Commit Graph

1535 Commits

Author SHA1 Message Date
iceman1001
360caababf FIX: decrease 2^39 -> 2^38. its a big searchspace anyway.
FIX: changed output and rearranged collecting nonces logic.

Still problems with "hard" keys,  the device stops responding after a "bruteforce" / "generate_candidates" call.. Very strange. shouldnt'
2016-11-07 22:41:18 +01:00
iceman1001
87a513aa1d FIX: "hf mf hardnested" when "key found" exting the do-while loop doesn't need to wait for device to respond. 2016-11-07 11:54:32 +01:00
iceman1001
8e4a0b3585 FIX: "hf mf hardnested" merging of @matrix commit bd8249afec 2016-11-07 11:11:14 +01:00
iceman1001
7fd676db11 FIX: @matrix 869a03c2c6
it still counts down the good bytes,
and I fixed the elapsed time.
2016-11-05 14:54:25 +01:00
iceman1001
713f5d019c CHG: still issues left. 2016-10-29 23:58:59 +02:00
iceman1001
5e14319d2c FIX: several calls to nonce2key/nonce2key_ex has problems with not clearing up memory pointers laying around.
Still exists problem which needs to be dealt with.
2016-10-29 22:12:38 +02:00
iceman1001
60c33f7aa8 CHG: minor textual change to fit the minimum two calls nature for the zero parity attack 2016-10-29 21:45:36 +02:00
iceman1001
b403c30091 FIX: the time_t calls under mingw needs a #define _USE_32BIT_TIME_T 1 to be correct. It seems to work in "hf mf mifare" but not in "hf mf hardnested" 2016-10-29 21:42:46 +02:00
iceman1001
19693bdc06 FIX: 'hf mf mifare' - special zero parity attack vector now works. Thanks to the dude who figured this vector out: @douniwan5788 (sorry for comments, I was clearly wrong.) @piwi - for proving me wrong.
this version uses int64_t  (signed)  to signify end-of-lists (-1). It also needs its own compare function for the qsort.  I didn't merge this into existing code which uses uint64_t. (too lazy)
2016-10-29 21:41:02 +02:00
Gabriele Gristina
e7f43e92e9 Merge remote-tracking branch 'upstream/master' 2016-10-29 15:19:55 +02:00
iceman1001
c3c12b5571 CHG: clean up 2016-10-28 16:37:26 +02:00
iceman1001
ba39db376c CHG: just some parameter / variable name changes. Nuttin' special. 2016-10-28 16:37:01 +02:00
Michael Farrell
32beef538e hf {14a,mf} sim: v is for verbose 2016-10-27 23:37:00 +11:00
Michael Farrell
dfdbfa0702 hf mf sim: Be less verbose by default, add option "m" to turn maths back on (Issue #45) 2016-10-27 23:37:00 +11:00
Gabriele Gristina
236e8f7cc6 fixup code 2016-10-26 01:14:56 +02:00
iceman1001
9f02f471db FIX: too small string? 2016-10-23 00:58:40 +02:00
iceman1001
be26ef45b4 FIX: valgrind complains about something here... 2016-10-23 00:50:23 +02:00
iceman1001
520d06e856 CHG: init the char array. 2016-10-23 00:38:09 +02:00
Michael Farrell
b6e05350b2 hf mf sim: Multiple fixes (iceman1001/proxmark3 #45)
- Fix `hf mf sim` to use nonce_t structures, so key recovery works
- Increases verbosity on the key recovery functionality
- Fix use-after-free for k_sector
- Add help info on `e` option to `hf mf sim`
2016-10-22 21:53:53 +11:00
Michael Farrell
53f7c75a38 hf 14a: Fix typos in manufacturer list 2016-10-22 14:24:17 +11:00
iceman1001
2dcf60f3df CHG: "hf mf hardnested" - less printing
CHG: some filehandles = NULL.
2016-10-21 16:06:53 +02:00
Gabriele Gristina
bbcd41a6e5 Speedup Mifare Plus Attack v2.2 (cleanup code) 2016-10-21 01:06:57 +02:00
Gabriele Gristina
0325c12f35 Speedup Mifare Plus Attack v2.1 (stable) 2016-10-21 00:43:43 +02:00
Gabriele Gristina
64c87a8c5f Merge remote-tracking branch 'upstream/master' 2016-10-20 20:00:06 +02:00
iceman1001
36d87eeff0 FIX: client crash for global id, and removing my previous fix. 2016-10-20 17:31:23 +02:00
iceman1001
ed28bbe5ae CHG: some debug statements instead, 'H' for helptext. 2016-10-20 01:51:27 +02:00
iceman1001
3c6354e99a FIX: strange bug in "lf em em410xwatch" , which the client crasches when it reads a valid em tag. 2016-10-20 01:50:30 +02:00
iceman1001
d115f9a454 CHG: making printed statement a debug statement. 2016-10-20 01:16:32 +02:00
iceman1001
015e3b8170 syntax suger. never mind this 2016-10-20 00:41:34 +02:00
iceman1001
bd46dec63b CHG: found even more keys 2016-10-19 21:27:34 +02:00
iceman1001
100fe0a5ee textual suger 2016-10-19 21:26:56 +02:00
Gabriele Gristina
383a1fb368 Speedup Mifare Plus Attack v2 2016-10-19 00:13:53 +02:00
iceman1001
88f503735c FIX: @aczid's fix 957702be9c
from original @matrix 057d2e9147
2016-10-18 18:45:29 +02:00
Gabriele Gristina
057d2e9147 Speedup Mifare Plus Attack v1 2016-10-18 01:21:56 +02:00
iceman1001
62254ea5a7 FIX: Since some changes in "hf mf chk" usbcommand package, this script has not been working. It now calls and gets the results back from the device.
CHG: changed the output listing to look like the other key-tables.
2016-10-17 17:20:33 +02:00
iceman1001
4ce2037b2a ADD: found some more keys on the web 2016-10-17 13:16:27 +02:00
iceman1001
da1f16d6ef CHG: increased debug output for Em410x 2016-10-16 21:50:41 +02:00
iceman1001
2a1a6aa382 FIX: "hf legic write" - removed a warning message and made the overwrite question working. 2016-10-14 16:39:38 +02:00
iceman1001
1f247f6ac6 ADD: "hf legic wipe" - it autodetects tagtype and fills all bytes from offset 7 to end with zeros.
Fills a legic tag memory with zeros. From byte7 and to the end.
 Usage:  hf legic wipe [h]
Options:
      h             : this help

Samples:
      hf legic wipe
2016-10-14 15:23:20 +02:00
iceman1001
25cb718daf FIX: this should remove a warning. 2016-10-10 21:55:18 +02:00
iceman1001
4697964f6a CHG: "script run emlu2dump" now can read old legic hex-ascii dumps. (with spaces) and convert to a binary file
CHG: "script run emlu2html" now can read old legic hex-ascii dumps. (with spaces) and convert to a generic html file

These changes makes it easier to for old legic dumps to be used with the new "legic dump/restore/eload/esave" commands
2016-10-10 10:59:16 +02:00
iceman1001
f9eeab99a4 chg: textual changes. 2016-10-09 16:04:31 +02:00
iceman1001
564c9ae2b6 FIX: increased time-out to match 2.7sec it takes to write 256bytes. 2016-10-09 15:49:59 +02:00
iceman1001
539fd59ebe CHG: "hf legic write" - now writes on the limits better.
CHG: "hf legic restore" - now restors :)
CHG: "hf legic rdmem" - now has a nice offset row above the read data.  try:  'hf legic rdmem 0 100'
2016-10-09 15:41:31 +02:00
iceman1001
367996567b CHG: "hf legic restore" - added a filesize and cardsize check 2016-10-08 19:25:23 +02:00
iceman1001
cd79d97223 CHG: syntax suger 2016-10-08 19:14:35 +02:00
iceman1001
f9b5377fd0 CHG: reordered the "hf search" internal checks. The iclass check takes 4.5sec to time-out...Incredible slow to identify. 2016-10-08 19:14:09 +02:00
iceman1001
5b9fb6f454 REM: "hf legic load" has been removed. It doesnt have a purpose anymore.
REM: "hf legic save"  has been removed. It doesnt have a purpose anymore.

CHG: "hf legic restore" started with the logic for the restore. Some compares and write to tag left.
2016-10-08 19:10:46 +02:00
iceman1001
59fc313d99 CHG: help text 2016-10-07 20:49:26 +02:00
iceman1001
c2ab5e8c4e FIX: "hf list legic" annotation now correct prints byte and value for "legic write" command 2016-10-07 20:23:57 +02:00