Cracking from phone

[Stepzor11]

As a mere suggestion, consider to develop a script to run on Android and maybe iOS to calculate the keys (maybe after a manual import of the nonces from the Fipper's SD).
It would increase greatly the portability of the attack

[Suzanskiy]

Absolutely great idea. Currently we have to have notebook right in hand in order to crack card. But thank you for this opportunity as well!

[AloneLiberty]

Some info:

Android:
Script should work on Termux with version 2.2.2+, you can recover keys from files via phone.
Termux doesn't provide any serial ports (termux/termux-packages#4618 (comment)), only libusb access. It means full rewrite of bridge to support libusb. Same goes for TCP forwarding.
iOS:
iSH emulates x86, I think it's pretty self-explanatory.

[AloneLiberty]

You might check FAQ and --help to FlipperNestedRecovery, it's been around for a while 😉

[Stepzor11]

Thanks a lot!

Few questions, if you 'd like to answer:

Is it mandatory to keep the flipper connected the whole time?
What happens if it disconnects?

Screen lock on flipper seems like a disconnection, can you confirm?

Is it possible to run the script on a local file on the pc and import the result manually on flipper (to avoid the need of phisical connection, and maybe use a remote machine)?
It seems like with --file it could work, but if you are so kind to explain it better, especially what to do after the recovery, I'd really appreciate

[AloneLiberty]

If Flipper disconnects in recovery process - your keys will be saved in current directory, you will need to copy them into /ext/nfc/.nested/ directory manually (should add this to FAQ)

[AloneLiberty]

--file is actually only for debugging purpose, in any other case you should use real connection (for HardNested you must copy whole folder and etc)

[AloneLiberty]

After --file process is same as with disconnected Flipper (but in some cases you will need to fix file name, should be UID.keys, not UID.nonces.keys or others)

[Stepzor11]

I know I might sound boring, thanks for your patience. Which is the "current directory" where I'll find them? If I run the script on a local file ("--file" oprtion), which one should I choose? I see that in .nested folder there is a UID.nonces file and a UID folder, containing 0_0, 0_1, ect. nonces files

[Stepzor11]

Thanks a lot!

No more question right now ❤️

[Stepzor11]

Works greatly! ❤️

[Stepzor11]

Other suggestions:

it would be pretty useful to have the ability to stop the script, making it save the keys calculated until the stop.
Calculating all the keys might be a waste of time, plus you can deduct the other keys based on some sort of logic in the key generation (for example in a case I tested part of them are sequential).

Also being able to pause it, might be useful.

I hope that my thoughts can be useful.

Thanks for your great work!

[AloneLiberty]

I'd say pausing is impossible, but saving keys if stopped manually is great idea, I will implement it

[AloneLiberty]

Added in 2.3.1 version of FlipperNestedRecovery

[Stepzor11]

Happy to help 😁

…

________________________________ From: AloneLiberty ***@***.***> Sent: Saturday, May 6, 2023 1:23:39 AM To: AloneLiberty/FlipperNested ***@***.***> Cc: Stepzor11 ***@***.***>; Author ***@***.***> Subject: Re: [AloneLiberty/FlipperNested] Cracking from phone (Discussion #2) Added in 2.3.1 version of FlipperNestedRecovery — Reply to this email directly, view it on GitHub<#2 (reply in thread)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/A6CA2L5ONES6BFUKQCUYIWLXEWDXXANCNFSM6AAAAAAXUQHZKQ>. You are receiving this because you authored the thread.Message ID: ***@***.***>