901 Commits
Author SHA1 Message Date
IcemanandGitHub fc3dbe56bd Merge pull request #3208 from R4H33M/iclass-page-support
Add --page flag to hf iclass dump
2026-04-13 08:18:07 +07:00
kormax b8c2e2531f Annotate more FeliCa commands with 'hf felica list' 2026-04-12 12:40:20 +03:00
kormax 3eecb97a88 Add system code annotation for 'hf felica info' and 'hf felica rqsyscode' 2026-04-10 20:36:50 +03:00
Raheem Idowu 22dae554c7 hf iclass dump --page support 2026-04-04 17:15:13 -04:00
Antiklesys 51c44843c9 Removed --credit from hf iclass legrec
Option wasn't working and caused unnecessary complexity in the workflow.
2026-04-04 01:07:47 +08:00
kormax b443fc7723 Add 'hf.field.timeout' to prefs 2026-03-31 12:02:23 +03:00
Antiklesys 128e4006bf SE Conf Card Sim Base
Added `hf secc` to build a base for simulating basic function of iclass SE config cards
2026-03-30 22:58:52 +08:00
kormax 396032c2db Remove unused ISO14A_COMMAND flags 2026-03-26 17:16:44 +02:00
kormax fa08075ded Add ISO14A_CLEARTRACE param to explicitly clear 14a trace 2026-03-24 23:24:22 +02:00
iceman1001 d0d7a047eb use a define for iclass key size, even if it is same a block size. 2026-03-23 11:43:18 +07:00
Christian ZanonandGitHub b9ddb038b7 Merge branch 'master' into hf-14b-tearoff
Signed-off-by: Christian Zanon <105173223+xNovyz@users.noreply.github.com>
2026-03-13 11:39:06 +01:00
xNovyz 286df8f4eb feat(14b): add interactive hf 14b tearoff command
Add an interactive command for performing tear-off attacks on ST25TB/SRx
monotonic counter blocks. This exploits EEPROM tearing to increment
counters that normally can only be decremented, based on the
near-field-chaos project by SecLabz.

The command sweeps tear-off timing from --start downward in --adj
microsecond steps, automatically consolidates partial writes, verifies
stability across multiple reads, and reports progress in real-time with
color-coded output.

Performance optimizations:
- One-time full iso14443b_setup() at start; subsequent field cycles use
  lightweight tearoff_field_on()/tearoff_field_off() that skip FPGA
  bitstream reload and buffer reallocation
- Periodic CMD_WTX keepalives to prevent USB timeouts during long attacks
- Calls FpgaResetBitstream() on exit to ensure clean FPGA state

Usage: hf 14b tearoff -b <block> -d <target> [--start <us>] [--adj <us>]
2026-03-11 21:43:37 +01:00
kormax 6629db3659 Add universal node discovery for FeliCa 2026-03-09 18:58:08 +02:00
IcemanandGitHub a54e88ee94 Merge pull request #3111 from Antiklesys/master
Added --credit option for hf iclass legrec
2026-03-06 08:56:21 +01:00
kormax 10a3fa7e6d Add request specification version to 'hf felica info' 2026-03-05 20:30:30 +02:00
kormax ec25ea77a4 Extract more information with 'hf felica info' 2026-03-05 17:11:30 +02:00
Antiklesys 0d2741d757 Unused variables code cleanup
Code cleanup of unused payload variables for iclass legrec
2026-03-05 21:38:16 +08:00
Antiklesys 5041fbffa7 Added --creidit option for hf iclass legrec
Added --creidit option for hf iclass legrec
2026-03-05 19:32:52 +08:00
kormax 2e4290c5fe Refactor helpers for 'hf felica' commands; add retries 2026-03-04 18:50:21 +02:00
Philippe Teuwen e2b11e937f 2026-03-02 12:50:34 +01:00
Philippe Teuwen b8a5e7b656 hf mf cauth/aesauth/cchk/aeschk: make fast READ0 optional 2026-02-24 16:46:00 +01:00
Philippe Teuwen 118652bd90 CMD_HF_DECAY: factor with structs, remove cast align warning 2026-02-21 23:54:51 +01:00
Philippe Teuwen b62658f5ac make style 2026-02-21 12:43:25 +01:00
michael 3eb594ce29 Cleaned up verbiage in user feedback 2026-02-18 20:44:08 -08:00
michael fe878be492 Added a new command (hw decay [which monitors the decay rate of the hf antenna cap]) and updated hw tune to detect booster boards and if the pm3 easy is on a metal surface 2026-02-18 15:51:08 -08:00