PM3 Commands Reference (Iceman Firmware):

Updated: January 2025

Main Help


Up One Level


Current command:
hf mf fchk --help


This is a improved checkkeys method speedwise. It checks MIFARE Classic tags sector keys against a dictionary file with keys

usage:
    hf mf fchk [--no-default]

options:
    -h, --help                     This help
    -k, --key <hex>                Key specified as 12 hex symbols
    --mini                         MIFARE Classic Mini / S20
    --1k                           MIFARE Classic 1k / S50 (default)
    --2k                           MIFARE Classic/Plus 2k
    --4k                           MIFARE Classic 4k / S70
    --emu                          Fill simulator keys from found keys
    --dump                         Dump found keys to binary file
    --mem                          Use dictionary from flashmemory
    -f, --file <fn>                filename of dictionary
    --blk <dec>                    block number (single block recovery mode)
    -a                             single block recovery key A
    -b                             single block recovery key B
    --no-default                   Skip check default keys

examples/notes:
    hf mf fchk --mini -k FFFFFFFFFFFF                   -> Key recovery against MIFARE Mini
    hf mf fchk --1k -k FFFFFFFFFFFF                     -> Key recovery against MIFARE Classic 1k
    hf mf fchk --2k -k FFFFFFFFFFFF                     -> Key recovery against MIFARE 2k
    hf mf fchk --4k -k FFFFFFFFFFFF                     -> Key recovery against MIFARE 4k
    hf mf fchk --1k -f mfc_default_keys.dic             -> Target 1K using default dictionary file
    hf mf fchk --1k --emu                               -> Target 1K, write keys to emulator memory
    hf mf fchk --1k --dump                              -> Target 1K, write keys to file
    hf mf fchk --1k --mem                               -> Target 1K, use dictionary from flash memory