]>
git.zerfleddert.de Git - proxmark3-svn/log
iceman1001 [Wed, 10 Aug 2016 14:28:23 +0000 (16:28 +0200)]
CHG: more struct errors.. my bad,
iceman1001 [Wed, 10 Aug 2016 14:25:56 +0000 (16:25 +0200)]
CHG: removed some debug statements, added another. Change the crapto1.c, lets see if the special attack works better now against chinese clones.
iceman1001 [Wed, 10 Aug 2016 14:24:49 +0000 (16:24 +0200)]
CHG: minor code cleaning in 'hf 14a reader'
iceman1001 [Wed, 10 Aug 2016 14:23:59 +0000 (16:23 +0200)]
CHG: on a slow usb connection it seems the pingcmd which stops the bruteforce on deviceside doesnt get there. Lets send three pings to make sure the device gets it.
iceman1001 [Wed, 10 Aug 2016 08:55:29 +0000 (10:55 +0200)]
FIX: at least now the special zero parity attack, repeats and doesn't crash. However it doesn't find the key either :(
iceman1001 [Tue, 9 Aug 2016 21:13:18 +0000 (23:13 +0200)]
CHG; still looking at 14b, this time started to look at the tracelog times not working.
iceman1001 [Tue, 9 Aug 2016 21:11:07 +0000 (23:11 +0200)]
started fixing the paritiy == 0 special attack against chinese clones with bad prng, which hasnt been working for ages.
iceman1001 [Tue, 9 Aug 2016 10:15:26 +0000 (12:15 +0200)]
fix: wrong spelling
iceman1001 [Tue, 9 Aug 2016 10:11:11 +0000 (12:11 +0200)]
FIX: Travis CI complains about missing stdbool.h includes
iceman1001 [Tue, 9 Aug 2016 09:56:06 +0000 (11:56 +0200)]
ADD: 'lf awid brute' is now possible to give a starting cardnumber. if given, the bruteforce loops from it as a mid point. Testing one step up, then one step down until it reaches 65535 and 0.
CHG: 'lf awid brute' inputs are now changed, take notice to new format.
iceman1001 [Tue, 9 Aug 2016 07:12:16 +0000 (09:12 +0200)]
syntax suger
chg: added clearCommandBuffer(); before calls to sendcommand.
iceman1001 [Tue, 9 Aug 2016 07:10:26 +0000 (09:10 +0200)]
CHG: textual fixes in help text
CHG: better exit message for 'lf awid bruteforce'
iceman1001 [Mon, 8 Aug 2016 20:17:15 +0000 (22:17 +0200)]
FIX: delay was parsed incorrect into a uint8_t...
CHG: help text fixed
iceman1001 [Mon, 8 Aug 2016 20:09:51 +0000 (22:09 +0200)]
ADD: Added a delay in ms to 'lf awid brute' Thanks to @crayon for the idea.
iceman1001 [Mon, 8 Aug 2016 19:27:53 +0000 (21:27 +0200)]
FIX: the cmdline parsing was a bit too hard. Thanks to @crayon for pointing out there were a bug here.
iceman1001 [Mon, 8 Aug 2016 17:02:46 +0000 (19:02 +0200)]
layouts.
iceman1001 [Mon, 8 Aug 2016 17:00:53 +0000 (19:00 +0200)]
even more..
iceman1001 [Mon, 8 Aug 2016 17:00:09 +0000 (19:00 +0200)]
more layout
iceman1001 [Mon, 8 Aug 2016 16:58:05 +0000 (18:58 +0200)]
correcting the layout...
iceman1001 [Mon, 8 Aug 2016 16:51:34 +0000 (18:51 +0200)]
textual changes.
iceman1001 [Mon, 8 Aug 2016 16:07:36 +0000 (18:07 +0200)]
CHG: added the libncurses5-dev instruction for COMPILING.txt
CHG: updated the readme with latest changes from changelog
iceman1001 [Mon, 8 Aug 2016 15:56:04 +0000 (17:56 +0200)]
textual changes
iceman1001 [Mon, 8 Aug 2016 15:49:30 +0000 (17:49 +0200)]
ADD: J-Run's 2nd phase tool mf_key_brute ref: https://github.com/J-Run/mf_key_brute Estimated time to search keyspace is ~18min.
J_Run's 2nd phase of multiple sector nested authentication key recovery
You have a known 4 last bytes of a key recovered with mf_nonce_brute tool.
First 2 bytes of key will be bruteforced
Usage: hf mf keybrute [h] <block number> <A|B> <key>
options:
h this help
<block number> target block number
<A|B> target key type
<key> candidate key from mf_nonce_brute tool
samples:
hf mf keybrute 1 A
000011223344
iceman1001 [Mon, 8 Aug 2016 05:46:12 +0000 (07:46 +0200)]
Merge branch 'master' of https://github.com/iceman1001/proxmark3
Iceman [Mon, 8 Aug 2016 05:43:26 +0000 (07:43 +0200)]
Merge pull request #21 from alexgrin/iceman_master
FIX: erroneous semicolon
Alexis Green [Mon, 8 Aug 2016 03:07:25 +0000 (20:07 -0700)]
FIX: erroneous semicolon
iceman1001 [Sun, 7 Aug 2016 20:15:35 +0000 (22:15 +0200)]
fix: forgot something small.. sloppy.
iceman1001 [Sun, 7 Aug 2016 20:05:10 +0000 (22:05 +0200)]
ADD: added the 'max frame size' parameter set, valid sizes: 16|24|32|40|48|64|96|128|256
it can be verified by setting debuglevel to 3 or more.
iceman1001 [Sun, 7 Aug 2016 19:19:11 +0000 (21:19 +0200)]
CHG: fixes to match the new arguments to the darkside attack (keytype A|B and blocknumber) in mifare_autopwn.lua script.
iceman1001 [Sun, 7 Aug 2016 19:08:17 +0000 (21:08 +0200)]
CHG: moved some TEA crypto stuff from 14b into analyse.
iceman1001 [Sun, 7 Aug 2016 19:05:09 +0000 (21:05 +0200)]
CHG: increased the script-filename column width from 16 to 21.
iceman1001 [Sun, 7 Aug 2016 16:50:25 +0000 (18:50 +0200)]
textual changes.
iceman1001 [Sun, 7 Aug 2016 16:49:36 +0000 (18:49 +0200)]
CHG: applied some of the changes unto "hf 14b snoop" *untested* Hard to test without a proper reader/tag to snoop
iceman1001 [Sun, 7 Aug 2016 15:49:33 +0000 (17:49 +0200)]
CHG: iso14443b.c got some more love. using the "hf 14b raw" command gives now a much stabil read from more distances than before.
Iceman [Sat, 6 Aug 2016 20:42:39 +0000 (22:42 +0200)]
Merge pull request #20 from alexgrin/iceman_master
FIX: Coverity badge link now works.
Alexis Green [Thu, 4 Aug 2016 22:52:54 +0000 (15:52 -0700)]
FIX: Coverity badge link now works.
iceman1001 [Thu, 4 Aug 2016 19:57:40 +0000 (21:57 +0200)]
CHG: some calyspo stuff
iceman1001 [Thu, 4 Aug 2016 19:57:18 +0000 (21:57 +0200)]
CHG: marshmellow42 's improved "hf mf sim x"
iceman1001 [Thu, 4 Aug 2016 19:54:11 +0000 (21:54 +0200)]
CHG: moved a defince arraylen into util.h and changed to uppercase.
iceman1001 [Thu, 4 Aug 2016 19:52:32 +0000 (21:52 +0200)]
CHG: trying to unify the crc algos in one place.
iceman1001 [Thu, 4 Aug 2016 19:51:26 +0000 (21:51 +0200)]
ADD: @donwan581 select keytype for the darkside attack.
iceman1001 [Thu, 4 Aug 2016 19:37:43 +0000 (21:37 +0200)]
CHG: cleaning up.
iceman1001 [Wed, 3 Aug 2016 10:09:16 +0000 (12:09 +0200)]
FIX: coverity scan 133850, again. Why on earth did the 7 come from. I removed it.
iceman1001 [Wed, 3 Aug 2016 09:57:40 +0000 (11:57 +0200)]
fix: COVERITYSCAN 133871, fix one part, breaking another. shouldnt have changed to uint8_t since it can never be negative.
iceman1001 [Wed, 3 Aug 2016 08:53:26 +0000 (10:53 +0200)]
FIX: coverity scan 133859 structually dead code, looks like this is a rest from and old loop. I just removed it.
iceman1001 [Wed, 3 Aug 2016 08:01:37 +0000 (10:01 +0200)]
FIX; coverity scan 133850, & operation should keep only topbit of lower nibble.
CHG: tabs fixed
iceman1001 [Wed, 3 Aug 2016 07:32:07 +0000 (09:32 +0200)]
Coverity Scan 133850, need to ask @jason about this one.
iceman1001 [Wed, 3 Aug 2016 07:30:01 +0000 (09:30 +0200)]
Merge branch 'master' of https://github.com/iceman1001/proxmark3
iceman1001 [Wed, 3 Aug 2016 07:28:54 +0000 (09:28 +0200)]
FIX: 133853, If you have 3items in a array, don't start with index 4 or 3, mental note to self, stop coding when you are tired.
Iceman [Wed, 3 Aug 2016 06:00:22 +0000 (08:00 +0200)]
Merge pull request #19 from alexgrin/iceman_master
Another Coverity fix
Alexis Green [Wed, 3 Aug 2016 05:44:36 +0000 (22:44 -0700)]
FIX: CoverityScan 123358 and 133864 - Unchecked return value
Alexis Green [Tue, 2 Aug 2016 23:12:44 +0000 (16:12 -0700)]
FIX: CoverityScan 121362 - Pointer to local outside scope
iceman1001 [Tue, 2 Aug 2016 22:51:26 +0000 (00:51 +0200)]
FIX: mental note to self, don't code when tried. "size" should have been "sizeof". I need to fix my build for armsrc again.
iceman1001 [Tue, 2 Aug 2016 22:42:23 +0000 (00:42 +0200)]
FIX: forgot a semicolon
iceman1001 [Tue, 2 Aug 2016 22:39:02 +0000 (00:39 +0200)]
FIX: Coverity scan
1333852 , Make sure (card) is not null before accessing it.
iceman1001 [Tue, 2 Aug 2016 22:35:14 +0000 (00:35 +0200)]
CHG: Some testing of timings on 14443b,
FIX: CoverityScan 133854 , out-of-bounds read, when calculating crc.
iceman1001 [Tue, 2 Aug 2016 22:25:53 +0000 (00:25 +0200)]
FIX: COverityScan 133865, out-of-bounds access, Forgot that bits is not used in Logtrace but bytes.
iceman1001 [Tue, 2 Aug 2016 22:15:26 +0000 (00:15 +0200)]
FIX: CoverityScan 133857, cast to uint32_t will stop eventual problems. However its a uint_16 so it shouldnt be a problem to start with.
iceman1001 [Tue, 2 Aug 2016 22:13:33 +0000 (00:13 +0200)]
FIX. COVERITYscan 133860, initialize to zero. This function is still not working but at least now it doesnt crash the client.
iceman1001 [Tue, 2 Aug 2016 22:10:21 +0000 (00:10 +0200)]
FIX: CoverityScan,
1333853 , out-of-bounds, well, if I have 3 items in a array, don't start reading 4...
Iceman [Tue, 2 Aug 2016 21:22:51 +0000 (23:22 +0200)]
Merge pull request #18 from alexgrin/iceman_master
A few fixes
Alexis Green [Tue, 2 Aug 2016 21:10:33 +0000 (14:10 -0700)]
FIX: LEGIC - potential stack corruption calculating CRC from user input
Alexis Green [Tue, 2 Aug 2016 20:57:44 +0000 (13:57 -0700)]
FIX: CoverityScan 123465 - Resource leak
Alexis Green [Tue, 2 Aug 2016 20:37:05 +0000 (13:37 -0700)]
CHG: LEGIC - allow offline mode due to existing offline command
iceman1001 [Tue, 2 Aug 2016 14:06:40 +0000 (16:06 +0200)]
Merge branch 'master' of https://github.com/iceman1001/proxmark3
iceman1001 [Tue, 2 Aug 2016 14:05:50 +0000 (16:05 +0200)]
FIX: CoverityScan 133858 -uninitialized data
iceman1001 [Tue, 2 Aug 2016 14:04:57 +0000 (16:04 +0200)]
chg: another way of checking a array for NULL
iceman1001 [Tue, 2 Aug 2016 14:04:03 +0000 (16:04 +0200)]
fix: CoverityScan 133855 -out-of-bounds bits was used as index to cmd array.
Iceman [Tue, 2 Aug 2016 08:14:01 +0000 (10:14 +0200)]
Merge pull request #17 from alexgrin/iceman_master
Fixing warning:
Alexis Green [Mon, 1 Aug 2016 20:03:46 +0000 (13:03 -0700)]
Fixing warning:
warning: ignoring return va 'scanf', declared with attribute warn_unused_result [-Wunused-result]
Iceman [Mon, 1 Aug 2016 07:02:49 +0000 (09:02 +0200)]
Merge pull request #16 from alexgrin/iceman_master
Fixing clang compilation warning
Alexis Green [Mon, 1 Aug 2016 05:35:16 +0000 (22:35 -0700)]
Fixing clang compilation warning
warning: shifting a negative signed value is undefined [-Wshift-negative-value]
iceman1001 [Sun, 31 Jul 2016 20:03:46 +0000 (22:03 +0200)]
FIX: removed a compiler warning, the stringlen is not used anymore.
iceman1001 [Sun, 31 Jul 2016 20:01:40 +0000 (22:01 +0200)]
minor textual fix
iceman1001 [Sun, 31 Jul 2016 20:00:49 +0000 (22:00 +0200)]
CHG: Moved some includes, defines, structs from .c into header file.
iceman1001 [Sun, 31 Jul 2016 19:59:29 +0000 (21:59 +0200)]
FIX: getting rid of a compiler warning message.
iceman1001 [Sun, 31 Jul 2016 19:58:15 +0000 (21:58 +0200)]
ADD: started to rework the wiegand converting. Extracted it from the 'lf hid' file. Looks decent but still needs work.
Iceman [Sun, 31 Jul 2016 19:53:14 +0000 (21:53 +0200)]
Merge pull request #15 from alexgrin/iceman_master
Adding a 'recoverpw' command for T55xx to try to recover corrupt pass…
Alexis Green [Thu, 28 Jul 2016 20:52:59 +0000 (13:52 -0700)]
Adding a 'recoverpw' command for T55xx to try to recover corrupt password written by a handheld cloner by fiddling with bits in the expected password.
iceman1001 [Sun, 31 Jul 2016 09:37:19 +0000 (11:37 +0200)]
CHG: moved out some help-texts into its own usage-functions.
iceman1001 [Sat, 30 Jul 2016 17:37:15 +0000 (19:37 +0200)]
CHG: Moved a 'include' statement to header file
iceman1001 [Sat, 30 Jul 2016 17:36:48 +0000 (19:36 +0200)]
REM: cleaning up some commented code.
iceman1001 [Sat, 30 Jul 2016 17:30:53 +0000 (19:30 +0200)]
FIX: Found a minor bug in 'LF CMDREAD' where it on device side didn't compare with the right char 'h' instead of 'H'. Re-wrote that whole part anyway, I changed periods to be max 0xFFFF in length, doubtful that a zero or one delay will be bigger than 65535...
iceman1001 [Fri, 29 Jul 2016 21:30:40 +0000 (23:30 +0200)]
CHG: The jablotron demod now deals with the strangeness of hex symbols A-F in cardid the same way a reader prints it.
iceman1001 [Fri, 29 Jul 2016 21:29:37 +0000 (23:29 +0200)]
ADD: Binary Encoded Digit -> Decimal
ADD: Decimal -> Binary Encoded Digit
Ie
decimal 2345 becomes 0x2345
and
hex 0x2345 becomes decimal 2345
iceman1001 [Fri, 29 Jul 2016 18:58:52 +0000 (20:58 +0200)]
CHG: help text changes in cmdlfjablotron.c
CHG: increase byte size to uint16_t in crc.c CRC16Legic
iceman1001 [Fri, 29 Jul 2016 18:53:56 +0000 (20:53 +0200)]
chg: textual change.
iceman1001 [Fri, 29 Jul 2016 12:32:13 +0000 (14:32 +0200)]
CHG: redundant 'return' statement removed
iceman1001 [Fri, 29 Jul 2016 12:31:39 +0000 (14:31 +0200)]
CHG: better printing output of card ID
CHG: better detecting in preambl. 16bits with 1, and a zero bit. Also cleared this topbit when cloneing and simulating.
iceman1001 [Fri, 29 Jul 2016 11:46:05 +0000 (13:46 +0200)]
CHG: textual changes to help text.
CHG: removed the 'd' as input, the clone/sim commands is simpler.
CHG: printing of card ID is now zero padded.
iceman1001 [Fri, 29 Jul 2016 09:04:12 +0000 (11:04 +0200)]
ADD: LF JABLOTRON functionality. with clone/sim and detection in LF SEARCH.
CHG: removed no-existing crc8ja code
FIX: a check in ASKbiphaseDemod to make sure graphbuff is not empty.
iceman1001 [Thu, 28 Jul 2016 20:22:34 +0000 (22:22 +0200)]
FIX: that OEM variable that is unused.
iceman1001 [Thu, 28 Jul 2016 20:17:44 +0000 (22:17 +0200)]
FIX: Fixed some warnings I didn't take notice off.
- memcpy should have been "memset"
- forgot to add function declaration into header file.
iceman1001 [Thu, 28 Jul 2016 19:50:54 +0000 (21:50 +0200)]
CHG: removed the wiegand converting, since I'm not happy with how its implemented. This is rework in progress.
iceman1001 [Thu, 28 Jul 2016 19:48:53 +0000 (21:48 +0200)]
CHG: trying to figure out why I can't get the seconds out..
iceman1001 [Thu, 28 Jul 2016 19:47:52 +0000 (21:47 +0200)]
ADD: Added some new analyse functions like CHKSUM ADD/SUBTRACKT with one's complement
iceman1001 [Thu, 28 Jul 2016 19:46:27 +0000 (21:46 +0200)]
spacing..
iceman1001 [Thu, 28 Jul 2016 19:45:00 +0000 (21:45 +0200)]
CHG: forgot to add the reflect function
iceman1001 [Thu, 28 Jul 2016 19:41:44 +0000 (21:41 +0200)]
CHG: merged the forum user @jason 's fixes to LEGIC. *UNTESTED*
CHG: changed the CRC implementations.
iceman1001 [Thu, 28 Jul 2016 19:16:02 +0000 (21:16 +0200)]
ADD: some new usb commmands from EMV, and for LEGIC.