proxmark3
proxmark3 copied to clipboard
UID sim bruteforce
Just writing down an idea while seeing discussions on IRC: ChameleonMini has LEFT_INCREMENT/LEFT_DECREMENT to scan related UID (this makes sense only for 7b UID). We could make it somehow automatic. Or even standalone: read a tag (to get the starting UID), then try uid+1, uid-1, uid+2, uid-2,... This worked on my building with chameleonmini ;) that's why I coded that LEFT_INCREMENT in chameleonmini
You see this as a standalone mode?
maybe, not sure yet
There is a lua script that does kind of this now.
script run hf_bruteforce -h
It uses 14a sim u1.