PM3 Commands Reference (Iceman Firmware):

Main Help


Current command:
hf mf brute --help


This is a smart bruteforce, exploiting common patterns, bugs and bad designs in key generators.

usage:
    hf mf brute [-h] [--mini] [--1k] [--2k] [--4k] [--emu] [--dump]

options:
    -h, --help                     This help
    --mini                         MIFARE Classic Mini / S20
    --1k                           MIFARE Classic 1k / S50 (default)
    --2k                           MIFARE Classic/Plus 2k
    --4k                           MIFARE Classic 4k / S70
    --emu                          Fill simulator keys from found keys
    --dump                         Dump found keys to binary file

examples/notes:
    hf mf brute --mini                 -> Key recovery against MIFARE Mini
    hf mf brute --1k                     -> Key recovery against MIFARE Classic 1k
    hf mf brute --2k                      -> Key recovery against MIFARE 2k
    hf mf brute --4k                      -> Key recovery against MIFARE 4k
    hf mf brute --1k --emu                                -> Target 1K, write keys to emulator memory
    hf mf brute --1k --dump                               -> Target 1K, write keys to file