PM3 Commands Reference (Iceman Firmware):

Main Help


Current command:
lf t55xx bruteforce --help


This command uses bruteforce to scan a number range.
Try reading Page 0, block 7 before.

WARNING this may brick non-password protected chips!

usage:
    lf t55xx bruteforce [-h] -s <hex> -e <hex> [--r0] [--r1] [--r2] [--r3] [--all]

options:
    -h, --help                     This help
    -s, --start <hex>              search start password (4 hex bytes)
    -e, --end <hex>                search end password (4 hex bytes)
    --r0                           downlink - fixed bit length
    --r1                           downlink - long leading reference
    --r2                           downlink - leading zero
    --r3                           downlink - 1 of 4 coding reference
    --all                          try all downlink modes (def)

examples/notes:
    lf t55xx bruteforce --r2 -s aaaaaa77 -e aaaaaa99