2009-10-12 16:52:26 +02:00
|
|
|
/**
|
|
|
|
* Public platform independent Near Field Communication (NFC) library
|
|
|
|
*
|
|
|
|
* Copyright (C) 2009, Roel Verdult
|
|
|
|
*
|
|
|
|
* This program is free software: you can redistribute it and/or modify it
|
|
|
|
* under the terms of the GNU Lesser General Public License as published by the
|
|
|
|
* Free Software Foundation, either version 3 of the License, or (at your
|
|
|
|
* option) any later version.
|
|
|
|
*
|
|
|
|
* This program is distributed in the hope that it will be useful, but WITHOUT
|
|
|
|
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
|
|
|
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
|
|
|
|
* more details.
|
|
|
|
*
|
|
|
|
* You should have received a copy of the GNU Lesser General Public License
|
|
|
|
* along with this program. If not, see <http://www.gnu.org/licenses/>
|
|
|
|
*
|
|
|
|
*
|
|
|
|
* @file nfc-emulate.c
|
|
|
|
* @brief
|
|
|
|
*/
|
2009-05-01 17:47:44 +02:00
|
|
|
|
|
|
|
#include <stdio.h>
|
|
|
|
#include <stdlib.h>
|
2009-05-27 14:18:21 +02:00
|
|
|
#include <stddef.h>
|
2009-05-27 12:13:19 +02:00
|
|
|
#include <stdint.h>
|
2009-05-01 17:47:44 +02:00
|
|
|
#include <string.h>
|
2009-05-27 12:13:19 +02:00
|
|
|
|
2009-11-04 11:14:17 +01:00
|
|
|
#include <nfc.h>
|
2009-11-02 12:34:58 +01:00
|
|
|
|
2009-11-09 12:23:33 +01:00
|
|
|
#include "nfc-messages.h"
|
2009-11-02 12:34:58 +01:00
|
|
|
#include "bitutils.h"
|
2009-05-01 17:47:44 +02:00
|
|
|
|
2009-11-10 10:47:59 +01:00
|
|
|
#define MAX_FRAME_LEN 264
|
|
|
|
|
2009-07-16 14:09:06 +02:00
|
|
|
static byte_t abtRecv[MAX_FRAME_LEN];
|
2009-10-02 11:52:02 +02:00
|
|
|
static size_t szRecvBits;
|
2009-11-09 12:23:33 +01:00
|
|
|
static nfc_device_t* pnd;
|
2009-05-01 17:47:44 +02:00
|
|
|
|
|
|
|
// ISO14443A Anti-Collision response
|
2009-07-16 14:09:06 +02:00
|
|
|
byte_t abtAtqa [2] = { 0x04,0x00 };
|
|
|
|
byte_t abtUidBcc [5] = { 0xDE,0xAD,0xBE,0xAF,0x62 };
|
|
|
|
byte_t abtSak [9] = { 0x08,0xb6,0xdd };
|
2009-05-01 17:47:44 +02:00
|
|
|
|
2009-10-05 17:20:42 +02:00
|
|
|
void print_usage(char* argv[])
|
2009-09-07 12:15:34 +02:00
|
|
|
{
|
2009-10-05 17:01:08 +02:00
|
|
|
printf("Usage: %s [OPTIONS] [UID]\n", argv[0]);
|
2009-09-07 12:15:34 +02:00
|
|
|
printf("Options:\n");
|
|
|
|
printf("\t-h\tHelp. Print this message.\n");
|
|
|
|
printf("\t-q\tQuiet mode. Suppress output of READER and EMULATOR data (improves timing).\n");
|
|
|
|
printf("\n");
|
|
|
|
printf("\t[UID]\tUID to emulate, specified as 8 HEX digits (default is DEADBEAF).\n");
|
|
|
|
}
|
|
|
|
|
2009-08-23 11:50:46 +02:00
|
|
|
int main(int argc, char *argv[])
|
2009-09-07 12:15:34 +02:00
|
|
|
{
|
2009-07-16 14:09:06 +02:00
|
|
|
byte_t* pbtTx = NULL;
|
2009-10-02 11:52:02 +02:00
|
|
|
size_t szTxBits;
|
2009-08-26 12:57:38 +02:00
|
|
|
bool quiet_output = false;
|
2009-08-23 11:50:46 +02:00
|
|
|
|
2009-09-07 12:15:34 +02:00
|
|
|
int arg, i;
|
|
|
|
|
2009-08-23 11:50:46 +02:00
|
|
|
// Get commandline options
|
2009-09-07 12:15:34 +02:00
|
|
|
for (arg=1;arg<argc;arg++) {
|
|
|
|
if (0 == strcmp(argv[arg], "-h")) {
|
2009-10-05 17:20:42 +02:00
|
|
|
print_usage(argv);
|
2009-09-07 12:15:34 +02:00
|
|
|
return 0;
|
|
|
|
} else if (0 == strcmp(argv[arg], "-q")) {
|
2009-12-01 12:39:35 +01:00
|
|
|
INFO("%s", "Quiet mode.");
|
2009-08-26 12:57:38 +02:00
|
|
|
quiet_output = true;
|
2009-09-07 12:15:34 +02:00
|
|
|
} else if((arg == argc-1) && (strlen(argv[arg]) == 8)) { // See if UID was specified as HEX string
|
|
|
|
byte_t abtTmp[3] = { 0x00,0x00,0x00 };
|
|
|
|
printf("[+] Using UID: %s\n",argv[arg]);
|
|
|
|
abtUidBcc[4]= 0x00;
|
|
|
|
for(i= 0; i < 4; ++i)
|
|
|
|
{
|
|
|
|
memcpy(abtTmp,argv[arg]+i*2,2);
|
2009-10-05 11:12:48 +02:00
|
|
|
abtUidBcc[i]= (byte_t) strtol((char*)abtTmp,NULL,16);
|
2009-09-07 12:15:34 +02:00
|
|
|
abtUidBcc[4] ^= abtUidBcc[i];
|
|
|
|
}
|
|
|
|
} else {
|
|
|
|
ERR("%s is not supported option.", argv[arg]);
|
2009-10-05 17:20:42 +02:00
|
|
|
print_usage(argv);
|
2009-08-23 11:50:46 +02:00
|
|
|
return -1;
|
|
|
|
}
|
2009-08-21 15:34:53 +02:00
|
|
|
}
|
|
|
|
|
2009-05-01 17:47:44 +02:00
|
|
|
// Try to open the NFC reader
|
2009-11-09 12:23:33 +01:00
|
|
|
pnd = nfc_connect(NULL);
|
2009-09-07 12:15:34 +02:00
|
|
|
|
2009-11-10 10:47:59 +01:00
|
|
|
if (pnd == NULL)
|
2009-05-01 17:47:44 +02:00
|
|
|
{
|
2009-08-21 15:34:53 +02:00
|
|
|
printf("Error connecting NFC reader\n");
|
2009-05-01 17:47:44 +02:00
|
|
|
return 1;
|
|
|
|
}
|
|
|
|
|
|
|
|
printf("\n");
|
2009-11-09 12:23:33 +01:00
|
|
|
printf("[+] Connected to NFC reader: %s\n",pnd->acName);
|
2009-05-01 17:47:44 +02:00
|
|
|
printf("[+] Try to break out the auto-emulation, this requires a second reader!\n");
|
|
|
|
printf("[+] To do this, please send any command after the anti-collision\n");
|
2009-08-26 12:57:38 +02:00
|
|
|
printf("[+] For example, send a RATS command or use the \"nfc-anticol\" tool\n");
|
2009-11-09 12:23:33 +01:00
|
|
|
if (!nfc_target_init(pnd,abtRecv,&szRecvBits))
|
2009-05-01 17:47:44 +02:00
|
|
|
{
|
|
|
|
printf("Error: Could not come out of auto-emulation, no command was received\n");
|
|
|
|
return 1;
|
|
|
|
}
|
|
|
|
printf("[+] Received initiator command: ");
|
2009-10-02 11:52:02 +02:00
|
|
|
print_hex_bits(abtRecv,szRecvBits);
|
2009-05-01 17:47:44 +02:00
|
|
|
printf("[+] Configuring communication\n");
|
2009-11-18 12:11:06 +01:00
|
|
|
nfc_configure(pnd,NDO_HANDLE_CRC,false);
|
|
|
|
nfc_configure(pnd,NDO_HANDLE_PARITY,true);
|
2009-08-21 15:34:53 +02:00
|
|
|
printf("[+] Done, the emulated tag is initialized with UID: %02X%02X%02X%02X\n\n",abtUidBcc[0],abtUidBcc[1],abtUidBcc[2],abtUidBcc[3]);
|
2009-05-01 17:47:44 +02:00
|
|
|
|
|
|
|
while(true)
|
|
|
|
{
|
|
|
|
// Test if we received a frame
|
2009-11-09 12:23:33 +01:00
|
|
|
if (nfc_target_receive_bits(pnd,abtRecv,&szRecvBits,NULL))
|
2009-05-01 17:47:44 +02:00
|
|
|
{
|
|
|
|
// Prepare the command to send back for the anti-collision request
|
2009-10-02 11:52:02 +02:00
|
|
|
switch(szRecvBits)
|
2009-05-01 17:47:44 +02:00
|
|
|
{
|
|
|
|
case 7: // Request or Wakeup
|
|
|
|
pbtTx = abtAtqa;
|
2009-10-02 11:52:02 +02:00
|
|
|
szTxBits = 16;
|
2009-05-01 17:47:44 +02:00
|
|
|
// New anti-collsion session started
|
2009-08-26 12:57:38 +02:00
|
|
|
if (!quiet_output) printf("\n");
|
2009-05-01 17:47:44 +02:00
|
|
|
break;
|
|
|
|
|
|
|
|
case 16: // Select All
|
|
|
|
pbtTx = abtUidBcc;
|
2009-10-02 11:52:02 +02:00
|
|
|
szTxBits = 40;
|
2009-05-01 17:47:44 +02:00
|
|
|
break;
|
|
|
|
|
|
|
|
case 72: // Select Tag
|
|
|
|
pbtTx = abtSak;
|
2009-10-02 11:52:02 +02:00
|
|
|
szTxBits = 24;
|
2009-05-01 17:47:44 +02:00
|
|
|
break;
|
|
|
|
|
|
|
|
default: // unknown length?
|
2009-10-02 11:52:02 +02:00
|
|
|
szTxBits = 0;
|
2009-05-01 17:47:44 +02:00
|
|
|
break;
|
|
|
|
}
|
|
|
|
|
2009-08-26 12:57:38 +02:00
|
|
|
if(!quiet_output)
|
2009-08-23 11:50:46 +02:00
|
|
|
{
|
|
|
|
printf("R: ");
|
2009-10-02 11:52:02 +02:00
|
|
|
print_hex_bits(abtRecv,szRecvBits);
|
2009-08-23 11:50:46 +02:00
|
|
|
}
|
2009-05-01 17:47:44 +02:00
|
|
|
|
|
|
|
// Test if we know how to respond
|
2009-10-02 11:52:02 +02:00
|
|
|
if(szTxBits)
|
2009-05-01 17:47:44 +02:00
|
|
|
{
|
|
|
|
// Send and print the command to the screen
|
2009-11-09 12:23:33 +01:00
|
|
|
nfc_target_send_bits(pnd,pbtTx,szTxBits,NULL);
|
2009-08-26 12:57:38 +02:00
|
|
|
if(!quiet_output)
|
2009-08-23 11:50:46 +02:00
|
|
|
{
|
|
|
|
printf("T: ");
|
2009-10-02 11:52:02 +02:00
|
|
|
print_hex_bits(pbtTx,szTxBits);
|
2009-08-23 11:50:46 +02:00
|
|
|
}
|
2009-05-01 17:47:44 +02:00
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2009-11-09 12:23:33 +01:00
|
|
|
nfc_disconnect(pnd);
|
2009-05-01 17:47:44 +02:00
|
|
|
}
|
|
|
|
|