proxmark3 icon indicating copy to clipboard operation
proxmark3 copied to clipboard

lf hitag refactoring

Open iceman1001 opened this issue 4 years ago • 0 comments

Branch HITAG. The reader functions for Hitag2 signal collecting has been improved. The next steps involve rework the "reader" "writer" logic flow. Since we don't use that kind of flow in the rest of the Proxmark3 Client.

HITAG1

Is there attacks etc for Hitag1?

HITAG 2

  • [ ] lf hitag reader ! make sure it doesn't deadlock when no tag is present (e.g. on lf hitag read 23 4F4E4D494B52)
  • [x] lf hitag writer
  • [ ] lf hitag sniff
  • [ ] lf hitag list ! check timings recorded in reader/writer/sniff, and occasional deadlock
  • [ ] lf hitag sniff/collect many encrypted nonce and challenge response pairs (cf SNIFF-PWM C/S/L)
  • [ ] lf hitag sim
  • [ ] lf hitag eload/esave? (or dump/restore)
  • [x] lf hitag attack1 online phase (cf HITAG2-CRACK)
  • [ ] lf hitag attack2 online phase (cf HITAG2-KEYSTREAM)
  • [ ] lf hitag attack3/4 online phase based on Hitag simulation (optional, else use external tag, but it helps bringing/removing virtual tag to attacked reader)
  • [x] lf hitag attacks offline
  • [x] lf hitag attacks offline documentation - from rfidler to pm3
  • [x] lf hitag attacks offline - convert for Make Install/Uninstall etc (@doegox)

HITAG S

  • [ ] lf hitagS commands...

iceman1001 avatar Jan 16 '20 11:01 iceman1001