1 //-----------------------------------------------------------------------------
2 // Copyright (C) 2012 Roel Verdult
4 // This code is licensed to you under the terms of the GNU GPL, version 2 or,
5 // at your option, any later version. See the LICENSE.txt file for the text of
7 //-----------------------------------------------------------------------------
8 // Low frequency Hitag support
9 //-----------------------------------------------------------------------------
17 #include "cmdparser.h"
22 static int CmdHelp(const char *Cmd
);
24 int CmdLFHitagList(const char *Cmd
)
27 GetFromBigBuf(got
,sizeof(got
),0);
31 param_getstr(Cmd
,0,filename
);
33 if (strlen(filename
) > 0) {
34 if ((pf
= fopen(filename
,"w")) == NULL
) {
35 PrintAndLog("Error: Could not open file [%s]",filename
);
40 PrintAndLog("recorded activity:");
41 PrintAndLog(" ETU :rssi: who bytes");
42 PrintAndLog("---------+----+----+-----------");
53 int timestamp
= *((uint32_t *)(got
+i
));
54 if (timestamp
& 0x80000000) {
55 timestamp
&= 0x7fffffff;
62 int parityBits
= *((uint32_t *)(got
+i
+4));
63 // 4 bytes of additional information...
64 // maximum of 32 additional parity bit information
67 // at each quarter bit period we can send power level (16 levels)
68 // or each half bit period in 256 levels.
75 if (i
+ len
>= 1900) {
79 uint8_t *frame
= (got
+i
+9);
81 // Break and stick with current result if buffer was not completely full
82 if (frame
[0] == 0x44 && frame
[1] == 0x44 && frame
[3] == 0x44) { break; }
86 for (j
= 0; j
< len
; j
++) {
91 oddparity
^= (((frame
[j
] & 0xFF) >> k
) & 0x01);
94 //if((parityBits >> (len - j - 1)) & 0x01) {
95 if (isResponse
&& (oddparity
!= ((parityBits
>> (len
- j
- 1)) & 0x01))) {
96 sprintf(line
+(j
*4), "%02x! ", frame
[j
]);
99 sprintf(line
+(j
*4), "%02x ", frame
[j
]);
103 char metricString
[100];
105 sprintf(metricString
, "%3d", metric
);
107 strcpy(metricString
, " ");
110 PrintAndLog(" +%7d: %s: %s %s",
111 (prev
< 0 ? 0 : (timestamp
- prev
)),
113 (isResponse
? "TAG" : " "),
117 if (strlen(filename
) > 0) {
118 fprintf(pf
," +%7d: %s: %s %s %s",
119 (prev
< 0 ? 0 : (timestamp
- prev
)),
121 (isResponse
? "TAG" : " "),
130 if (strlen(filename
) > 0) {
131 PrintAndLog("Recorded activity succesfully written to file: %s", filename
);
138 int CmdLFHitagSnoop(const char *Cmd
) {
139 UsbCommand c
= {CMD_SNOOP_HITAG
};
144 int CmdLFHitagSim(const char *Cmd
) {
145 UsbCommand c
= {CMD_SIMULATE_HITAG
};
146 char filename
[256] = { 0x00 };
148 bool tag_mem_supplied
;
150 param_getstr(Cmd
,0,filename
);
152 if (strlen(filename
) > 0) {
153 if ((pf
= fopen(filename
,"rb+")) == NULL
) {
154 PrintAndLog("Error: Could not open file [%s]",filename
);
157 tag_mem_supplied
= true;
158 fread(c
.d
.asBytes
,48,1,pf
);
161 tag_mem_supplied
= false;
164 // Does the tag comes with memory
165 c
.arg
[0] = (uint32_t)tag_mem_supplied
;
171 int CmdLFHitagReader(const char *Cmd
) {
172 // UsbCommand c = {CMD_READER_HITAG};
174 // param_get32ex(Cmd,1,0,16);
175 UsbCommand c
= {CMD_READER_HITAG
};//, {param_get32ex(Cmd,0,0,10),param_get32ex(Cmd,1,0,16),param_get32ex(Cmd,2,0,16),param_get32ex(Cmd,3,0,16)}};
176 hitag_data
* htd
= (hitag_data
*)c
.d
.asBytes
;
177 hitag_function htf
= param_get32ex(Cmd
,0,0,10);
180 case RHT2F_PASSWORD
: {
181 num_to_bytes(param_get32ex(Cmd
,1,0,16),4,htd
->pwd
.password
);
183 case RHT2F_AUTHENTICATE
: {
184 num_to_bytes(param_get32ex(Cmd
,1,0,16),4,htd
->auth
.NrAr
);
185 num_to_bytes(param_get32ex(Cmd
,2,0,16),4,htd
->auth
.NrAr
+4);
188 num_to_bytes(param_get64ex(Cmd
,1,0,16),6,htd
->crypto
.key
);
189 // num_to_bytes(param_get32ex(Cmd,2,0,16),4,htd->auth.NrAr+4);
191 case RHT2F_TEST_AUTH_ATTEMPTS
: {
192 // No additional parameters needed
195 PrintAndLog("Error: unkown reader function %d",htf
);
196 PrintAndLog("Hitag reader functions",htf
);
197 PrintAndLog(" HitagS (0*)",htf
);
198 PrintAndLog(" Hitag1 (1*)",htf
);
199 PrintAndLog(" Hitag2 (2*)",htf
);
200 PrintAndLog(" 21 <password> (password mode)",htf
);
201 PrintAndLog(" 22 <nr> <ar> (authentication)",htf
);
202 PrintAndLog(" 23 <key> (authentication)",htf
);
203 PrintAndLog(" 25 (test recorded authentications)",htf
);
208 // Copy the hitag2 function into the first argument
215 static command_t CommandTableHitag
[] =
217 {"help", CmdHelp
, 1, "This help"},
218 {"list", CmdLFHitagList
, 1, "List Hitag trace history"},
219 {"reader", CmdLFHitagReader
, 1, "Act like a Hitag Reader"},
220 {"sim", CmdLFHitagSim
, 1, "Simulate Hitag transponder"},
221 {"snoop", CmdLFHitagSnoop
, 1, "Eavesdrop Hitag communication"},
222 {NULL
, NULL
, 0, NULL
}
225 int CmdLFHitag(const char *Cmd
)
227 CmdsParse(CommandTableHitag
, Cmd
);
231 int CmdHelp(const char *Cmd
)
233 CmdsHelp(CommandTableHitag
);