Releases: RfidResearchGroup/ChameleonUltra
Release list
Development release
Auto-Generated DFU packages from latest main commit.
For development purposes only.
These are not tested, here be dragons.
Built from commit 0c1d579
What's Changed
- Export low-level ISO14443-4 handling by @aaronjamt in #443
- Fix ISO14443-4 block values by @aaronjamt in #446
- perf(lf): drop double-precision sqrt from FSK demod hot path by @wereii in #451
- Add SEOS emulation support by @aaronjamt in #447
- feat: split linter and formatting check by @GameTec-live in #429
New Contributors
- @aaronjamt made their first contribution in #443
- @wereii made their first contribution in #451
Full Changelog: v2.2.0...dev
Release v2.2.0
Auto-Generated DFU packages for Release v2.2.0
Built from commit f349dbe
What's Changed
- Fix for mf static nested key recovery by @jekkos in #285
- Add option for NFC Field Generator by @RocketGod-git in #294
- Use a function for colored strings by @mischif in #295
- Fix error in
lf em 410x readfrom color_string() by @brewt in #315 - Fix LEDs being stuck on after battery check by @suut in #331
- Fix some bugs & Performance improvement by @xianglin1998 in #299
- TCP transport in the CLI to support Android (Termux) by @suut in #337
- Fix typo in hid prox econfig and add ACTProx HID card type by @MusicLeecher in #341
- Fix HIDProx formatting with
hw slot listby @brewt in #316 - Fixed FAST_READ command and handling of dynamic and static locks for … by @dogty in #314
- Added FIELD_OFF_DO_RESET support to cli hf mf econfig by @tommiv in #342
- Fix Windows build by @suut in #345
- fix cli arg parser for FIELD_OFF_DO_RESET by @YuyangisCoding in #346
- Add Electra intercom tag support with slot auto switch by @naaraxi in #338
- Add
hf 14a configto deal with badly configured cards by @azuwis in #307 - fix hidprox UnboundLocalError cli arg error + hidprox slot set warning by @RickConsole in #332
- Fix bad missing tools warning by @suut in #352
- Adds generic ADC read functionality by @merlokk in #306
- Fix compiler error `a label can only be part of a statement and a de… by @LupusE in #343
- Add CLI commands to dump and clone tag by @rickNmorty2 in #201
- Fix broken CLI after multiple merges by @LupusE in #355
- New Symmetrical LED Animation Mode and Improved Minimal Mode by @WillyJL in #363
- Add
hf mf autopwncommand with key saving and card dump by @luu176 in #364 - feat(lf): add ioProx support (read, emulate, clone) by @bernadic in #367
- feat(lf): add EM4x05/EM4x69 reader (RTF gap protocol) by @nieldk in #394
- feat(lf): add raw LF field ADC capture (lf sniff) by @nieldk in #395
- Revert "feat(lf): add raw LF field ADC capture (lf sniff)" by @GameTec-live in #398
- feat(lf): add raw LF field ADC capture (lf sniff) by @nieldk in #399
- feat(hf): add ISO14443A reader frame capture (hf 14a sniff) by @nieldk in #396
- feat(data): add LF capture analysis commands by @nieldk in #397
- Fix firmware application USB serial number by @taichunmin in #388
- feat(cli): integrate HardNested attack into autopwn by @Crazycurly in #389
- Add LF PAC/Stanley (125kHz) Support by @kevihiiin in #362
- Fix
param errorofhf mf esaveby @azuwis in #361 - feat: add Flipper Zero .nfc file importer for MFU/NTAG slots by @fmuk in #357
- T55xx clone by @nieldk in #401
- fix: use native winpthreads for MinGW/MSYS2 Windows builds by @andrassmuk in #379
- Add iOS client "MCT Mifare Chameleon Tool" to compatible applications by @DGinefra in #403
- hf 14a sniff improvements for nonce collection and crack, fence to catch missing or blocked mfkey binaries by @nieldk in #406
- Support for changing the wake time in the client by @naaraxi in #387
- fix: hf14a_raw should return data bytes, not Response object by @azuwis in #419
- fix: hf mf eview param error due to chunk exceeding 32-block limit by @azuwis in #417
- T55write by @nieldk in #413
- feat(firmware): Add configurable PRNG type for MF1 emulator by @nieldk in #420
- Feature/lf: add IDTECK PSK1 tag emulation and T55xx clone by @matteoscrugli in #407
- Add Jablotron LF tag support (read, emulate, write to T55xx) by @midlan in #404
- Fix state machine behavior and access bits verification in MF1 emulation by @unkernet in #274
- fix: resolve binary tools detection after PyInstaller packaging by @bob-zebedy in #317
New Contributors
- @jekkos made their first contribution in #285
- @RocketGod-git made their first contribution in #294
- @mischif made their first contribution in #295
- @brewt made their first contribution in #315
- @suut made their first contribution in #331
- @MusicLeecher made their first contribution in #341
- @dogty made their first contribution in #314
- @tommiv made their first contribution in #342
- @YuyangisCoding made their first contribution in #346
- @naaraxi made their first contribution in #338
- @RickConsole made their first contribution in #332
- @merlokk made their first contribution in #306
- @LupusE made their first contribution in #343
- @rickNmorty2 made their first contribution in #201
- @WillyJL made their first contribution in #363
- @luu176 made their first contribution in #364
- @bernadic made their first contribution in #367
- @Crazycurly made their first contribution in #389
- @kevihiiin made their first contribution in #362
- @fmuk made their first contribution in #357
- @andrassmuk made their first contribution in #379
- @DGinefra made their first contribution in #403
- @matteoscrugli made their first contribution in #407
- @midlan made their first contribution in #404
- @bob-zebedy made their first contribution in #317
Full Changelog: v2.1.0...v2.2.0
Release v2.1.0
Auto-Generated DFU packages for Release v2.1.0
Built from commit 212a9ce
What's Changed
- Add client PyInstaller support by @augustozanellato in #159
- doc: expand CU GUI docs by @GameTec-live in #158
- Rework cli by @doegox in #168
- Fix factory reset hang/wdt reset by @augustozanellato in #170
- doc: finally add linux by @GameTec-live in #172
- Fix ATS handling in tags that NAK RATS by @augustozanellato in #174
- Change git version to version tag instead of dev tag. by @taichunmin in #178
- doc: Add CUGUI troubleshooting entry by @GameTec-live in #184
- Added support for mifare classic value block operations by @taichunmin in #180
- doc: Add box net and vectortraced boxart and troubleshooting entry by @GameTec-live in #186
- CLI: parallelize mfkey32v2 processes by @p-l- in #187
- CLI: skip already used items in
hf mf elog --decryptby @p-l- in #189 - Docs for cli on MacOS by @bring42 in #190
- cli: fix unused target key type parameter for nested by @PetePriority in #204
- Added command to check keys of multiple sectors at once by @taichunmin in #199
- cli: Fix cmd_parameter generation for nested for python 3.9 by @PetePriority in #205
- Add CLI view commands to display memory content by @simonemarfo in #208
- Specify the Python version used by workflow as 3.12 by @xianglin1998 in #217
- Add support for Ultralight emulation. by @turbocool3r in #215
- Update MTools BLE documentation by @whywilson in #230
- Adding Authorized Distributors TechSecurityTools by @yanis333 in #207
- fix-LF-emulation by @Dmytro02 in #221
- Update chameleon_cli_unit.py by @nieldk in #248
- Fireman fork pr by @GameTec-live in #250
- complete hardnested attack implementation by @zeusricote in #254
- Mifare Ultralight - Shadowmode by @AbyssAndromalius in #251
- Fix incorrect slot LED indication when switching via CLI by @unkernet in #262
- Key recovery via backdoor for static encrypted nonce cards by @Foxushka in #263
- feat: add lf HIDProx read, t55xx write, emulate function by @TeCHiScy in #267
- Bump NETDATA_MAX_DATA_LENGTH from 512 to 4096 by @Foxushka in #273
- Add formatter and linter by @GameTec-live in #280
- Restore Python 3.9 compatibility for Chameleon CLI by @unkernet in #275
- feat: offline HIDProx tag copy by @TeCHiScy in #279
hf mf elog --decryptskip records with found keys by @taichunmin in #239- fix error response of cmd MF1_CHECK_KEYS_ON_BLOCK by @taichunmin in #281
- Use execute_tool to simplify running hardnested tool by @azuwis in #266
- Mifare Ultralight key logger from reader by @Foxushka in #276
- Add LF Viking support by @jamisonderek in #287
New Contributors
- @p-l- made their first contribution in #187
- @bring42 made their first contribution in #190
- @PetePriority made their first contribution in #204
- @simonemarfo made their first contribution in #208
- @turbocool3r made their first contribution in #215
- @yanis333 made their first contribution in #207
- @Dmytro02 made their first contribution in #221
- @nieldk made their first contribution in #248
- @zeusricote made their first contribution in #254
- @AbyssAndromalius made their first contribution in #251
- @unkernet made their first contribution in #262
- @TeCHiScy made their first contribution in #267
- @azuwis made their first contribution in #266
- @jamisonderek made their first contribution in #287
Full Changelog: v2.0.0...v2.1.0
Release v2.0.0
Auto-Generated DFU packages for Release v2.0.0
Built from commit 4747d38
What's Changed
- Changed APP_FW_VER now deduced from git tag vx.y.z (@doegox)
- Changed initial button wakeup from 4 to 8 seconds (@aramova)
- Added MIFARE Ultralight reading features (@FlUxIuS & @doegox)
- Fixed MF1 write mode SHADOW was not preserved properly (@doegox)
- Changed field LED now active also in reader mode to indicate that reader is powering the field (@doegox)
- Changed slot enabled logic: now we have separate enabled_hf and enabled_lf, changed GET_ENABLED_SLOTS and SET_SLOT_ENABLE (@doegox)
- Changed tag type enum to be ready for new types, changed stored slotConfig and GET_SLOT_INFO (@doegox)
- Added HF14A_RAW and its support in
hf 14a raw(@xianglin1998) - Removed MF1_DETECT_DARKSIDE (@doegox)
- Added MF1_STATIC_NESTED_ACQUIRE and its support in
hf mf nested(@xianglin1998) - Changed
hf 14a scan: Automatically send RATS to 14443-4a tags (@augustozanellato) - Changed Darkside: use LEDs for visual feedback of attack progression (@doegox)
- Changed Darkside: longer RF field off for reset and longer CLI timeout (@doegox)
- Fixed Darkside: parity byte-to-array bug made it low probability to succeed (@doegox)
- Changed
hw detection decryptshow progression and remove duplicate keys (@doegox) - Changed dynamic cmd_map_init() by static cmd_map initialization (@doegox)
- Changed
hf slot listto add clarity and colors (@doegox) - Changed
hf mf simandhf mf infoto support ATS (still to be used in actual emulation) (@doegox) - Changed
hf mf eloadandhf mf eread: uploads/downloads are now 30x faster (@doegox) - Changed CLI HF14AInfo logic merged inside HF14AScan for more consistent display of the results (@doegox)
- Added guessed type information for NXP tags, and reorganization of HF information part. (@FlUxIuS)
- Changed
hw rawto detail status message (@doegox) - Changed CLI to query capabilities on connect, not on every single command if device does not support get_device_capabilities (@doegox)
- Changed CLI to not instanciate ChameleonCMD on every single command (@doegox)
- Changed massively the protocol and its handlers for more consistency and easier maintenance and future dev (@doegox)
- Added
hf settings blepaircommand to get and set ble pairing enable state, and default disable ble pair (@xianglin1998) - Added
hf mf infocommand to get UID/SAK/ATQA from slot (@Foxushka) - Added
hw rawto send raw command to Chameleon (@Foxushka) - Added command to fetch all available commands from Chameleon and test if Chameleon supports it (@Foxushka)
- Fixed ChameleonLite emulation bug (@spp2000)
- Fixed MFC emulation issues with OEM readers, also temporarily disabling NFC_MF1_FAST_SIM (@xianglin1998)
- Fixed Chameleon crash during BLE pairing (@Foxushka)
- Fixed CLI takes into account Lite refusing to enter Reader mode (@doegox)
- Added BLE Security support (@xianglin1998)
- Added
hw settings blekeyto get and set ble connect key (@xianglin1998) - Added
hw ble bonds clearto delete all ble bonds (@xianglin1998) - Fixed argument completion bug inserting additional hyphens (@szymex73)
- Fixed device address not the same within app (@taichunmin)
- Added initial version of the user guides (@GameTec-live)
- Added support for pasting several command lines at once with prompt_toolkit (@doegox)
- Added support for interrupting sleep sequence with a button press during animation (@doegox)
- Fixed logs corruption and app reset on FDS write, added logs flush on sleep (@doegox)
- Added support for long-press of buttons (@nemanjan00)
- Changed
hw slot delete, now it can always delete from slot (@augustozanellato) - Changed CI pipeline (@augustozanellato)
- Added offline copy EM card uid for btnpress (@nemanjan00)
- Added offline copy ic card uid for btnpress (@xianglin1998)
- Added
hw settings btnpressto get and set button press function (@xianglin1998) - Added
hw batteryto get battery information (@xianglin1998) - Added
hw slot deleteto delete HF or LF out of a HF+LF slot (@augustozanellato) - Changed CLI prompt autocompletion, saved history and internal cmd registration (@szymex73)
- Fixed SDK NFC IRQ handler busy loop (@doegox)
- Added
hf mf ereadto download slot dump to file (@domints) - Added
lf em sim getand oldlf em simis nowlf em sim set(@domints) - Changed MF1 command ids (@domints)
- Changed nonce randomness on nested auth for hardnested attack (@Foxushka)
- Added commands to configure MF1 emulation magic modes and more (@Foxushka)
- Added
hw factory_resetto wipe user data (@augustozanellato) - Changed slot nickname encoding gbk -> utf8 (@doegox)
- Added 5-second watchdog (@doegox)
- Added option to enable NRF_LOG UART on SWO pin (@doegox)
- Added
hw slot list(@Foxushka) - Added
hw version(@nemanjan00 and @augustozanellato) - Fixed data sanity check in MF1 emulation (@sgnusov)
- Fixed settings/dumps/nicks data corruption in flash (@doegox)
- Fixed slot LED on button wake-up (@doegox)
- Added support for init, reset and migrate settings (@augustozanellato)
- Added support to save settings in flash (@domints)
- Added
hw settings animationto configure startup animation (@domints) - Fixed compilation warnings from SDK (@doegox)
- Changed TagSenseType, TagSpecificType and SlotNumber enums (@F9Alejandro and @doegox)
- Added support for 7-byte UID MF1 emulation (@xianglin1998)
- Added high perf MF1 emulation (@xianglin1998)
- Added udev rules file (@iceman1001)
- Added documentation to use BlackMagicProbe out of ST-Link and show RTT NRF_LOG (@doegox)
- Added
hw chipidandhw address(@gentilkiwi) - Added helper scripts to enter DFU from USB or BLE and flash over DFU (@doegox)
- Fixed recv thread exception after
hw dfu(@doegox) - Fixed entering sleep after BLE disconnection (@doegox)
- Added ChameleonLite and ChameleonUltra hardware resources (@xianglin1998)
- Added NTAG21x emulation support (@ca1e)
- Fixed LF EM410x emulation (@doegox)
- Added automatic file format detection in
hf mf eload(@GameTec-live) - Fixed CLI exit exception (@doegox)
- Added CI pipeline, producing DFU packages (@augustozanellato)
- Added docker toolchain (@augustozanellato)
- Added automatic port detection (@GameTec-live)
- Added GET_MF1_DETECTION_STATUS (@Foxushka)
- Fixed compilation errors with GCC 12 (@Foxushka)
- Added documentation for JLink (@xianglin1998)
- Added support for ST-Link and debugging documentation (@derGraph)
New Contributors
- @augustozanellato made their first contribution in #19
- @USBNinjaRRG made their first contribution in #21
- @doegox made their first contribution in #23
- @ca1e made their first contribution in #17
- @gentilkiwi made their first contribution in #40
- @Foxushka made their first contribution in #42
- @shallax made their first contribution in #45
- @domints made their first contribution in #50
- @sgnusov made their first contribution in #59
- @nemanjan00 made their first contribution in #54
- @F9Alejandro made their first contribution in #52
- @szymex73 made their first contribution in #66
- @m-kozlowski made their first contribution in #73
- @uhei made their first contribution in #98
- @taichunmin made their first contribution in #99
- @digitalcardboard made their first contribution in #109
- @drego85 made their first contribution in #115
- @mitmarcus made their first contribution in #119
- @xianglin1998 made their first contribution in #121
- @spp2000 made their first contribution in #122
- @whywilson made their first contribution in #130
- @aenigma-es made their first contribution in #140
- @aramova made their first contribution in #149
Full Changelog: v1.0...v2.0.0
Basic Factory Firmware
What are the features of this release?
- Factory production uses this version of firmware
- Basic simulation card and decryption card functions have been implemented
chameleon_XXX_app_update.zip
This zip file is an APP update package that can be updated through NRFUTIL or NRF DFU APP.
XXX.hex
This hex file is all in one(SD + BOOT + APP) fw file. you can flash using debug probe like JLINK or XXXLink etc.
Source code.XXX
You don't even know what this is? go ask Chatgpt.