PM3 Commands Reference (Iceman Firmware):

Main Help


Current command:
hf gallagher clone --help


Clone Gallagher credentials to a writable DESFire card
Specify site key is required if using non-default key
Key, lengths for the different crypto:
   DES 8 bytes
   2TDEA or AES 16 bytes
   3TDEA 24 bytes
AID, default finds lowest available in range 0x??81F4, where ?? >= 0x20.

usage:
    hf gallagher clone [-hv] [-n <dec>] [-t <DES|2TDEA|3TDEA|AES>] [-k <hex>] --rc <dec> --fc <dec> --cn <dec>

options:
    -h, --help                     This help
    -n, --keynum <dec>             PICC key number [default = 0]
    -t, --algo <DES|2TDEA|3TDEA|AES> PICC crypt algo: DES, 2TDEA, 3TDEA, AES
    -k, --key <hex>                Key for authentication to the PICC to create applications
    --rc <dec>                     Region code. 4 bits max
    --fc <dec>                     Facility code. 2 bytes max
    --cn <dec>                     Card number. 3 bytes max
    --il <dec>                     Issue level. 4 bits max
    --aid <hex>                    Application ID to write (3 bytes) [default automatically chooses]
    --sitekey <hex>                Site key to compute diversified keys (16 bytes)
    --cadkey <hex>                 Custom AES key 0 to modify the Card Application Directory (16 bytes)
    --nocadupdate                  Don't modify the Card Application Directory (only creates the app)
    --noappcreate                  Don't create the application (only modifies the CAD)
    --apdu                         Show APDU requests and responses
    -v, --verbose                  Verbose output

examples/notes:
    hf gallagher clone --rc 1 --fc 22 --cn 3333 --il 4 --sitekey 00112233445566778899aabbccddeeff