PM3 Commands Reference (Iceman Firmware):

Updated: January 2025

Main Help


Up One Level


Current command:
lf hitag hts rdbl --help


Read Hitag S memory.

  Crypto mode: 
    - key format ISK high + ISK low
    - default key 4F4E4D494B52 (ONMIKR)

  8268/8310 password mode: 
    - default password BBDD3399

usage:
    lf hitag hts rdbl [-c <dec>]

options:
    -h, --help                     This help
    -8, --82xx                     8268/8310 mode
    --nrar <hex>                   nonce / answer writer, 8 hex bytes
    --crypto                       crypto mode
    -k, --key <hex>                pwd or key, 4 or 6 hex bytes
    -m, --mode <dec>               response protocol mode. 0 (Standard 00110), 1 (Advanced 11000), 2 (Advanced 11001), 3 (Fast Advanced 11010) (def: 3)
    -p, --page <dec>               page address to read from
    -c, --count <dec>              how many pages to read. '0' reads all pages up to the end page (def: 1)

examples/notes:
    lf hitag hts rdbl -p 1                             -> Hitag S/8211, plain mode
    lf hitag hts rdbl -p 1 --82xx -k BBDD3399          -> 8268/8310, password mode
    lf hitag hts rdbl -p 1 --nrar 0102030411223344     -> Hitag S, challenge mode
    lf hitag hts rdbl -p 1 --crypto                    -> Hitag S, crypto mode, def key
    lf hitag hts rdbl -p 1 -k 4F4E4D494B52             -> Hitag S, crypto mode