git.zerfleddert.de Git - proxmark3-svn/blobdiff

uint8_t wipeCard = 0;\r

uint8_t uid[8] = {0x00};\r

uint8_t oldUid[8] = {0x00};\r

uint8_t wipeCard = 0;\r

uint8_t uid[8] = {0x00};\r

uint8_t oldUid[8] = {0x00};\r

+ uint8_t atqa[2] = {0x00};\r

+ uint8_t sak[1] = {0x00};\r

+ uint8_t atqaPresent = 1;\r

int res;\r

-\r

- if (strlen(Cmd) < 1 || param_getchar(Cmd, 0) == 'h') {\r

- PrintAndLog("Usage: hf mf csetuid <UID 8 hex symbols> <w>");\r

- PrintAndLog("sample: hf mf csetuid 01020304 w");\r

- PrintAndLog("Set UID for magic Chinese card (only works with!!!)");\r

- PrintAndLog("If you want wipe card then add 'w' into command line. \n");\r

+ char ctmp;\r

+ int argi=0;\r

+\r

+ if (strlen(Cmd) < 1 || param_getchar(Cmd, argi) == 'h') {\r

+ PrintAndLog("Usage: hf mf csetuid <UID 8 hex symbols> [ATQA 4 hex symbols SAK 2 hex symbols] [w]");\r

+ PrintAndLog("sample: hf mf csetuid 01020304");\r

+ PrintAndLog("sample: hf mf csetuid 01020304 0004 08 w");\r

+ PrintAndLog("Set UID, ATQA, and SAK for magic Chinese card (only works with such cards)");\r

+ PrintAndLog("If you also want to wipe the card then add 'w' at the end of the command line.");\r

return 0;\r

- } \r

+ }\r

\r

- if (param_getchar(Cmd, 0) && param_gethex(Cmd, 0, uid, 8)) {\r

+ if (param_getchar(Cmd, argi) && param_gethex(Cmd, argi, uid, 8)) {\r

PrintAndLog("UID must include 8 HEX symbols");\r

return 1;\r

}\r

PrintAndLog("UID must include 8 HEX symbols");\r

return 1;\r

}\r

+ argi++;\r

+\r

+ ctmp = param_getchar(Cmd, argi);\r

+ if (ctmp == 'w' || ctmp == 'W') {\r

+ wipeCard = 1;\r

+ atqaPresent = 0;\r

+ }\r

+\r

+ if (atqaPresent) {\r

+ if (param_getchar(Cmd, argi)) {\r

+ if (param_gethex(Cmd, argi, atqa, 4)) {\r

+ PrintAndLog("ATQA must include 4 HEX symbols");\r

+ return 1;\r

+ }\r

+ argi++;\r

+ if (!param_getchar(Cmd, argi) || param_gethex(Cmd, argi, sak, 2)) {\r

+ PrintAndLog("SAK must include 2 HEX symbols");\r

+ return 1;\r

+ }\r

+ argi++;\r

+ } else\r

+ atqaPresent = 0;\r

+ }\r

+\r

+ if(!wipeCard) {\r

+ ctmp = param_getchar(Cmd, argi);\r

+ if (ctmp == 'w' || ctmp == 'W') {\r

+ wipeCard = 1;\r

+ }\r

\r

- char ctmp = param_getchar(Cmd, 1);\r

- if (ctmp == 'w' || ctmp == 'W') wipeCard = 1;\r

- \r

PrintAndLog("--wipe card:%s uid:%s", (wipeCard)?"YES":"NO", sprint_hex(uid, 4));\r

\r

PrintAndLog("--wipe card:%s uid:%s", (wipeCard)?"YES":"NO", sprint_hex(uid, 4));\r

\r

- res = mfCSetUID(uid, oldUid, wipeCard);\r

+ res = mfCSetUID(uid, (atqaPresent)?atqa:NULL, (atqaPresent)?sak:NULL, oldUid, wipeCard);\r

if (res) {\r

PrintAndLog("Can't set UID. error=%d", res);\r

return 1;\r

if (res) {\r

PrintAndLog("Can't set UID. error=%d", res);\r

return 1;\r

char buf[64] = {0x00};\r

uint8_t buf8[64] = {0x00};\r

uint8_t fillFromEmulator = 0;\r

char buf[64] = {0x00};\r

uint8_t buf8[64] = {0x00};\r

uint8_t fillFromEmulator = 0;\r

- int i, len, blockNum, flags;\r

+ int i, len, blockNum, flags=0;\r

\r

if (param_getchar(Cmd, 0) == 'h' || param_getchar(Cmd, 0)== 0x00) {\r

PrintAndLog("It loads magic Chinese card from the file `filename.eml`");\r

\r

if (param_getchar(Cmd, 0) == 'h' || param_getchar(Cmd, 0)== 0x00) {\r

PrintAndLog("It loads magic Chinese card from the file `filename.eml`");\r

if (ctmp == 'e' || ctmp == 'E') fillFromEmulator = 1;\r

\r

if (fillFromEmulator) {\r

if (ctmp == 'e' || ctmp == 'E') fillFromEmulator = 1;\r

\r

if (fillFromEmulator) {\r

- flags = CSETBLOCK_INIT_FIELD + CSETBLOCK_WUPC;\r

for (blockNum = 0; blockNum < 16 * 4; blockNum += 1) {\r

if (mfEmlGetMem(buf8, blockNum, 1)) {\r

PrintAndLog("Cant get block: %d", blockNum);\r

return 2;\r

}\r

for (blockNum = 0; blockNum < 16 * 4; blockNum += 1) {\r

if (mfEmlGetMem(buf8, blockNum, 1)) {\r

PrintAndLog("Cant get block: %d", blockNum);\r

return 2;\r

}\r

- \r

- if (blockNum == 2) flags = 0;\r

- if (blockNum == 16 * 4 - 1) flags = CSETBLOCK_HALT + CSETBLOCK_RESET_FIELD;\r

+ if (blockNum == 0) flags = CSETBLOCK_INIT_FIELD + CSETBLOCK_WUPC; // switch on field and send magic sequence\r

+ if (blockNum == 1) flags = 0; // just write\r

+ if (blockNum == 16 * 4 - 1) flags = CSETBLOCK_HALT + CSETBLOCK_RESET_FIELD; // Done. Magic Halt and switch off field.\r

\r

if (mfCSetBlock(blockNum, buf8, NULL, 0, flags)) {\r

PrintAndLog("Cant set magic card block: %d", blockNum);\r

\r

if (mfCSetBlock(blockNum, buf8, NULL, 0, flags)) {\r

PrintAndLog("Cant set magic card block: %d", blockNum);\r

}\r

\r

blockNum = 0;\r

}\r

\r

blockNum = 0;\r

- flags = CSETBLOCK_INIT_FIELD + CSETBLOCK_WUPC;\r

while(!feof(f)){\r

\r

memset(buf, 0, sizeof(buf));\r

while(!feof(f)){\r

\r

memset(buf, 0, sizeof(buf));\r

return 2;\r

}\r

\r

return 2;\r

}\r

\r

- if (strlen(buf) < 32){\r

+ if (strlen(buf) < 32) {\r

if(strlen(buf) && feof(f))\r

break;\r

PrintAndLog("File content error. Block data must include 32 HEX symbols");\r

if(strlen(buf) && feof(f))\r

break;\r

PrintAndLog("File content error. Block data must include 32 HEX symbols");\r

for (i = 0; i < 32; i += 2)\r

sscanf(&buf[i], "%02x", (unsigned int *)&buf8[i / 2]);\r

\r

for (i = 0; i < 32; i += 2)\r

sscanf(&buf[i], "%02x", (unsigned int *)&buf8[i / 2]);\r

\r

- if (blockNum == 2) flags = 0;\r

- if (blockNum == 16 * 4 - 1) flags = CSETBLOCK_HALT + CSETBLOCK_RESET_FIELD;\r

+ if (blockNum == 0) flags = CSETBLOCK_INIT_FIELD + CSETBLOCK_WUPC; // switch on field and send magic sequence\r

+ if (blockNum == 1) flags = 0; // just write\r

+ if (blockNum == 16 * 4 - 1) flags = CSETBLOCK_HALT + CSETBLOCK_RESET_FIELD; // Done. Switch off field.\r

\r

if (mfCSetBlock(blockNum, buf8, NULL, 0, flags)) {\r

PrintAndLog("Can't set magic card block: %d", blockNum);\r

\r

if (mfCSetBlock(blockNum, buf8, NULL, 0, flags)) {\r

PrintAndLog("Can't set magic card block: %d", blockNum);\r

int res = 0;\r

int len = 0;\r

int blockLen = 0;\r

int res = 0;\r

int len = 0;\r

int blockLen = 0;\r

- int num = 0;\r

int pckNum = 0;\r

- uint8_t uid[7] = {0x00};\r

+ int num = 0;\r

+ uint8_t uid[7];\r

uint8_t uid_len;\r

uint8_t atqa[2] = {0x00};\r

uint8_t sak;\r

bool isTag;\r

uint8_t uid_len;\r

uint8_t atqa[2] = {0x00};\r

uint8_t sak;\r

bool isTag;\r

- uint8_t buf[3000] = {0x00};\r

- uint8_t * bufPtr = buf;\r

+ uint8_t *buf = NULL;\r

+ uint16_t bufsize = 0;\r

+ uint8_t *bufPtr = NULL;\r

\r

char ctmp = param_getchar(Cmd, 0);\r

if ( ctmp == 'h' || ctmp == 'H' ) {\r

\r

char ctmp = param_getchar(Cmd, 0);\r

if ( ctmp == 'h' || ctmp == 'H' ) {\r

break;\r

}\r

\r

break;\r

}\r

\r

- UsbCommand resp;\r

- if (WaitForResponseTimeout(CMD_ACK,&resp,2000)) {\r

+ UsbCommand resp;\r

+ if (WaitForResponseTimeout(CMD_ACK,&resp,2000)) {\r

res = resp.arg[0] & 0xff;\r

- len = resp.arg[1];\r

- num = resp.arg[2];\r

- \r

- if (res == 0) return 0;\r

- if (res == 1) {\r

- if (num ==0) {\r

+ uint16_t traceLen = resp.arg[1];\r

+ len = resp.arg[2];\r

+\r

+ if (res == 0) return 0; // we are done\r

+\r

+ if (res == 1) { // there is (more) data to be transferred\r

+ if (pckNum == 0) { // first packet, (re)allocate necessary buffer\r

+ if (traceLen > bufsize) {\r

+ uint8_t *p;\r

+ if (buf == NULL) { // not yet allocated\r

+ p = malloc(traceLen);\r

+ } else { // need more memory\r

+ p = realloc(buf, traceLen);\r

+ }\r

+ if (p == NULL) {\r

+ PrintAndLog("Cannot allocate memory for trace");\r

+ free(buf);\r

+ return 2;\r

+ }\r

+ buf = p;\r

+ }\r

bufPtr = buf;\r

- memset(buf, 0x00, 3000);\r

+ bufsize = traceLen;\r

+ memset(buf, 0x00, traceLen);\r

}\r

memcpy(bufPtr, resp.d.asBytes, len);\r

bufPtr += len;\r

pckNum++;\r

}\r

memcpy(bufPtr, resp.d.asBytes, len);\r

bufPtr += len;\r

pckNum++;\r

}\r

- if (res == 2) {\r

+\r

+ if (res == 2) { // received all data, start displaying\r

blockLen = bufPtr - buf;\r

bufPtr = buf;\r

printf(">\n");\r

PrintAndLog("received trace len: %d packages: %d", blockLen, pckNum);\r

blockLen = bufPtr - buf;\r

bufPtr = buf;\r

printf(">\n");\r

PrintAndLog("received trace len: %d packages: %d", blockLen, pckNum);\r

- num = 0;\r

while (bufPtr - buf < blockLen) {\r

- bufPtr += 6;\r

+ bufPtr += 6; // skip (void) timing information\r

len = *((uint16_t *)bufPtr);\r

-\r

if(len & 0x8000) {\r

isTag = true;\r

len &= 0x7fff;\r

if(len & 0x8000) {\r

isTag = true;\r

len &= 0x7fff;\r

}\r

bufPtr += 2;\r

if ((len == 14) && (bufPtr[0] == 0xff) && (bufPtr[1] == 0xff) && (bufPtr[12] == 0xff) && (bufPtr[13] == 0xff)) {\r

}\r

bufPtr += 2;\r

if ((len == 14) && (bufPtr[0] == 0xff) && (bufPtr[1] == 0xff) && (bufPtr[12] == 0xff) && (bufPtr[13] == 0xff)) {\r

- \r

memcpy(uid, bufPtr + 2, 7);\r

memcpy(atqa, bufPtr + 2 + 7, 2);\r

uid_len = (atqa[0] & 0xC0) == 0x40 ? 7 : 4;\r

sak = bufPtr[11];\r

memcpy(uid, bufPtr + 2, 7);\r

memcpy(atqa, bufPtr + 2 + 7, 2);\r

uid_len = (atqa[0] & 0xC0) == 0x40 ? 7 : 4;\r

sak = bufPtr[11];\r

- \r

PrintAndLog("tag select uid:%s atqa:0x%02x%02x sak:0x%02x", \r

sprint_hex(uid + (7 - uid_len), uid_len),\r

atqa[1], \r

PrintAndLog("tag select uid:%s atqa:0x%02x%02x sak:0x%02x", \r

sprint_hex(uid + (7 - uid_len), uid_len),\r

atqa[1], \r

AddLogHex(logHexFileName, isTag ? "TAG: ":"RDR: ", bufPtr, len);\r

if (wantDecrypt) \r

mfTraceDecode(bufPtr, len, wantSaveToEmlFile);\r

AddLogHex(logHexFileName, isTag ? "TAG: ":"RDR: ", bufPtr, len);\r

if (wantDecrypt) \r

mfTraceDecode(bufPtr, len, wantSaveToEmlFile);\r

+ num++; \r

}\r

bufPtr += len;\r

bufPtr += ((len-1)/8+1); // ignore parity\r

}\r

bufPtr += len;\r

bufPtr += ((len-1)/8+1); // ignore parity\r

- num++;\r

}\r

+ pckNum = 0;\r

}\r

} // resp not NULL\r

} // while (true)\r

}\r

} // resp not NULL\r

} // while (true)\r

- \r

+\r

+ free(buf);\r

return 0;\r

}\r

\r

return 0;\r

}\r

\r

+\r

static command_t CommandTable[] =\r

{\r

{"help", CmdHelp, 1, "This help"},\r

static command_t CommandTable[] =\r

{\r

{"help", CmdHelp, 1, "This help"},\r