Skip to content
This repository has been archived by the owner on Jul 28, 2024. It is now read-only.

Commit

Permalink
Merge pull request #1 from arha/arha-bitwise
Browse files Browse the repository at this point in the history
  • Loading branch information
zacharyweiss authored Jan 30, 2023
2 parents fd112e3 + 33fcf44 commit c347fc5
Show file tree
Hide file tree
Showing 9 changed files with 400 additions and 1 deletion.
11 changes: 11 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -42,6 +42,17 @@ External RX options:
- Some read-head directly connected to GPIO, ADC'd, and parsed all on the Flipper. Likely the most compact and cheapest module option, but also would require the most work.
- USB HID input likely infeasible; seems the FZ cannot act as an HID host.

## arha-bitwise branch todo & notes
Attempting to exploit flipper hardware to some extent

- [X] Preprocess all MSR data into bitwise arrays, including manchester encoding.
- [ ] Feed bits from timers
- [ ] Sync to the lfrfid timer and experiment representing a field flip with a few cycles of a high frequency carrier, like the 125khz lfrfid one. Perhaps mag readers' frontends will lowpass such signals, and keep only the low frequency component, in an attempt to drown out nearby noise?
- [X] Can the CC1101 radio be used in any way? Driving it from GD0 can achieve 50us, or about 10khz. Probably more with sync/packet mode. **Currently under testing**. The signal is extra noisy with a very wide bandwidth, but, in theory, it can work
- [ ] Can the 5V pin act as a coil driver? I've read reports it can drive 0.4A, other reports it can drive 2A. It boils down to bq25896 being fast enough. Ref: bq25896_enable_otg, which will probably need bypassing kernel libs and calling furi_hal_i2c_tx/furi_hal_i2c_tx whatever calls from Cube libs.
- [ ] Investigate transparent mode on 3916
- [ ] Can the piezo be used at its resonant frequency? I've seen LF signals being emulated with [nothing but headphones](https://github.com/smre/DCF77/blob/master/DCF77.py#L124) running a subharmonic; the wheel brake on some carts seems to react to audiofreq signals (or the RF emission from driving a speaker)

----
## Credits
This project interpolates work from [Samy Kamkar's original MagSpoof project](https://github.com/samyk/magspoof), [dunaevai135 & AlexYaro's Flipper hackathon project](https://github.com/dunaevai135/flipperzero-firmware), and the Flipper team's [LF RFID](https://github.com/flipperdevices/flipperzero-firmware/tree/dev/applications/main/lfrfid) and [SubGhz](https://github.com/flipperdevices/flipperzero-firmware/tree/dev/applications/main/subghz) apps.
Expand Down
7 changes: 7 additions & 0 deletions assets/samy-javier-branch.mag
Original file line number Diff line number Diff line change
@@ -0,0 +1,7 @@
Filetype: Flipper Mag device
Version: 1
# Mag device track data
# found in samy magspoof branch f150bb783237051fba7e4e6ed96a722e542a9663, using as test data, card is long expired
Track 1: %B493173000682759^URISTA HDZ-IVAN JAVIER ^150220100234000000?
Track 2: ;493173000682759=15022100000234?
Track 3:
8 changes: 8 additions & 0 deletions assets/samy.mag
Original file line number Diff line number Diff line change
@@ -0,0 +1,8 @@
Filetype: Flipper Mag device
Version: 1
# Mag device track data
# Track 1: %B123456781234567^LASTNAME/FIRST^YYMMSSSDDDDDDDDDDDDDDDDDDDDDDDDD?
Track 1: %B426684131234567^LASTNAME/FIRST^YYMMSSSDDDDDDDDDDDDDDDDDDDDDDDDD?
# Track 2: ;123456781234567=YYMMSSSDDDDDDDDDDDDDD?
Track 2: ;426684131234567=230188855555555555555?
Track 3:
Loading

0 comments on commit c347fc5

Please sign in to comment.