]>
cvs.zerfleddert.de Git - proxmark3-svn/blob - client/cmdlfhitag.c
95d85c6e1c65f47897da3bc80a274d7073d7317e
1 //-----------------------------------------------------------------------------
2 // Copyright (C) 2012 Roel Verdult
4 // This code is licensed to you under the terms of the GNU GPL, version 2 or,
5 // at your option, any later version. See the LICENSE.txt file for the text of
7 //-----------------------------------------------------------------------------
8 // Low frequency Hitag support
9 //-----------------------------------------------------------------------------
15 #include "proxmark3.h"
17 #include "cmdparser.h"
24 static int CmdHelp(const char *Cmd
);
26 size_t nbytes(size_t nbits
) {
27 return (nbits
/8)+((nbits
%8)>0);
30 int CmdLFHitagList(const char *Cmd
)
32 uint8_t *got
= malloc(USB_CMD_DATA_SIZE
);
34 // Query for the actual size of the trace
36 GetFromBigBuf(got
, USB_CMD_DATA_SIZE
, 0);
37 WaitForResponse(CMD_ACK
, &response
);
38 uint16_t traceLen
= response
.arg
[2];
39 if (traceLen
> USB_CMD_DATA_SIZE
) {
40 uint8_t *p
= realloc(got
, traceLen
);
42 PrintAndLog("Cannot allocate memory for trace");
47 GetFromBigBuf(got
, traceLen
, 0);
48 WaitForResponse(CMD_ACK
,NULL
);
51 PrintAndLog("recorded activity (TraceLen = %d bytes):");
52 PrintAndLog(" ETU :nbits: who bytes");
53 PrintAndLog("---------+-----+----+-----------");
57 int len
= strlen(Cmd
);
59 char filename
[FILE_PATH_SIZE
] = { 0x00 };
62 if (len
> FILE_PATH_SIZE
) len
= FILE_PATH_SIZE
;
63 memcpy(filename
, Cmd
, len
);
65 if (strlen(filename
) > 0) {
66 if ((pf
= fopen(filename
,"wb")) == NULL
) {
67 PrintAndLog("Error: Could not open file [%s]",filename
);
74 if(i
>= traceLen
) { break; }
77 int timestamp
= *((uint32_t *)(got
+i
));
78 if (timestamp
& 0x80000000) {
79 timestamp
&= 0x7fffffff;
85 int parityBits
= *((uint32_t *)(got
+i
+4));
86 // 4 bytes of additional information...
87 // maximum of 32 additional parity bit information
90 // at each quarter bit period we can send power level (16 levels)
91 // or each half bit period in 256 levels.
94 int len
= nbytes(got
[i
+8]);
99 if (i
+ len
> traceLen
) { break;}
101 uint8_t *frame
= (got
+i
+9);
103 // Break and stick with current result if buffer was not completely full
104 if (frame
[0] == 0x44 && frame
[1] == 0x44 && frame
[3] == 0x44) { break; }
106 char line
[1000] = "";
108 for (j
= 0; j
< len
; j
++) {
109 int oddparity
= 0x01;
113 oddparity
^= (((frame
[j
] & 0xFF) >> k
) & 0x01);
116 //if((parityBits >> (len - j - 1)) & 0x01) {
117 if (isResponse
&& (oddparity
!= ((parityBits
>> (len
- j
- 1)) & 0x01))) {
118 sprintf(line
+(j
*4), "%02x! ", frame
[j
]);
121 sprintf(line
+(j
*4), "%02x ", frame
[j
]);
125 PrintAndLog(" +%7d: %3d: %s %s",
126 (prev
< 0 ? 0 : (timestamp
- prev
)),
128 (isResponse
? "TAG" : " "),
132 fprintf(pf
," +%7d: %3d: %s %s\n",
133 (prev
< 0 ? 0 : (timestamp
- prev
)),
135 (isResponse
? "TAG" : " "),
145 PrintAndLog("Recorded activity succesfully written to file: %s", filename
);
152 int CmdLFHitagSnoop(const char *Cmd
) {
153 UsbCommand c
= {CMD_SNOOP_HITAG
};
154 clearCommandBuffer();
159 int CmdLFHitagSim(const char *Cmd
) {
161 UsbCommand c
= {CMD_SIMULATE_HITAG
};
162 char filename
[FILE_PATH_SIZE
] = { 0x00 };
164 bool tag_mem_supplied
;
166 int len
= strlen(Cmd
);
167 if (len
> FILE_PATH_SIZE
) len
= FILE_PATH_SIZE
;
168 memcpy(filename
, Cmd
, len
);
170 if (strlen(filename
) > 0) {
171 if ((pf
= fopen(filename
,"rb+")) == NULL
) {
172 PrintAndLog("Error: Could not open file [%s]",filename
);
175 tag_mem_supplied
= true;
176 size_t bytes_read
= fread(c
.d
.asBytes
, 48, 1, pf
);
177 if ( bytes_read
== 0) {
178 PrintAndLog("Error: File reading error");
184 tag_mem_supplied
= false;
187 // Does the tag comes with memory
188 c
.arg
[0] = (uint32_t)tag_mem_supplied
;
190 clearCommandBuffer();
195 int CmdLFHitagReader(const char *Cmd
) {
198 UsbCommand c
= {CMD_READER_HITAG
};//, {param_get32ex(Cmd,0,0,10),param_get32ex(Cmd,1,0,16),param_get32ex(Cmd,2,0,16),param_get32ex(Cmd,3,0,16)}};
199 hitag_data
* htd
= (hitag_data
*)c
.d
.asBytes
;
200 hitag_function htf
= param_get32ex(Cmd
,0,0,10);
203 case RHT2F_PASSWORD
: {
204 num_to_bytes(param_get32ex(Cmd
,1,0,16),4,htd
->pwd
.password
);
206 case RHT2F_AUTHENTICATE
: {
207 num_to_bytes(param_get32ex(Cmd
,1,0,16),4,htd
->auth
.NrAr
);
208 num_to_bytes(param_get32ex(Cmd
,2,0,16),4,htd
->auth
.NrAr
+4);
211 num_to_bytes(param_get64ex(Cmd
,1,0,16),6,htd
->crypto
.key
);
213 case RHT2F_TEST_AUTH_ATTEMPTS
: {
214 // No additional parameters needed
217 PrintAndLog("Error: unkown reader function %d",htf
);
218 PrintAndLog("Hitag reader functions");
219 PrintAndLog(" HitagS (0*)");
220 PrintAndLog(" Hitag1 (1*)");
221 PrintAndLog(" Hitag2 (2*)");
222 PrintAndLog(" 21 <password> (password mode)");
223 PrintAndLog(" 22 <nr> <ar> (authentication)");
224 PrintAndLog(" 23 <key> (authentication) key is in format: ISK high + ISK low");
225 PrintAndLog(" 25 (test recorded authentications)");
230 // Copy the hitag2 function into the first argument
233 clearCommandBuffer();
234 // Send the command to the proxmark
238 WaitForResponse(CMD_ACK
,&resp
);
240 // Check the return status, stored in the first argument
241 if (resp
.arg
[0] == false) return 1;
243 uint32_t id
= bytes_to_num(resp
.d
.asBytes
,4);
244 char filename
[FILE_PATH_SIZE
];
247 sprintf(filename
,"%08x_%04x.ht2",id
,(rand() & 0xffff));
248 if ((pf
= fopen(filename
,"wb")) == NULL
) {
249 PrintAndLog("Error: Could not open file [%s]",filename
);
253 // Write the 48 tag memory bytes to file and finalize
254 fwrite(resp
.d
.asBytes
,1,48,pf
);
257 PrintAndLog("Succesfully saved tag memory to [%s]",filename
);
261 static command_t CommandTable
[] = {
262 {"help", CmdHelp
, 1, "This help"},
263 {"list", CmdLFHitagList
, 1, "<outfile> List Hitag trace history"},
264 {"reader", CmdLFHitagReader
, 1, "Act like a Hitag Reader"},
265 {"sim", CmdLFHitagSim
, 1, "<infile> Simulate Hitag transponder"},
266 {"snoop", CmdLFHitagSnoop
, 1, "Eavesdrop Hitag communication"},
267 {NULL
, NULL
, 0, NULL
}
270 int CmdLFHitag(const char *Cmd
) {
271 clearCommandBuffer();
272 CmdsParse(CommandTable
, Cmd
);
276 int CmdHelp(const char *Cmd
) {
277 CmdsHelp(CommandTable
);