High Frequency

Proxmark3 X supports all 13.56MHz HF tags in all types which include ISO14443A, ISO14443B, ISO18092, ISO15693, Cipurse transport Cards, ICLASS, MIFARE CLASSIC, MIFARE Plus, MIFARE Ultralight, MIFARE Desfire, SEOS, ST25TA, TOPAZ.
Try command  hf to list all protocals.
1
[usb] pm3 --> hf
2
--------         ----------------------- High Frequency -----------------------
3
14a              { ISO14443A RFIDs...                  }
4
14b              { ISO14443B RFIDs...                  }
5
15               { ISO15693 RFIDs...                   }
6
cipurse          { Cipurse transport Cards...          }
7
epa              { German Identification Card...       }
8
emrtd            { Machine Readable Travel Document... }
9
felica           { ISO18092 / FeliCa RFIDs...          }
10
fido             { FIDO and FIDO2 authenticators...    }
11
jooki            { Jooki RFIDs...                      }
12
iclass           { ICLASS RFIDs...                     }
13
legic            { LEGIC RFIDs...                      }
14
lto              { LTO Cartridge Memory RFIDs...       }
15
mf               { MIFARE RFIDs...                     }
16
mfp              { MIFARE Plus RFIDs...                }
17
mfu              { MIFARE Ultralight RFIDs...          }
18
mfdes            { MIFARE Desfire RFIDs...             }
19
seos             { SEOS RFIDs...                       }
20
st25ta           { ST25TA RFIDs...                     }
21
thinfilm         { Thinfilm RFIDs...                   }
22
topaz            { TOPAZ (NFC Type 1) RFIDs...         }
23
waveshare        { Waveshare NFC ePaper...             }
24
-----------      --------------------- General ---------------------
25
help             This help
26
list             List protocol data in trace buffer
27
plot             Plot signal
28
tune             Continuously measure HF antenna tuning
29
search           Search for known HF tags
30
sniff            Generic HF Sniff
Copied!
hf 14a (ISO14443A Card Commands)
1
hf 14a help 	- Show Help Documents
2
hf 14a list 	- List Communication history between ISO14443A and card Reader
3
hf 14a reader - Read Tag information as an ISO14443A Reader
4
hf 14a cuids 	- Gather Random counts of UID.
5
hf 14a sim 	<UID> - Simulate ISO14443A Tag
6
hf 14a snoop 	- Sniff communication between ISO14443A and card Reader
7
hf 14a raw 	- Send Row Command to ISO14443A Tag
Copied!
hf 14b  (ISO14443B Card Commands)
1
hf 14b help 	- Show Help Documents
2
hf 14b demod -  Debug ISO14443B Tag.
3
hf 14b list 	- List Communication history between ISO14443B and card Reader
4
hf 14b read 	- Read ISO14443B Tag Information
5
hf 14b sim 	- Simulate ISO14443B Tag
6
hf 14b simlisten 	- Simulate ISO14443B Tag from HF sample
7
hf 14b snoop 	- Sniff communication between ISO14443B and card Reader
8
hf 14b sri512read 	<int> - Read content of SRI512 Tag
9
hf 14b srix4kread 	<int> -Read content of SRIX4K Tag
10
hf 14b raw 	- Send raw command to ISO14443B tag
Copied!
hf 15  (ISO15693 Card Commands)
1
hf 15 help 	- Show Help Documents
2
hf 15 demod 	-  Debug ISO15963 Tag
3
hf 15 read 	- Read ISO15963 Tag information
4
hf 15 record 	 - Save record of ISO15963 tag
5
hf 15 reader 	- Read Tag information as an ISO15863 Reader
6
hf 15 sim 	- Simulate ISO15963 Tag
7
hf 15 cmd 	- Send raw command to ISO15963 tag
8
hf 15 findafi 	- Force attack AFI of a ISO15963 tag
9
hf 15 dumpmemory 	- Read page data in ISO15693 tag.
Copied!
hf iclass (ICLASS Card Commands)
1
hf iclass help 	- Show Help Documents
2
hf iclass list 	- List Communication history between iClass and card Reader
3
hf iclass snoop 	- Sniff communication between iClass Card and Reader
4
hf iclass sim 	- Simulate iClass Tag
5
hf iclass reader 	- Read iClass Tag
Copied!
hf mf   (Mifare Card Commands)
1
hf mf help 	- Show Help Documents
2
hf mf dbg 	-  Set default debug mode
3
hf mf rdbl 	- Read Mifare Classic block data
4
hf mf rdsc 	- Read Mifare Classic sector data
5
hf mf dump 	- Export Mifare Classic Dump to bin file
6
hf mf restore 	- Restore bin file to blank Mifare Classic Card
7
hf mf wrbl 	- Write Mifare Classic block data
8
hf mf chk 	- Test keyA  / KeyB of each sector of Mifare Classic Card
9
hf mf mifare 	- DarkSide attack based on PRNG crack.
10
hf mf nested 	- Nested attack based on one known key to get rest keys.
11
hf mf sniff 	- Sniff communication between card and reader.
12
hf mf sim 	- Simulate as a Mifare Classic Card.
13
hf mf eclr 	- Clear the data of each block of the simulation memory
14
hf mf eget 	- Get the data of each block of the simulation memory
15
hf mf eset 	- Set the data of each block of the simulation memory
16
hf mf eload 	- Load the data of each block of the simulation memory
17
hf mf esave 	- Export the data of each block of the simulation memory
18
hf mf ecfill 	- Use emulator keys to fill the emulation memory
19
hf mf ekeyprn  - Print out the keys in the simulated memory
20
hf mf csetuid 	- Set UID directly to UID Card
21
hf mf csetblk 	- Write block data directly to UID Card
22
hf mf cgetblk 	- Read block data from UID card
23
hf mf cgetsc 	- Read sector data from UID card
24
hf mf cload 	- Load dump file to UID card
25
hf mf csave 	- Save file from UID Card to bin file.
Copied!
Commands - Previous
Low Frequency
Marketing
Last modified 6mo ago
Copy link
Contents
hf 14a (ISO14443A Card Commands)
hf 14b (ISO14443B Card Commands)
hf 15 (ISO15693 Card Commands)
hf iclass (ICLASS Card Commands)
hf mf (Mifare Card Commands)