pattern, and mark that.
604 int bestCorrel = 0, bestPos = 0;
605 int i;
606 // It does us no good to find the sync pattern, with fewer than
607 // 2048 samples after it...
608 for (i = 0; i < (GraphTraceLen-2048); i++) {
609 int sum = 0;
610 int j;
611 for (j = 0; j < arraylen(SyncPattern); j++) {
612 sum += GraphBuffer[i+j]*SyncPattern[j];
613 }
614 if (sum > bestCorrel) {
615 bestCorrel = sum;
616 bestPos = i;
617 }
618 }
619 PrintAndLog("best sync at %d [metric %d]", bestPos, bestCorrel);
620
621 char bits[257];
622 bits[256] = '\0';
623
624 int worst = INT_MAX;
fddf220a 625 int worstPos = 0;
7fe9b0b7 626
627 for (i = 0; i < 2048; i += 8) {
628 int sum = 0;
629 int j;
630 for (j = 0; j < 8; j++) {
631 sum += GraphBuffer[bestPos+i+j];
632 }
633 if (sum < 0) {
634 bits[i/8] = '.';
635 } else {
636 bits[i/8] = '1';
637 }
638 if(abs(sum) < worst) {
639 worst = abs(sum);
640 worstPos = i;
641 }
642 }
643 PrintAndLog("bits:");
644 PrintAndLog("%s", bits);
645 PrintAndLog("worst metric: %d at pos %d", worst, worstPos);
646
647 if (strcmp(Cmd, "clone")==0) {
648 GraphTraceLen = 0;
649 char *s;
650 for(s = bits; *s; s++) {
651 int j;
652 for(j = 0; j < 16; j++) {
653 GraphBuffer[GraphTraceLen++] = (*s == '1') ? 1 : 0;
654 }
655 }
656 RepaintGraphWindow();
657 }
658 return 0;
659}
660
d5a72d2f 661//by marshmellow
662int CmdLFfind(const char *Cmd)
663{
664 int ans=0;
b4fb11ba 665 char cmdp = param_getchar(Cmd, 0);
666 char testRaw = param_getchar(Cmd, 1);
667 if (strlen(Cmd) > 2 || cmdp == 'h' || cmdp == 'H') {
668 PrintAndLog("Usage: lf search <0|1> [u]");
669 PrintAndLog(" <use data from Graphbuffer> , if not set, try reading data from tag.");
e770c648 670 PrintAndLog(" [Search for Unknown tags] , if not set, reads only known tags.");
b4fb11ba 671 PrintAndLog("");
672 PrintAndLog(" sample: lf search = try reading data from tag & search for known tags");
673 PrintAndLog(" : lf search 1 = use data from GraphBuffer & search for known tags");
e770c648 674 PrintAndLog(" : lf search u = try reading data from tag & search for known and unknown tags");
675 PrintAndLog(" : lf search 1 u = use data from GraphBuffer & search for known and unknown tags");
676
b4fb11ba 677 return 0;
678 }
b915fda3 679
b4fb11ba 680 if (!offline && (cmdp != '1')){
d5a72d2f 681 ans=CmdLFRead("");
84871873 682 ans=CmdSamples("20000");
b4fb11ba 683 } else if (GraphTraceLen < 1000) {
684 PrintAndLog("Data in Graphbuffer was too small.");
685 return 0;
d5a72d2f 686 }
e770c648 687 if (cmdp == 'u' || cmdp == 'U') testRaw = 'u';
84871873 688 PrintAndLog("NOTE: some demods output possible binary\n if it finds something that looks like a tag");
e770c648 689 PrintAndLog("False Positives ARE possible\n");
ec75f5c1 690 PrintAndLog("\nChecking for known tags:\n");
d5a72d2f 691 ans=CmdFSKdemodIO("");
84871873 692 if (ans>0) {
ec75f5c1 693 PrintAndLog("\nValid IO Prox ID Found!");
84871873 694 return 1;
695 }
ec75f5c1 696 ans=CmdFSKdemodPyramid("");
1e090a61 697 if (ans>0) {
ec75f5c1 698 PrintAndLog("\nValid Pyramid ID Found!");
1e090a61 699 return 1;
700 }
ec75f5c1 701 ans=CmdFSKdemodParadox("");
1e090a61 702 if (ans>0) {
ec75f5c1 703 PrintAndLog("\nValid Paradox ID Found!");
704 return 1;
705 }
706 ans=CmdFSKdemodAWID("");
707 if (ans>0) {
708 PrintAndLog("\nValid AWID ID Found!");
1e090a61 709 return 1;
710 }
84871873 711 ans=CmdFSKdemodHID("");
712 if (ans>0) {
ec75f5c1 713 PrintAndLog("\nValid HID Prox ID Found!");
84871873 714 return 1;
715 }
d5a72d2f 716 //add psk and indala
ec75f5c1 717 ans=CmdIndalaDecode("");
84871873 718 if (ans>0) {
ec75f5c1 719 PrintAndLog("\nValid Indala ID Found!");
84871873 720 return 1;
721 }
e770c648 722 ans=CmdAskEM410xDemod("");
84871873 723 if (ans>0) {
ec75f5c1 724 PrintAndLog("\nValid EM410x ID Found!");
84871873 725 return 1;
726 }
e770c648 727 PrintAndLog("\nNo Known Tags Found!\n");
728 if (testRaw=='u' || testRaw=='U'){
729 //test unknown tag formats (raw mode)
730 PrintAndLog("\nChecking for Unknown tags:\n");
f3bf15e4 731 ans=CmdDetectClockRate("f");
732 if (ans != 0){ //fsk
e770c648 733 ans=CmdFSKrawdemod("");
734 if (ans>0) {
735 PrintAndLog("\nUnknown FSK Modulated Tag Found!");
736 return 1;
b4fb11ba 737 }
e770c648 738 }
739 ans=Cmdaskmandemod("");
740 if (ans>0) {
741 PrintAndLog("\nUnknown ASK Modulated and Manchester encoded Tag Found!");
742 return 1;
b4fb11ba 743 }
e770c648 744 ans=CmdPSK1rawDemod("");
745 if (ans>0) {
746 PrintAndLog("Possible unknown PSK1 Modulated Tag Found above!\n\nCould also be PSK2 - try 'data psk2rawdemod'");
747 PrintAndLog("\nCould also be PSK3 - [currently not supported]");
748 PrintAndLog("\nCould also be NRZ - try 'data nrzrawdemod");
749 return 1;
b4fb11ba 750 }
e770c648 751 PrintAndLog("\nNo Data Found!\n");
752 }
d5a72d2f 753 return 0;
754}
755
7fe9b0b7 756static command_t CommandTable[] =
757{
758 {"help", CmdHelp, 1, "This help"},
759 {"cmdread", CmdLFCommandRead, 0, "<off period> <'0' period> <'1' period> <command> ['h'] -- Modulate LF reader field to send command before read (all periods in microseconds) (option 'h' for 134)"},
37239a7c 760 {"em4x", CmdLFEM4X, 1, "{ EM4X RFIDs... }"},
31abe49f 761 {"config", CmdLFSetConfig, 0, "Set config for LF sampling, bit/sample, decimation, frequency"},
7fe9b0b7 762 {"flexdemod", CmdFlexdemod, 1, "Demodulate samples for FlexPass"},
37239a7c 763 {"hid", CmdLFHID, 1, "{ HID RFIDs... }"},
083ca3de 764 {"io", CmdLFIO, 1, "{ ioProx tags... }"},
7fe9b0b7 765 {"indalademod", CmdIndalaDemod, 1, "['224'] -- Demodulate samples for Indala 64 bit UID (option '224' for 224 bit)"},
083ca3de 766 {"indalaclone", CmdIndalaClone, 0, "<UID> ['l']-- Clone Indala to T55x7 (tag must be in antenna)(UID in HEX)(option 'l' for 224 UID"},
31abe49f 767 {"read", CmdLFRead, 0, "Read 125/134 kHz LF ID-only tag. Do 'lf read h' for help"},
b4fb11ba 768 {"search", CmdLFfind, 1, "[offline] ['u'] Read and Search for valid known tag (in offline mode it you can load first then search) - 'u' to search for unknown tags"},
7fe9b0b7 769 {"sim", CmdLFSim, 0, "[GAP] -- Simulate LF tag from buffer with optional GAP (in microseconds)"},
770 {"simbidir", CmdLFSimBidir, 0, "Simulate LF tag (with bidirectional data transmission between reader and tag)"},
771 {"simman", CmdLFSimManchester, 0, "<Clock> <Bitstream> [GAP] Simulate arbitrary Manchester LF tag"},
b014c96d 772 {"snoop", CmdLFSnoop, 0, "['l'|'h'|<divisor>] [trigger threshold]-- Snoop LF (l:125khz, h:134khz)"},
37239a7c 773 {"ti", CmdLFTI, 1, "{ TI RFIDs... }"},
db09cb3a 774 {"hitag", CmdLFHitag, 1, "{ Hitag tags and transponders... }"},
7fe9b0b7 775 {"vchdemod", CmdVchDemod, 1, "['clone'] -- Demodulate samples for VeriChip"},
54a942b0 776 {"t55xx", CmdLFT55XX, 1, "{ T55xx RFIDs... }"},
777 {"pcf7931", CmdLFPCF7931, 1, "{PCF7931 RFIDs...}"},
7fe9b0b7 778 {NULL, NULL, 0, NULL}
779};
780
781int CmdLF(const char *Cmd)
782{
783 CmdsParse(CommandTable, Cmd);
784 return 0;
785}
786
787int CmdHelp(const char *Cmd)
788{
789 CmdsHelp(CommandTable);
790 return 0;
791}
Impressum, Datenschutz