]> git.zerfleddert.de Git - proxmark3-svn/blame - client/cmdlfpresco.c
FIX: lf hitag : Mea culpa, simulation should not have reader_field on. thanks to...
[proxmark3-svn] / client / cmdlfpresco.c
CommitLineData
5a6e19e6 1//-----------------------------------------------------------------------------
2//
3// This code is licensed to you under the terms of the GNU GPL, version 2 or,
4// at your option, any later version. See the LICENSE.txt file for the text of
5// the license.
6//-----------------------------------------------------------------------------
7// Low frequency Presco tag commands
8//-----------------------------------------------------------------------------
9#include <string.h>
10#include <inttypes.h>
11#include "cmdlfpresco.h"
12static int CmdHelp(const char *Cmd);
13
14int usage_lf_presco_clone(void){
15 PrintAndLog("clone a Presco tag to a T55x7 tag.");
6c68b84a 16 PrintAndLog("Usage: lf presco clone d <Card-ID> H <hex-ID> <Q5>");
5a6e19e6 17 PrintAndLog("Options :");
6c68b84a 18 PrintAndLog(" d <Card-ID> : 9 digit presco card ID");
19 PrintAndLog(" H <hex-ID> : 8 digit hex card number");
20 PrintAndLog(" <Q5> : specify write to Q5 (t5555 instead of t55x7)");
5a6e19e6 21 PrintAndLog("");
6c68b84a 22 PrintAndLog("Sample : lf presco clone d 123456789");
5a6e19e6 23 return 0;
24}
25
26int usage_lf_presco_sim(void) {
27 PrintAndLog("Enables simulation of presco card with specified card number.");
28 PrintAndLog("Simulation runs until the button is pressed or another USB command is issued.");
29 PrintAndLog("Per presco format, the card number is 9 digit number and can contain *# chars. Larger values are truncated.");
30 PrintAndLog("");
6c68b84a 31 PrintAndLog("Usage: lf presco sim d <Card-ID> or H <hex-ID>");
5a6e19e6 32 PrintAndLog("Options :");
6c68b84a 33 PrintAndLog(" d <Card-ID> : 9 digit presco card number");
34 PrintAndLog(" H <hex-ID> : 8 digit hex card number");
5a6e19e6 35 PrintAndLog("");
6c68b84a 36 PrintAndLog("Sample : lf presco sim d 123456789");
5a6e19e6 37 return 0;
38}
39
6c68b84a 40// convert base 12 ID to sitecode & usercode & 8 bit other unknown code
41int GetWiegandFromPresco(const char *Cmd, uint32_t *sitecode, uint32_t *usercode, uint32_t *fullcode, bool *Q5) {
5a6e19e6 42
43 uint8_t val = 0;
6c68b84a 44 bool hex = false, errors = false;
45 uint8_t cmdp = 0;
46 char id[11];
47 int stringlen = 0;
06eb3b1a 48 memset(id, 0x00, sizeof(id));
49
6c68b84a 50 while(param_getchar(Cmd, cmdp) != 0x00) {
51 switch(param_getchar(Cmd, cmdp)) {
52 case 'h':
53 return -1;
54 case 'H':
55 hex = true;
56 //get hex
d48175d4 57 *fullcode = param_get32ex(Cmd, cmdp+1, 0, 16);
6c68b84a 58 cmdp+=2;
59 break;
60 case 'P':
61 case 'p':
62 //param get string int param_getstr(const char *line, int paramnum, char * str)
63 stringlen = param_getstr(Cmd, cmdp+1, id);
64 if (stringlen < 2) return -1;
65 cmdp+=2;
66 break;
67 case 'Q':
68 case 'q':
69 *Q5 = true;
70 cmdp++;
71 break;
72 default:
73 PrintAndLog("Unknown parameter '%c'", param_getchar(Cmd, cmdp));
74 errors = 1;
75 break;
76 }
77 if(errors) break;
78 }
79 // No args
80 if(cmdp == 0) errors = 1;
81
82 //Validations
83 if(errors) return -1;
84
85 if (!hex) {
06eb3b1a 86 for (int index =0; index < strlen(id); ++index) {
5a6e19e6 87
06eb3b1a 88 // Get value from number string.
89 if ( id[index] == '*' ) val = 10;
90 if ( id[index] == '#') val = 11;
91 if ( id[index] >= 0x30 && id[index] <= 0x39 )
92 val = id[index] - 0x30;
93
94 *fullcode += val;
95
96 // last digit is only added, not multipled.
97 if ( index < strlen(id)-1 )
98 *fullcode *= 12;
6c68b84a 99 }
5a6e19e6 100 }
6c68b84a 101
102 *usercode = *fullcode & 0x0000FFFF; //% 65566
103 *sitecode = (*fullcode >> 24) & 0x000000FF; // /= 16777216;
5a6e19e6 104 return 0;
105}
106
6c68b84a 107// calc not certain - intended to get bitstream for programming / sim
108int GetPrescoBits(uint32_t fullcode, uint8_t *prescoBits) {
109 num_to_bytebits(0x10D00000, 32, prescoBits);
110 num_to_bytebits(0x00000000, 32, prescoBits+32);
111 num_to_bytebits(0x00000000, 32, prescoBits+64);
112 num_to_bytebits(fullcode , 32, prescoBits+96);
5a6e19e6 113 return 1;
114}
6c68b84a 115
4469412e 116//see ASKDemod for what args are accepted
117int CmdPrescoDemod(const char *Cmd) {
d48175d4 118 bool st = true;
a38f5a07 119 if (!ASKDemod_ext("32 0 0 0 0 a", FALSE, FALSE, 1, &st)) {
d48175d4 120 if (g_debugMode) PrintAndLog("DEBUG: Error Presco ASKDemod failed");
4469412e 121 return 0;
122 }
123 size_t size = DemodBufferLen;
42c235e7 124 //call lfdemod.c demod for Presco
4469412e 125 int ans = PrescoDemod(DemodBuffer, &size);
126 if (ans < 0) {
d48175d4 127 if (g_debugMode){
128 if (ans == -1)
129 PrintAndLog("DEBUG: Error - Presco: too few bits found");
130 else if (ans == -2)
131 PrintAndLog("DEBUG: Error - Presco: preamble not found");
132 else if (ans == -3)
133 PrintAndLog("DEBUG: Error - Presco: Size not correct: %d", size);
134 else
135 PrintAndLog("DEBUG: Error - Presco: ans: %d", ans);
136 }
4469412e 137 return 0;
138 }
d48175d4 139 setDemodBuf(DemodBuffer, 128, ans);
a9eeb576 140 setGrid_Clock(32);
d48175d4 141
4469412e 142 //got a good demod
d48175d4 143 uint32_t raw1 = bytebits_to_byte(DemodBuffer, 32);
144 uint32_t raw2 = bytebits_to_byte(DemodBuffer+32, 32);
145 uint32_t raw3 = bytebits_to_byte(DemodBuffer+64, 32);
146 uint32_t raw4 = bytebits_to_byte(DemodBuffer+96, 32);
6c68b84a 147 uint32_t cardid = raw4;
d48175d4 148 PrintAndLog("Presco Tag Found: Card ID %08X, Raw: %08X%08X%08X%08X", cardid, raw1, raw2, raw3, raw4);
149
6c68b84a 150 uint32_t sitecode = 0, usercode = 0, fullcode = 0;
d48175d4 151 bool Q5 = false;
6c68b84a 152 char cmd[12] = {0};
153 sprintf(cmd, "H %08X", cardid);
154 GetWiegandFromPresco(cmd, &sitecode, &usercode, &fullcode, &Q5);
155 PrintAndLog("SiteCode %u, UserCode %u, FullCode, %08X", sitecode, usercode, fullcode);
4469412e 156 return 1;
157}
5a6e19e6 158
159//see ASKDemod for what args are accepted
160int CmdPrescoRead(const char *Cmd) {
4469412e 161 // Presco Number: 123456789 --> Sitecode 30 | usercode 8665
5a6e19e6 162
163 // read lf silently
4469412e 164 CmdLFRead("s");
5a6e19e6 165 // get samples silently
42c235e7 166 getSamples("12000", TRUE);
4469412e 167 // demod and output Presco ID
168 return CmdPrescoDemod(Cmd);
5a6e19e6 169}
170
6c68b84a 171// takes base 12 ID converts to hex
172// Or takes 8 digit hex ID
5a6e19e6 173int CmdPrescoClone(const char *Cmd) {
174
6c68b84a 175 bool Q5 = false;
176 uint32_t sitecode=0, usercode=0, fullcode=0;
ff9c043d 177 uint32_t blocks[5] = {T55x7_MODULATION_MANCHESTER | T55x7_BITRATE_RF_32 | 4 << T55x7_MAXBLOCK_SHIFT | T55x7_ST_TERMINATOR, 0, 0, 0, 0};
5a6e19e6 178
6c68b84a 179 // get wiegand from printed number.
180 if (GetWiegandFromPresco(Cmd, &sitecode, &usercode, &fullcode, &Q5) == -1) return usage_lf_presco_clone();
181
182 if (Q5)
890ae3dd 183 //t5555 (Q5) BITRATE = (RF-2)/2 (iceman)
ff9c043d 184 blocks[0] = T5555_MODULATION_MANCHESTER | ((32-2)>>1) << T5555_BITRATE_SHIFT | 4 << T5555_MAXBLOCK_SHIFT | T5555_ST_TERMINATOR;
5a6e19e6 185
5a6e19e6 186 if ((sitecode & 0xFF) != sitecode) {
187 sitecode &= 0xFF;
188 PrintAndLog("Facility-Code Truncated to 8-bits (Presco): %u", sitecode);
189 }
190
191 if ((usercode & 0xFFFF) != usercode) {
192 usercode &= 0xFFFF;
193 PrintAndLog("Card Number Truncated to 16-bits (Presco): %u", usercode);
194 }
195
6c68b84a 196 blocks[1] = 0x10D00000; //preamble
197 blocks[2] = 0x00000000;
198 blocks[3] = 0x00000000;
199 blocks[4] = fullcode;
5a6e19e6 200
6c68b84a 201 PrintAndLog("Preparing to clone Presco to T55x7 with SiteCode: %u, UserCode: %u, FullCode: %08x", sitecode, usercode, fullcode);
5a6e19e6 202 PrintAndLog("Blk | Data ");
203 PrintAndLog("----+------------");
204 PrintAndLog(" 00 | 0x%08x", blocks[0]);
205 PrintAndLog(" 01 | 0x%08x", blocks[1]);
206 PrintAndLog(" 02 | 0x%08x", blocks[2]);
207 PrintAndLog(" 03 | 0x%08x", blocks[3]);
208 PrintAndLog(" 04 | 0x%08x", blocks[4]);
209
6c68b84a 210 UsbCommand resp;
211 UsbCommand c = {CMD_T55XX_WRITE_BLOCK, {0,0,0}};
212
213 for (int i=4; i>=0; i--) {
214 c.arg[0] = blocks[i];
215 c.arg[1] = i;
216 clearCommandBuffer();
217 SendCommand(&c);
42c235e7 218 if (!WaitForResponseTimeout(CMD_ACK, &resp, T55XX_WRITE_TIMEOUT)){
6c68b84a 219 PrintAndLog("Error occurred, device did not respond during write operation.");
220 return -1;
221 }
222 }
5a6e19e6 223 return 0;
224}
225
6c68b84a 226// takes base 12 ID converts to hex
227// Or takes 8 digit hex ID
5a6e19e6 228int CmdPrescoSim(const char *Cmd) {
6c68b84a 229 uint32_t sitecode=0, usercode=0, fullcode=0;
230 bool Q5=false;
231 // get wiegand from printed number.
232 if (GetWiegandFromPresco(Cmd, &sitecode, &usercode, &fullcode, &Q5) == -1) return usage_lf_presco_sim();
5a6e19e6 233
6c68b84a 234 uint8_t clk = 32, encoding = 1, separator = 1, invert = 0;
235 uint16_t arg1, arg2;
236 size_t size = 128;
237 arg1 = clk << 8 | encoding;
238 arg2 = invert << 8 | separator;
5a6e19e6 239
6c68b84a 240 PrintAndLog("Simulating Presco - SiteCode: %u, UserCode: %u, FullCode: %08X",sitecode, usercode, fullcode);
5a6e19e6 241
6c68b84a 242 UsbCommand c = {CMD_ASK_SIM_TAG, {arg1, arg2, size}};
243 GetPrescoBits(fullcode, c.d.asBytes);
244 clearCommandBuffer();
245 SendCommand(&c);
5a6e19e6 246 return 0;
247}
248
249static command_t CommandTable[] = {
250 {"help", CmdHelp, 1, "This help"},
251 {"read", CmdPrescoRead, 0, "Attempt to read and Extract tag data"},
d48175d4 252 {"clone", CmdPrescoClone, 0, "d <9 digit ID> or h <hex> [Q5] clone presco tag"},
253 {"sim", CmdPrescoSim, 0, "d <9 digit ID> or h <hex> simulate presco tag"},
5a6e19e6 254 {NULL, NULL, 0, NULL}
255};
256
257int CmdLFPresco(const char *Cmd) {
4c36581b 258 clearCommandBuffer();
5a6e19e6 259 CmdsParse(CommandTable, Cmd);
260 return 0;
261}
262
263int CmdHelp(const char *Cmd) {
264 CmdsHelp(CommandTable);
265 return 0;
266}
Impressum, Datenschutz