# rfidresearchgroup/proxmark3

**Attribution required: if you use, quote, or summarise this content, you must credit and link back to [awesome-repositories.com](https://awesome-repositories.com/repository/rfidresearchgroup-proxmark3).**

5,240 stars · 1,273 forks · C · gpl-3.0

## Links

- GitHub: https://github.com/RfidResearchGroup/proxmark3
- Homepage: http://www.icedev.se
- awesome-repositories: https://awesome-repositories.com/repository/rfidresearchgroup-proxmark3.md

## Topics

`125khz` `clone` `contactless` `darkside` `hitag2` `iceman` `iclass` `iso14443a` `iso14443b` `iso15693` `mifare` `nfc` `pm3` `proxmark` `proxmark3` `rdv40` `rfid` `rrg` `simulate` `sniffer`

## Description

Proxmark3 is an open-source hardware tool for RFID research, analysis, security testing, protocol sniffing, tag cloning, and emulation. It operates across both low-frequency and high-frequency bands, providing a single platform for interacting with a wide range of contactless cards and tags including MIFARE, iCLASS, HID Prox, Hitag, Indala, and T55xx transponders.

The tool is built around an FPGA that handles direct RF signal demodulation and modulation, enabling raw waveform capture and decoding. It includes a cryptographic attack framework capable of recovering secret keys through nested, hardnested, and dictionary-based algorithms. A Lua scripting engine allows users to automate sequences of operations directly on the device, and the hardware supports multiple communication interfaces—USB serial, Bluetooth, UART, and MQTT—with the ability to switch between them without restarting. Standalone mode preloads compiled scripts into firmware so the device can operate independently of a host computer.

Beyond core identification and cloning, Proxmark3 supports detailed card memory operations, including file hierarchy navigation, value file management, and NDEF record writing. It can emulate both tags and card readers, execute contactless payment transactions for testing, and capture and decode raw RF signals. Additional capabilities include magic card manipulation with backdoor commands, Wiegand encoding and decoding, smart card communication via the ISO 7816 interface, and trace data export to PCAP for offline analysis. The repository provides a build system with support for custom installation paths and multi-platform firmware variants, along with optional feature toggles for GUI, Bluetooth, and Python.

## Tags

### Part of an Awesome List

- [RFID and NFC Security](https://awesome-repositories.com/f/awesome-lists/security/rfid-and-nfc-security.md) — Provides a hardware platform for reading, cloning, emulating, and analyzing low-frequency and high-frequency RFID tags.
- [RFID Security Analysis](https://awesome-repositories.com/f/awesome-lists/security/rfid-and-nfc-security/rfid-security-analysis.md) — Recovers secret keys from protected RFID tags using brute-force, nested, hardnested, and dictionary attacks.
- [Tag Memory Readers](https://awesome-repositories.com/f/awesome-lists/data/tagging-and-hierarchies/rfid-tag-inspectors/tag-memory-readers.md) — Reads and writes data on compatible low-frequency and high-frequency RFID tags using protocol commands. ([source](https://github.com/RfidResearchGroup/proxmark3/blob/master/doc/commands.md))
- [Card Key Updates](https://awesome-repositories.com/f/awesome-lists/security/authentication-and-keys/card-key-updates.md) — Updates cryptographic keys for applications and the master file on a card to re-authorize access. ([source](https://github.com/RfidResearchGroup/proxmark3/blob/master/doc/cipurse.md))
- [RFID Protocol Sniffing](https://awesome-repositories.com/f/awesome-lists/security/rfid-and-nfc-security/rfid-protocol-sniffing.md) — Captures wireless signals between readers and tags and decodes binary data for protocol analysis.
- [RFID Command Sniffing](https://awesome-repositories.com/f/awesome-lists/security/rfid-command-sniffing.md) — Captures raw commands from the reader field to reveal plaintext passwords in transit. ([source](https://github.com/RfidResearchGroup/proxmark3/blob/master/doc/T5577_Guide.md))

### Data & Databases

- [RFID Value File Operations](https://awesome-repositories.com/f/data-databases/database-management-systems/database-engines/nosql/key-value-stores/atomic-key-value-operations/rfid-value-file-operations.md) — Credits, debits, and reads value files with atomic operations and limit enforcement on smart cards. ([source](https://github.com/RfidResearchGroup/proxmark3/blob/master/doc/desfire.md))

### Development Tools & Productivity

- [RFID](https://awesome-repositories.com/f/development-tools-productivity/automation-scripts/rfid.md) — Runs custom scripts to automate sequences of card reading, writing, and testing operations.
- [Embedded Scripting Engines](https://awesome-repositories.com/f/development-tools-productivity/automation-scripting-engines/embedded-scripting-engines.md) — Embeds a Lua interpreter that exposes device commands and data buffers for automated test sequences.
- [Command Sequence Automation](https://awesome-repositories.com/f/development-tools-productivity/command-sequence-automation.md) — Runs sequences of commands from text files for automated repetitive RFID tasks. ([source](https://github.com/RfidResearchGroup/proxmark3/blob/master/doc/path_notes.md))
- [RFID Automation Scripts](https://awesome-repositories.com/f/development-tools-productivity/platform-script-execution/dynamic-script-execution-environments/inline-script-execution/scripted-crawler-execution/tcl-script-executions/rfid-automation-scripts.md) — Executes custom scripts for RFID chip identification, security testing, and card programming. ([source](https://github.com/RfidResearchGroup/proxmark3/blob/master/README.md))

### Hardware & IoT

- [Card Emulation](https://awesome-repositories.com/f/hardware-iot/card-emulation.md) — Mimics a standard card reader to interact with payment cards for testing or data capture. ([source](https://github.com/RfidResearchGroup/proxmark3/blob/master/doc/emv_notes.md))
- [UID Retrieval](https://awesome-repositories.com/f/hardware-iot/card-emulation/uid-retrieval.md) — Retrieves card UID, version, and lists applications and files for exploration. ([source](https://github.com/RfidResearchGroup/proxmark3/blob/master/doc/desfire.md))
- [RF Signal Processing Implementations](https://awesome-repositories.com/f/hardware-iot/radio-frequency-signal-processing/fpga-implementations/rf-signal-processing-implementations.md) — Uses an FPGA to directly sample, demodulate, and modulate raw radio waveforms for both low and high frequency bands.
- [Bitstream Decoders](https://awesome-repositories.com/f/hardware-iot/rf-signal-demodulation/bitstream-decoders.md) — Decodes captured RF signal traces into readable commands for protocol analysis and security testing. ([source](https://github.com/RfidResearchGroup/proxmark3/blob/master/CHANGELOG.md))
- [RFID Signal Capture](https://awesome-repositories.com/f/hardware-iot/rfid-signal-capture.md) — Acquires raw signal samples and saves or loads them from files for analysis. ([source](https://github.com/RfidResearchGroup/proxmark3/blob/master/doc/cheatsheet.md))
- [RFID Tag Emulation](https://awesome-repositories.com/f/hardware-iot/rfid-tag-emulation.md) — Copies memory from one RFID tag to another or simulates a tag's response to fool readers.
- [RFID Tag Recovery](https://awesome-repositories.com/f/hardware-iot/rfid-tag-recovery.md) — Recovers secret keys for protected RFID tags using brute-force and cryptographic attacks. ([source](https://github.com/RfidResearchGroup/proxmark3/blob/master/doc/commands.md))
- [Tag Data Extractors](https://awesome-repositories.com/f/hardware-iot/rfid-tag-recovery/tag-data-extractors.md) — Reads and extracts detailed information from ISO14443-A compliant RFID tags for analysis. ([source](https://github.com/RfidResearchGroup/proxmark3/blob/master/doc/md/Use_of_Proxmark/3_Commands-and-Features.md))
- [Smart Card Data Writing](https://awesome-repositories.com/f/hardware-iot/smart-card-data-writing.md) — Reads and writes binary data to files on smart cards with optional authentication and transaction commit. ([source](https://github.com/RfidResearchGroup/proxmark3/blob/master/doc/cipurse.md))
- [Standalone RFID Operations](https://awesome-repositories.com/f/hardware-iot/standalone-rfid-operations.md) — Executes pre-compiled modules to read, simulate, clone, or brute-force RFID tags without a host computer. ([source](https://github.com/RfidResearchGroup/proxmark3/wiki/Standalone-mode))
- [Wireless Tag Identification](https://awesome-repositories.com/f/hardware-iot/wireless-tag-identification.md) — Scans for common low-frequency and high-frequency tag types and reports known identifications. ([source](https://github.com/RfidResearchGroup/proxmark3/blob/master/doc/md/Use_of_Proxmark/3_Commands-and-Features.md))
- [Tag Cloning](https://awesome-repositories.com/f/hardware-iot/wireless-tag-identification/tag-cloning.md) — Copies full memory from one RFID tag to another compatible writable medium for duplication. ([source](https://github.com/RfidResearchGroup/proxmark3/blob/master/doc/commands.md))
- [Card Cryptographic Verification](https://awesome-repositories.com/f/hardware-iot/card-emulation/card-cryptographic-verification.md) — Verifies card cryptographic operations and extracts public keys to identify weaknesses. ([source](https://github.com/RfidResearchGroup/proxmark3/blob/master/doc/emv_notes.md))
- [Multi-Transport Serial Abstraction Layers](https://awesome-repositories.com/f/hardware-iot/integration-performance/hardware-interfacing-integration/hardware-interfacing/serial-communication-interfaces/multi-transport-serial-abstraction-layers.md) — Abstracts physical transport (USB, Bluetooth, UART, MQTT) behind a single serial command interface for remote operation.
- [NDEF Record Management](https://awesome-repositories.com/f/hardware-iot/ndef-record-management.md) — Writes an NDEF record onto a tag by creating the required application and file structure. ([source](https://github.com/RfidResearchGroup/proxmark3/blob/master/doc/ndef_type4a.md))
- [RFID Card Personalization](https://awesome-repositories.com/f/hardware-iot/rfid-card-personalization.md) — Formats the card, creates applications and files, then sets keys and attributes in order. ([source](https://github.com/RfidResearchGroup/proxmark3/blob/master/doc/cipurse.md))
- [Full Memory Structure Emulators](https://awesome-repositories.com/f/hardware-iot/rfid-tag-emulation/full-memory-structure-emulators.md) — Stores and reproduces the full memory structure of dumped tags for faithful replay during emulation.
- [File Type Operations](https://awesome-repositories.com/f/hardware-iot/smart-card-data-writing/file-type-operations.md) — Creates, deletes, reads, and writes standard, backup, and record files with configurable access rights on smart cards. ([source](https://github.com/RfidResearchGroup/proxmark3/blob/master/doc/desfire.md))
- [Smart Card Interfacing](https://awesome-repositories.com/f/hardware-iot/smart-card-interfacing.md) — Communicates with ISO 7816 smart cards for reading, writing, and security testing via the hardware interface. ([source](https://github.com/RfidResearchGroup/proxmark3/blob/master/doc/cheatsheet.md))
- [Lua Scripting Engines](https://awesome-repositories.com/f/hardware-iot/standalone-rfid-operations/lua-scripting-engines.md) — Ships a Lua scripting engine that automates RFID analysis workflows directly on the device.
- [Hitag Transponder Operations](https://awesome-repositories.com/f/hardware-iot/tag-application-management/hitag-transponder-operations.md) — Reads, sniffs, simulates, and writes to Hitag S and Hitag 2 transponders. ([source](https://github.com/RfidResearchGroup/proxmark3/blob/master/doc/cheatsheet.md))
- [HID Prox Card Operations](https://awesome-repositories.com/f/hardware-iot/wireless-tag-identification/tag-cloning/hid-prox-card-operations.md) — Reads, demodulates, simulates, clones, and brute-forces HID Prox cards on low frequency. ([source](https://github.com/RfidResearchGroup/proxmark3/blob/master/doc/cheatsheet.md))
- [iCLASS Tag Managers](https://awesome-repositories.com/f/hardware-iot/wireless-tag-identification/tag-cloning/iclass-tag-managers.md) — Reads, writes, dumps, simulates, clones, and cracks keys for iCLASS cards, including elite key computation. ([source](https://github.com/RfidResearchGroup/proxmark3/blob/master/doc/cheatsheet.md))
- [Indala Card Operations](https://awesome-repositories.com/f/hardware-iot/wireless-tag-identification/tag-cloning/indala-card-operations.md) — Reads, demodulates, simulates, and clones Indala cards. ([source](https://github.com/RfidResearchGroup/proxmark3/blob/master/doc/cheatsheet.md))
- [MIFARE Classic Tag Managers](https://awesome-repositories.com/f/hardware-iot/wireless-tag-identification/tag-cloning/mifare-classic-tag-readers/mifare-classic-tag-managers.md) — Reads, writes, dumps, cracks keys with dictionary or hardnested attacks, and clones MIFARE Classic cards. ([source](https://github.com/RfidResearchGroup/proxmark3/blob/master/doc/cheatsheet.md))
- [MIFARE Ultralight Tag Managers](https://awesome-repositories.com/f/hardware-iot/wireless-tag-identification/tag-cloning/mifare-classic-tag-readers/mifare-ultralight-tag-managers.md) — Reads and clones MIFARE Ultralight EV1 cards. ([source](https://github.com/RfidResearchGroup/proxmark3/blob/master/doc/cheatsheet.md))

### Operating Systems & Systems Programming

- [Tag Dump File Managers](https://awesome-repositories.com/f/operating-systems-systems-programming/kernel-core-internals/process-and-memory-management/memory-management-systems/memory-dump-parsers/system-memory-dump-importers/tag-dump-file-managers.md) — Reads memory from contactless tags and saves contents into local dump files for offline analysis. ([source](https://github.com/RfidResearchGroup/proxmark3/blob/master/CHANGELOG.md))
- [Tag Block Writers](https://awesome-repositories.com/f/operating-systems-systems-programming/raw-block-device-writing/tag-block-writers.md) — Reads or writes 32-bit hex data to individual blocks or dumps all blocks from a chip. ([source](https://github.com/RfidResearchGroup/proxmark3/blob/master/doc/T5577_Guide.md))
- [Tag Password Configuration](https://awesome-repositories.com/f/operating-systems-systems-programming/raw-block-device-writing/tag-block-writers/tag-block-readers/tag-password-configuration.md) — Sets a password in block 7 and enables it by modifying a bit in the configuration block. ([source](https://github.com/RfidResearchGroup/proxmark3/blob/master/doc/T5577_Guide.md))
- [Firmware Standalone Execution](https://awesome-repositories.com/f/operating-systems-systems-programming/firmware-standalone-execution.md) — Embeds a prebuilt standalone script into firmware to automatically run operations on power-up. ([source](https://github.com/RfidResearchGroup/proxmark3/blob/master/doc/md/Use_of_Proxmark/4_Advanced-compilation-parameters.md))
- [T55xx Transponder Configurations](https://awesome-repositories.com/f/operating-systems-systems-programming/raw-block-device-writing/tag-block-writers/t55xx-transponder-configurations.md) — Detects chip type, sets modulation, writes data blocks, and wipes T55xx transponders. ([source](https://github.com/RfidResearchGroup/proxmark3/blob/master/doc/cheatsheet.md))

### Security & Cryptography

- [RFID Key Recovery Algorithms](https://awesome-repositories.com/f/security-cryptography/brute-force-attack-preparation/rfid-key-recovery-algorithms.md) — Implements nested, hardnested, and dictionary-based key recovery algorithms that run entirely on the device.
- [Default Key Dictionaries](https://awesome-repositories.com/f/security-cryptography/default-key-dictionaries.md) — Uploads default key dictionaries into device persistent memory for common card types. ([source](https://github.com/RfidResearchGroup/proxmark3/blob/master/doc/cheatsheet.md))
- [EMV Card Scanning](https://awesome-repositories.com/f/security-cryptography/emv-card-scanning.md) — Reads all records from a payment card and exports them to a structured file for analysis. ([source](https://github.com/RfidResearchGroup/proxmark3/blob/master/doc/emv_notes.md))
- [Payment Card Authentication](https://awesome-repositories.com/f/security-cryptography/payment-card-authentication.md) — Authenticates to a card using different key types and secure channels for session establishment. ([source](https://github.com/RfidResearchGroup/proxmark3/blob/master/doc/desfire.md))
- [Master Key Extractions](https://awesome-repositories.com/f/security-cryptography/private-key-recovery/master-key-extractions.md) — Gathers cryptographic material from a reader by presenting chosen credentials, then computes the master key offline. ([source](https://github.com/RfidResearchGroup/proxmark3/blob/master/doc/loclass_notes.md))
- [Dictionary Attack Authenticators](https://awesome-repositories.com/f/security-cryptography/public-key-authentication/public-key-access-control/dictionary-attack-authenticators.md) — Performs cryptographic attacks to recover key material from a card using nested, hardnested, and dictionary methods. ([source](https://github.com/RfidResearchGroup/proxmark3/blob/master/CHANGELOG.md))
- [Smart Card Application Selection](https://awesome-repositories.com/f/security-cryptography/smart-card-application-selection.md) — Searches the card file system for installed payment applets and selects them via standard methods. ([source](https://github.com/RfidResearchGroup/proxmark3/blob/master/doc/emv_notes.md))
- [Contactless Authentication Testers](https://awesome-repositories.com/f/security-cryptography/vulnerability-assessment-testing/security-testing-auditing/contactless-authentication-testers.md) — Runs contactless payment transactions with configurable settings for major card networks. ([source](https://github.com/RfidResearchGroup/proxmark3/blob/master/doc/emv_notes.md))
- [RFID Tag Secret Brute-Forcers](https://awesome-repositories.com/f/security-cryptography/brute-force-protections/two-factor-code-brute-forcing/rfid-reader-brute-forcing/rfid-tag-secret-brute-forcers.md) — Tries possible keys, facility codes, or card numbers to unlock or identify unknown tags. ([source](https://github.com/RfidResearchGroup/proxmark3/blob/master/armsrc/Standalone/readme.md))
- [EMV Transaction Simulation](https://awesome-repositories.com/f/security-cryptography/emv-transaction-simulation.md) — Interacts with EMV payment cards, simulates readers, and analyzes transaction data for security testing.
- [Non-Standard Card Protocols](https://awesome-repositories.com/f/security-cryptography/identity-access-management/authentication-strategies/machine-and-protocol-identity/specialized-authentication-protocols/non-standard-card-protocols.md) — Executes protocol-specific commands for managing cards using non-standard formats. ([source](https://github.com/RfidResearchGroup/proxmark3/blob/master/CHANGELOG.md))

### Mobile Development

- [Standalone Firmware Mode Development](https://awesome-repositories.com/f/mobile-development/mobile-operating-systems/firmware-customization-tools/custom-firmware-integration-systems/custom-hardware-firmware/standalone-firmware-mode-development.md) — Links precompiled scripts into firmware for automatic execution on power-up, enabling standalone tag emulation or brute-forcing.

### Networking & Communication

- [Wiegand Protocol Encoders](https://awesome-repositories.com/f/networking-communication/wiegand-protocol-encoders.md) — Converts facility codes, card numbers, and OEM fields into raw Wiegand hex strings and vice versa. ([source](https://github.com/RfidResearchGroup/proxmark3/blob/master/doc/cheatsheet.md))