From 83535bedcc87233ac56144d8da1c6798170b0e93 Mon Sep 17 00:00:00 2001 From: Eric Betts Date: Wed, 6 Dec 2023 07:35:31 -0800 Subject: [PATCH] Picopass: Update loclass notes (#80) --- .catalog/README.md | 16 +++++++++++----- 1 file changed, 11 insertions(+), 5 deletions(-) diff --git a/.catalog/README.md b/.catalog/README.md index 173702d25b2..af678273b94 100644 --- a/.catalog/README.md +++ b/.catalog/README.md @@ -3,19 +3,17 @@ This application allows you to read, write, save, and emulate legacy HID iClass cards and fobs (based on the picopass chipset). Also supports saving the credential to the Flipper Zero LFRFID data format, changing the keys on the card, performing dictionary attack, and performing the 'online' part of the loclass attack. -NOTE: Does not support iClass SE - # Loclass -The loclass attack emulates specific CSN and collects responses from the reader which can be used to calculate the elite or custom key configured for that reader. This key is then used to read data on the cards used with that reader. +The loclass attack emulates specific CSN and collects responses from the reader which can be used to calculate the elite or (some) custom key configured for that reader. This key is then used to read data on the cards used with that reader. ## Online part 1. Run _loclass_ from the picopass main menu -2. Present the flipper to the reader. +2. Present the flipper to the reader. Holding flipper directly to reader may not work, vary distance by a few inches. 3. Collect responses until the progress bar is full. -NOTE: If the screen says “Got std key” AND stays on 0/18, the reader is not elite or custom keyed. +NOTE: If the screen says “Got std key” AND stays on 0/18, then loclass isn't needed. ## Offline part @@ -24,3 +22,11 @@ NOTE: If the screen says “Got std key” AND stays on 0/18, the reader is not 3. Copy the key to _iclass_elite_dict_user.txt_ and place in _sdcard/apps_data/picopass/_ 4. Run _Elite Dict. Attack_ from the picopass main menu 5. Present card to the back of the Flipper Zero. + +## Failure + +There are some situations when the offline loclass may not find a key, such as: + * iClass SE + * Readers configured with Standard-2 keyset + * Custom keyed readers using Standard KDF + * Custom keyed readers using SE KDF