picopass_scene_elite_dict_attack.c 12 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274
  1. #include "../picopass_i.h"
  2. #include <dolphin/dolphin.h>
  3. #include "../picopass_keys.h"
  4. #define PICOPASS_SCENE_DICT_ATTACK_KEYS_BATCH_UPDATE (10)
  5. #define TAG "PicopassSceneEliteDictAttack"
  6. enum {
  7. PicopassSceneEliteDictAttackDictEliteUser,
  8. PicopassSceneEliteDictAttackDictStandard,
  9. PicopassSceneEliteDictAttackDictElite,
  10. };
  11. const char* picopass_dict_name[] = {
  12. [PicopassSceneEliteDictAttackDictEliteUser] = "Elite User Dictionary",
  13. [PicopassSceneEliteDictAttackDictStandard] = "Standard System Dictionary",
  14. [PicopassSceneEliteDictAttackDictElite] = "Elite System Dictionary",
  15. };
  16. static bool picopass_elite_dict_attack_change_dict(Picopass* picopass) {
  17. bool success = false;
  18. do {
  19. uint32_t scene_state =
  20. scene_manager_get_scene_state(picopass->scene_manager, PicopassSceneEliteDictAttack);
  21. keys_dict_free(picopass->dict);
  22. picopass->dict = NULL;
  23. if(scene_state == PicopassSceneEliteDictAttackDictElite) break;
  24. if(scene_state == PicopassSceneEliteDictAttackDictEliteUser) {
  25. if(!keys_dict_check_presence(PICOPASS_ICLASS_STANDARD_DICT_FLIPPER_NAME)) break;
  26. picopass->dict = keys_dict_alloc(
  27. PICOPASS_ICLASS_STANDARD_DICT_FLIPPER_NAME,
  28. KeysDictModeOpenExisting,
  29. PICOPASS_KEY_LEN);
  30. scene_state = PicopassSceneEliteDictAttackDictStandard;
  31. } else if(scene_state == PicopassSceneEliteDictAttackDictStandard) {
  32. if(!keys_dict_check_presence(PICOPASS_ICLASS_ELITE_DICT_FLIPPER_NAME)) break;
  33. picopass->dict = keys_dict_alloc(
  34. PICOPASS_ICLASS_ELITE_DICT_FLIPPER_NAME,
  35. KeysDictModeOpenExisting,
  36. PICOPASS_KEY_LEN);
  37. scene_state = PicopassSceneEliteDictAttackDictElite;
  38. }
  39. picopass->dict_attack_ctx.total_keys = keys_dict_get_total_keys(picopass->dict);
  40. picopass->dict_attack_ctx.current_key = 0;
  41. picopass->dict_attack_ctx.name = picopass_dict_name[scene_state];
  42. scene_manager_set_scene_state(
  43. picopass->scene_manager, PicopassSceneEliteDictAttack, scene_state);
  44. success = true;
  45. } while(false);
  46. return success;
  47. }
  48. NfcCommand picopass_elite_dict_attack_worker_callback(PicopassPollerEvent event, void* context) {
  49. furi_assert(context);
  50. NfcCommand command = NfcCommandContinue;
  51. Picopass* picopass = context;
  52. if(event.type == PicopassPollerEventTypeRequestMode) {
  53. event.data->req_mode.mode = PicopassPollerModeRead;
  54. } else if(event.type == PicopassPollerEventTypeRequestKey) {
  55. uint8_t key[PICOPASS_KEY_LEN] = {};
  56. bool is_key_provided = true;
  57. if(!keys_dict_get_next_key(picopass->dict, key, PICOPASS_KEY_LEN)) {
  58. if(picopass_elite_dict_attack_change_dict(picopass)) {
  59. is_key_provided = keys_dict_get_next_key(picopass->dict, key, PICOPASS_KEY_LEN);
  60. view_dispatcher_send_custom_event(
  61. picopass->view_dispatcher, PicopassCustomEventDictAttackUpdateView);
  62. } else {
  63. is_key_provided = false;
  64. }
  65. }
  66. uint32_t scene_state =
  67. scene_manager_get_scene_state(picopass->scene_manager, PicopassSceneEliteDictAttack);
  68. memcpy(event.data->req_key.key, key, PICOPASS_KEY_LEN);
  69. event.data->req_key.is_elite_key =
  70. (scene_state != PicopassSceneEliteDictAttackDictStandard);
  71. event.data->req_key.is_key_provided = is_key_provided;
  72. if(is_key_provided) {
  73. picopass->dict_attack_ctx.current_key++;
  74. if(picopass->dict_attack_ctx.current_key %
  75. PICOPASS_SCENE_DICT_ATTACK_KEYS_BATCH_UPDATE ==
  76. 0) {
  77. view_dispatcher_send_custom_event(
  78. picopass->view_dispatcher, PicopassCustomEventDictAttackUpdateView);
  79. }
  80. }
  81. } else if(
  82. event.type == PicopassPollerEventTypeSuccess ||
  83. event.type == PicopassPollerEventTypeFail ||
  84. event.type == PicopassPollerEventTypeAuthFail) {
  85. const PicopassDeviceData* data = picopass_poller_get_data(picopass->poller);
  86. memcpy(&picopass->dev->dev_data, data, sizeof(PicopassDeviceData));
  87. view_dispatcher_send_custom_event(
  88. picopass->view_dispatcher, PicopassCustomEventPollerSuccess);
  89. } else if(event.type == PicopassPollerEventTypeCardLost) {
  90. picopass->dict_attack_ctx.card_detected = false;
  91. view_dispatcher_send_custom_event(
  92. picopass->view_dispatcher, PicopassCustomEventDictAttackUpdateView);
  93. } else if(event.type == PicopassPollerEventTypeCardDetected) {
  94. picopass->dict_attack_ctx.card_detected = true;
  95. view_dispatcher_send_custom_event(
  96. picopass->view_dispatcher, PicopassCustomEventDictAttackUpdateView);
  97. }
  98. return command;
  99. }
  100. static void picopass_scene_elite_dict_attack_update_view(Picopass* instance) {
  101. if(instance->dict_attack_ctx.card_detected) {
  102. dict_attack_set_card_detected(instance->dict_attack);
  103. dict_attack_set_header(instance->dict_attack, instance->dict_attack_ctx.name);
  104. dict_attack_set_total_dict_keys(
  105. instance->dict_attack, instance->dict_attack_ctx.total_keys);
  106. dict_attack_set_current_dict_key(
  107. instance->dict_attack, instance->dict_attack_ctx.current_key);
  108. } else {
  109. dict_attack_set_card_removed(instance->dict_attack);
  110. }
  111. }
  112. static void picopass_scene_elite_dict_attack_callback(void* context) {
  113. Picopass* instance = context;
  114. view_dispatcher_send_custom_event(
  115. instance->view_dispatcher, PicopassCustomEventDictAttackSkip);
  116. }
  117. void picopass_scene_elite_dict_attack_on_enter(void* context) {
  118. Picopass* picopass = context;
  119. dolphin_deed(DolphinDeedNfcRead);
  120. // Setup dict attack context
  121. uint32_t state = PicopassSceneEliteDictAttackDictEliteUser;
  122. bool use_user_dict = keys_dict_check_presence(PICOPASS_ICLASS_ELITE_DICT_USER_NAME);
  123. if(use_user_dict) {
  124. picopass->dict = keys_dict_alloc(
  125. PICOPASS_ICLASS_ELITE_DICT_USER_NAME, KeysDictModeOpenExisting, PICOPASS_KEY_LEN);
  126. if(keys_dict_get_total_keys(picopass->dict) == 0) {
  127. keys_dict_free(picopass->dict);
  128. use_user_dict = false;
  129. }
  130. }
  131. if(use_user_dict) {
  132. state = PicopassSceneEliteDictAttackDictEliteUser;
  133. } else {
  134. picopass->dict = keys_dict_alloc(
  135. PICOPASS_ICLASS_STANDARD_DICT_FLIPPER_NAME,
  136. KeysDictModeOpenExisting,
  137. PICOPASS_KEY_LEN);
  138. state = PicopassSceneEliteDictAttackDictStandard;
  139. }
  140. dict_attack_reset(picopass->dict_attack);
  141. picopass->dict_attack_ctx.card_detected = false;
  142. picopass->dict_attack_ctx.total_keys = keys_dict_get_total_keys(picopass->dict);
  143. picopass->dict_attack_ctx.current_key = 0;
  144. picopass->dict_attack_ctx.name = picopass_dict_name[state];
  145. scene_manager_set_scene_state(picopass->scene_manager, PicopassSceneEliteDictAttack, state);
  146. // Setup view
  147. picopass_scene_elite_dict_attack_update_view(picopass);
  148. dict_attack_set_callback(
  149. picopass->dict_attack, picopass_scene_elite_dict_attack_callback, picopass);
  150. // Start worker
  151. picopass->poller = picopass_poller_alloc(picopass->nfc);
  152. picopass_poller_start(picopass->poller, picopass_elite_dict_attack_worker_callback, picopass);
  153. view_dispatcher_switch_to_view(picopass->view_dispatcher, PicopassViewDictAttack);
  154. picopass_blink_start(picopass);
  155. }
  156. bool picopass_scene_elite_dict_attack_on_event(void* context, SceneManagerEvent event) {
  157. Picopass* picopass = context;
  158. bool consumed = false;
  159. PicopassDeviceAuthMethod auth = picopass->dev->dev_data.auth;
  160. if(event.type == SceneManagerEventTypeCustom) {
  161. if(event.event == PicopassCustomEventPollerSuccess) {
  162. if(memcmp(
  163. picopass->dev->dev_data.pacs.key,
  164. picopass_factory_debit_key,
  165. PICOPASS_BLOCK_LEN) == 0) {
  166. scene_manager_next_scene(picopass->scene_manager, PicopassSceneReadFactorySuccess);
  167. } else {
  168. if(auth == PicopassDeviceAuthMethodFailed && picopass->nr_mac_type == AutoNRMAC) {
  169. // save partial as <CSN>-partial
  170. picopass->dev->format = PicopassDeviceSaveFormatPartial;
  171. uint8_t* csn =
  172. picopass->dev->dev_data.card_data[PICOPASS_CSN_BLOCK_INDEX].data;
  173. for(size_t i = 0; i < PICOPASS_BLOCK_LEN; i++) {
  174. snprintf(
  175. picopass->text_store + 2 * i,
  176. sizeof(picopass->text_store),
  177. "%02X",
  178. csn[i]);
  179. }
  180. snprintf(
  181. picopass->text_store + 2 * PICOPASS_BLOCK_LEN,
  182. sizeof(picopass->text_store),
  183. "-partial");
  184. strlcpy(
  185. picopass->dev->dev_name,
  186. picopass->text_store,
  187. strlen(picopass->text_store) + 1);
  188. FURI_LOG_D(TAG, "Saving name: %s", picopass->text_store);
  189. picopass_device_delete(picopass->dev, true);
  190. if(picopass_device_save(picopass->dev, picopass->text_store)) {
  191. scene_manager_next_scene(picopass->scene_manager, PicopassSceneEmulate);
  192. } else {
  193. FURI_LOG_W(TAG, "Failed to save partial file");
  194. scene_manager_next_scene(
  195. picopass->scene_manager, PicopassSceneReadCardSuccess);
  196. }
  197. } else {
  198. scene_manager_next_scene(
  199. picopass->scene_manager, PicopassSceneReadCardSuccess);
  200. }
  201. }
  202. consumed = true;
  203. } else if(event.event == PicopassCustomEventDictAttackUpdateView) {
  204. picopass_scene_elite_dict_attack_update_view(picopass);
  205. consumed = true;
  206. } else if(event.event == PicopassCustomEventDictAttackSkip) {
  207. uint32_t scene_state = scene_manager_get_scene_state(
  208. picopass->scene_manager, PicopassSceneEliteDictAttack);
  209. if(scene_state != PicopassSceneEliteDictAttackDictElite) {
  210. picopass_elite_dict_attack_change_dict(picopass);
  211. picopass_scene_elite_dict_attack_update_view(picopass);
  212. } else {
  213. if(memcmp(
  214. picopass->dev->dev_data.pacs.key,
  215. picopass_factory_debit_key,
  216. PICOPASS_BLOCK_LEN) == 0) {
  217. scene_manager_next_scene(
  218. picopass->scene_manager, PicopassSceneReadFactorySuccess);
  219. } else {
  220. scene_manager_next_scene(
  221. picopass->scene_manager, PicopassSceneReadCardSuccess);
  222. }
  223. }
  224. consumed = true;
  225. }
  226. }
  227. return consumed;
  228. }
  229. void picopass_scene_elite_dict_attack_on_exit(void* context) {
  230. Picopass* picopass = context;
  231. if(picopass->dict) {
  232. keys_dict_free(picopass->dict);
  233. picopass->dict = NULL;
  234. }
  235. picopass->dict_attack_ctx.current_key = 0;
  236. picopass->dict_attack_ctx.total_keys = 0;
  237. picopass_poller_stop(picopass->poller);
  238. picopass_poller_free(picopass->poller);
  239. // Clear view
  240. popup_reset(picopass->popup);
  241. scene_manager_set_scene_state(
  242. picopass->scene_manager,
  243. PicopassSceneEliteDictAttack,
  244. PicopassSceneEliteDictAttackDictEliteUser);
  245. picopass_blink_stop(picopass);
  246. }