Skip to content

Conversation

@azuwis
Copy link
Contributor

@azuwis azuwis commented Oct 13, 2025

Close #304

hf 14a config usage:

[USB] chameleon --> hf 14a config --help
--------------------------------------------------------------------------------
hf 14a config

Configure 14a settings (use with caution)

usage:
  hf 14a config [-h] [--std] [--bcc {std,fix,ignore}] [--cl2 {std,force,skip}] [--cl3 {std,force,skip}] [--rats {std,force,skip}]

options:
  -h, --help            show this help message and exit
  --std                 Reset default configuration (follow standard)
  --bcc {std,fix,ignore}
                        follow standard / fix bad BCC / ignore bad BCC, always use card BCC
  --cl2 {std,force,skip}
                        follow standard / always do CL2 / always skip CL2
  --cl3 {std,force,skip}
                        follow standard / always do CL3 / always skip CL3
  --rats {std,force,skip}
                        follow standard / always do RATS / always skip RATS

Soft-brick a Gen2 magic card:

[USB] chameleon --> hf mf wrbl --blk 0 -k FFFFFFFFFFFF -d 11223344000000000000000000000000
 - Write done.
[USB] chameleon --> hf 14a scan
HF tag uid bcc error

Fix the soft-bricked Gen2 magic card:

[USB] chameleon --> hf 14a config --bcc ignore
HF 14a config
 - BCC override: ignore ( ignore bad BCC, always use card BCC )
 - CL2 override: std ( follow standard )
 - CL3 override: std ( follow standard )
 - RATS override: std ( follow standard )
[USB] chameleon --> hf 14a scan
- UID  : 11223344
- ATQA : 0000 (0x0000)
- SAK  : 08
[USB] chameleon --> hf mf wrbl --blk 0 -k FFFFFFFFFFFF -d 11223344440804000000000000000000
 - Write done.
[USB] chameleon --> hf 14a config --std
HF 14a config
 - BCC override: std ( follow standard )
 - CL2 override: std ( follow standard )
 - CL3 override: std ( follow standard )
 - RATS override: std ( follow standard )
[USB] chameleon --> hf 14a scan
- UID  : 11223344
- ATQA : 0400 (0x0004)
- SAK  : 08

I'm not sure about the CL2 CL3 implementation, don't have a capable tag to test.

@github-actions
Copy link

You are welcome to add an entry to the CHANGELOG.md as well

@github-actions
Copy link

github-actions bot commented Oct 13, 2025

Built artifacts for commit dc21269

Firmware

Client

@azuwis
Copy link
Contributor Author

azuwis commented Oct 16, 2025

  • Rebase to main
  • Use color_string()
  • Add changelog

@azuwis
Copy link
Contributor Author

azuwis commented Nov 3, 2025

@doegox @Foxushka @GameTec-live Can you please take a look?

Reference:

Using this, I've successfully recovered a gen 2 card (incorrect usage of MIFARE Classic Tool, directly modified UID of a dump and write to block 0).

@GameTec-live
Copy link
Contributor

Well, someone needs to do testing, then were basically good...
Im busy tho, so maybe someone else 🤷

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[idea] Ignore incorrect BCC when selecting tag

2 participants