PM3 Commands Reference (Iceman Firmware):

Updated: January 2025

Main Help


Up One Level


Current command:
hf mf staticnested --help


Execute static nested attack against MIFARE Classic card with static nonce for key recovery.
Supply a known key from one block to recover all keys

usage:
    hf mf staticnested [--dumpkeys]

options:
    -h, --help                     This help
    -k, --key <hex>                Known key (12 hex symbols)
    --mini                         MIFARE Classic Mini / S20
    --1k                           MIFARE Classic 1k / S50
    --2k                           MIFARE Classic/Plus 2k
    --4k                           MIFARE Classic 4k / S70
    --blk <dec>                    Input block number
    -a                             Input key specified is keyA (def)
    -b                             Input key specified is keyB
    -e, --emukeys                  Fill simulator keys from found keys
    --dumpkeys                     Dump found keys to file

examples/notes:
    hf mf staticnested --mini --blk 0 -a -k FFFFFFFFFFFF
    hf mf staticnested --1k --blk 0 -a -k FFFFFFFFFFFF
    hf mf staticnested --2k --blk 0 -a -k FFFFFFFFFFFF
    hf mf staticnested --4k --blk 0 -a -k FFFFFFFFFFFF