PM3 Commands Reference (Iceman Firmware):

Main Help


Current command:
hf mfdes value --help


Get File Settings from file from application. Master key needs to be provided or flag --no-auth set (depend on cards settings).

usage:
    hf mfdes value [-hav] [-n <dec>] [-t <DES|2TDEA|3TDEA|AES>] [-k <hex>] [--kdf <none|AN10922|gallagher>]

options:
    -h, --help                     This help
    -a, --apdu                     Show APDU requests and responses
    -v, --verbose                  Verbose output
    -n, --keyno <dec>              Key number
    -t, --algo <DES|2TDEA|3TDEA|AES> Crypt algo
    -k, --key <hex>                Key for authenticate (HEX 8(DES), 16(2TDEA or AES) or 24(3TDEA) bytes)
    --kdf <none|AN10922|gallagher> Key Derivation Function (KDF)
    -i, --kdfi <hex>               KDF input (1-31 hex bytes)
    -m, --cmode <plain|mac|encrypt> Communicaton mode
    -c, --ccset <native|niso|iso>  Communicaton command set
    --schann <d40|ev1|ev2|lrp>     Secure channel
    --aid <hex>                    Application ID (3 hex bytes, big endian)
    --isoid <hex>                  Application ISO ID (ISO DF ID) (2 hex bytes, big endian)
    --fid <hex>                    File ID (1 hex byte)
    -o, --op <get/credit/limcredit/debit/clear> Operation: get(default)/credit/limcredit(limited credit)/debit/clear. Operation clear: get-getopt-debit to min value
    -d, --data <hex>               Value for operation (HEX 4 bytes)
    --no-auth                      Execute without authentication

examples/notes:
    hf mfdes value --aid 123456 --fid 01       -> get value app=123456, file=01 with defaults from `default` command
    hf mfdes value --aid 123456 --fid 01 --op credit -d 00000001      -> credit value app=123456, file=01 with defaults from `default` command
    hf mfdes value -n 0 -t des -k 0000000000000000 --kdf none --aid 123456 --fid 01      -> get value with default factory setup
    hf mfdes val --isoid df01 --fid 03 --schann lrp -t aes -n 1 --op credit --d 00000001 -m encrypt      -> credit value in the lrp encrypted mode
    hf mfdes val --isoid df01 --fid 03 --schann lrp -t aes -n 1 --op get -m plain      -> get value in plain (nevertheless of mode) works for desfire light (look SetConfiguration option 0x09)