PM3 Commands Reference (Iceman Firmware):

Main Help


Current command:
hf mfdes write --help


Write data from file. Key needs to be provided or flag --no-auth set (depend on file settings).

usage:
    hf mfdes write [-hav] [-n <dec>] [-t <DES|2TDEA|3TDEA|AES>] [-k <hex>] [--kdf <none|AN10922|gallagher>]

options:
    -h, --help                     This help
    -a, --apdu                     Show APDU requests and responses
    -v, --verbose                  Verbose output
    -n, --keyno <dec>              Key number
    -t, --algo <DES|2TDEA|3TDEA|AES> Crypt algo
    -k, --key <hex>                Key for authenticate (HEX 8(DES), 16(2TDEA or AES) or 24(3TDEA) bytes)
    --kdf <none|AN10922|gallagher> Key Derivation Function (KDF)
    -i, --kdfi <hex>               KDF input (1-31 hex bytes)
    -m, --cmode <plain|mac|encrypt> Communicaton mode
    -c, --ccset <native|niso|iso>  Communicaton command set
    --schann <d40|ev1|ev2|lrp>     Secure channel
    --aid <hex>                    Application ID (3 hex bytes, big endian)
    --fid <hex>                    File ID (1 hex byte)
    --no-auth                      Execute without authentication
    --type <auto|data|value|record|mac> File Type, Auto - check file settings and then write. (def: auto)
    -o, --offset <hex>             File Offset (3 hex bytes, big endian). For records - record number (0 - lastest record). (def: 0)
    -d, --data <hex>               data for write (data/record file), credit/debit(value file)
    --debit                        use for value file debit operation instead of credit
    --commit                       commit needs for backup file only. For the other file types and in the `auto` mode - command set it automatically
    --updaterec <dec>              Record number for update record command. Updates record instead of write. Lastest record - 0
    --isoid <hex>                  Application ISO ID (ISO DF ID) (2 hex bytes, big endian)
    --fileisoid <hex>              File ISO ID (ISO DF ID) (2 hex bytes, big endian). Works only for ISO write commands
    --readerid <hex>               reader id for CommitReaderID command. If present - the command issued before write command
    --trkey <hex>                  key for decode previous reader id

examples/notes:
    In the mode with CommitReaderID to decode previous reader id command needs to read transaction counter via dump/read command and specify --trkey