1 /* mifare-tool - a small command-line tool for librfid mifare testing
3 * (C) 2006 by Harald Welte <laforge@gnumonks.org>
5 * This program is free software; you can redistribute it and/or modify
6 * it under the terms of the GNU General Public License version 2
7 * as published by the Free Software Foundation
9 * This program is distributed in the hope that it will be useful,
10 * but WITHOUT ANY WARRANTY; without even the implied warranty of
11 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12 * GNU General Public License for more details.
14 * You should have received a copy of the GNU General Public License
15 * along with this program; if not, write to the Free Software
16 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA
32 #include <librfid/rfid.h>
33 #include <librfid/rfid_scan.h>
34 #include <librfid/rfid_reader.h>
35 #include <librfid/rfid_layer2.h>
36 #include <librfid/rfid_protocol.h>
38 #include <librfid/rfid_protocol_mifare_classic.h>
39 #include <librfid/rfid_protocol_mifare_ul.h>
41 #include <librfid/rfid_access_mifare_classic.h>
43 #include "librfid-tool.h"
45 static char *program_name;
47 static void help(void)
49 printf( " -h --help Print this help message\n"
50 " -r --read Read a mifare sector\n"
51 " -l --loop-read Loop reading a mifare sector\n"
52 " -w --write Write a mifare sector\n"
53 " -k --key Specify mifare access key (in hex tuples)\n"
54 " -b --brute-force n Brute Force read sector n\n");
57 static struct option mifare_opts[] = {
59 { "read", 1, 0, 'r' },
60 { "loop-read", 1, 0, 'l' },
61 { "write", 1 ,0, 'w' },
62 { "help", 0, 0, 'h' },
63 { "brute-force", 1, 0, 'c' },
67 static int mifare_cl_auth(unsigned char *key, int page)
71 rc = mfcl_set_key(ph, key);
73 fprintf(stderr, "key format error\n");
76 rc = mfcl_auth(ph, RFID_CMD_MIFARE_AUTH1A, page);
78 fprintf(stderr, "mifare auth error\n");
81 printf("mifare auth succeeded!\n");
86 static void mifare_l3(void)
88 while (l2_init(RFID_LAYER2_ISO14443A) < 0) ;
90 printf("ISO14443-3A anticollision succeeded\n");
92 while (l3_init(RFID_PROTOCOL_MIFARE_CLASSIC) < 0) ;
94 printf("Mifare card available\n");
97 static void inc_key(char* key, int len)
110 int main(int argc, char **argv)
112 int len, rc, c, option_index = 0;
113 unsigned int page,uid,uid_len;
114 char key[MIFARE_CL_KEY_LEN];
115 char buf[MIFARE_CL_PAGE_SIZE];
118 program_name = argv[0];
120 program_name = basename(argv[0]);
121 #endif/*__MINGW32__*/
123 memcpy(key, MIFARE_CL_KEYA_DEFAULT_INFINEON, MIFARE_CL_KEY_LEN);
125 printf("%s - (C) 2006 by Harald Welte\n"
126 "This program is Free Software and has "
127 "ABSOLUTELY NO WARRANTY\n\n", program_name);
129 printf("initializing librfid\n");
132 if (reader_init() < 0) {
133 fprintf(stderr, "error opening reader\n");
138 c = getopt_long(argc, argv, "k:r:l:w:c:", mifare_opts,
147 printf("key: %s\n", hexdump(key, MIFARE_CL_KEY_LEN));
148 len = MIFARE_CL_PAGE_SIZE;
150 for (i = 0; i <= 0xff; i++) {
151 key[MIFARE_CL_KEY_LEN-1]=i;
152 if (mifare_cl_auth(key, page) >= 0)
153 printf("KEY: %s\n",hexdump(key, MIFARE_CL_KEY_LEN));
158 hexread(key, optarg, strlen(optarg));
159 printf("key: %s\n", hexdump(key, MIFARE_CL_KEY_LEN));
163 printf("read(key='%s',page=%u):",
164 hexdump(key, MIFARE_CL_KEY_LEN), page);
165 len = MIFARE_CL_PAGE_SIZE;
167 if (mifare_cl_auth(key, page) < 0)
172 if(rfid_layer2_getopt(l2h,RFID_OPT_LAYER2_UID,&uid,&uid_len)>=0)
173 printf("UID=%08X (len=%u)\n",uid,uid_len);
175 len=MIFARE_CL_PAGE_SIZE;
176 rc = rfid_protocol_read(ph, page, buf, &len);
179 fprintf(stderr, "error during read\n");
182 printf("len=%u data=%s\n", len, hexdump(buf, len));
184 if (page & 0x3 == 0x3) {
185 struct mfcl_access_sect s;
186 struct mfcl_access_exp_sect es;
188 u_int8_t recreated[4];
189 mfcl_parse_access(&s, buf+6);
190 printf("access b0:%u b1:%u b2:%u b3:%u\n",
191 s.block[0], s.block[1],
192 s.block[2], s.block[3]);
193 mfcl_access_to_exp(&es, &s);
194 for (b = 0; b < 3; b++)
195 printf("%u: %s\n", b, mfcl_access_exp_stringify(&es.block[b]));
196 printf("3: %s\n", mfcl_access_exp_acc_stringify(&es.acc));
198 mfcl_compile_access(recreated, &s);
199 printf("recreated; %s\n", hexdump(recreated,4));
205 printf("read_loop(key='%s',page=%u):\n",
206 hexdump(key, MIFARE_CL_KEY_LEN), page);
209 if (mifare_cl_auth(key, page) < 0)
214 if(rfid_layer2_getopt(l2h,RFID_OPT_LAYER2_UID,&uid,&uid_len)>=0)
215 printf("UID=%08X (len=%u)\n",uid,uid_len);
217 len=MIFARE_CL_PAGE_SIZE;
218 rc = rfid_protocol_read(ph, page, buf, &len);
221 fprintf(stderr, "error during read\n");
224 printf("%s\n", hexdump(buf, len));
229 len = strlen(argv[optind]);
230 len = hexread(buf, argv[optind], len);
231 printf("write(key='%s',page=%u):",
232 hexdump(key, MIFARE_CL_KEY_LEN), page);
233 printf(" '%s'(%u):", hexdump(buf, len), len);
235 if (mifare_cl_auth(key, page) < 0)
237 rc = rfid_protocol_write(ph, page, buf, len);
240 fprintf(stderr, "error during write\n");
252 rfid_protocol_close(ph);
253 rfid_protocol_fini(ph);
255 rfid_layer2_close(l2h);
256 rfid_layer2_fini(l2h);
258 rfid_reader_close(rh);