Experimenting with hacking iclass

[proxmark3-svn] / client / cmdlfhid.c

diff --git a/client/cmdlfhid.c b/client/cmdlfhid.c
index eb0d83a906e32b1dbc6d4c7d3f4b013e8fcb503d..dd413d2e2899cd97eaed460e15073b8d17eb764f 100644 (file)
--- a/client/cmdlfhid.c
+++ b/client/cmdlfhid.c
@@ -9,7 +9,9 @@
 //-----------------------------------------------------------------------------
 
 #include <stdio.h>
-#include "proxusb.h"
+#include <string.h>
+//#include "proxusb.h"
+#include "proxmark3.h"
 #include "ui.h"
 #include "graph.h"
 #include "cmdparser.h"
@@ -46,7 +48,7 @@ int CmdHIDDemodFSK(const char *Cmd)
 int CmdHIDSim(const char *Cmd)
 {
   unsigned int hi = 0, lo = 0;
-  int n = 0, i = 1;
+  int n = 0, i = 0;
 
   while (sscanf(&Cmd[i++], "%1x", &n ) == 1) {
     hi = (hi << 4) | (lo >> 28);
@@ -60,12 +62,51 @@ int CmdHIDSim(const char *Cmd)
   return 0;
 }
 
+int CmdHIDClone(const char *Cmd)
+{
+  unsigned int hi2 = 0, hi = 0, lo = 0;
+  int n = 0, i = 0;
+  UsbCommand c;
+
+  if (strchr(Cmd,'l') != 0) {
+       while (sscanf(&Cmd[i++], "%1x", &n ) == 1) {
+      hi2 = (hi2 << 4) | (hi >> 28);
+      hi = (hi << 4) | (lo >> 28);
+      lo = (lo << 4) | (n & 0xf);
+    }
+
+    PrintAndLog("Cloning tag with long ID %x%08x%08x", hi2, hi, lo);
+
+    c.d.asBytes[0] = 1;
+  }
+  else {
+       while (sscanf(&Cmd[i++], "%1x", &n ) == 1) {
+      hi = (hi << 4) | (lo >> 28);
+      lo = (lo << 4) | (n & 0xf);
+    }
+
+    PrintAndLog("Cloning tag with ID %x%08x", hi, lo);
+
+    hi2 = 0;
+    c.d.asBytes[0] = 0;
+  }
+
+  c.cmd = CMD_HID_CLONE_TAG;
+  c.arg[0] = hi2;
+  c.arg[1] = hi;
+  c.arg[2] = lo;
+
+  SendCommand(&c);
+  return 0;
+}
+
 static command_t CommandTable[] = 
 {
   {"help",      CmdHelp,        1, "This help"},
   {"demod",     CmdHIDDemod,    1, "Demodulate HID Prox Card II (not optimal)"},
-  {"fskdemod",  CmdHIDDemodFSK, 0, "Realtime HID FSK demodulator"},
-  {"sim",       CmdHIDSim,      0, "<ID> -- HID tag simulator"},
+  {"fskdemod",  CmdHIDDemodFSK, 1, "Realtime HID FSK demodulator"},
+  {"sim",       CmdHIDSim,      1, "<ID> -- HID tag simulator"},
+  {"clone",     CmdHIDClone,    1, "<ID> ['l'] -- Clone HID to T55x7 (tag must be in antenna)(option 'l' for 84bit ID)"},
   {NULL, NULL, 0, NULL}
 };