🖥️High Frequency

Learn how to use commands of high frequency on Proxmark3 X.

Proxmark3 X supports all 13.56MHz HF tags in all types which include ISO14443A, ISO14443B, ISO18092, ISO15693, Cipurse transport Cards, ICLASS, MIFARE CLASSIC, MIFARE Plus, MIFARE Ultralight, MIFARE Desfire, SEOS, ST25TA, TOPAZ.

Try command hf to list all protocals.

[usb] pm3 --> hf
--------         ----------------------- High Frequency -----------------------
14a              { ISO14443A RFIDs...                  }
14b              { ISO14443B RFIDs...                  }
15               { ISO15693 RFIDs...                   }
cipurse          { Cipurse transport Cards...          }
epa              { German Identification Card...       }
emrtd            { Machine Readable Travel Document... }
felica           { ISO18092 / FeliCa RFIDs...          }
fido             { FIDO and FIDO2 authenticators...    }
jooki            { Jooki RFIDs...                      }
iclass           { ICLASS RFIDs...                     }
legic            { LEGIC RFIDs...                      }
lto              { LTO Cartridge Memory RFIDs...       }
mf               { MIFARE RFIDs...                     }
mfp              { MIFARE Plus RFIDs...                }
mfu              { MIFARE Ultralight RFIDs...          }
mfdes            { MIFARE Desfire RFIDs...             }
seos             { SEOS RFIDs...                       }
st25ta           { ST25TA RFIDs...                     }
thinfilm         { Thinfilm RFIDs...                   }
topaz            { TOPAZ (NFC Type 1) RFIDs...         }
waveshare        { Waveshare NFC ePaper...             }
-----------      --------------------- General ---------------------
help             This help
list             List protocol data in trace buffer
plot             Plot signal
tune             Continuously measure HF antenna tuning
search           Search for known HF tags
sniff            Generic HF Sniff

hf 14a (ISO14443A Card Commands)

hf 14a help 	- Show Help Documents
hf 14a list 	- List Communication history between ISO14443A and card Reader
hf 14a reader - Read Tag information as an ISO14443A Reader
hf 14a cuids 	- Gather Random counts of UID.
hf 14a sim 	<UID> - Simulate ISO14443A Tag
hf 14a snoop 	- Sniff communication between ISO14443A and card Reader
hf 14a raw 	- Send Row Command to ISO14443A Tag

hf 14b (ISO14443B Card Commands)

hf 14b help 	- Show Help Documents
hf 14b demod -  Debug ISO14443B Tag.
hf 14b list 	- List Communication history between ISO14443B and card Reader
hf 14b read 	- Read ISO14443B Tag Information
hf 14b sim 	- Simulate ISO14443B Tag
hf 14b simlisten 	- Simulate ISO14443B Tag from HF sample
hf 14b snoop 	- Sniff communication between ISO14443B and card Reader
hf 14b sri512read 	<int> - Read content of SRI512 Tag
hf 14b srix4kread 	<int> -Read content of SRIX4K Tag
hf 14b raw 	- Send raw command to ISO14443B tag

hf 15 (ISO15693 Card Commands)

hf 15 help 	- Show Help Documents
hf 15 demod 	-  Debug ISO15963 Tag
hf 15 read 	- Read ISO15963 Tag information
hf 15 record 	 - Save record of ISO15963 tag
hf 15 reader 	- Read Tag information as an ISO15863 Reader
hf 15 sim 	- Simulate ISO15963 Tag
hf 15 cmd 	- Send raw command to ISO15963 tag
hf 15 findafi 	- Force attack AFI of a ISO15963 tag
hf 15 dumpmemory 	- Read page data in ISO15693 tag.

hf iclass (ICLASS Card Commands)

hf iclass help 	- Show Help Documents
hf iclass list 	- List Communication history between iClass and card Reader
hf iclass snoop 	- Sniff communication between iClass Card and Reader
hf iclass sim 	- Simulate iClass Tag
hf iclass reader 	- Read iClass Tag

hf mf (Mifare Card Commands)

hf mf help 	- Show Help Documents
hf mf dbg 	-  Set default debug mode
hf mf rdbl 	- Read Mifare Classic block data
hf mf rdsc 	- Read Mifare Classic sector data
hf mf dump 	- Export Mifare Classic Dump to bin file
hf mf restore 	- Restore bin file to blank Mifare Classic Card
hf mf wrbl 	- Write Mifare Classic block data
hf mf chk 	- Test keyA  / KeyB of each sector of Mifare Classic Card
hf mf mifare 	- DarkSide attack based on PRNG crack.
hf mf nested 	- Nested attack based on one known key to get rest keys.
hf mf sniff 	- Sniff communication between card and reader.
hf mf sim 	- Simulate as a Mifare Classic Card.
hf mf eclr 	- Clear the data of each block of the simulation memory
hf mf eget 	- Get the data of each block of the simulation memory
hf mf eset 	- Set the data of each block of the simulation memory
hf mf eload 	- Load the data of each block of the simulation memory
hf mf esave 	- Export the data of each block of the simulation memory
hf mf ecfill 	- Use emulator keys to fill the emulation memory
hf mf ekeyprn  - Print out the keys in the simulated memory
hf mf csetuid 	- Set UID directly to UID Card
hf mf csetblk 	- Write block data directly to UID Card
hf mf cgetblk 	- Read block data from UID card
hf mf cgetsc 	- Read sector data from UID card
hf mf cload 	- Load dump file to UID card
hf mf csave 	- Save file from UID Card to bin file.