PM3 Commands Reference (Iceman Firmware):

Updated: January 2025

Main Help


Up One Level


Current command:
hf mf brute --help


This is a smart bruteforce, exploiting common patterns, bugs and bad designs in key generators.

usage:
    hf mf brute [--dump]

options:
    -h, --help                     This help
    --mini                         MIFARE Classic Mini / S20
    --1k                           MIFARE Classic 1k / S50 (default)
    --2k                           MIFARE Classic/Plus 2k
    --4k                           MIFARE Classic 4k / S70
    --emu                          Fill simulator keys from found keys
    --dump                         Dump found keys to binary file

examples/notes:
    hf mf brute --mini                -> Key recovery against MIFARE Mini
    hf mf brute --1k                    -> Key recovery against MIFARE Classic 1k
    hf mf brute --2k                     -> Key recovery against MIFARE 2k
    hf mf brute --4k                     -> Key recovery against MIFARE 4k
    hf mf brute --1k --emu                               -> Target 1K, write keys to emulator memory
    hf mf brute --1k --dump                              -> Target 1K, write keys to file