PM3 Commands Reference (Iceman Firmware):

Updated: January 2025

Main Help

Up One Level

---

Current command:
hf iclass unhash --help

---

Reverses the hash0 function used generate iclass diversified keys after DES encryption,
Function returns the DES crypted CSN.  Next step bruteforcing.

usage:
    hf iclass unhash [-h] -k <hex>

options:
    -h, --help                     This help
    -k, --divkey <hex>             Card diversified key

examples/notes:
    hf iclass unhash -k B4F12AADC5301A2D