miqueet

Caution

This guide is out of date, follow the new guide here: https://flipper.wiki/mifareclassic/

MIFARE Classic

Here are the steps to follow in order to read your cards. Your goal is to find as many keys as possible. The keys unlock sections of your card for the Flipper to read them - you must have a card. Once you read enough sections, you can use an emulated or cloned card at the original card reader to unlock it (sometimes even without finding all of the keys!).

Important

Major update coming in first update following OFW 1.0.0 (ETA: mid to late September) which overhauls and simplifies this process:

Learn Go in ~5mins

This is inspired by A half-hour to learn Rust and Zig in 30 minutes.

Basics

Your first Go program as a classical "Hello World" is pretty simple:

First we create a workspace for our project:

Installing Python 3.5 on Debian Jessie with `pyenv`

Debian Jessie does not come with the correct Python version out of the box, and instead comes with Python 2. To be able to install Python 3(.5), we have a few options. We could build and install from source, but as per Debian's website, we shouldn't do this. Instead, we will use pyenv, a tool that allows users to switch Python versions easily without breaking their system.

Installing `pyenv`

To install pyenv, we will use the official installer.

curl -L https://raw.githubusercontent.com/yyuu/pyenv-installer/master/bin/pyenv-installer | bash

Processing JSON using jq

jq is useful to slice, filter, map and transform structured json data.

Installing jq

On Mac OS

brew install jq

	class E(BaseException):
	def __new__(cls, args, *kwargs):
	return cls
	def a(): yield
	a().throw(E)

	/* Android ssl certificate pinning bypass script for various methods
	by Maurizio Siddu

	Run with:
	frida -U -f <APP_ID> -l frida_multiple_unpinning.js [--no-pause]
	*/

	setTimeout(function() {
	Java.perform(function() {
	console.log('');

	#!/usr/bin/env bash
	#
	# Upload a sample to VirusTotal and pretty print the report.
	# All in a handy alias.
	#
	# Dependencies:
	#
	# * curl
	# * jq
	# * VirusTotal API key

	## If the wireshark "Export Objects" does not work well, you can still extract the files manually.

	## If the file data is present in SMB "Write" packet...

	1. Choose the "Write Request" packet which contains the file data you're interested
	2. Open the "Data" section and highlight "Data:" and right click on it
	3. You can either...
	A. Choose "Copy" > "as a Hex Stream" and paste the data in note pad.
	B. Choose "Export Packet Bytes" and save each data as file.
	NOTE: Order of the packet is very important! Pay attention to the data offset value. Make sure to get the data in right order!

	#!/usr/bin/python
	# cropamz.py
	# by Dan Nunn
	# 2016-08-20

	from pyPdf import PdfFileWriter, PdfFileReader
	import sys
	import os.path

	# Default the filename to the first argument, otherwise use package.pdf

	username = raw_input("Enter SSH username:")
	yubikey_string = getpass.getpass('Enter YubiKey OTP:')

	client = paramiko.client.SSHClient()

	# Any means of getting the PKey will do. This code assumes you've only got one key loaded in your active ssh-agent.
	# See also:
	# - http://docs.paramiko.org/en/1.17/api/keys.html#paramiko.pkey.PKey
	# - http://docs.paramiko.org/en/1.17/api/client.html#paramiko.client.SSHClient.connect
	my_pkey = paramiko.agent.Agent().get_keys()[0]