aloneliberty / flippernested Goto Github PK

View Code? Open in Web Editor NEW

304.0 19.0 16.0 179 KB

Recover Mifare Classic keys on Flipper Zero

License: GNU General Public License v3.0

C 100.00%

flippernested's Introduction

Mifare Nested Attacks for Flipper Zero

Ported Nested attacks from Proxmark3 (Iceman fork)

Download

Currently supported attacks

nested attack
static nested attack
hard nested attack

Warning

App is still in early development, so there may be bugs. Your Flipper Zero may randomly crash/froze. Please create issue if you find any bugs (one bug = one issue).

Disclaimer

The app provided for personal use only. Developer does not take responsibility for any loss or damage caused by the misuse of this app. In addition, the app developer does not guarantee the performance or compatibility of the app with all tags, and cannot be held liable for any damage caused to your tags/Flipper Zero as a result of using the app. By using this app you confirm that the tag belongs to you, you have permission to preform the attack and you agree to hold the app developer harmless from any and all claims, damages, or losses that may arise from its use.

I need your help!

To successfuly recover keys from nested attack we need to correctly predict PRNG value. But we have a problem with that. Due to lack of my knowlege of Flipper Zero NFC HAL, PRNG can jump by quite large values (not like Proxmark3). So app is trying to find a delay where PRNG can be predicted accurately enough. This is not the best option, because we have to try to recover a bunch of unnecessary keys, which takes a lot of time and RAM and also spend a lot of time on timings. I don't know how to fix it.

UPD: Chameleon Ultra devs faced same issue. They seems to use same method: nested.c (better know from the beginning of development...)

How to use it?

Detailed guide: EN, RU.

FAQ

For frequently asked questions, please refer to the FAQ: EN, RU.

Contacts

Telegram: @libertydev

flippernested's People

Contributors

Stargazers

Watchers

Forkers

minkione noproto skybersec technikekb cbb1213 lawinnd57 cryophynix alphakdelta fessnecro kawa5604 cl1432 misclone luckyfishgeek spygdev pycms-nube zigad

flippernested's Issues

Check if sector is alive in Nested attack

Originally posted by @AloneLiberty in #3 (reply in thread)

Update the Flipper Nested app for the SDK version 0.101 f7

Hello!

Your Flipper Nested app version 1.5.2 fails to build with the SDK version 0.101.0-rc f7. Please update the app in your repository and create a new pull request to the catalog repository with the updated manifest file.

IMPORTANT: Don’t forget to update the app version and commit version in the manifest file.

View logs

Flipper Team

Update the Flipper Nested app for the SDK version 0.103 f7

Hello!

Your Flipper Nested app version 1.5.2 fails to build with the SDK version 0.103.1-rc f7. Please update the app in your repository and create a new pull request to the catalog repository with the updated manifest file.

IMPORTANT: Don’t forget to update the app version and commit version in the manifest file.

View logs
View build actions

Flipper Team

Multi-protocol cards support

Hi,
i have a new type of card, flipper identifies it as "multi-protocol card".

I can read it as Mifare classic 4k and Mifare ultralight with latest flipper version, and as expected i can perform a dict attack if i choose the mifare classic 4k option.

As always, i use your awesome app to perform the nested attack and recover the keys. But in this case, the app can't read the multiprocotol card. I think it doesn't expect this kind of card with 2 protocols.

Same happens if i perform the "mfoc" in the computer. The program can't guess the card type.

Can you add support for this kind of "multi-protocol cards" ?

Thanks!

Build error

Please fix build error

No module named 'nested'

Hi,

I have install the FlipperNested tool, it's ran when i connect my flipper. But When i try to ran the key recovery i have this error message : "ModuleNotFoundError: No module named 'nested'"

I try with normal install and venv in python3.8

Best regards

Set custom block for tag detection

Originally posted by @AloneLiberty in #3 (reply in thread)

Any chance to update it to support NFC refactor?

Unfortunately the app is unsupported on 0.74.

It says API too old...

NestedRecovery save keys in uppercase format

I have found an issue, that when the recovery script found the keys, it will be saved in the user dictionary in UPPERCASE format. But upon re-scanning the NFC card again, it will be missing a few nonces despite of the keys have already been found.

The solution I did is to manually edit the keys in user dictionary to be saved in lowercase format. Then the Flipper can read all the NFC nonces completely. Maybe you can change the recovery script to save the keys in lowercase format. Thank you.

Silent failure of filesystem

Currently the application does not create the .nested directory if it's missing and instead proceeds to run the attack without saving nonces to disk

Feature Request - serial over TCP for Android/Chromebook devices

Could we please get an option to use a TCP connection for the serial access to the Flipper?
That way we can use "Communications Bridge Pro" to conect the Flipper to Linux container on a Chromebook or Termux on an Android device.
Something like FlipperNested tcp:localhost:4321

Update the Flipper Nested app for the SDK version 0.98.2-rc f7

Hello! Your Flipper Nested app version 1.5.2 fails to build with the SDK version 0.98.2-rc f7. Please update the app in your repository and create a new pull request to the catalog repository with the updated manifest file.

IMPORTANT: Don’t forget to update the app version and commit version in the manifest file.

View logs

NFC Hard attack

Update the Flipper Nested app for the SDK version 0.100 f7

Hello!

Your Flipper Nested app version 1.5.2 fails to build with the SDK version 0.100.0-rc f7. Please update the app in your repository and create a new pull request to the catalog repository with the updated manifest file.

IMPORTANT: Don’t forget to update the app version and commit version in the manifest file.

View logs

Flipper Team

Skip sectors

I've try to crack an specific card in different opportunities. The script crack lot of keys, but each time I start over it's starts from the 1st sector which key I already have. Is there any chance to skip sectors??

Mifare Classic 4k one key not enough

I tried to read Mifare Classic 4k card with Flipper main app using dictionary and it found just 1 key (out of 80) and 1 sector (out of 40). I tried to run FlipperNested on the same card but got "No keys found" error.

Does FlipperNested support 4K cards?
Do I need more than one key to run Nested attack? (get some more via "Detect reader" and Mfkey32)

Or is there another problem?

Update the Flipper Nested app for the SDK version 0.104 f7

Hello!

Your Flipper Nested app version 1.5.0 fails to build with the SDK version 0.104.0-rc f7. Please update the app in your repository and create a new pull request to the catalog repository with the updated manifest file.

IMPORTANT: Don’t forget to update the app version and commit version in the manifest file.

View logs
View build actions

Flipper Team

Update the Flipper Nested app for the SDK version 0.102 f7

Hello!

Your Flipper Nested app version 1.5.2 fails to build with the SDK version 0.102.0-rc f7. Please update the app in your repository and create a new pull request to the catalog repository with the updated manifest file.

IMPORTANT: Don’t forget to update the app version and commit version in the manifest file.

View logs
View build actions

Flipper Team

Are there plans to implement Darkside?

Maybe there are some developments?
Maybe the implementation in Chameleon Ultra will help
https://github.com/RfidResearchGroup/ChameleonUltra/blob/main/firmware/application/src/rfid/reader/hf/mf1_toolbox.c#L259
Here is a description of the attack itself https://eprint.iacr.org/2009/137.pdf
I would like to try to implement this myself, but I don't have experience and knowledge of C for development, so it will take a long time.

Update the Flipper Nested app for the SDK version 0.104 f7

Hello!

Your Flipper Nested app version 1.5.2 fails to build with the SDK version 0.104.0-rc f7. Please update the app in your repository and create a new pull request to the catalog repository with the updated manifest file.

IMPORTANT: Don’t forget to update the app version and commit version in the manifest file.

View logs
View build actions

Flipper Team

Brute

Re-layout scenes

Well, they look bad.

Current scenes are built with FontPrimary, I don't think I should write all the text with it.
Maybe I should also add some additional text where the space appears.

aloneliberty / flippernested Goto Github PK

flippernested's Introduction

Mifare Nested Attacks for Flipper Zero

Download

Currently supported attacks

Warning

Disclaimer

I need your help!

How to use it?

FAQ

Contacts

flippernested's People

Contributors

Stargazers

Watchers

Forkers

flippernested's Issues

Recommend Projects

Recommend Topics

Recommend Org