PM3 Commands Reference (Iceman Firmware):

Main Help


Current command:
hf mfdes bruteaid --help


Recover AIDs by bruteforce.
WARNING: This command takes a loooong time

usage:
    hf mfdes bruteaid [-hm] [--start <hex>] [--end <hex>] [-i <dec>]

options:
    -h, --help                     This help
    --start <hex>                  Starting App ID as hex bytes (3 bytes, big endian)
    --end <hex>                    Last App ID as hex bytes (3 bytes, big endian)
    -i, --step <dec>               Increment step when bruteforcing
    -m, --mad                      Only bruteforce the MAD range

examples/notes:
    hf mfdes bruteaid                         -> Search all apps
    hf mfdes bruteaid --start F0000F -i 16         -> Search MAD range manually