Proxmark3 (Iceman) v4.21611

Release v4.21611 Nickname "BREAKMEIFYOUCAN!"

CHANGELOG - [BREAKMEIFYOUCAN!][2026-04-14]

• Fixed hf mf wrbl and hf mfp wrbl the ACL RO checks on 16-block sectors correct (@team-orangeBlue)
• Changed hf mfp wrbl command to check for Sector Trailer errors that could potentially lock sectors out (@team-orangeBlue)
• Changed hf felica info and hf felica rqsyscode system code name annotation (@kormax)
• Added lf relay command where it relays between two pm3 devices over internet. Thanks to Moerno for the code! (@iceman1001)
• Changed hf mf acl command to have more recognized generic configurations (@team-orangeBlue)
• Added hf mfp acl command (@team-orangeBlue)
• Modified data_hex_crc.lua script, it now takes a -s parameter and the output is now in alternative row colors. (@iceman1001)
• Added hf mfdes brutedamslot command (@kormax)
• Added hf mfdes getdelegateappinfo command (@kormax)
• Added hf secc info command to retrieve the Card Recognition Template(@antiklesys)
• Added hf mfdes createdelegateapp command (@kormax)
• Optimized hf iclass legbrute throughput: replaced recursive suc()/output() cipher functions with iterative loops, added 256-entry LUT for the select() function eliminating redundant bit arithmetic and halving key lookups per state step, switched successor state to in-place pointer update removing per-call struct copies, added doMAC_brute() with byte-wise LSB-first processing and direct output bit packing eliminating all bitstream struct overhead and output reversal calls per key candidate, and replaced per-iteration 64-bit modulo progress check with a countdown counter (@antiklesys)
• Improved hf iclass legbrute fixed multithreaded key-range partitioning so threads cover non-overlapping slices of the 40-bit keyspace, added ETA display, keyboard abort with resume hint, _Atomic correctness for shared state, pthread_create error handling, and thread count capped at available CPUs (@antiklesys)
• Changed hf secc sim it nows supports wildcard to payloads (@antiklesys)
• Added hf secc to build a base for simulating basic function of iclass SE config cards (@antiklesys)
• Changed hf iclass view , improved SIO parsing for based on @Iceman1001's "Dismantling the SEOS Protocol" talk (@antiklesys)
• Changed hf iclass tagsim added live fc/cn update to refreshing the csn with each update (@antiklesys)
• Added --live option to hf iclass lookup command to perform a live recovery of the reader's key by simulating a tag and running the lookup command against both standard and elite dictionaries (@antiklesys)
• Added hf iclass tagsim command to quickly simulate an iclass card based on facility code and card number(@antiklesys)
• Added -f parameter to hf iclass sam command to use the sam to parse a card dump (@antiklesys)
• Fixed WTX response behavior in ExchangeRaw14A() (@team-orangeBlue)
• Added -t / --timeout option for hf 15 sim (@recursivenomad)
• Added --aid parameter to hf seos commands (@kormax)
• Added hf iclass blacktears command to perform an automated tearoff of block 1 to set non-secure page mode(@antiklesys)
• Changed wiegand encoding to use shared helpers and have unified parameters (--raw, --bin, --new, --wiegand, etc.) (@cindersocket)
• Added hf gst read command (@kormax)
• Added hf gst info command (@kormax)
• Added hf 14b tearoff - interactive ST25TB/SRx monotonic counter tear-off attack (@xNovyz)
• Fixed missing WDT_HIT() in Get14443bAnswerFromTag() DMA polling loop causing hardware watchdog reboot on SSC clock stall (@xNovyz)
• Added hf vas info command (@kormax)
• Changed wiegand encode / wiegand decode - added support for encoding and decoding the new 96-bit ASN.1 encoded format, --bin encoding, verbose PACS encoding output, and explicit rejection of raw/binary decodes above 96 bits (@cindersocket)
• Added Mifare Classic support to hf gallagher command (@pingu2211)
• Added hf felica discnodes command (@kormax)
• Added hf mfp dump command (@apply-science)
• Added hf felica seacinfo command (@kormax)
• Added hf mfdes bruteisofid and hf mfdes selectisofid commands (@kormax)
• Added DESFire AID values related to LEAF (@kormax)
• Added dict, ascii, mad presets for hf mfdes bruteaid (@kormax)
• Added tag loss detection & recovery into hf mfdes bruteaid (@kormax)
• Added hardening for all host binaries. Exact level of hardening depends on the OS (@doegox)
• Added hf aliro read command (@kormax)
• Added hf aliro info command (@kormax)
• Added Qt6 support for the client (@doegox)