Add new action in nfc-mftool. Its now possible to extract payload (data blocks) from a MFD
Fix minor bug message in nfc-mftool.
This commit is contained in:
Romuald Conty
parent
1a72b81065
commit
30835317c2
1 changed files with 220 additions and 127 deletions
|
|
@ -272,154 +272,247 @@ bool write_card()
|
||||||
return true;
|
return true;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
void mifare_classic_extract_payload(const char* abDump, char* pbPayload)
|
||||||
|
{
|
||||||
|
uint8_t uiSectorIndex;
|
||||||
|
uint8_t uiBlockIndex;
|
||||||
|
size_t szDumpOffset;
|
||||||
|
size_t szPayloadIndex = 0;
|
||||||
|
|
||||||
|
for(uiSectorIndex=1; uiSectorIndex<16; uiSectorIndex++) {
|
||||||
|
for(uiBlockIndex=0; uiBlockIndex<3; uiBlockIndex++) {
|
||||||
|
szDumpOffset = uiSectorIndex*16*4 + uiBlockIndex*16;
|
||||||
|
// for(uint8_t uiByteIndex=0; uiByteIndex<16; uiByteIndex++) printf("%02x ", abDump[szPayloadIndex+uiByteIndex]);
|
||||||
|
memcpy(pbPayload+szPayloadIndex, abDump+szDumpOffset, 16);
|
||||||
|
szPayloadIndex += 16;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
typedef enum {
|
||||||
|
ACTION_READ,
|
||||||
|
ACTION_WRITE,
|
||||||
|
ACTION_EXPLAIN,
|
||||||
|
ACTION_EXTRACT
|
||||||
|
} action_t;
|
||||||
|
|
||||||
|
void print_usage(const char* pcProgramName)
|
||||||
|
{
|
||||||
|
printf("\n");
|
||||||
|
printf("%s r|w a|b <dump.mfd> [<keys.mfd>]\n", pcProgramName);
|
||||||
|
printf("\n");
|
||||||
|
printf("r|w - Perform read from (r) or write to (w) card\n");
|
||||||
|
printf("a|b - Use A or B keys for action\n");
|
||||||
|
printf("<dump.mfd> - MiFare Dump (MFD) used to write (card to MFD) or (MFD to card)\n");
|
||||||
|
printf("<keys.mfd> - MiFare Dump (MFD) that contain the keys (optional)\n");
|
||||||
|
printf("\n");
|
||||||
|
}
|
||||||
|
|
||||||
int main(int argc, const char* argv[])
|
int main(int argc, const char* argv[])
|
||||||
{
|
{
|
||||||
bool b4K;
|
bool b4K;
|
||||||
bool bReadAction;
|
action_t atAction;
|
||||||
byte_t* pbtUID;
|
byte_t* pbtUID;
|
||||||
FILE* pfKeys = NULL;
|
FILE* pfKeys = NULL;
|
||||||
FILE* pfDump = NULL;
|
FILE* pfDump = NULL;
|
||||||
|
|
||||||
if (argc < 4)
|
|
||||||
{
|
|
||||||
printf("\n");
|
|
||||||
printf("%s r|w a|b <dump.mfd> [<keys.mfd>]\n", argv[0]);
|
|
||||||
printf("\n");
|
|
||||||
printf("r|w - Perform read from (r) or write to (w) card\n");
|
|
||||||
printf("a|b - Use A or B keys for action\n");
|
|
||||||
printf("<dump.mfd> - MiFare Dump (MFD) used to write (card to MFD) or (MFD to card)\n");
|
|
||||||
printf("<keys.mfd> - MiFare Dump (MFD) that contain the keys (optional)\n");
|
|
||||||
printf("\n");
|
|
||||||
return 1;
|
|
||||||
}
|
|
||||||
|
|
||||||
// printf("Checking arguments and settings\n");
|
// printf("Checking arguments and settings\n");
|
||||||
|
|
||||||
bReadAction = (tolower(*(argv[1])) == 'r');
|
if(argc < 2)
|
||||||
bUseKeyA = (tolower(*(argv[2])) == 'a');
|
|
||||||
bUseKeyFile = (argc > 4);
|
|
||||||
|
|
||||||
if (bUseKeyFile)
|
|
||||||
{
|
{
|
||||||
pfKeys = fopen(argv[4],"rb");
|
print_usage(argv[0]);
|
||||||
if (pfKeys == NULL)
|
|
||||||
{
|
|
||||||
printf("Could not open keys file: %s\n",argv[3]);
|
|
||||||
return 1;
|
|
||||||
}
|
|
||||||
if (fread(&mtKeys,1,sizeof(mtKeys),pfKeys) != sizeof(mtKeys))
|
|
||||||
{
|
|
||||||
printf("Could not read keys file: %s\n",argv[4]);
|
|
||||||
fclose(pfKeys);
|
|
||||||
return 1;
|
|
||||||
}
|
|
||||||
fclose(pfKeys);
|
|
||||||
}
|
|
||||||
|
|
||||||
if (bReadAction)
|
|
||||||
{
|
|
||||||
memset(&mtDump,0x00,sizeof(mtDump));
|
|
||||||
} else {
|
|
||||||
pfDump = fopen(argv[3],"rb");
|
|
||||||
|
|
||||||
if (pfDump == NULL)
|
|
||||||
{
|
|
||||||
printf("Could not open dump file: %s\n",argv[3]);
|
|
||||||
return 1;
|
|
||||||
}
|
|
||||||
|
|
||||||
if (fread(&mtDump,1,sizeof(mtDump),pfDump) != sizeof(mtDump))
|
|
||||||
{
|
|
||||||
printf("Could not read dump file: %s\n",argv[3]);
|
|
||||||
fclose(pfDump);
|
|
||||||
return 1;
|
|
||||||
}
|
|
||||||
fclose(pfDump);
|
|
||||||
}
|
|
||||||
// printf("Successfully opened required files\n");
|
|
||||||
|
|
||||||
// Try to open the NFC reader
|
|
||||||
pdi = nfc_connect(NULL);
|
|
||||||
if (pdi == INVALID_DEVICE_INFO)
|
|
||||||
{
|
|
||||||
printf("Error connecting NFC reader\n");
|
|
||||||
return 1;
|
return 1;
|
||||||
}
|
}
|
||||||
|
|
||||||
nfc_initiator_init(pdi);
|
const char* command = argv[1];
|
||||||
|
if(strcmp(command, "r") == 0)
|
||||||
// Drop the field for a while
|
|
||||||
nfc_configure(pdi,DCO_ACTIVATE_FIELD,false);
|
|
||||||
|
|
||||||
// Let the reader only try once to find a tag
|
|
||||||
nfc_configure(pdi,DCO_INFINITE_SELECT,false);
|
|
||||||
nfc_configure(pdi,DCO_HANDLE_CRC,true);
|
|
||||||
nfc_configure(pdi,DCO_HANDLE_PARITY,true);
|
|
||||||
|
|
||||||
// Enable field so more power consuming cards can power themselves up
|
|
||||||
nfc_configure(pdi,DCO_ACTIVATE_FIELD,true);
|
|
||||||
|
|
||||||
printf("Connected to NFC reader: %s\n",pdi->acName);
|
|
||||||
|
|
||||||
// Try to find a MIFARE Classic tag
|
|
||||||
if (!nfc_initiator_select_tag(pdi,IM_ISO14443A_106,NULL,0,&ti))
|
|
||||||
{
|
{
|
||||||
printf("Error: no tag was found\n");
|
atAction = ACTION_READ;
|
||||||
nfc_disconnect(pdi);
|
bUseKeyA = (tolower(*(argv[2])) == 'a');
|
||||||
return 1;
|
bUseKeyFile = (argc > 4);
|
||||||
|
} else if(strcmp(command, "w") == 0)
|
||||||
|
{
|
||||||
|
atAction = ACTION_WRITE;
|
||||||
|
bUseKeyA = (tolower(*(argv[2])) == 'a');
|
||||||
|
bUseKeyFile = (argc > 4);
|
||||||
|
} else if(strcmp(command, "e") == 0)
|
||||||
|
{
|
||||||
|
atAction = ACTION_EXPLAIN;
|
||||||
|
} else if(strcmp(command, "x") == 0)
|
||||||
|
{
|
||||||
|
atAction = ACTION_EXTRACT;
|
||||||
}
|
}
|
||||||
|
|
||||||
// Test if we are dealing with a MIFARE compatible tag
|
switch(atAction) {
|
||||||
if ((ti.tia.btSak & 0x08) == 0)
|
case ACTION_READ:
|
||||||
{
|
case ACTION_WRITE:
|
||||||
printf("Error: tag is not a MIFARE Classic card\n");
|
if (argc < 4)
|
||||||
nfc_disconnect(pdi);
|
|
||||||
return 1;
|
|
||||||
}
|
|
||||||
|
|
||||||
if (bUseKeyFile)
|
|
||||||
{
|
|
||||||
// Get the info from the key dump
|
|
||||||
b4K = (mtKeys.amb[0].mbm.abtATQA[1] == 0x02);
|
|
||||||
pbtUID = mtKeys.amb[0].mbm.abtUID;
|
|
||||||
|
|
||||||
// Compare if key dump UID is the same as the current tag UID
|
|
||||||
if (memcmp(ti.tia.abtUid,pbtUID,4) != 0)
|
|
||||||
{
|
|
||||||
printf("Expected MIFARE Classic %cK card with UID: %08x\n",b4K?'4':'1',swap_endian32(pbtUID));
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
// Get the info from the current tag
|
|
||||||
pbtUID = ti.tia.abtUid;
|
|
||||||
b4K = (ti.tia.abtAtqa[1] == 0x02);
|
|
||||||
printf("Found MIFARE Classic %cK card with UID: %08x\n",b4K?'4':'1',swap_endian32(pbtUID));
|
|
||||||
|
|
||||||
uiBlocks = (b4K)?0xff:0x3f;
|
|
||||||
|
|
||||||
if (bReadAction)
|
|
||||||
{
|
|
||||||
if (read_card())
|
|
||||||
{
|
|
||||||
printf("Writing data to file: %s\n",argv[3]);
|
|
||||||
fflush(stdout);
|
|
||||||
pfDump = fopen(argv[3],"wb");
|
|
||||||
if (fwrite(&mtDump,1,sizeof(mtDump),pfDump) != sizeof(mtDump))
|
|
||||||
{
|
{
|
||||||
printf("Could not write to file: %s\n",argv[3]);
|
print_usage(argv[0]);
|
||||||
|
return 1;
|
||||||
|
}
|
||||||
|
|
||||||
|
if (bUseKeyFile)
|
||||||
|
{
|
||||||
|
pfKeys = fopen(argv[4],"rb");
|
||||||
|
if (pfKeys == NULL)
|
||||||
|
{
|
||||||
|
printf("Could not open keys file: %s\n",argv[4]);
|
||||||
|
return 1;
|
||||||
|
}
|
||||||
|
if (fread(&mtKeys,1,sizeof(mtKeys),pfKeys) != sizeof(mtKeys))
|
||||||
|
{
|
||||||
|
printf("Could not read keys file: %s\n",argv[4]);
|
||||||
|
fclose(pfKeys);
|
||||||
|
return 1;
|
||||||
|
}
|
||||||
|
fclose(pfKeys);
|
||||||
|
}
|
||||||
|
|
||||||
|
if(atAction == ACTION_READ) {
|
||||||
|
memset(&mtDump,0x00,sizeof(mtDump));
|
||||||
|
} else {
|
||||||
|
pfDump = fopen(argv[3],"rb");
|
||||||
|
|
||||||
|
if (pfDump == NULL)
|
||||||
|
{
|
||||||
|
printf("Could not open dump file: %s\n",argv[3]);
|
||||||
|
return 1;
|
||||||
|
}
|
||||||
|
|
||||||
|
if (fread(&mtDump,1,sizeof(mtDump),pfDump) != sizeof(mtDump))
|
||||||
|
{
|
||||||
|
printf("Could not read dump file: %s\n",argv[3]);
|
||||||
|
fclose(pfDump);
|
||||||
|
return 1;
|
||||||
|
}
|
||||||
|
fclose(pfDump);
|
||||||
|
}
|
||||||
|
// printf("Successfully opened required files\n");
|
||||||
|
|
||||||
|
// Try to open the NFC reader
|
||||||
|
pdi = nfc_connect(NULL);
|
||||||
|
if (pdi == INVALID_DEVICE_INFO)
|
||||||
|
{
|
||||||
|
printf("Error connecting NFC reader\n");
|
||||||
|
return 1;
|
||||||
|
}
|
||||||
|
|
||||||
|
nfc_initiator_init(pdi);
|
||||||
|
|
||||||
|
// Drop the field for a while
|
||||||
|
nfc_configure(pdi,DCO_ACTIVATE_FIELD,false);
|
||||||
|
|
||||||
|
// Let the reader only try once to find a tag
|
||||||
|
nfc_configure(pdi,DCO_INFINITE_SELECT,false);
|
||||||
|
nfc_configure(pdi,DCO_HANDLE_CRC,true);
|
||||||
|
nfc_configure(pdi,DCO_HANDLE_PARITY,true);
|
||||||
|
|
||||||
|
// Enable field so more power consuming cards can power themselves up
|
||||||
|
nfc_configure(pdi,DCO_ACTIVATE_FIELD,true);
|
||||||
|
|
||||||
|
printf("Connected to NFC reader: %s\n",pdi->acName);
|
||||||
|
|
||||||
|
// Try to find a MIFARE Classic tag
|
||||||
|
if (!nfc_initiator_select_tag(pdi,IM_ISO14443A_106,NULL,0,&ti))
|
||||||
|
{
|
||||||
|
printf("Error: no tag was found\n");
|
||||||
|
nfc_disconnect(pdi);
|
||||||
|
return 1;
|
||||||
|
}
|
||||||
|
|
||||||
|
// Test if we are dealing with a MIFARE compatible tag
|
||||||
|
if ((ti.tia.btSak & 0x08) == 0)
|
||||||
|
{
|
||||||
|
printf("Error: tag is not a MIFARE Classic card\n");
|
||||||
|
nfc_disconnect(pdi);
|
||||||
|
return 1;
|
||||||
|
}
|
||||||
|
|
||||||
|
if (bUseKeyFile)
|
||||||
|
{
|
||||||
|
// Get the info from the key dump
|
||||||
|
b4K = (mtKeys.amb[0].mbm.abtATQA[1] == 0x02);
|
||||||
|
pbtUID = mtKeys.amb[0].mbm.abtUID;
|
||||||
|
|
||||||
|
// Compare if key dump UID is the same as the current tag UID
|
||||||
|
if (memcmp(ti.tia.abtUid,pbtUID,4) != 0)
|
||||||
|
{
|
||||||
|
printf("Expected MIFARE Classic %cK card with UID: %08x\n",b4K?'4':'1',swap_endian32(pbtUID));
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// Get the info from the current tag
|
||||||
|
pbtUID = ti.tia.abtUid;
|
||||||
|
b4K = (ti.tia.abtAtqa[1] == 0x02);
|
||||||
|
printf("Found MIFARE Classic %cK card with UID: %08x\n",b4K?'4':'1',swap_endian32(pbtUID));
|
||||||
|
|
||||||
|
uiBlocks = (b4K)?0xff:0x3f;
|
||||||
|
|
||||||
|
if (atAction == ACTION_READ)
|
||||||
|
{
|
||||||
|
if (read_card())
|
||||||
|
{
|
||||||
|
printf("Writing data to file: %s\n",argv[3]);
|
||||||
|
fflush(stdout);
|
||||||
|
pfDump = fopen(argv[3],"wb");
|
||||||
|
if (fwrite(&mtDump,1,sizeof(mtDump),pfDump) != sizeof(mtDump))
|
||||||
|
{
|
||||||
|
printf("Could not write to file: %s\n",argv[3]);
|
||||||
|
return 1;
|
||||||
|
}
|
||||||
|
fclose(pfDump);
|
||||||
|
printf("Done, all bytes dumped to file!\n");
|
||||||
|
}
|
||||||
|
} else {
|
||||||
|
if (write_card())
|
||||||
|
{
|
||||||
|
printf("Done, all data is written to the card!\n");
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
nfc_disconnect(pdi);
|
||||||
|
break;
|
||||||
|
|
||||||
|
case ACTION_EXTRACT: {
|
||||||
|
const char* pcDump = argv[2];
|
||||||
|
const char* pcPayload = argv[3];
|
||||||
|
|
||||||
|
FILE* pfDump = NULL;
|
||||||
|
FILE* pfPayload = NULL;
|
||||||
|
|
||||||
|
char abDump[4096];
|
||||||
|
char abPayload[4096];
|
||||||
|
|
||||||
|
pfDump = fopen(pcDump,"rb");
|
||||||
|
|
||||||
|
if (pfDump == NULL)
|
||||||
|
{
|
||||||
|
printf("Could not open dump file: %s\n",pcDump);
|
||||||
|
return 1;
|
||||||
|
}
|
||||||
|
|
||||||
|
if (fread(abDump,1,sizeof(abDump),pfDump) != sizeof(abDump))
|
||||||
|
{
|
||||||
|
printf("Could not read dump file: %s\n",pcDump);
|
||||||
|
fclose(pfDump);
|
||||||
return 1;
|
return 1;
|
||||||
}
|
}
|
||||||
fclose(pfDump);
|
fclose(pfDump);
|
||||||
printf("Done, all bytes dumped to file!\n");
|
|
||||||
}
|
|
||||||
} else {
|
|
||||||
if (write_card())
|
|
||||||
{
|
|
||||||
printf("Done, all data is written to the card!\n");
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
nfc_disconnect(pdi);
|
mifare_classic_extract_payload(abDump, abPayload);
|
||||||
|
|
||||||
|
printf("Writing data to file: %s\n",pcPayload);
|
||||||
|
pfPayload = fopen(pcPayload,"wb");
|
||||||
|
if (fwrite(abPayload,1,sizeof(abPayload),pfPayload) != sizeof(abPayload))
|
||||||
|
{
|
||||||
|
printf("Could not write to file: %s\n",pcPayload);
|
||||||
|
return 1;
|
||||||
|
}
|
||||||
|
fclose(pfPayload);
|
||||||
|
printf("Done, all bytes have been extracted!\n");
|
||||||
|
}
|
||||||
|
};
|
||||||
|
|
||||||
return 0;
|
return 0;
|
||||||
}
|
}
|
||||||
|
|
|
||||||
Loading…
Add table
Reference in a new issue