git.zerfleddert.de Git - proxmark3-svn/blob - client/scripts/formatMifare.lua

   1 local cmds = require('commands')
   2 local getopt = require('getopt')
   3 local bin = require('bin')
   4 local lib14a = require('read14a')
   5 local utils = require('utils')
   6
   7 example =[[
   8         1. script run formatMifare
   9         2. script run formatMifare -k aabbccddeeff -n 112233445566 -a FF0780
  10 ]]
  11 author = "Iceman"
  12 usage = "script run formatMifare -k <key>"
  13 desc =[[
  14 This script will generate 'hf mf wrbl' commands for each block to format a Mifare card.
  15
  16 Alla datablocks gets 0x00
  17 As default the script sets the keys A/B to 0xFFFFFFFFFFFF
  18 and the access bytes will become 0x78,0x77,0x88
  19 The GDB will become 0x00
  20
  21 The script will skip the manufactoring block 0.
  22
  23 Arguments:
  24         -h             - this help
  25         -k <key>       - the current six byte key with write access
  26         -n <key>       - the new key that will be written to the card
  27         -a <access>    - the new access bytes that will be written to the card
  28 ]]
  29 local TIMEOUT = 2000 -- Shouldn't take longer than 2 seconds
  30 local DEBUG = true -- the debug flag
  31 local CmdString = 'hf mf wrbl %d B %s %s'
  32 local numBlocks = 64
  33 local numSectors = 16
  34 ---
  35 -- A debug printout-function
  36 function dbg(args)
  37         if not DEBUG then
  38                 return
  39         end
  40
  41     if type(args) == "table" then
  42                 local i = 1
  43                 while result[i] do
  44                         dbg(result[i])
  45                         i = i+1
  46                 end
  47         else
  48                 print("###", args)
  49         end
  50 end
  51 ---
  52 -- This is only meant to be used when errors occur
  53 function oops(err)
  54         print("ERROR: ",err)
  55 end
  56 ---
  57 -- Usage help
  58 function help()
  59         print(desc)
  60         print("Example usage")
  61         print(example)
  62 end
  63 --
  64 -- Exit message
  65 function ExitMsg(msg)
  66         print( string.rep('--',20) )
  67         print( string.rep('--',20) )
  68         print(msg)
  69         print()
  70 end
  71 --
  72 -- Read information from a card
  73 function GetCardInfo()
  74         result, err = lib14a.read1443a(false)
  75         if not result then
  76                 print(err)
  77                 return
  78         end
  79         print(("Found:  %s"):format(result.name))
  80
  81         core.clearCommandBuffer()
  82
  83         if 0x18 == result.sak then --NXP MIFARE Classic 4k | Plus 4k
  84                 -- IFARE Classic 4K offers 4096 bytes split into forty sectors,
  85                 -- of which 32 are same size as in the 1K with eight more that are quadruple size sectors.
  86                 numSectors = 40
  87         elseif 0x08 == result.sak then -- NXP MIFARE CLASSIC 1k | Plus 2k
  88                 -- 1K offers 1024 bytes of data storage, split into 16 sector
  89                 numSectors = 16
  90         elseif 0x09 == result.sak then -- NXP MIFARE Mini 0.3k
  91                 -- MIFARE Classic mini offers 320 bytes split into five sectors.
  92                 numSectors = 5
  93         elseif  0x10 == result.sak then-- "NXP MIFARE Plus 2k"
  94                 numSectors = 32
  95         else
  96                 print("I don't know how many sectors there are on this type of card, defaulting to 16")
  97         end
  98         --[[
  99          The mifare Classic 1k card has 16 sectors of 4 data blocks each.
 100          The first 32 sectors of a mifare Classic 4k card consists of 4 data blocks and the remaining
 101          8 sectors consist of 16 data blocks.
 102         --]]
 103
 104         -- Defaults to 16 * 4 = 64  - 1 = 63
 105     numBlocks = numSectors * 4 - 1
 106
 107         if numSectors > 32 then
 108                 numBlocks = 32*4+ (numSectors-32)*16 -1
 109         end
 110
 111 end
 112
 113 local function main(args)
 114
 115         print( string.rep('--',20) )
 116         print( string.rep('--',20) )
 117         print()
 118
 119         local OldKey
 120         local NewKey
 121         local Accessbytes
 122
 123         -- Arguments for the script
 124         for o, a in getopt.getopt(args, 'hk:n:a:') do
 125                 if o == "h" then return help() end
 126                 if o == "k" then OldKey = a end
 127                 if o == "n" then NewKey = a     end
 128                 if o == "a" then Accessbytes = a end
 129         end
 130
 131         -- validate input args.
 132         OldKey =  OldKey or 'FFFFFFFFFFFF'
 133         if #(OldKey) ~= 12 then
 134                 return oops( string.format('Wrong length of write key (was %d) expected 12', #OldKey))
 135         end
 136
 137         NewKey =  NewKey or 'FFFFFFFFFFFF'
 138         if #(NewKey) ~= 12 then
 139                 return oops( string.format('Wrong length of new key (was %d) expected 12', #NewKey))
 140         end
 141
 142         --Accessbytes =  Accessbytes or '787788'
 143         Accessbytes =  Accessbytes or 'FF0780'
 144         if #(Accessbytes) ~= 6 then
 145                 return oops( string.format('Wrong length of accessbytes (was %d) expected 12', #Accessbytes))
 146         end
 147
 148         GetCardInfo()
 149
 150         -- Show info
 151         print( string.format('Estimating number of blocks: %d', numBlocks))
 152         print( string.format('Old key:    %s', OldKey))
 153         print( string.format('New key:    %s', NewKey))
 154         print( string.format('New Access: %s', Accessbytes))
 155         print( string.rep('--',20) )
 156
 157                 -- Set new block data
 158         local EMPTY_BL = string.rep('00',16)
 159         local EMPTY_SECTORTRAIL = string.format('%s%s%s%s',NewKey,Accessbytes,'00',NewKey)
 160
 161         dbg( string.format('New sector-trailer : %s',EMPTY_SECTORTRAIL))
 162         dbg( string.format('New emptyblock: %s',EMPTY_BL))
 163         dbg('')
 164
 165         -- Ask
 166         local dialogResult = utils.confirm("Do you want to erase this card")
 167         if dialogResult == false then
 168                 return ExitMsg('Quiting it is then. Your wish is my command...')
 169         end
 170
 171         print( string.rep('--',20) )
 172
 173         -- main loop
 174         for block=0,numBlocks,1 do
 175
 176                 local reminder = (block+1) % 4
 177                 local cmd
 178                 if reminder == 0 then
 179                         cmd = CmdString:format(block, OldKey , EMPTY_SECTORTRAIL)
 180                 else
 181                         cmd = CmdString:format(block, OldKey , EMPTY_BL)
 182                 end
 183
 184                 if block ~= 0 then
 185                         print(cmd)
 186                         --core.console(cmd)
 187                 end
 188
 189                 if core.ukbhit() then
 190                         print("aborted by user")
 191                         break
 192                 end
 193         end
 194 end
 195
 196 main(args)