]> git.zerfleddert.de Git - proxmark3-svn/blame - client/cmdhf14b.c
projects / proxmark3-svn / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
Merge branch 'master' of github.com:merlokk/proxmark3 into 14a_rework3
[proxmark3-svn] / client / cmdhf14b.c
CommitLineData
a553f267 1//-----------------------------------------------------------------------------
2// Copyright (C) 2010 iZsh <izsh at fail0verflow.com>
3//
4// This code is licensed to you under the terms of the GNU GPL, version 2 or,
5// at your option, any later version. See the LICENSE.txt file for the text of
6// the license.
7//-----------------------------------------------------------------------------
8// High frequency ISO14443B commands
9//-----------------------------------------------------------------------------
10
7fe9b0b7 11#include <stdio.h>
12#include <stdlib.h>
13#include <stdbool.h>
14#include <string.h>
15#include <stdint.h>
16#include "iso14443crc.h"
902cb3c0 17#include "proxmark3.h"
7fe9b0b7 18#include "data.h"
19#include "graph.h"
3fe4ff4f 20#include "util.h"
7fe9b0b7 21#include "ui.h"
22#include "cmdparser.h"
23#include "cmdhf14b.h"
7cf3ef20 24#include "cmdmain.h"
ff4fdb32 25#include "cmdhf14a.h"
7fe9b0b7 26
27static int CmdHelp(const char *Cmd);
28
7fe9b0b7 29int CmdHF14BList(const char *Cmd)
30{
388c92bd 31 PrintAndLog("Deprecated command, use 'hf list 14b' instead");
7fe9b0b7 32
388c92bd 33 return 0;
7fe9b0b7 34}
7fe9b0b7 35
132a0217 36int CmdHF14BSim(const char *Cmd)
7fe9b0b7 37{
132a0217 38 UsbCommand c={CMD_SIMULATE_TAG_ISO_14443B};
ff4fdb32 39 clearCommandBuffer();
7fe9b0b7 40 SendCommand(&c);
41 return 0;
42}
43
44int CmdHF14BSnoop(const char *Cmd)
45{
132a0217 46 UsbCommand c = {CMD_SNOOP_ISO_14443B};
ff4fdb32 47 clearCommandBuffer();
7fe9b0b7 48 SendCommand(&c);
49 return 0;
50}
51
52/* New command to read the contents of a SRI512 tag
53 * SRI512 tags are ISO14443-B modulated memory tags,
54 * this command just dumps the contents of the memory
55 */
56int CmdSri512Read(const char *Cmd)
57{
58 UsbCommand c = {CMD_READ_SRI512_TAG, {strtol(Cmd, NULL, 0), 0, 0}};
ff4fdb32 59 clearCommandBuffer();
7fe9b0b7 60 SendCommand(&c);
61 return 0;
62}
63
64/* New command to read the contents of a SRIX4K tag
65 * SRIX4K tags are ISO14443-B modulated memory tags,
66 * this command just dumps the contents of the memory/
67 */
68int CmdSrix4kRead(const char *Cmd)
69{
70 UsbCommand c = {CMD_READ_SRIX4K_TAG, {strtol(Cmd, NULL, 0), 0, 0}};
ff4fdb32 71 clearCommandBuffer();
7fe9b0b7 72 SendCommand(&c);
73 return 0;
74}
75
ff4fdb32 76int rawClose(void){
77 UsbCommand resp;
78 UsbCommand c = {CMD_ISO_14443B_COMMAND, {0, 0, 0}};
79 clearCommandBuffer();
80 SendCommand(&c);
81 if (!WaitForResponseTimeout(CMD_ACK,&resp,1000)) {
82 return 0;
83 }
84 return 0;
85}
86
87int HF14BCmdRaw(bool reply, bool *crc, bool power, uint8_t *data, uint8_t *datalen, bool verbose){
88 UsbCommand resp;
89 UsbCommand c = {CMD_ISO_14443B_COMMAND, {0, 0, 0}}; // len,recv,power
90 if(*crc)
91 {
92 uint8_t first, second;
93 ComputeCrc14443(CRC_14443_B, data, *datalen, &first, &second);
94 data[*datalen] = first;
95 data[*datalen + 1] = second;
96 *datalen += 2;
97 }
98
99 c.arg[0] = *datalen;
100 c.arg[1] = reply;
101 c.arg[2] = power;
102 memcpy(c.d.asBytes,data,*datalen);
103 clearCommandBuffer();
104 SendCommand(&c);
105
106 if (!reply) return 1;
107
108 if (!WaitForResponseTimeout(CMD_ACK,&resp,1000)) {
109 if (verbose) PrintAndLog("timeout while waiting for reply.");
110 return 0;
111 }
112 *datalen = resp.arg[0];
113 if (verbose) PrintAndLog("received %u octets", *datalen);
114 if(*datalen<2) return 0;
115
116 memcpy(data, resp.d.asBytes, *datalen);
117 if (verbose) PrintAndLog("%s", sprint_hex(data, *datalen));
118
119 uint8_t first, second;
120 ComputeCrc14443(CRC_14443_B, data, *datalen-2, &first, &second);
121 if(data[*datalen-2] == first && data[*datalen-1] == second) {
122 if (verbose) PrintAndLog("CRC OK");
123 *crc = true;
124 } else {
125 if (verbose) PrintAndLog("CRC failed");
126 *crc = false;
127 }
128 return 1;
129}
130
131int CmdHF14BCmdRaw (const char *Cmd) {
132 bool reply = true;
133 bool crc = false;
134 bool power = false;
b8edab0f 135 bool select = false;
7ce6e2c0 136 bool SRx = false;
ff4fdb32 137 char buf[5] = "";
138 uint8_t data[100] = {0x00};
139 uint8_t datalen = 0;
140 unsigned int temp;
141 int i = 0;
142 if (strlen(Cmd)<3) {
7ce6e2c0 143 PrintAndLog("Usage: hf 14b raw [-r] [-c] [-p] [-s || -ss] <0A 0B 0C ... hex>");
ff4fdb32 144 PrintAndLog(" -r do not read response");
145 PrintAndLog(" -c calculate and append CRC");
146 PrintAndLog(" -p leave the field on after receive");
b8edab0f 147 PrintAndLog(" -s active signal field ON with select");
7ce6e2c0 148 PrintAndLog(" -ss active signal field ON with select for SRx ST Microelectronics tags");
b8edab0f 149 return 0;
ff4fdb32 150 }
151
152 // strip
153 while (*Cmd==' ' || *Cmd=='\t') Cmd++;
154
155 while (Cmd[i]!='\0') {
156 if (Cmd[i]==' ' || Cmd[i]=='\t') { i++; continue; }
157 if (Cmd[i]=='-') {
158 switch (Cmd[i+1]) {
159 case 'r':
160 case 'R':
161 reply = false;
162 break;
163 case 'c':
164 case 'C':
165 crc = true;
166 break;
167 case 'p':
168 case 'P':
169 power = true;
170 break;
b8edab0f 171 case 's':
172 case 'S':
173 select = true;
7ce6e2c0 174 if (Cmd[i+2]=='s' || Cmd[i+2]=='S') {
175 SRx = true;
176 i++;
177 }
b8edab0f 178 break;
ff4fdb32 179 default:
180 PrintAndLog("Invalid option");
181 return 0;
182 }
183 i+=2;
184 continue;
185 }
186 if ((Cmd[i]>='0' && Cmd[i]<='9') ||
187 (Cmd[i]>='a' && Cmd[i]<='f') ||
188 (Cmd[i]>='A' && Cmd[i]<='F') ) {
189 buf[strlen(buf)+1]=0;
190 buf[strlen(buf)]=Cmd[i];
191 i++;
192
193 if (strlen(buf)>=2) {
194 sscanf(buf,"%x",&temp);
195 data[datalen++]=(uint8_t)(temp & 0xff);
196 *buf=0;
197 }
198 continue;
199 }
200 PrintAndLog("Invalid char on input");
7ce6e2c0 201 return 0;
ff4fdb32 202 }
203 if (datalen == 0)
204 {
205 PrintAndLog("Missing data input");
206 return 0;
207 }
208
1c7d367e 209 if (select){ //auto select 14b tag
b8edab0f 210 uint8_t cmd2[16];
b8edab0f 211 bool crc2 = true;
7ce6e2c0 212 uint8_t cmdLen;
b8edab0f 213
7ce6e2c0 214 if (SRx) {
215 // REQ SRx
216 cmdLen = 2;
217 cmd2[0] = 0x06;
218 cmd2[1] = 0x00;
219 } else {
220 cmdLen = 3;
221 // REQB
222 cmd2[0] = 0x05;
223 cmd2[1] = 0x00;
224 cmd2[2] = 0x08;
225 }
b8edab0f 226
7ce6e2c0 227 if (HF14BCmdRaw(true, &crc2, true, cmd2, &cmdLen, false)==0) return rawClose();
b8edab0f 228
7ce6e2c0 229 if ( SRx && (cmdLen != 3 || !crc2) ) return rawClose();
230 else if (cmd2[0] != 0x50 || cmdLen != 14 || !crc2) return rawClose();
231
232 uint8_t chipID = 0;
233 if (SRx) {
234 // select
235 chipID = cmd2[0];
236 cmd2[0] = 0x0E;
237 cmd2[1] = chipID;
238 cmdLen = 2;
239 } else {
240 // attrib
241 cmd2[0] = 0x1D;
242 // UID from cmd2[1 - 4]
243 cmd2[5] = 0x00;
244 cmd2[6] = 0x08;
245 cmd2[7] = 0x01;
246 cmd2[8] = 0x00;
247 cmdLen = 9;
248 }
1c7d367e 249
b8edab0f 250 if (HF14BCmdRaw(true, &crc2, true, cmd2, &cmdLen, false)==0) return rawClose();
251
f3b83bee 252 if (cmdLen != 3 || !crc2) return rawClose();
7ce6e2c0 253 if (SRx && cmd2[0] != chipID) return rawClose();
b8edab0f 254 }
ff4fdb32 255 return HF14BCmdRaw(reply, &crc, power, data, &datalen, true);
7cf3ef20 256}
257
b29d55f2 258// print full atqb info
ff4fdb32 259static void print_atqb_resp(uint8_t *data){
f3b83bee 260 //PrintAndLog (" UID: %s", sprint_hex(data+1,4));
ff4fdb32 261 PrintAndLog (" App Data: %s", sprint_hex(data+5,4));
262 PrintAndLog (" Protocol: %s", sprint_hex(data+9,3));
263 uint8_t BitRate = data[9];
264 if (!BitRate)
265 PrintAndLog (" Bit Rate: 106 kbit/s only PICC <-> PCD");
266 if (BitRate & 0x10)
267 PrintAndLog (" Bit Rate: 212 kbit/s PICC -> PCD supported");
268 if (BitRate & 0x20)
269 PrintAndLog (" Bit Rate: 424 kbit/s PICC -> PCD supported");
270 if (BitRate & 0x40)
271 PrintAndLog (" Bit Rate: 847 kbit/s PICC -> PCD supported");
272 if (BitRate & 0x01)
273 PrintAndLog (" Bit Rate: 212 kbit/s PICC <- PCD supported");
274 if (BitRate & 0x02)
275 PrintAndLog (" Bit Rate: 424 kbit/s PICC <- PCD supported");
276 if (BitRate & 0x04)
277 PrintAndLog (" Bit Rate: 847 kbit/s PICC <- PCD supported");
278 if (BitRate & 0x80)
279 PrintAndLog (" Same bit rate <-> required");
280
281 uint16_t maxFrame = data[10]>>4;
282 if (maxFrame < 5)
283 maxFrame = 8*maxFrame + 16;
284 else if (maxFrame == 5)
285 maxFrame = 64;
286 else if (maxFrame == 6)
287 maxFrame = 96;
288 else if (maxFrame == 7)
289 maxFrame = 128;
290 else if (maxFrame == 8)
291 maxFrame = 256;
292 else
293 maxFrame = 257;
294
f3b83bee 295 PrintAndLog ("Max Frame Size: %u%s",maxFrame, (maxFrame == 257) ? "+ RFU" : "");
ff4fdb32 296
297 uint8_t protocolT = data[10] & 0xF;
298 PrintAndLog (" Protocol Type: Protocol is %scompliant with ISO/IEC 14443-4",(protocolT) ? "" : "not " );
f3b83bee 299 PrintAndLog ("Frame Wait Int: %u", data[11]>>4);
ff4fdb32 300 PrintAndLog (" App Data Code: Application is %s",(data[11]&4) ? "Standard" : "Proprietary");
301 PrintAndLog (" Frame Options: NAD is %ssupported",(data[11]&2) ? "" : "not ");
302 PrintAndLog (" Frame Options: CID is %ssupported",(data[11]&1) ? "" : "not ");
f3b83bee 303 PrintAndLog ("Max Buf Length: %u (MBLI) %s",data[14]>>4, (data[14] & 0xF0) ? "" : "not supported");
ff4fdb32 304
305 return;
306}
307
b29d55f2 308// get SRx chip model (from UID) // from ST Microelectronics
ff4fdb32 309char *get_ST_Chip_Model(uint8_t data){
310 static char model[20];
311 char *retStr = model;
312 memset(model,0, sizeof(model));
313
314 switch (data) {
315 case 0x0: sprintf(retStr, "SRIX4K (Special)"); break;
316 case 0x2: sprintf(retStr, "SR176"); break;
317 case 0x3: sprintf(retStr, "SRIX4K"); break;
318 case 0x4: sprintf(retStr, "SRIX512"); break;
319 case 0x6: sprintf(retStr, "SRI512"); break;
320 case 0x7: sprintf(retStr, "SRI4K"); break;
321 case 0xC: sprintf(retStr, "SRT512"); break;
322 default : sprintf(retStr, "Unknown"); break;
323 }
324 return retStr;
325}
326
cc34cc7b 327int print_ST_Lock_info(uint8_t model){
328 //assume connection open and tag selected...
c3ebcce4 329 uint8_t data[16] = {0x00};
cc34cc7b 330 uint8_t datalen = 2;
331 bool crc = true;
332 uint8_t resplen;
333 uint8_t blk1;
334 data[0] = 0x08;
335
336 if (model == 0x2) { //SR176 has special command:
337 data[1] = 0xf;
338 resplen = 4;
339 } else {
340 data[1] = 0xff;
341 resplen = 6;
342 }
343
344 //std read cmd
345 if (HF14BCmdRaw(true, &crc, true, data, &datalen, false)==0) return rawClose();
346
347 if (datalen != resplen || !crc) return rawClose();
348
349 PrintAndLog("Chip Write Protection Bits:");
350 // now interpret the data
351 switch (model){
352 case 0x0: //fall through (SRIX4K special)
353 case 0x3: //fall through (SRIx4K)
354 case 0x7: // (SRI4K)
355 //only need data[3]
356 blk1 = 9;
8e00825a 357 PrintAndLog(" raw: %s",printBits(1,data+3));
c3ebcce4 358 PrintAndLog(" 07/08:%slocked", (data[3] & 1) ? " not " : " " );
cc34cc7b 359 for (uint8_t i = 1; i<8; i++){
c3ebcce4 360 PrintAndLog(" %02u:%slocked", blk1, (data[3] & (1 << i)) ? " not " : " " );
cc34cc7b 361 blk1++;
362 }
363 break;
364 case 0x4: //fall through (SRIX512)
365 case 0x6: //fall through (SRI512)
366 case 0xC: // (SRT512)
367 //need data[2] and data[3]
368 blk1 = 0;
8e00825a 369 PrintAndLog(" raw: %s",printBits(2,data+2));
cc34cc7b 370 for (uint8_t b=2; b<4; b++){
371 for (uint8_t i=0; i<8; i++){
c3ebcce4 372 PrintAndLog(" %02u:%slocked", blk1, (data[b] & (1 << i)) ? " not " : " " );
cc34cc7b 373 blk1++;
374 }
375 }
376 break;
377 case 0x2: // (SR176)
378 //need data[2]
379 blk1 = 0;
8e00825a 380 PrintAndLog(" raw: %s",printBits(1,data+2));
cc34cc7b 381 for (uint8_t i = 0; i<8; i++){
c3ebcce4 382 PrintAndLog(" %02u/%02u:%slocked", blk1, blk1+1, (data[2] & (1 << i)) ? " " : " not " );
cc34cc7b 383 blk1+=2;
384 }
385 break;
386 default:
387 return rawClose();
388 }
389 return 1;
390}
391
b29d55f2 392// print UID info from SRx chips (ST Microelectronics)
393static void print_st_general_info(uint8_t *data){
ff4fdb32 394 //uid = first 8 bytes in data
cc34cc7b 395 PrintAndLog(" UID: %s", sprint_hex(SwapEndian64(data,8,8),8));
396 PrintAndLog(" MFG: %02X, %s", data[6], getTagInfo(data[6]));
397 PrintAndLog(" Chip: %02X, %s", data[5]>>2, get_ST_Chip_Model(data[5]>>2));
ff4fdb32 398 return;
399}
400
b29d55f2 401// 14b get and print UID only (general info)
402int HF14BStdReader(uint8_t *data, uint8_t *datalen){
ff4fdb32 403 //05 00 00 = find one tag in field
b8edab0f 404 //1d xx xx xx xx 00 08 01 00 = attrib xx=UID (resp 10 [f9 e0])
405 //a3 = ? (resp 03 [e2 c2])
406 //02 = ? (resp 02 [6a d3])
ff4fdb32 407 // 022b (resp 02 67 00 [29 5b])
408 // 0200a40400 (resp 02 67 00 [29 5b])
409 // 0200a4040c07a0000002480300 (resp 02 67 00 [29 5b])
410 // 0200a4040c07a0000002480200 (resp 02 67 00 [29 5b])
411 // 0200a4040006a0000000010100 (resp 02 6a 82 [4b 4c])
412 // 0200a4040c09d27600002545500200 (resp 02 67 00 [29 5b])
413 // 0200a404000cd2760001354b414e4d30310000 (resp 02 6a 82 [4b 4c])
414 // 0200a404000ca000000063504b43532d313500 (resp 02 6a 82 [4b 4c])
415 // 0200a4040010a000000018300301000000000000000000 (resp 02 6a 82 [4b 4c])
416 //03 = ? (resp 03 [e3 c2])
417 //c2 = ? (resp c2 [66 15])
418 //b2 = ? (resp a3 [e9 67])
f3b83bee 419 //a2 = ? (resp 02 [6a d3])
ff4fdb32 420 bool crc = true;
421 *datalen = 3;
422 //std read cmd
423 data[0] = 0x05;
424 data[1] = 0x00;
14660057 425 data[2] = 0x08;
ff4fdb32 426
f3b83bee 427 if (HF14BCmdRaw(true, &crc, true, data, datalen, false)==0) return rawClose();
ff4fdb32 428
f3b83bee 429 if (data[0] != 0x50 || *datalen != 14 || !crc) return rawClose();
ff4fdb32 430
431 PrintAndLog ("\n14443-3b tag found:");
b29d55f2 432 PrintAndLog (" UID: %s", sprint_hex(data+1,4));
ff4fdb32 433
f3b83bee 434 uint8_t cmd2[16];
435 uint8_t cmdLen = 3;
436 bool crc2 = true;
437
438 cmd2[0] = 0x1D;
439 // UID from data[1 - 4]
440 cmd2[1] = data[1];
441 cmd2[2] = data[2];
442 cmd2[3] = data[3];
443 cmd2[4] = data[4];
444 cmd2[5] = 0x00;
445 cmd2[6] = 0x08;
446 cmd2[7] = 0x01;
447 cmd2[8] = 0x00;
448 cmdLen = 9;
449
450 // attrib
451 if (HF14BCmdRaw(true, &crc2, true, cmd2, &cmdLen, false)==0) return rawClose();
452
453 if (cmdLen != 3 || !crc2) return rawClose();
454 // add attrib responce to data
455 data[14] = cmd2[0];
456 rawClose();
ff4fdb32 457 return 1;
458}
459
8a258b58 460// 14b get and print Full Info (as much as we know)
461int HF14BStdInfo(uint8_t *data, uint8_t *datalen){
462 if (!HF14BStdReader(data,datalen)) return 0;
b29d55f2 463
8a258b58 464 //add more info here
465 print_atqb_resp(data);
b29d55f2 466
f3b83bee 467
b29d55f2 468 return 1;
469}
470
471// SRx get and print general info about SRx chip from UID
cc34cc7b 472int HF14B_ST_Reader(uint8_t *data, uint8_t *datalen, bool closeCon){
ff4fdb32 473 bool crc = true;
474 *datalen = 2;
475 //wake cmd
476 data[0] = 0x06;
477 data[1] = 0x00;
478
479 //leave power on
480 // verbose on for now for testing - turn off when functional
481 if (HF14BCmdRaw(true, &crc, true, data, datalen, false)==0) return rawClose();
482
483 if (*datalen != 3 || !crc) return rawClose();
484
485 uint8_t chipID = data[0];
486 // select
487 data[0] = 0x0E;
488 data[1] = chipID;
489 *datalen = 2;
490
491 //leave power on
ff4fdb32 492 if (HF14BCmdRaw(true, &crc, true, data, datalen, false)==0) return rawClose();
493
494 if (*datalen != 3 || !crc || data[0] != chipID) return rawClose();
495
496 // get uid
497 data[0] = 0x0B;
498 *datalen = 1;
499
cc34cc7b 500 //leave power on
501 if (HF14BCmdRaw(true, &crc, true, data, datalen, false)==0) return rawClose();
c3ebcce4 502
503 if (*datalen != 10 || !crc) return rawClose();
504
cc34cc7b 505 //power off ?
506 if (closeCon) rawClose();
507
ff4fdb32 508 PrintAndLog("\n14443-3b ST tag found:");
b29d55f2 509 print_st_general_info(data);
ff4fdb32 510 return 1;
511}
512
8a258b58 513// SRx get and print full info (needs more info...)
514int HF14B_ST_Info(uint8_t *data, uint8_t *datalen){
cc34cc7b 515 if (!HF14B_ST_Reader(data, datalen, false)) return 0;
8a258b58 516
517 //add locking bit information here.
cc34cc7b 518 if (print_ST_Lock_info(data[5]>>2))
519 rawClose();
8a258b58 520
521 return 1;
522}
523
ff4fdb32 524// test for other 14b type tags (mimic another reader - don't have tags to identify)
b29d55f2 525int HF14B_Other_Reader(uint8_t *data, uint8_t *datalen){
ff4fdb32 526 bool crc = true;
527 *datalen = 4;
528 //std read cmd
529 data[0] = 0x00;
530 data[1] = 0x0b;
531 data[2] = 0x3f;
532 data[3] = 0x80;
533
b29d55f2 534 if (HF14BCmdRaw(true, &crc, true, data, datalen, false)!=0) {
ff4fdb32 535 if (*datalen > 2 || !crc) {
536 PrintAndLog ("\n14443-3b tag found:");
537 PrintAndLog ("Unknown tag type answered to a 0x000b3f80 command ans:");
538 PrintAndLog ("%s",sprint_hex(data,*datalen));
cc34cc7b 539 rawClose();
ff4fdb32 540 return 1;
541 }
542 }
543
544 crc = false;
545 *datalen = 1;
546 data[0] = 0x0a;
547
b29d55f2 548 if (HF14BCmdRaw(true, &crc, true, data, datalen, false)!=0) {
ff4fdb32 549 if (*datalen > 0) {
550 PrintAndLog ("\n14443-3b tag found:");
551 PrintAndLog ("Unknown tag type answered to a 0x0A command ans:");
552 PrintAndLog ("%s",sprint_hex(data,*datalen));
cc34cc7b 553 rawClose();
ff4fdb32 554 return 1;
555 }
556 }
557
558 crc = false;
559 *datalen = 1;
560 data[0] = 0x0c;
561
b29d55f2 562 if (HF14BCmdRaw(true, &crc, true, data, datalen, false)!=0) {
ff4fdb32 563 if (*datalen > 0) {
564 PrintAndLog ("\n14443-3b tag found:");
565 PrintAndLog ("Unknown tag type answered to a 0x0C command ans:");
566 PrintAndLog ("%s",sprint_hex(data,*datalen));
cc34cc7b 567 rawClose();
ff4fdb32 568 return 1;
569 }
570 }
b29d55f2 571 rawClose();
ff4fdb32 572 return 0;
ff4fdb32 573}
574
b29d55f2 575// get and print all info known about any known 14b tag
ff4fdb32 576int HF14BInfo(bool verbose){
577 uint8_t data[100];
578 uint8_t datalen = 5;
579
580 // try std 14b (atqb)
581 if (HF14BStdInfo(data, &datalen)) return 1;
582
583 // try st 14b
584 if (HF14B_ST_Info(data, &datalen)) return 1;
585
586 // try unknown 14b read commands (to be identified later)
587 // could be read of calypso, CEPAS, moneo, or pico pass.
b29d55f2 588 if (HF14B_Other_Reader(data, &datalen)) return 1;
ff4fdb32 589
590 if (verbose) PrintAndLog("no 14443B tag found");
591 return 0;
592}
593
b29d55f2 594// menu command to get and print all info known about any known 14b tag
ff4fdb32 595int CmdHF14Binfo(const char *Cmd){
596 return HF14BInfo(true);
597}
3fe4ff4f 598
b29d55f2 599// get and print general info about all known 14b chips
600int HF14BReader(bool verbose){
601 uint8_t data[100];
602 uint8_t datalen = 5;
603
604 // try std 14b (atqb)
605 if (HF14BStdReader(data, &datalen)) return 1;
606
607 // try st 14b
cc34cc7b 608 if (HF14B_ST_Reader(data, &datalen, true)) return 1;
b29d55f2 609
610 // try unknown 14b read commands (to be identified later)
611 // could be read of calypso, CEPAS, moneo, or pico pass.
612 if (HF14B_Other_Reader(data, &datalen)) return 1;
613
614 if (verbose) PrintAndLog("no 14443B tag found");
615 return 0;
616}
617
618// menu command to get and print general info about all known 14b chips
619int CmdHF14BReader(const char *Cmd){
620 return HF14BReader(true);
621}
622
ff4fdb32 623int CmdSriWrite( const char *Cmd){
3fe4ff4f 624/*
625 * For SRIX4K blocks 00 - 7F
626 * hf 14b raw -c -p 09 $srix4kwblock $srix4kwdata
627 *
628 * For SR512 blocks 00 - 0F
629 * hf 14b raw -c -p 09 $sr512wblock $sr512wdata
630 *
631 * Special block FF = otp_lock_reg block.
632 * Data len 4 bytes-
633 */
634 char cmdp = param_getchar(Cmd, 0);
635 uint8_t blockno = -1;
636 uint8_t data[4] = {0x00};
637 bool isSrix4k = true;
638 char str[20];
639
b5be31f9 640 if (strlen(Cmd) < 1 || cmdp == 'h' || cmdp == 'H') {
3fe4ff4f 641 PrintAndLog("Usage: hf 14b write <1|2> <BLOCK> <DATA>");
b5be31f9 642 PrintAndLog(" [1 = SRIX4K]");
643 PrintAndLog(" [2 = SRI512]");
644 PrintAndLog(" [BLOCK number depends on tag, special block == FF]");
645 PrintAndLog(" sample: hf 14b write 1 7F 11223344");
646 PrintAndLog(" : hf 14b write 1 FF 11223344");
647 PrintAndLog(" : hf 14b write 2 15 11223344");
648 PrintAndLog(" : hf 14b write 2 FF 11223344");
3fe4ff4f 649 return 0;
650 }
651
b5be31f9 652 if ( cmdp == '2' )
3fe4ff4f 653 isSrix4k = false;
654
b5be31f9 655 //blockno = param_get8(Cmd, 1);
656
657 if ( param_gethex(Cmd,1, &blockno, 2) ) {
658 PrintAndLog("Block number must include 2 HEX symbols");
659 return 0;
660 }
3fe4ff4f 661
662 if ( isSrix4k ){
663 if ( blockno > 0x7f && blockno != 0xff ){
664 PrintAndLog("Block number out of range");
665 return 0;
666 }
667 } else {
668 if ( blockno > 0x0f && blockno != 0xff ){
669 PrintAndLog("Block number out of range");
670 return 0;
671 }
672 }
673
674 if (param_gethex(Cmd, 2, data, 8)) {
675 PrintAndLog("Data must include 8 HEX symbols");
676 return 0;
677 }
678
679 if ( blockno == 0xff)
b5be31f9 680 PrintAndLog("[%s] Write special block %02X [ %s ]", (isSrix4k)?"SRIX4K":"SRI512" , blockno, sprint_hex(data,4) );
3fe4ff4f 681 else
b5be31f9 682 PrintAndLog("[%s] Write block %02X [ %s ]", (isSrix4k)?"SRIX4K":"SRI512", blockno, sprint_hex(data,4) );
3fe4ff4f 683
fe5b3a44 684 sprintf(str, "-c 09 %02x %02x%02x%02x%02x", blockno, data[0], data[1], data[2], data[3]);
b5be31f9 685
3fe4ff4f 686 CmdHF14BCmdRaw(str);
687 return 0;
688}
689
7fe9b0b7 690static command_t CommandTable[] =
691{
692 {"help", CmdHelp, 1, "This help"},
b29d55f2 693 {"info", CmdHF14Binfo, 0, "Find and print details about a 14443B tag"},
694 {"list", CmdHF14BList, 0, "[Deprecated] List ISO 14443B history"},
695 {"reader", CmdHF14BReader, 0, "Act as a 14443B reader to identify a tag"},
132a0217 696 {"sim", CmdHF14BSim, 0, "Fake ISO 14443B tag"},
697 {"snoop", CmdHF14BSnoop, 0, "Eavesdrop ISO 14443B"},
7cf3ef20 698 {"sri512read", CmdSri512Read, 0, "Read contents of a SRI512 tag"},
699 {"srix4kread", CmdSrix4kRead, 0, "Read contents of a SRIX4K tag"},
ff4fdb32 700 {"sriwrite", CmdSriWrite, 0, "Write data to a SRI512 | SRIX4K tag"},
7cf3ef20 701 {"raw", CmdHF14BCmdRaw, 0, "Send raw hex data to tag"},
7fe9b0b7 702 {NULL, NULL, 0, NULL}
703};
704
705int CmdHF14B(const char *Cmd)
706{
707 CmdsParse(CommandTable, Cmd);
708 return 0;
709}
710
711int CmdHelp(const char *Cmd)
712{
713 CmdsHelp(CommandTable);
714 return 0;
715}
Proxmark3 GIT tracking
Impressum, Datenschutz