]> cvs.zerfleddert.de Git - proxmark3-svn/blame - client/cmdhf14b.c
projects / proxmark3-svn / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
small fixes to 14b info, added 14b sim cmds
[proxmark3-svn] / client / cmdhf14b.c
CommitLineData
a553f267 1//-----------------------------------------------------------------------------
2// Copyright (C) 2010 iZsh <izsh at fail0verflow.com>
3//
4// This code is licensed to you under the terms of the GNU GPL, version 2 or,
5// at your option, any later version. See the LICENSE.txt file for the text of
6// the license.
7//-----------------------------------------------------------------------------
8// High frequency ISO14443B commands
9//-----------------------------------------------------------------------------
10
7fe9b0b7 11#include <stdio.h>
12#include <stdlib.h>
13#include <stdbool.h>
14#include <string.h>
15#include <stdint.h>
16#include "iso14443crc.h"
902cb3c0 17#include "proxmark3.h"
7fe9b0b7 18#include "data.h"
19#include "graph.h"
3fe4ff4f 20#include "util.h"
7fe9b0b7 21#include "ui.h"
22#include "cmdparser.h"
23#include "cmdhf14b.h"
7cf3ef20 24#include "cmdmain.h"
ff4fdb32 25#include "cmdhf14a.h"
7fe9b0b7 26
27static int CmdHelp(const char *Cmd);
28
7fe9b0b7 29int CmdHF14BList(const char *Cmd)
30{
388c92bd 31 PrintAndLog("Deprecated command, use 'hf list 14b' instead");
7fe9b0b7 32
388c92bd 33 return 0;
7fe9b0b7 34}
7fe9b0b7 35
132a0217 36int CmdHF14BSim(const char *Cmd)
7fe9b0b7 37{
132a0217 38 UsbCommand c={CMD_SIMULATE_TAG_ISO_14443B};
ff4fdb32 39 clearCommandBuffer();
7fe9b0b7 40 SendCommand(&c);
41 return 0;
42}
43
44int CmdHF14BSnoop(const char *Cmd)
45{
132a0217 46 UsbCommand c = {CMD_SNOOP_ISO_14443B};
ff4fdb32 47 clearCommandBuffer();
7fe9b0b7 48 SendCommand(&c);
49 return 0;
50}
51
52/* New command to read the contents of a SRI512 tag
53 * SRI512 tags are ISO14443-B modulated memory tags,
54 * this command just dumps the contents of the memory
55 */
56int CmdSri512Read(const char *Cmd)
57{
58 UsbCommand c = {CMD_READ_SRI512_TAG, {strtol(Cmd, NULL, 0), 0, 0}};
ff4fdb32 59 clearCommandBuffer();
7fe9b0b7 60 SendCommand(&c);
61 return 0;
62}
63
64/* New command to read the contents of a SRIX4K tag
65 * SRIX4K tags are ISO14443-B modulated memory tags,
66 * this command just dumps the contents of the memory/
67 */
68int CmdSrix4kRead(const char *Cmd)
69{
70 UsbCommand c = {CMD_READ_SRIX4K_TAG, {strtol(Cmd, NULL, 0), 0, 0}};
ff4fdb32 71 clearCommandBuffer();
7fe9b0b7 72 SendCommand(&c);
73 return 0;
74}
75
ff4fdb32 76int rawClose(void){
77 UsbCommand resp;
78 UsbCommand c = {CMD_ISO_14443B_COMMAND, {0, 0, 0}};
79 clearCommandBuffer();
80 SendCommand(&c);
81 if (!WaitForResponseTimeout(CMD_ACK,&resp,1000)) {
82 return 0;
83 }
84 return 0;
85}
86
87int HF14BCmdRaw(bool reply, bool *crc, bool power, uint8_t *data, uint8_t *datalen, bool verbose){
88 UsbCommand resp;
89 UsbCommand c = {CMD_ISO_14443B_COMMAND, {0, 0, 0}}; // len,recv,power
90 if(*crc)
91 {
92 uint8_t first, second;
93 ComputeCrc14443(CRC_14443_B, data, *datalen, &first, &second);
94 data[*datalen] = first;
95 data[*datalen + 1] = second;
96 *datalen += 2;
97 }
98
99 c.arg[0] = *datalen;
100 c.arg[1] = reply;
101 c.arg[2] = power;
102 memcpy(c.d.asBytes,data,*datalen);
103 clearCommandBuffer();
104 SendCommand(&c);
105
106 if (!reply) return 1;
107
108 if (!WaitForResponseTimeout(CMD_ACK,&resp,1000)) {
109 if (verbose) PrintAndLog("timeout while waiting for reply.");
110 return 0;
111 }
112 *datalen = resp.arg[0];
113 if (verbose) PrintAndLog("received %u octets", *datalen);
114 if(*datalen<2) return 0;
115
116 memcpy(data, resp.d.asBytes, *datalen);
117 if (verbose) PrintAndLog("%s", sprint_hex(data, *datalen));
118
119 uint8_t first, second;
120 ComputeCrc14443(CRC_14443_B, data, *datalen-2, &first, &second);
121 if(data[*datalen-2] == first && data[*datalen-1] == second) {
122 if (verbose) PrintAndLog("CRC OK");
123 *crc = true;
124 } else {
125 if (verbose) PrintAndLog("CRC failed");
126 *crc = false;
127 }
128 return 1;
129}
130
131int CmdHF14BCmdRaw (const char *Cmd) {
132 bool reply = true;
133 bool crc = false;
134 bool power = false;
b8edab0f 135 bool select = false;
ff4fdb32 136 char buf[5] = "";
137 uint8_t data[100] = {0x00};
138 uint8_t datalen = 0;
139 unsigned int temp;
140 int i = 0;
141 if (strlen(Cmd)<3) {
142 PrintAndLog("Usage: hf 14b raw [-r] [-c] [-p] <0A 0B 0C ... hex>");
143 PrintAndLog(" -r do not read response");
144 PrintAndLog(" -c calculate and append CRC");
145 PrintAndLog(" -p leave the field on after receive");
b8edab0f 146 PrintAndLog(" -s active signal field ON with select");
147 return 0;
ff4fdb32 148 }
149
150 // strip
151 while (*Cmd==' ' || *Cmd=='\t') Cmd++;
152
153 while (Cmd[i]!='\0') {
154 if (Cmd[i]==' ' || Cmd[i]=='\t') { i++; continue; }
155 if (Cmd[i]=='-') {
156 switch (Cmd[i+1]) {
157 case 'r':
158 case 'R':
159 reply = false;
160 break;
161 case 'c':
162 case 'C':
163 crc = true;
164 break;
165 case 'p':
166 case 'P':
167 power = true;
168 break;
b8edab0f 169 case 's':
170 case 'S':
171 select = true;
172 break;
ff4fdb32 173 default:
174 PrintAndLog("Invalid option");
175 return 0;
176 }
177 i+=2;
178 continue;
179 }
180 if ((Cmd[i]>='0' && Cmd[i]<='9') ||
181 (Cmd[i]>='a' && Cmd[i]<='f') ||
182 (Cmd[i]>='A' && Cmd[i]<='F') ) {
183 buf[strlen(buf)+1]=0;
184 buf[strlen(buf)]=Cmd[i];
185 i++;
186
187 if (strlen(buf)>=2) {
188 sscanf(buf,"%x",&temp);
189 data[datalen++]=(uint8_t)(temp & 0xff);
190 *buf=0;
191 }
192 continue;
193 }
194 PrintAndLog("Invalid char on input");
195 return 1;
196 }
197 if (datalen == 0)
198 {
199 PrintAndLog("Missing data input");
200 return 0;
201 }
202
1c7d367e 203 if (select){ //auto select 14b tag
b8edab0f 204 uint8_t cmd2[16];
205 uint8_t cmdLen = 3;
206 bool crc2 = true;
207 cmd2[0] = 0x05;
208 cmd2[1] = 0x00;
f3b83bee 209 cmd2[2] = 0x00;
b8edab0f 210
1c7d367e 211 // REQB
b8edab0f 212 if (HF14BCmdRaw(true, &crc2, true, cmd2, &cmdLen, false)==0) return rawClose();
213
214 if (cmd2[0] != 0x50 || cmdLen != 14 || !crc2) return rawClose();
215
9d84e689 216 cmd2[0] = 0x1D;
1c7d367e 217 // UID from data[1 - 4]
9d84e689 218 cmd2[5] = 0x00;
219 cmd2[6] = 0x08;
220 cmd2[7] = 0x01;
221 cmd2[8] = 0x00;
b8edab0f 222 cmdLen = 9;
1c7d367e 223
224 // attrib
b8edab0f 225 if (HF14BCmdRaw(true, &crc2, true, cmd2, &cmdLen, false)==0) return rawClose();
226
f3b83bee 227 if (cmdLen != 3 || !crc2) return rawClose();
b8edab0f 228 }
229
ff4fdb32 230 return HF14BCmdRaw(reply, &crc, power, data, &datalen, true);
7cf3ef20 231}
232
b29d55f2 233// print full atqb info
ff4fdb32 234static void print_atqb_resp(uint8_t *data){
f3b83bee 235 //PrintAndLog (" UID: %s", sprint_hex(data+1,4));
ff4fdb32 236 PrintAndLog (" App Data: %s", sprint_hex(data+5,4));
237 PrintAndLog (" Protocol: %s", sprint_hex(data+9,3));
238 uint8_t BitRate = data[9];
239 if (!BitRate)
240 PrintAndLog (" Bit Rate: 106 kbit/s only PICC <-> PCD");
241 if (BitRate & 0x10)
242 PrintAndLog (" Bit Rate: 212 kbit/s PICC -> PCD supported");
243 if (BitRate & 0x20)
244 PrintAndLog (" Bit Rate: 424 kbit/s PICC -> PCD supported");
245 if (BitRate & 0x40)
246 PrintAndLog (" Bit Rate: 847 kbit/s PICC -> PCD supported");
247 if (BitRate & 0x01)
248 PrintAndLog (" Bit Rate: 212 kbit/s PICC <- PCD supported");
249 if (BitRate & 0x02)
250 PrintAndLog (" Bit Rate: 424 kbit/s PICC <- PCD supported");
251 if (BitRate & 0x04)
252 PrintAndLog (" Bit Rate: 847 kbit/s PICC <- PCD supported");
253 if (BitRate & 0x80)
254 PrintAndLog (" Same bit rate <-> required");
255
256 uint16_t maxFrame = data[10]>>4;
257 if (maxFrame < 5)
258 maxFrame = 8*maxFrame + 16;
259 else if (maxFrame == 5)
260 maxFrame = 64;
261 else if (maxFrame == 6)
262 maxFrame = 96;
263 else if (maxFrame == 7)
264 maxFrame = 128;
265 else if (maxFrame == 8)
266 maxFrame = 256;
267 else
268 maxFrame = 257;
269
f3b83bee 270 PrintAndLog ("Max Frame Size: %u%s",maxFrame, (maxFrame == 257) ? "+ RFU" : "");
ff4fdb32 271
272 uint8_t protocolT = data[10] & 0xF;
273 PrintAndLog (" Protocol Type: Protocol is %scompliant with ISO/IEC 14443-4",(protocolT) ? "" : "not " );
f3b83bee 274 PrintAndLog ("Frame Wait Int: %u", data[11]>>4);
ff4fdb32 275 PrintAndLog (" App Data Code: Application is %s",(data[11]&4) ? "Standard" : "Proprietary");
276 PrintAndLog (" Frame Options: NAD is %ssupported",(data[11]&2) ? "" : "not ");
277 PrintAndLog (" Frame Options: CID is %ssupported",(data[11]&1) ? "" : "not ");
f3b83bee 278 PrintAndLog ("Max Buf Length: %u (MBLI) %s",data[14]>>4, (data[14] & 0xF0) ? "" : "not supported");
ff4fdb32 279
280 return;
281}
282
b29d55f2 283// get SRx chip model (from UID) // from ST Microelectronics
ff4fdb32 284char *get_ST_Chip_Model(uint8_t data){
285 static char model[20];
286 char *retStr = model;
287 memset(model,0, sizeof(model));
288
289 switch (data) {
290 case 0x0: sprintf(retStr, "SRIX4K (Special)"); break;
291 case 0x2: sprintf(retStr, "SR176"); break;
292 case 0x3: sprintf(retStr, "SRIX4K"); break;
293 case 0x4: sprintf(retStr, "SRIX512"); break;
294 case 0x6: sprintf(retStr, "SRI512"); break;
295 case 0x7: sprintf(retStr, "SRI4K"); break;
296 case 0xC: sprintf(retStr, "SRT512"); break;
297 default : sprintf(retStr, "Unknown"); break;
298 }
299 return retStr;
300}
301
cc34cc7b 302int print_ST_Lock_info(uint8_t model){
303 //assume connection open and tag selected...
c3ebcce4 304 uint8_t data[16] = {0x00};
cc34cc7b 305 uint8_t datalen = 2;
306 bool crc = true;
307 uint8_t resplen;
308 uint8_t blk1;
309 data[0] = 0x08;
310
311 if (model == 0x2) { //SR176 has special command:
312 data[1] = 0xf;
313 resplen = 4;
314 } else {
315 data[1] = 0xff;
316 resplen = 6;
317 }
318
319 //std read cmd
320 if (HF14BCmdRaw(true, &crc, true, data, &datalen, false)==0) return rawClose();
321
322 if (datalen != resplen || !crc) return rawClose();
323
324 PrintAndLog("Chip Write Protection Bits:");
325 // now interpret the data
326 switch (model){
327 case 0x0: //fall through (SRIX4K special)
328 case 0x3: //fall through (SRIx4K)
329 case 0x7: // (SRI4K)
330 //only need data[3]
331 blk1 = 9;
8e00825a 332 PrintAndLog(" raw: %s",printBits(1,data+3));
c3ebcce4 333 PrintAndLog(" 07/08:%slocked", (data[3] & 1) ? " not " : " " );
cc34cc7b 334 for (uint8_t i = 1; i<8; i++){
c3ebcce4 335 PrintAndLog(" %02u:%slocked", blk1, (data[3] & (1 << i)) ? " not " : " " );
cc34cc7b 336 blk1++;
337 }
338 break;
339 case 0x4: //fall through (SRIX512)
340 case 0x6: //fall through (SRI512)
341 case 0xC: // (SRT512)
342 //need data[2] and data[3]
343 blk1 = 0;
8e00825a 344 PrintAndLog(" raw: %s",printBits(2,data+2));
cc34cc7b 345 for (uint8_t b=2; b<4; b++){
346 for (uint8_t i=0; i<8; i++){
c3ebcce4 347 PrintAndLog(" %02u:%slocked", blk1, (data[b] & (1 << i)) ? " not " : " " );
cc34cc7b 348 blk1++;
349 }
350 }
351 break;
352 case 0x2: // (SR176)
353 //need data[2]
354 blk1 = 0;
8e00825a 355 PrintAndLog(" raw: %s",printBits(1,data+2));
cc34cc7b 356 for (uint8_t i = 0; i<8; i++){
c3ebcce4 357 PrintAndLog(" %02u/%02u:%slocked", blk1, blk1+1, (data[2] & (1 << i)) ? " " : " not " );
cc34cc7b 358 blk1+=2;
359 }
360 break;
361 default:
362 return rawClose();
363 }
364 return 1;
365}
366
b29d55f2 367// print UID info from SRx chips (ST Microelectronics)
368static void print_st_general_info(uint8_t *data){
ff4fdb32 369 //uid = first 8 bytes in data
cc34cc7b 370 PrintAndLog(" UID: %s", sprint_hex(SwapEndian64(data,8,8),8));
371 PrintAndLog(" MFG: %02X, %s", data[6], getTagInfo(data[6]));
372 PrintAndLog(" Chip: %02X, %s", data[5]>>2, get_ST_Chip_Model(data[5]>>2));
ff4fdb32 373 return;
374}
375
b29d55f2 376// 14b get and print UID only (general info)
377int HF14BStdReader(uint8_t *data, uint8_t *datalen){
ff4fdb32 378 //05 00 00 = find one tag in field
b8edab0f 379 //1d xx xx xx xx 00 08 01 00 = attrib xx=UID (resp 10 [f9 e0])
380 //a3 = ? (resp 03 [e2 c2])
381 //02 = ? (resp 02 [6a d3])
ff4fdb32 382 // 022b (resp 02 67 00 [29 5b])
383 // 0200a40400 (resp 02 67 00 [29 5b])
384 // 0200a4040c07a0000002480300 (resp 02 67 00 [29 5b])
385 // 0200a4040c07a0000002480200 (resp 02 67 00 [29 5b])
386 // 0200a4040006a0000000010100 (resp 02 6a 82 [4b 4c])
387 // 0200a4040c09d27600002545500200 (resp 02 67 00 [29 5b])
388 // 0200a404000cd2760001354b414e4d30310000 (resp 02 6a 82 [4b 4c])
389 // 0200a404000ca000000063504b43532d313500 (resp 02 6a 82 [4b 4c])
390 // 0200a4040010a000000018300301000000000000000000 (resp 02 6a 82 [4b 4c])
391 //03 = ? (resp 03 [e3 c2])
392 //c2 = ? (resp c2 [66 15])
393 //b2 = ? (resp a3 [e9 67])
f3b83bee 394 //a2 = ? (resp 02 [6a d3])
ff4fdb32 395 bool crc = true;
396 *datalen = 3;
397 //std read cmd
398 data[0] = 0x05;
399 data[1] = 0x00;
f3b83bee 400 data[2] = 0x00;
ff4fdb32 401
f3b83bee 402 if (HF14BCmdRaw(true, &crc, true, data, datalen, false)==0) return rawClose();
ff4fdb32 403
f3b83bee 404 if (data[0] != 0x50 || *datalen != 14 || !crc) return rawClose();
ff4fdb32 405
406 PrintAndLog ("\n14443-3b tag found:");
b29d55f2 407 PrintAndLog (" UID: %s", sprint_hex(data+1,4));
ff4fdb32 408
f3b83bee 409 uint8_t cmd2[16];
410 uint8_t cmdLen = 3;
411 bool crc2 = true;
412
413 cmd2[0] = 0x1D;
414 // UID from data[1 - 4]
415 cmd2[1] = data[1];
416 cmd2[2] = data[2];
417 cmd2[3] = data[3];
418 cmd2[4] = data[4];
419 cmd2[5] = 0x00;
420 cmd2[6] = 0x08;
421 cmd2[7] = 0x01;
422 cmd2[8] = 0x00;
423 cmdLen = 9;
424
425 // attrib
426 if (HF14BCmdRaw(true, &crc2, true, cmd2, &cmdLen, false)==0) return rawClose();
427
428 if (cmdLen != 3 || !crc2) return rawClose();
429 // add attrib responce to data
430 data[14] = cmd2[0];
431 rawClose();
ff4fdb32 432 return 1;
433}
434
8a258b58 435// 14b get and print Full Info (as much as we know)
436int HF14BStdInfo(uint8_t *data, uint8_t *datalen){
437 if (!HF14BStdReader(data,datalen)) return 0;
b29d55f2 438
8a258b58 439 //add more info here
440 print_atqb_resp(data);
b29d55f2 441
f3b83bee 442
b29d55f2 443 return 1;
444}
445
446// SRx get and print general info about SRx chip from UID
cc34cc7b 447int HF14B_ST_Reader(uint8_t *data, uint8_t *datalen, bool closeCon){
ff4fdb32 448 bool crc = true;
449 *datalen = 2;
450 //wake cmd
451 data[0] = 0x06;
452 data[1] = 0x00;
453
454 //leave power on
455 // verbose on for now for testing - turn off when functional
456 if (HF14BCmdRaw(true, &crc, true, data, datalen, false)==0) return rawClose();
457
458 if (*datalen != 3 || !crc) return rawClose();
459
460 uint8_t chipID = data[0];
461 // select
462 data[0] = 0x0E;
463 data[1] = chipID;
464 *datalen = 2;
465
466 //leave power on
ff4fdb32 467 if (HF14BCmdRaw(true, &crc, true, data, datalen, false)==0) return rawClose();
468
469 if (*datalen != 3 || !crc || data[0] != chipID) return rawClose();
470
471 // get uid
472 data[0] = 0x0B;
473 *datalen = 1;
474
cc34cc7b 475 //leave power on
476 if (HF14BCmdRaw(true, &crc, true, data, datalen, false)==0) return rawClose();
c3ebcce4 477
478 if (*datalen != 10 || !crc) return rawClose();
479
cc34cc7b 480 //power off ?
481 if (closeCon) rawClose();
482
ff4fdb32 483 PrintAndLog("\n14443-3b ST tag found:");
b29d55f2 484 print_st_general_info(data);
ff4fdb32 485 return 1;
486}
487
8a258b58 488// SRx get and print full info (needs more info...)
489int HF14B_ST_Info(uint8_t *data, uint8_t *datalen){
cc34cc7b 490 if (!HF14B_ST_Reader(data, datalen, false)) return 0;
8a258b58 491
492 //add locking bit information here.
cc34cc7b 493 if (print_ST_Lock_info(data[5]>>2))
494 rawClose();
8a258b58 495
496 return 1;
497}
498
ff4fdb32 499// test for other 14b type tags (mimic another reader - don't have tags to identify)
b29d55f2 500int HF14B_Other_Reader(uint8_t *data, uint8_t *datalen){
ff4fdb32 501 bool crc = true;
502 *datalen = 4;
503 //std read cmd
504 data[0] = 0x00;
505 data[1] = 0x0b;
506 data[2] = 0x3f;
507 data[3] = 0x80;
508
b29d55f2 509 if (HF14BCmdRaw(true, &crc, true, data, datalen, false)!=0) {
ff4fdb32 510 if (*datalen > 2 || !crc) {
511 PrintAndLog ("\n14443-3b tag found:");
512 PrintAndLog ("Unknown tag type answered to a 0x000b3f80 command ans:");
513 PrintAndLog ("%s",sprint_hex(data,*datalen));
cc34cc7b 514 rawClose();
ff4fdb32 515 return 1;
516 }
517 }
518
519 crc = false;
520 *datalen = 1;
521 data[0] = 0x0a;
522
b29d55f2 523 if (HF14BCmdRaw(true, &crc, true, data, datalen, false)!=0) {
ff4fdb32 524 if (*datalen > 0) {
525 PrintAndLog ("\n14443-3b tag found:");
526 PrintAndLog ("Unknown tag type answered to a 0x0A command ans:");
527 PrintAndLog ("%s",sprint_hex(data,*datalen));
cc34cc7b 528 rawClose();
ff4fdb32 529 return 1;
530 }
531 }
532
533 crc = false;
534 *datalen = 1;
535 data[0] = 0x0c;
536
b29d55f2 537 if (HF14BCmdRaw(true, &crc, true, data, datalen, false)!=0) {
ff4fdb32 538 if (*datalen > 0) {
539 PrintAndLog ("\n14443-3b tag found:");
540 PrintAndLog ("Unknown tag type answered to a 0x0C command ans:");
541 PrintAndLog ("%s",sprint_hex(data,*datalen));
cc34cc7b 542 rawClose();
ff4fdb32 543 return 1;
544 }
545 }
b29d55f2 546 rawClose();
ff4fdb32 547 return 0;
ff4fdb32 548}
549
b29d55f2 550// get and print all info known about any known 14b tag
ff4fdb32 551int HF14BInfo(bool verbose){
552 uint8_t data[100];
553 uint8_t datalen = 5;
554
555 // try std 14b (atqb)
556 if (HF14BStdInfo(data, &datalen)) return 1;
557
558 // try st 14b
559 if (HF14B_ST_Info(data, &datalen)) return 1;
560
561 // try unknown 14b read commands (to be identified later)
562 // could be read of calypso, CEPAS, moneo, or pico pass.
b29d55f2 563 if (HF14B_Other_Reader(data, &datalen)) return 1;
ff4fdb32 564
565 if (verbose) PrintAndLog("no 14443B tag found");
566 return 0;
567}
568
b29d55f2 569// menu command to get and print all info known about any known 14b tag
ff4fdb32 570int CmdHF14Binfo(const char *Cmd){
571 return HF14BInfo(true);
572}
3fe4ff4f 573
b29d55f2 574// get and print general info about all known 14b chips
575int HF14BReader(bool verbose){
576 uint8_t data[100];
577 uint8_t datalen = 5;
578
579 // try std 14b (atqb)
580 if (HF14BStdReader(data, &datalen)) return 1;
581
582 // try st 14b
cc34cc7b 583 if (HF14B_ST_Reader(data, &datalen, true)) return 1;
b29d55f2 584
585 // try unknown 14b read commands (to be identified later)
586 // could be read of calypso, CEPAS, moneo, or pico pass.
587 if (HF14B_Other_Reader(data, &datalen)) return 1;
588
589 if (verbose) PrintAndLog("no 14443B tag found");
590 return 0;
591}
592
593// menu command to get and print general info about all known 14b chips
594int CmdHF14BReader(const char *Cmd){
595 return HF14BReader(true);
596}
597
ff4fdb32 598int CmdSriWrite( const char *Cmd){
3fe4ff4f 599/*
600 * For SRIX4K blocks 00 - 7F
601 * hf 14b raw -c -p 09 $srix4kwblock $srix4kwdata
602 *
603 * For SR512 blocks 00 - 0F
604 * hf 14b raw -c -p 09 $sr512wblock $sr512wdata
605 *
606 * Special block FF = otp_lock_reg block.
607 * Data len 4 bytes-
608 */
609 char cmdp = param_getchar(Cmd, 0);
610 uint8_t blockno = -1;
611 uint8_t data[4] = {0x00};
612 bool isSrix4k = true;
613 char str[20];
614
b5be31f9 615 if (strlen(Cmd) < 1 || cmdp == 'h' || cmdp == 'H') {
3fe4ff4f 616 PrintAndLog("Usage: hf 14b write <1|2> <BLOCK> <DATA>");
b5be31f9 617 PrintAndLog(" [1 = SRIX4K]");
618 PrintAndLog(" [2 = SRI512]");
619 PrintAndLog(" [BLOCK number depends on tag, special block == FF]");
620 PrintAndLog(" sample: hf 14b write 1 7F 11223344");
621 PrintAndLog(" : hf 14b write 1 FF 11223344");
622 PrintAndLog(" : hf 14b write 2 15 11223344");
623 PrintAndLog(" : hf 14b write 2 FF 11223344");
3fe4ff4f 624 return 0;
625 }
626
b5be31f9 627 if ( cmdp == '2' )
3fe4ff4f 628 isSrix4k = false;
629
b5be31f9 630 //blockno = param_get8(Cmd, 1);
631
632 if ( param_gethex(Cmd,1, &blockno, 2) ) {
633 PrintAndLog("Block number must include 2 HEX symbols");
634 return 0;
635 }
3fe4ff4f 636
637 if ( isSrix4k ){
638 if ( blockno > 0x7f && blockno != 0xff ){
639 PrintAndLog("Block number out of range");
640 return 0;
641 }
642 } else {
643 if ( blockno > 0x0f && blockno != 0xff ){
644 PrintAndLog("Block number out of range");
645 return 0;
646 }
647 }
648
649 if (param_gethex(Cmd, 2, data, 8)) {
650 PrintAndLog("Data must include 8 HEX symbols");
651 return 0;
652 }
653
654 if ( blockno == 0xff)
b5be31f9 655 PrintAndLog("[%s] Write special block %02X [ %s ]", (isSrix4k)?"SRIX4K":"SRI512" , blockno, sprint_hex(data,4) );
3fe4ff4f 656 else
b5be31f9 657 PrintAndLog("[%s] Write block %02X [ %s ]", (isSrix4k)?"SRIX4K":"SRI512", blockno, sprint_hex(data,4) );
3fe4ff4f 658
fe5b3a44 659 sprintf(str, "-c 09 %02x %02x%02x%02x%02x", blockno, data[0], data[1], data[2], data[3]);
b5be31f9 660
3fe4ff4f 661 CmdHF14BCmdRaw(str);
662 return 0;
663}
664
7fe9b0b7 665static command_t CommandTable[] =
666{
667 {"help", CmdHelp, 1, "This help"},
b29d55f2 668 {"info", CmdHF14Binfo, 0, "Find and print details about a 14443B tag"},
669 {"list", CmdHF14BList, 0, "[Deprecated] List ISO 14443B history"},
670 {"reader", CmdHF14BReader, 0, "Act as a 14443B reader to identify a tag"},
132a0217 671 {"sim", CmdHF14BSim, 0, "Fake ISO 14443B tag"},
672 {"snoop", CmdHF14BSnoop, 0, "Eavesdrop ISO 14443B"},
7cf3ef20 673 {"sri512read", CmdSri512Read, 0, "Read contents of a SRI512 tag"},
674 {"srix4kread", CmdSrix4kRead, 0, "Read contents of a SRIX4K tag"},
ff4fdb32 675 {"sriwrite", CmdSriWrite, 0, "Write data to a SRI512 | SRIX4K tag"},
7cf3ef20 676 {"raw", CmdHF14BCmdRaw, 0, "Send raw hex data to tag"},
7fe9b0b7 677 {NULL, NULL, 0, NULL}
678};
679
680int CmdHF14B(const char *Cmd)
681{
682 CmdsParse(CommandTable, Cmd);
683 return 0;
684}
685
686int CmdHelp(const char *Cmd)
687{
688 CmdsHelp(CommandTable);
689 return 0;
690}
Proxmark3 GIT tracking
Impressum, Datenschutz