Iceman and GitHub
fc3dbe56bd
Merge pull request #3208 from R4H33M/iclass-page-support
...
Add --page flag to hf iclass dump
2026-04-13 08:18:07 +07:00
kormax
b8c2e2531f
Annotate more FeliCa commands with 'hf felica list'
2026-04-12 12:40:20 +03:00
kormax
3eecb97a88
Add system code annotation for 'hf felica info' and 'hf felica rqsyscode'
2026-04-10 20:36:50 +03:00
Raheem Idowu
22dae554c7
hf iclass dump --page support
2026-04-04 17:15:13 -04:00
Antiklesys
51c44843c9
Removed --credit from hf iclass legrec
...
Option wasn't working and caused unnecessary complexity in the workflow.
2026-04-04 01:07:47 +08:00
kormax
b443fc7723
Add 'hf.field.timeout' to prefs
2026-03-31 12:02:23 +03:00
Antiklesys
128e4006bf
SE Conf Card Sim Base
...
Added `hf secc` to build a base for simulating basic function of iclass SE config cards
2026-03-30 22:58:52 +08:00
kormax
396032c2db
Remove unused ISO14A_COMMAND flags
2026-03-26 17:16:44 +02:00
kormax
fa08075ded
Add ISO14A_CLEARTRACE param to explicitly clear 14a trace
2026-03-24 23:24:22 +02:00
iceman1001
d0d7a047eb
use a define for iclass key size, even if it is same a block size.
2026-03-23 11:43:18 +07:00
Christian Zanon and GitHub
b9ddb038b7
Merge branch 'master' into hf-14b-tearoff
...
Signed-off-by: Christian Zanon <105173223+xNovyz@users.noreply.github.com >
2026-03-13 11:39:06 +01:00
xNovyz
286df8f4eb
feat(14b): add interactive hf 14b tearoff command
...
Add an interactive command for performing tear-off attacks on ST25TB/SRx
monotonic counter blocks. This exploits EEPROM tearing to increment
counters that normally can only be decremented, based on the
near-field-chaos project by SecLabz.
The command sweeps tear-off timing from --start downward in --adj
microsecond steps, automatically consolidates partial writes, verifies
stability across multiple reads, and reports progress in real-time with
color-coded output.
Performance optimizations:
- One-time full iso14443b_setup() at start; subsequent field cycles use
lightweight tearoff_field_on()/tearoff_field_off() that skip FPGA
bitstream reload and buffer reallocation
- Periodic CMD_WTX keepalives to prevent USB timeouts during long attacks
- Calls FpgaResetBitstream() on exit to ensure clean FPGA state
Usage: hf 14b tearoff -b <block> -d <target> [--start <us>] [--adj <us>]
2026-03-11 21:43:37 +01:00
kormax
6629db3659
Add universal node discovery for FeliCa
2026-03-09 18:58:08 +02:00
Iceman and GitHub
a54e88ee94
Merge pull request #3111 from Antiklesys/master
...
Added --credit option for hf iclass legrec
2026-03-06 08:56:21 +01:00
kormax
10a3fa7e6d
Add request specification version to 'hf felica info'
2026-03-05 20:30:30 +02:00
kormax
ec25ea77a4
Extract more information with 'hf felica info'
2026-03-05 17:11:30 +02:00
Antiklesys
0d2741d757
Unused variables code cleanup
...
Code cleanup of unused payload variables for iclass legrec
2026-03-05 21:38:16 +08:00
Antiklesys
5041fbffa7
Added --creidit option for hf iclass legrec
...
Added --creidit option for hf iclass legrec
2026-03-05 19:32:52 +08:00
kormax
2e4290c5fe
Refactor helpers for 'hf felica' commands; add retries
2026-03-04 18:50:21 +02:00
Philippe Teuwen
e2b11e937f
✨
2026-03-02 12:50:34 +01:00
Philippe Teuwen
b8a5e7b656
hf mf cauth/aesauth/cchk/aeschk: make fast READ0 optional
2026-02-24 16:46:00 +01:00
Philippe Teuwen
118652bd90
CMD_HF_DECAY: factor with structs, remove cast align warning
2026-02-21 23:54:51 +01:00
Philippe Teuwen
b62658f5ac
make style
2026-02-21 12:43:25 +01:00
michael
3eb594ce29
Cleaned up verbiage in user feedback
2026-02-18 20:44:08 -08:00
michael
fe878be492
Added a new command (hw decay [which monitors the decay rate of the hf antenna cap]) and updated hw tune to detect booster boards and if the pm3 easy is on a metal surface
2026-02-18 15:51:08 -08:00