PM3 Commands Reference (Iceman Firmware):

Main Help


Current command:
lf hid brute --help


Enables bruteforce of HID readers with specified facility code or card number. This is an attack against the reader.
If the field being bruteforced is provided, it starts with it and goes up / down one step while maintaining other supplied values.
If the field being bruteforced is not provided, it will iterate through the full range while maintaining other supplied values.

usage:
    lf hid brute [-hv] -w <format> --field <fc|cn> [--fc <dec>] [--cn <dec>] [-i <dec>] [-o <dec>]

options:
    -h, --help                     This help
    -v, --verbose                  verbose output
    -w, --wiegand <format>         see `wiegand list` for available formats
    --field <fc|cn>                field to bruteforce
    --fc <dec>                     facility code
    --cn <dec>                     card number
    -i, --issue <dec>              issue level
    -o, --oem <dec>                OEM code
    -d, --delay <dec>              delay betweens attempts in ms. (def is 1000)
    --up                           direction to increment field value. (def is both directions)
    --down                         direction to decrement field value. (def is both directions)

examples/notes:
    lf hid brute -w H10301 --field fc --fc 224 --cn 6278
    lf hid brute -w H10301 --field cn --fc 21 -d 2000
    lf hid brute -v -w H10301 --field cn --fc 21 --cn 200 -d 2000
    lf hid brute -v -w H10301 --field fc --fc 21 --cn 200 -d 2000 --up