How To Use Proxmark3 Commands

photo of person typing on computer keyboard

Proxmark3 is one of the most powerful RFID Devices for learning technology of Low-Frequency 125kHz tag and High Frequency 13.56Mhz tag. In this article, you’ll learn the common commands of Proxmark3 to do RFID testing.

Common Type

help 	- show help text
data 	- GUI operation
exit 	- Exit Proxmark3 terminal 
hf 	-  Show all high frequency commands
hw 	- Show hardware relative commands
lf 	-  Show all low frequency commands
quit 	-  Exit Proxmark3 terminal same as exit
hw tune - Show antenna tuning
hw ver -  Show hardware firmware version

Low Frequency Type (LF)

help 	- Show help documents
cmdread 	<off> <'0'> <'1'> <cmd> ['h'] - Adjust Reader Period before sending command.
em4x - Show EM4X Tag Commands
flexdemod - Decode FlexPass Tag
hid 	- Show HID Tag Commands
indalaclone 	[UID] ['l'] - Clone Indala to T55x7卡
read 	['h'] - Read ID of LF Tag 125KHz, 134KHz
sim 	[GAP] - Simulate LF Tab from GAP Buffer
simbidir 	- Simulate LF Tag
simman 	<Clock> <Bit Rate> [GAP] Simuate any Manchester Low Frequency Tag
ti 	- Show Ti tag commands
hitag - Show Hitag tag commands
t55xx 	- Show T55XX tag commands
PCF7931 	- Show PCF7931 tag commands

High Frequency Type (HF)

help 	- Show help documents
14a 	- Show all ISO14443A commands
14b 	- Show all ISO14443B commands
15 	- Show all ISO15693 commands
epa 	- Show German ID card commands
legic 	- Show all LEGIC commands
iclass 	- Show all ICLASS commands
mf 	- Show all MIFARE commands
tune    - Continuous measurement of the tuning of high-frequency antennas

hf 14a (ISO14443A Card Commands)

hf 14a help 	- Show Help Documents
hf 14a list 	- List Communication history between ISO14443A and card Reader
hf 14a reader - Read Tag information as an ISO14443A Reader
hf 14a cuids 	- Gather Random counts of UID.
hf 14a sim 	<UID> - Simulate ISO14443A Tag
hf 14a snoop 	- Sniff communication between ISO14443A and card Reader
hf 14a raw 	- Send Row Command to ISO14443A Tag

hf 14b  (ISO14443B Card Commands)

hf 14b help 	- Show Help Documents
hf 14b demod -  Debug ISO14443B Tag.
hf 14b list 	- List Communication history between ISO14443B and card Reader
hf 14b read 	- Read ISO14443B Tag Information
hf 14b sim 	- Simulate ISO14443B Tag
hf 14b simlisten 	- Simulate ISO14443B Tag from HF sample
hf 14b snoop 	- Sniff communication between ISO14443B and card Reader
hf 14b sri512read 	<int> - Read content of SRI512 Tag
hf 14b srix4kread 	<int> -Read content of SRIX4K Tag
hf 14b raw 	- Send raw command to ISO14443B tag

hf 15  (ISO15693 Card Commands)

hf 15 help 	- Show Help Documents
hf 15 demod 	-  Debug ISO15963 Tag
hf 15 read 	- Read ISO15963 Tag information
hf 15 record 	 - Save record of ISO15963 tag
hf 15 reader 	- Read Tag information as an ISO15863 Reader
hf 15 sim 	- Simulate ISO15963 Tag
hf 15 cmd 	- Send raw command to ISO15963 tag
hf 15 findafi 	- Force attack AFI of a ISO15963 tag
hf 15 dumpmemory 	- Read page data in ISO15693 tag.

hf iclass (ICLASS Card Commands)

hf iclass help 	- Show Help Documents
hf iclass list 	- List Communication history between iClass and card Reader
hf iclass snoop 	- Sniff communication between iClass Card and Reader
hf iclass sim 	- Simulate iClass Tag
hf iclass reader 	- Read iClass Tag

hf mf   (Mifare Card Commands)

hf mf help 	- Show Help Documents
hf mf dbg 	-  Set default debug mode
hf mf rdbl 	- Read Mifare Classic block data
hf mf rdsc 	- Read Mifare Classic sector data
hf mf dump 	- Export Mifare Classic Dump to bin file
hf mf restore 	- Restore bin file to blank Mifare Classic Card
hf mf wrbl 	- Write Mifare Classic block data
hf mf chk 	- Test keyA  / KeyB of each sector of Mifare Classic Card
hf mf mifare 	- DarkSide attack based on PRNG crack.
hf mf nested 	- Nested attack based on one known key to get rest keys.
hf mf sniff 	- Sniff communication between card and reader.
hf mf sim 	- Simulate as a Mifare Classic Card.
hf mf eclr 	- Clear the data of each block of the simulation memory
hf mf eget 	- Get the data of each block of the simulation memory
hf mf eset 	- Set the data of each block of the simulation memory
hf mf eload 	- Load the data of each block of the simulation memory
hf mf esave 	- Export the data of each block of the simulation memory
hf mf ecfill 	- Use emulator keys to fill the emulation memory
hf mf ekeyprn  - Print out the keys in the simulated memory
hf mf csetuid 	- Set UID directly to UID Card
hf mf csetblk 	- Write block data directly to UID Card
hf mf cgetblk 	- Read block data from UID card
hf mf cgetsc 	- Read sector data from UID card
hf mf cload 	- Load dump file to UID card
hf mf csave 	- Save  file from UID Card to bin file.

Leave a Reply

Your email address will not be published. Required fields are marked *