High Frequency

Learn how to use commands of high frequency on Proxmark3 X.

Proxmark3 X supports all 13.56MHz HF tags in all types which include ISO14443A, ISO14443B, ISO18092, ISO15693, Cipurse transport Cards, ICLASS, MIFARE CLASSIC, MIFARE Plus, MIFARE Ultralight, MIFARE Desfire, SEOS, ST25TA, TOPAZ.

Try command hf to list all protocals.

[usb] pm3 --> hf
--------         ----------------------- High Frequency -----------------------
14a              { ISO14443A RFIDs...                  }
14b              { ISO14443B RFIDs...                  }
15               { ISO15693 RFIDs...                   }
cipurse          { Cipurse transport Cards...          }
epa              { German Identification Card...       }
emrtd            { Machine Readable Travel Document... }
felica           { ISO18092 / FeliCa RFIDs...          }
fido             { FIDO and FIDO2 authenticators...    }
jooki            { Jooki RFIDs...                      }
iclass           { ICLASS RFIDs...                     }
legic            { LEGIC RFIDs...                      }
lto              { LTO Cartridge Memory RFIDs...       }
mf               { MIFARE RFIDs...                     }
mfp              { MIFARE Plus RFIDs...                }
mfu              { MIFARE Ultralight RFIDs...          }
mfdes            { MIFARE Desfire RFIDs...             }
seos             { SEOS RFIDs...                       }
st25ta           { ST25TA RFIDs...                     }
thinfilm         { Thinfilm RFIDs...                   }
topaz            { TOPAZ (NFC Type 1) RFIDs...         }
waveshare        { Waveshare NFC ePaper...             }
-----------      --------------------- General ---------------------
help             This help
list             List protocol data in trace buffer
plot             Plot signal
tune             Continuously measure HF antenna tuning
search           Search for known HF tags
sniff            Generic HF Sniff

hf 14a (ISO14443A Card Commands)

hf 14a help 	- Show Help Documents
hf 14a list 	- List Communication history between ISO14443A and card Reader
hf 14a reader - Read Tag information as an ISO14443A Reader
hf 14a cuids 	- Gather Random counts of UID.
hf 14a sim 	<UID> - Simulate ISO14443A Tag
hf 14a snoop 	- Sniff communication between ISO14443A and card Reader
hf 14a raw 	- Send Row Command to ISO14443A Tag

hf 14b (ISO14443B Card Commands)

hf 14b help 	- Show Help Documents
hf 14b demod -  Debug ISO14443B Tag.
hf 14b list 	- List Communication history between ISO14443B and card Reader
hf 14b read 	- Read ISO14443B Tag Information
hf 14b sim 	- Simulate ISO14443B Tag
hf 14b simlisten 	- Simulate ISO14443B Tag from HF sample
hf 14b snoop 	- Sniff communication between ISO14443B and card Reader
hf 14b sri512read 	<int> - Read content of SRI512 Tag
hf 14b srix4kread 	<int> -Read content of SRIX4K Tag
hf 14b raw 	- Send raw command to ISO14443B tag

hf 15 (ISO15693 Card Commands)

hf 15 help 	- Show Help Documents
hf 15 demod 	-  Debug ISO15963 Tag
hf 15 read 	- Read ISO15963 Tag information
hf 15 record 	 - Save record of ISO15963 tag
hf 15 reader 	- Read Tag information as an ISO15863 Reader
hf 15 sim 	- Simulate ISO15963 Tag
hf 15 cmd 	- Send raw command to ISO15963 tag
hf 15 findafi 	- Force attack AFI of a ISO15963 tag
hf 15 dumpmemory 	- Read page data in ISO15693 tag.

hf iclass (ICLASS Card Commands)

hf iclass help 	- Show Help Documents
hf iclass list 	- List Communication history between iClass and card Reader
hf iclass snoop 	- Sniff communication between iClass Card and Reader
hf iclass sim 	- Simulate iClass Tag
hf iclass reader 	- Read iClass Tag

hf mf (Mifare Card Commands)

hf mf help 	- Show Help Documents
hf mf dbg 	-  Set default debug mode
hf mf rdbl 	- Read Mifare Classic block data
hf mf rdsc 	- Read Mifare Classic sector data
hf mf dump 	- Export Mifare Classic Dump to bin file
hf mf restore 	- Restore bin file to blank Mifare Classic Card
hf mf wrbl 	- Write Mifare Classic block data
hf mf chk 	- Test keyA  / KeyB of each sector of Mifare Classic Card
hf mf mifare 	- DarkSide attack based on PRNG crack.
hf mf nested 	- Nested attack based on one known key to get rest keys.
hf mf sniff 	- Sniff communication between card and reader.
hf mf sim 	- Simulate as a Mifare Classic Card.
hf mf eclr 	- Clear the data of each block of the simulation memory
hf mf eget 	- Get the data of each block of the simulation memory
hf mf eset 	- Set the data of each block of the simulation memory
hf mf eload 	- Load the data of each block of the simulation memory
hf mf esave 	- Export the data of each block of the simulation memory
hf mf ecfill 	- Use emulator keys to fill the emulation memory
hf mf ekeyprn  - Print out the keys in the simulated memory
hf mf csetuid 	- Set UID directly to UID Card
hf mf csetblk 	- Write block data directly to UID Card
hf mf cgetblk 	- Read block data from UID card
hf mf cgetsc 	- Read sector data from UID card
hf mf cload 	- Load dump file to UID card
hf mf csave 	- Save file from UID Card to bin file.

PreviousTroubleshooting Writing to T55xx Cards with Proxmark3 NextMarketing

Last updated 5 months ago

Was this helpful?

[usb] pm3 --> hf -------- ----------------------- High Frequency ----------------------- 14a { ISO14443A RFIDs... } 14b { ISO14443B RFIDs... } 15 { ISO15693 RFIDs... } cipurse { Cipurse transport Cards... } epa { German Identification Card... } emrtd { Machine Readable Travel Document... } felica { ISO18092 / FeliCa RFIDs... } fido { FIDO and FIDO2 authenticators... } jooki { Jooki RFIDs... } iclass { ICLASS RFIDs... } legic { LEGIC RFIDs... } lto { LTO Cartridge Memory RFIDs... } mf { MIFARE RFIDs... } mfp { MIFARE Plus RFIDs... } mfu { MIFARE Ultralight RFIDs... } mfdes { MIFARE Desfire RFIDs... } seos { SEOS RFIDs... } st25ta { ST25TA RFIDs... } thinfilm { Thinfilm RFIDs... } topaz { TOPAZ (NFC Type 1) RFIDs... } waveshare { Waveshare NFC ePaper... } ----------- --------------------- General --------------------- help This help list List protocol data in trace buffer plot Plot signal tune Continuously measure HF antenna tuning search Search for known HF tags sniff Generic HF Sniff

hf 14a help - Show Help Documents hf 14a list - List Communication history between ISO14443A and card Reader hf 14a reader - Read Tag information as an ISO14443A Reader hf 14a cuids - Gather Random counts of UID. hf 14a sim <UID> - Simulate ISO14443A Tag hf 14a snoop - Sniff communication between ISO14443A and card Reader hf 14a raw - Send Row Command to ISO14443A Tag

hf 14b help - Show Help Documents hf 14b demod - Debug ISO14443B Tag. hf 14b list - List Communication history between ISO14443B and card Reader hf 14b read - Read ISO14443B Tag Information hf 14b sim - Simulate ISO14443B Tag hf 14b simlisten - Simulate ISO14443B Tag from HF sample hf 14b snoop - Sniff communication between ISO14443B and card Reader hf 14b sri512read <int> - Read content of SRI512 Tag hf 14b srix4kread <int> -Read content of SRIX4K Tag hf 14b raw - Send raw command to ISO14443B tag

hf 15 help - Show Help Documents hf 15 demod - Debug ISO15963 Tag hf 15 read - Read ISO15963 Tag information hf 15 record - Save record of ISO15963 tag hf 15 reader - Read Tag information as an ISO15863 Reader hf 15 sim - Simulate ISO15963 Tag hf 15 cmd - Send raw command to ISO15963 tag hf 15 findafi - Force attack AFI of a ISO15963 tag hf 15 dumpmemory - Read page data in ISO15693 tag.

hf iclass help - Show Help Documents hf iclass list - List Communication history between iClass and card Reader hf iclass snoop - Sniff communication between iClass Card and Reader hf iclass sim - Simulate iClass Tag hf iclass reader - Read iClass Tag

hf mf help - Show Help Documents hf mf dbg - Set default debug mode hf mf rdbl - Read Mifare Classic block data hf mf rdsc - Read Mifare Classic sector data hf mf dump - Export Mifare Classic Dump to bin file hf mf restore - Restore bin file to blank Mifare Classic Card hf mf wrbl - Write Mifare Classic block data hf mf chk - Test keyA / KeyB of each sector of Mifare Classic Card hf mf mifare - DarkSide attack based on PRNG crack. hf mf nested - Nested attack based on one known key to get rest keys. hf mf sniff - Sniff communication between card and reader. hf mf sim - Simulate as a Mifare Classic Card. hf mf eclr - Clear the data of each block of the simulation memory hf mf eget - Get the data of each block of the simulation memory hf mf eset - Set the data of each block of the simulation memory hf mf eload - Load the data of each block of the simulation memory hf mf esave - Export the data of each block of the simulation memory hf mf ecfill - Use emulator keys to fill the emulation memory hf mf ekeyprn - Print out the keys in the simulated memory hf mf csetuid - Set UID directly to UID Card hf mf csetblk - Write block data directly to UID Card hf mf cgetblk - Read block data from UID card hf mf cgetsc - Read sector data from UID card hf mf cload - Load dump file to UID card hf mf csave - Save file from UID Card to bin file.