]> git.zerfleddert.de Git - proxmark3-svn/blob - client/cmdlfvisa2000.c
FIX: @marshmellow42 's ST detection fix.
[proxmark3-svn] / client / cmdlfvisa2000.c
1 //-----------------------------------------------------------------------------
2 //
3 // This code is licensed to you under the terms of the GNU GPL, version 2 or,
4 // at your option, any later version. See the LICENSE.txt file for the text of
5 // the license.
6 //-----------------------------------------------------------------------------
7 // Low frequency Presco tag commands
8 //-----------------------------------------------------------------------------
9
10 #include "cmdlfvisa2000.h"
11
12 #define BL0CK1 0x56495332
13
14 static int CmdHelp(const char *Cmd);
15
16 int usage_lf_visa2k_clone(void){
17 PrintAndLog("clone a Visa2000 tag to a T55x7 tag.");
18 PrintAndLog("Usage: lf visa2k clone [h] <card ID> <Q5>");
19 PrintAndLog("Options:");
20 PrintAndLog(" h : This help");
21 PrintAndLog(" <card ID> : Visa2k card ID");
22 PrintAndLog(" <Q5> : specify write to Q5 (t5555 instead of t55x7)");
23 PrintAndLog("");
24 PrintAndLog("Sample: lf visa2k clone 112233");
25 return 0;
26 }
27
28 int usage_lf_visa2k_sim(void) {
29 PrintAndLog("Enables simulation of visa2k card with specified card number.");
30 PrintAndLog("Simulation runs until the button is pressed or another USB command is issued.");
31 PrintAndLog("");
32 PrintAndLog("Usage: lf visa2k sim [h] <card ID>");
33 PrintAndLog("Options:");
34 PrintAndLog(" h : This help");
35 PrintAndLog(" <card ID> : Visa2k card ID");
36 PrintAndLog("");
37 PrintAndLog("Sample: lf visa2k sim 112233");
38 return 0;
39 }
40
41 static uint8_t visa_chksum( uint32_t id ) {
42 uint8_t sum = 0;
43 for (uint8_t i = 0; i < 32; i += 4)
44 sum ^= (id >> i) & 0xF;
45 return sum & 0xF;
46 }
47
48 /**
49 *
50 * 56495332 00096ebd 00000077 —> tag id 618173
51 * aaaaaaaa iiiiiiii -----..c
52 *
53 * a = fixed value ascii 'VIS2'
54 * i = card id
55 * c = checksum (xor of card id)
56 * . = unknown
57 *
58 **/
59 //see ASKDemod for what args are accepted
60 int CmdVisa2kDemod(const char *Cmd) {
61
62 // save GraphBuffer - to restore it later
63 save_restoreGB(1);
64
65 //sCmdAskEdgeDetect("");
66
67 //ASK / Manchester
68 bool st = TRUE;
69 if (!ASKDemod_ext("64 0 0", FALSE, FALSE, 1, &st)) {
70 if (g_debugMode) PrintAndLog("DEBUG: Error - Visa2k: ASK/Manchester Demod failed");
71 save_restoreGB(0);
72 return 0;
73 }
74 size_t size = DemodBufferLen;
75 int ans = Visa2kDemod_AM(DemodBuffer, &size);
76 if (ans < 0){
77 if (g_debugMode){
78 if (ans == -1)
79 PrintAndLog("DEBUG: Error - Visa2k: too few bits found");
80 else if (ans == -2)
81 PrintAndLog("DEBUG: Error - Visa2k: preamble not found");
82 else if (ans == -3)
83 PrintAndLog("DEBUG: Error - Visa2k: Size not correct: %d", size);
84 else
85 PrintAndLog("DEBUG: Error - Visa2k: ans: %d", ans);
86 }
87 save_restoreGB(0);
88 return 0;
89 }
90 setDemodBuf(DemodBuffer, 96, ans);
91 setGrid_Clock(64);
92
93 //got a good demod
94 uint32_t raw1 = bytebits_to_byte(DemodBuffer, 32);
95 uint32_t raw2 = bytebits_to_byte(DemodBuffer+32, 32);
96 uint32_t raw3 = bytebits_to_byte(DemodBuffer+64, 32);
97
98 // chksum
99 uint8_t calc = visa_chksum(raw2);
100 uint8_t chk = raw3 & 0xF;
101 // test checksums
102 if ( chk != calc ) {
103 printf("DEBUG: error: Visa2000 checksum failed %x - %x\n", chk, calc);
104 save_restoreGB(0);
105 return 0;
106 }
107 PrintAndLog("Visa2000 Tag Found: Card ID %u, Raw: %08X%08X%08X", raw2, raw1 ,raw2, raw3);
108 save_restoreGB(0);
109 return 1;
110 }
111
112 int CmdVisa2kRead(const char *Cmd) {
113 CmdLFRead("s");
114 getSamples("12000",TRUE);
115 return CmdVisa2kDemod(Cmd);
116 }
117
118 int CmdVisa2kClone(const char *Cmd) {
119
120 uint64_t id = 0;
121 uint32_t blocks[4] = {T55x7_MODULATION_MANCHESTER | T55x7_BITRATE_RF_64 | T55x7_ST_TERMINATOR | 3 << T55x7_MAXBLOCK_SHIFT, BL0CK1, 0};
122
123 char cmdp = param_getchar(Cmd, 0);
124 if (strlen(Cmd) == 0 || cmdp == 'h' || cmdp == 'H') return usage_lf_visa2k_clone();
125
126 id = param_get32ex(Cmd, 0, 0, 10);
127
128 //Q5
129 if (param_getchar(Cmd, 1) == 'Q' || param_getchar(Cmd, 1) == 'q') {
130 //t5555 (Q5) BITRATE = (RF-2)/2 (iceman)
131 blocks[0] = T5555_MODULATION_MANCHESTER | ((64-2)>>1) << T5555_BITRATE_SHIFT | T5555_ST_TERMINATOR | 3 << T5555_MAXBLOCK_SHIFT;
132 }
133
134 //
135 blocks[2] = id;
136 blocks[3] = visa_chksum(id);
137
138 PrintAndLog("Preparing to clone Visa2000 to T55x7 with CardId: %u", id);
139 PrintAndLog("Blk | Data ");
140 PrintAndLog("----+------------");
141 for(int i = 0; i<4; ++i)
142 PrintAndLog(" %02d | 0x%08x", i , blocks[i]);
143
144 UsbCommand resp;
145 UsbCommand c = {CMD_T55XX_WRITE_BLOCK, {0,0,0}};
146
147 for (int i = 3; i >= 0; --i) {
148 c.arg[0] = blocks[i];
149 c.arg[1] = i;
150 clearCommandBuffer();
151 SendCommand(&c);
152 if (!WaitForResponseTimeout(CMD_ACK, &resp, T55XX_WRITE_TIMEOUT)){
153 PrintAndLog("Error occurred, device did not respond during write operation.");
154 return -1;
155 }
156 }
157 return 0;
158 }
159
160 int CmdVisa2kSim(const char *Cmd) {
161
162 uint32_t id = 0;
163 char cmdp = param_getchar(Cmd, 0);
164 if (strlen(Cmd) == 0 || cmdp == 'h' || cmdp == 'H') return usage_lf_visa2k_sim();
165
166 id = param_get32ex(Cmd, 0, 0, 10);
167
168 uint8_t clk = 64, encoding = 1, separator = 1, invert = 0;
169 uint16_t arg1, arg2;
170 size_t size = 96;
171 arg1 = clk << 8 | encoding;
172 arg2 = invert << 8 | separator;
173
174 PrintAndLog("Simulating Visa2000 - CardId: %u", id);
175
176 UsbCommand c = {CMD_ASK_SIM_TAG, {arg1, arg2, size}};
177
178 uint32_t blocks[3] = { BL0CK1, id, visa_chksum(id) };
179
180 for(int i=0; i<3; ++i)
181 num_to_bytebits(blocks[i], 32, c.d.asBytes + i*32);
182
183 clearCommandBuffer();
184 SendCommand(&c);
185 return 0;
186 }
187
188 static command_t CommandTable[] = {
189 {"help", CmdHelp, 1, "This help"},
190 {"read", CmdVisa2kRead, 0, "Attempt to read and extract tag data"},
191 {"clone", CmdVisa2kClone, 0, "clone Visa2000 tag"},
192 {"sim", CmdVisa2kSim, 0, "simulate Visa2000 tag"},
193 {NULL, NULL, 0, NULL}
194 };
195
196 int CmdLFVisa2k(const char *Cmd) {
197 clearCommandBuffer();
198 CmdsParse(CommandTable, Cmd);
199 return 0;
200 }
201
202 int CmdHelp(const char *Cmd) {
203 CmdsHelp(CommandTable);
204 return 0;
205 }
Impressum, Datenschutz