PM3 Commands Reference (Iceman Firmware):

Main Help


Current command:
hf mfp chk --help


Checks keys on MIFARE Plus card

usage:
    hf mfp chk [-habv] [-s <0..255>] [-e <0..255>] [-k <hex>] [-d <fn>] [--pattern1b] [--pattern2b] [--startp2b <pattern>]

options:
    -h, --help                     This help
    -a, --keya                     Check only key A (def: check all keys)
    -b, --keyb                     Check only key B (def: check all keys)
    -s, --startsec <0..255>        Start sector number
    -e, --endsec <0..255>          End sector number
    -k, --key <hex>                Key for checking (HEX 16 bytes)
    -d, --dict <fn>                Dictionary file with keys
    --pattern1b                    Check all 1-byte combinations of key (0000...0000, 0101...0101, 0202...0202, ...)
    --pattern2b                    Check all 2-byte combinations of key (0000...0000, 0001...0001, 0002...0002, ...)
    --startp2b <pattern>           Start key (2-byte HEX) for 2-byte search (use with `--pattern2b`)
    --dump                         Dump found keys to JSON file
    -v, --verbose                  Verbose output

examples/notes:
    hf mfp chk -k 000102030405060708090a0b0c0d0e0f       -> check key on sector 0 as key A and B
    hf mfp chk -s 2 -a                                   -> check default key list on sector 2, only key A
    hf mfp chk -d mfp_default_keys -s0 -e6               -> check keys from dictionary against sectors 0-6
    hf mfp chk --pattern1b --dump                        -> check all 1-byte keys pattern and save found keys to file
    hf mfp chk --pattern2b --startp2b FA00               -> check all 2-byte keys pattern. Start from key FA00FA00...FA00