#include "protocol_i.h" #include "furi.h" // ####################### // ## Ibutton Protocols ## // ####################### #define DS1990_DATA_SIZE (8) #define Metakom_DATA_SIZE (4) #define Cyfral_DATA_SIZE (2) const uint8_t uid_list_ds1990[][DS1990_DATA_SIZE] = { {0x01, 0xBE, 0x40, 0x11, 0x5A, 0x36, 0x00, 0xE1}, //– код универсального ключа, для Vizit {0x01, 0xBE, 0x40, 0x11, 0x5A, 0x56, 0x00, 0xBB}, //- проверен работает {0x01, 0xBE, 0x40, 0x11, 0x00, 0x00, 0x00, 0x77}, //- проверен работает {0x01, 0xBE, 0x40, 0x11, 0x0A, 0x00, 0x00, 0x1D}, //- проверен работает Визит иногда КЕЙМАНЫ {0x01, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0x2F}, //- проверен(метаком, цифрал, ВИЗИТ). {0x01, 0xFF, 0xFF, 0xFF, 0xFF, 0x00, 0x00, 0x9B}, //- проверен Визит, Метакомы, КОНДОР {0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0x14}, //???-Открываает 98% Метаком и некоторые Цифрал {0x01, 0x00, 0x00, 0x00, 0x00, 0x90, 0x19, 0xFF}, //???-Отлично работает на старых домофонах {0x01, 0x6F, 0x2E, 0x88, 0x8A, 0x00, 0x00, 0x4D}, //???-Открывать что-то должен {0x01, 0x53, 0xD4, 0xFE, 0x00, 0x00, 0x7E, 0x88}, //???-Cyfral, Metakom {0x01, 0x53, 0xD4, 0xFE, 0x00, 0x00, 0x00, 0x6F}, //???-домофоны Визит (Vizit) - до 99% {0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x3D}, //???-домофоны Cyfral CCD-20 - до 70% {0x01, 0x00, 0xBE, 0x11, 0xAA, 0x00, 0x00, 0xFB}, //???-домофоны Кейман (KEYMAN) {0x01, 0x76, 0xB8, 0x2E, 0x0F, 0x00, 0x00, 0x5C}, //???-домофоны Форвард {0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, // Null bytes {0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0x14}, // Only FF {0x01, 0x78, 0x00, 0x48, 0xFD, 0xFF, 0xFF, 0xD1}, // StarNew Uni5 {0x01, 0xA9, 0xE4, 0x3C, 0x09, 0x00, 0x00, 0xE6}, // Eltis Uni }; const uint8_t uid_list_metakom[][Metakom_DATA_SIZE] = { {0x00, 0x00, 0x00, 0x00}, // Null bytes {0xFF, 0xFF, 0xFF, 0xFF}, // Only FF {0x11, 0x11, 0x11, 0x11}, // Only 11 {0x22, 0x22, 0x22, 0x22}, // Only 22 {0x33, 0x33, 0x33, 0x33}, // Only 33 {0x44, 0x44, 0x44, 0x44}, // Only 44 {0x55, 0x55, 0x55, 0x55}, // Only 55 {0x66, 0x66, 0x66, 0x66}, // Only 66 {0x77, 0x77, 0x77, 0x77}, // Only 77 {0x88, 0x88, 0x88, 0x88}, // Only 88 {0x99, 0x99, 0x99, 0x99}, // Only 99 {0x12, 0x34, 0x56, 0x78}, // Incremental UID {0x9A, 0x78, 0x56, 0x34}, // Decremental UID {0x04, 0xd0, 0x9b, 0x0d}, // ?? {0x34, 0x00, 0x29, 0x3d}, // ?? {0x04, 0xdf, 0x00, 0x00}, // ?? {0xCA, 0xCA, 0xCA, 0xCA}, // ?? }; const uint8_t uid_list_cyfral[][Cyfral_DATA_SIZE] = { {0x00, 0x00}, // Null bytes {0xFF, 0xFF}, // Only FF {0x11, 0x11}, // Only 11 {0x22, 0x22}, // Only 22 {0x33, 0x33}, // Only 33 {0x44, 0x44}, // Only 44 {0x55, 0x55}, // Only 55 {0x66, 0x66}, // Only 66 {0x77, 0x77}, // Only 77 {0x88, 0x88}, // Only 88 {0x99, 0x99}, // Only 99 {0x12, 0x34}, // Incremental UID {0x56, 0x34}, // Decremental UID {0xCA, 0xCA}, // ?? {0x8E, 0xC9}, // Elevator code {0x6A, 0x50}, // VERY fresh code from smartkey }; // ########################### // ## Rfid_125khz Protocols ## // ########################### #define EM4100_DATA_SIZE (5) #define HIDProx_DATA_SIZE (6) #define PAC_DATA_SIZE (4) #define H10301_DATA_SIZE (3) const uint8_t uid_list_em4100[][EM4100_DATA_SIZE] = { {0x00, 0x00, 0x00, 0x00, 0x00}, // Null bytes {0xFF, 0xFF, 0xFF, 0xFF, 0xFF}, // Only FF {0x11, 0x11, 0x11, 0x11, 0x11}, // Only 11 {0x22, 0x22, 0x22, 0x22, 0x22}, // Only 22 {0x33, 0x33, 0x33, 0x33, 0x33}, // Only 33 {0x44, 0x44, 0x44, 0x44, 0x44}, // Only 44 {0x55, 0x55, 0x55, 0x55, 0x55}, // Only 55 {0x66, 0x66, 0x66, 0x66, 0x66}, // Only 66 {0x77, 0x77, 0x77, 0x77, 0x77}, // Only 77 {0x88, 0x88, 0x88, 0x88, 0x88}, // Only 88 {0x99, 0x99, 0x99, 0x99, 0x99}, // Only 99 {0x12, 0x34, 0x56, 0x78, 0x9A}, // Incremental UID {0x9A, 0x78, 0x56, 0x34, 0x12}, // Decremental UID {0x04, 0xd0, 0x9b, 0x0d, 0x6a}, // From arha {0x34, 0x00, 0x29, 0x3d, 0x9e}, // From arha {0x04, 0xdf, 0x00, 0x00, 0x01}, // From arha {0xCA, 0xCA, 0xCA, 0xCA, 0xCA}, // From arha }; const uint8_t uid_list_hid[][HIDProx_DATA_SIZE] = { {0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, // Null bytes {0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF}, // Only FF {0x11, 0x11, 0x11, 0x11, 0x11, 0x11}, // Only 11 {0x22, 0x22, 0x22, 0x22, 0x22, 0x22}, // Only 22 {0x33, 0x33, 0x33, 0x33, 0x33, 0x33}, // Only 33 {0x44, 0x44, 0x44, 0x44, 0x44, 0x44}, // Only 44 {0x55, 0x55, 0x55, 0x55, 0x55, 0x55}, // Only 55 {0x66, 0x66, 0x66, 0x66, 0x66, 0x66}, // Only 66 {0x77, 0x77, 0x77, 0x77, 0x77, 0x77}, // Only 77 {0x88, 0x88, 0x88, 0x88, 0x88, 0x88}, // Only 88 {0x99, 0x99, 0x99, 0x99, 0x99, 0x99}, // Only 99 {0x12, 0x34, 0x56, 0x78, 0x9A, 0xBC}, // Incremental UID {0xBC, 0x9A, 0x78, 0x56, 0x34, 0x12}, // Decremental UID {0xCA, 0xCA, 0xCA, 0xCA, 0xCA, 0xCA}, // From arha }; const uint8_t uid_list_pac[][PAC_DATA_SIZE] = { {0x00, 0x00, 0x00, 0x00}, // Null bytes {0xFF, 0xFF, 0xFF, 0xFF}, // Only FF {0x11, 0x11, 0x11, 0x11}, // Only 11 {0x22, 0x22, 0x22, 0x22}, // Only 22 {0x33, 0x33, 0x33, 0x33}, // Only 33 {0x44, 0x44, 0x44, 0x44}, // Only 44 {0x55, 0x55, 0x55, 0x55}, // Only 55 {0x66, 0x66, 0x66, 0x66}, // Only 66 {0x77, 0x77, 0x77, 0x77}, // Only 77 {0x88, 0x88, 0x88, 0x88}, // Only 88 {0x99, 0x99, 0x99, 0x99}, // Only 99 {0x12, 0x34, 0x56, 0x78}, // Incremental UID {0x9A, 0x78, 0x56, 0x34}, // Decremental UID {0x04, 0xd0, 0x9b, 0x0d}, // From arha {0x34, 0x00, 0x29, 0x3d}, // From arha {0x04, 0xdf, 0x00, 0x00}, // From arha {0xCA, 0xCA, 0xCA, 0xCA}, // From arha }; const uint8_t uid_list_h10301[][H10301_DATA_SIZE] = { {0x00, 0x00, 0x00}, // Null bytes {0xFF, 0xFF, 0xFF}, // Only FF {0x11, 0x11, 0x11}, // Only 11 {0x22, 0x22, 0x22}, // Only 22 {0x33, 0x33, 0x33}, // Only 33 {0x44, 0x44, 0x44}, // Only 44 {0x55, 0x55, 0x55}, // Only 55 {0x66, 0x66, 0x66}, // Only 66 {0x77, 0x77, 0x77}, // Only 77 {0x88, 0x88, 0x88}, // Only 88 {0x99, 0x99, 0x99}, // Only 99 {0x12, 0x34, 0x56}, // Incremental UID {0x56, 0x34, 0x12}, // Decremental UID {0xCA, 0xCA, 0xCA}, // From arha }; #if defined(RFID_125_PROTOCOL) const FuzzerProtocol fuzzer_proto_items[] = { [EM4100] = { .name = "EM4100", .data_size = EM4100_DATA_SIZE, .dict = { .val = (const uint8_t*)&uid_list_em4100, .len = COUNT_OF(uid_list_em4100), }, }, [HIDProx] = { .name = "HIDProx", .data_size = HIDProx_DATA_SIZE, .dict = { .val = (const uint8_t*)&uid_list_hid, .len = COUNT_OF(uid_list_hid), }, }, [PAC] = { .name = "PAC/Stanley", .data_size = PAC_DATA_SIZE, .dict = { .val = (const uint8_t*)&uid_list_pac, .len = COUNT_OF(uid_list_pac), }, }, [H10301] = { .name = "H10301", .data_size = H10301_DATA_SIZE, .dict = { .val = (const uint8_t*)&uid_list_h10301, .len = COUNT_OF(uid_list_h10301), }, }, }; #else const FuzzerProtocol fuzzer_proto_items[] = { [DS1990] = { .name = "DS1990", .data_size = DS1990_DATA_SIZE, .dict = { .val = (const uint8_t*)&uid_list_ds1990, .len = COUNT_OF(uid_list_ds1990), }, }, [Metakom] = { .name = "Metakom", .data_size = Metakom_DATA_SIZE, .dict = { .val = (const uint8_t*)&uid_list_metakom, .len = COUNT_OF(uid_list_metakom), }, }, [Cyfral] = { .name = "Cyfral", .data_size = Cyfral_DATA_SIZE, .dict = { .val = (const uint8_t*)&uid_list_cyfral, .len = COUNT_OF(uid_list_cyfral), }, }, }; #endif typedef struct { const char* menu_label; FuzzerAttackId attack_id; } FuzzerMenuItems; const FuzzerMenuItems fuzzer_menu_items[] = { {"Default Values", FuzzerAttackIdDefaultValues}, #ifdef RFID_125_PROTOCOL {"BF Customer ID", FuzzerAttackIdBFCustomerID}, #endif {"Load File", FuzzerAttackIdLoadFile}, {"Load UIDs from file", FuzzerAttackIdLoadFileCustomUids}, }; FuzzerPayload* fuzzer_payload_alloc() { FuzzerPayload* payload = malloc(sizeof(FuzzerPayload)); payload->data = malloc(sizeof(payload->data[0]) * MAX_PAYLOAD_SIZE); return payload; } void fuzzer_payload_free(FuzzerPayload* payload) { furi_assert(payload); if(payload->data) { free(payload->data); } free(payload); } const char* fuzzer_proto_get_name(FuzzerProtocolsID index) { return fuzzer_proto_items[index].name; } uint8_t fuzzer_proto_get_count_of_protocols() { return COUNT_OF(fuzzer_proto_items); } uint8_t fuzzer_proto_get_max_data_size() { return MAX_PAYLOAD_SIZE; } uint8_t fuzzer_proto_get_def_emu_time() { return PROTOCOL_DEF_EMU_TIME; } uint8_t fuzzer_proto_get_def_idle_time() { return PROTOCOL_DEF_IDLE_TIME; } const char* fuzzer_proto_get_menu_label(uint8_t index) { return fuzzer_menu_items[index].menu_label; } FuzzerAttackId fuzzer_proto_get_attack_id_by_index(uint8_t index) { return fuzzer_menu_items[index].attack_id; } uint8_t fuzzer_proto_get_count_of_menu_items() { return COUNT_OF(fuzzer_menu_items); }