doc/jooki_notes.md

   1 # Jooki Figurine Notes
   2 - NTAG213 (Should be tested if other NTAG2xx work)
   3 - A single NDEF record of type URL
   4 - Physical figurines are Fox, Dragon, Knight, Ghost, Whale, Generic Flat. Than there are variations of those figures with different colors.
   5
   6 ## Jooki proxmark commands
   7 You can `encode`, `decode` a NDEF record, write with `clone` a record to a card or simulate with`sim`.
   8
   9 ### Decoding NDEF URL parameter
  10 `hf jooki decode -d g+t07s57aX1bB6tk`
  11
  12 ### Encoding NDEF record
  13 You can either use figurine abbreviation arguments:
  14 ```
  15     --dragon
  16     --fox
  17     --ghost
  18     --knight
  19     --whale
  20     --blackdragon
  21     --blackfox
  22     --blackknight
  23     --blackwhale
  24     --whitedragon
  25     --whitefox
  26     --whiteknight
  27     --whitewhale
  28 ```
  29 Or pass directly the figurine type id `--tid` and figurine id `--fid`
  30
  31 Example encoding NDEF record for UID `04010203040506`
  32
  33 `hf jooki encode --uid 04010203040506 --tid 1 --fid 1`
  34
  35 or use `--dragon` parameter to achieve the same:
  36
  37
  38 `hf jooki encode --uid 04010203040506 --dragon`
  39
  40 Output:
  41 ```
  42 [=] Encoded URL.. 67 2B 74 30 37 73 35 37 61 58 31 62  ( g+t07s57aX1bB6tk )
  43 [=] Figurine..... 01 00 - Figurine, Dragon
  44 [=] iv........... 80 77 51
  45 [=] uid.......... 04 01 02 03 04 05 06
  46 [=] NDEF raw..... 0103A00C340329D101255504732E6A6F6F6B692E726F636B732F732F3F733D672B743037733537615831624236746B0AFE000000
  47 ```
  48
  49 Use `-r` parameter to read UID directly from tag.
  50
  51 ### Simulation
  52 To simulate the above figurine use the encoded URL parameter given in `encode` output and type following command into your proxmark:
  53
  54 `hf jooki sim -b g+t07s57aX1bB6tk`
  55
  56 If no parameter is given to the simulation command, last loaded dump is used.
  57
  58 ### Cloning to a NTAG213 tag
  59 ```
  60     hf jooki clone [-h] [-b <base64>] [-d <hex>] [-p <hex>]
  61
  62 options:
  63     -h, --help                     This help
  64     -b, --b64 <base64>             base64 url parameter
  65     -d, --data <hex>               raw NDEF bytes
  66     -p, --pwd <hex>                password for authentication (EV1/NTAG 4 bytes)
  67
  68 examples/notes:
  69     hf jooki clone -d <hex bytes>  -> where hex is raw NDEFhf jooki clone --b64 7WzlgEzqLgwTnWNy --> using base64 url parameter
  70 ```
  71
  72 Use either the above NDEF raw output from `encode` to write a new record to a tag:
  73
  74 `hf jooki clone -d 0103A00C340329D101255504732E6A6F6F6B692E726F636B732F732F3F733D672B743037733537615831624236746B0AFE000000`
  75
  76 or use the base64 encoded parameter to clone:
  77
  78 `hf jooki clone -b A5wlbrkq6QoKh9w1
  79
  80
  81 Note: Jooki doesn't like more than one NDEF record, so make sure you just have one. Check with `hf mfu ndef`
  82
  83 ### List of known figurine types
  84 `Value`|`Figurine Type`|
  85 |------|---------------|
  86 **01** | Stones |
  87 **02** | Generic Flat |
  88 **03** | System Commands |
  89 **04** | Tests |
  90
  91 | `Figurine Type` | `Figurine ID` | `Figurine`           |
  92 |---------------|-------------|--------------------------|
  93 | 01            | 00          | 狐狸 Fox                 |
  94 | 01            | 01          | 龙 Dragon                |
  95 | 01            | 02          | 骑士 Knight              |
  96 | 01            | 03          | 鬼 Ghost                 |
  97 | 01            | 04          | 鲸 Whale                 |
  98 | 01            | 05          | ThankYou                 |
  99 | 01            | 06          | Black.Fox                |
 100 | 01            | 07          | Black.Dragon             |
 101 | 01            | 08          | Black.Whale              |
 102 | 01            | 09          | Black.Knight             |
 103 | 01            | 0a          | White.Fox                |
 104 | 01            | 0b          | White.Dragon             |
 105 | 01            | 0c          | White.Whale              |
 106 | 01            | 0d          | White.Knight             |
 107 |               |             |                          |
 108 |     `02`      |             |      `Generic Flat`      |
 109 | 02            | 00          | 圆盘 Generic Flat        |
 110 | 02            | 01          | unknown_0201             |
 111 |               |             |                          |
 112 |     `03`      |             |    `System Commands`     |
 113 | 03            | 00          | sys.record               |
 114 | 03            | 01          | sys.factory_mode_on      |
 115 | 03            | 02          | sys.factory_mode_off     |
 116 | 03            | 03          | sys.airplane_mode_on     |
 117 | 03            | 04          | sys.airplane_mode_off    |
 118 | 03            | 05          | sys.toy_safe_on          |
 119 | 03            | 06          | sys.toy_safe_off         |
 120 | 03            | 07          | sys.wifi_on              |
 121 | 03            | 08          | sys.wifi_off             |
 122 | 03            | 09          | sys.bt_on                |
 123 | 03            | 0a          | sys.bt_off               |
 124 | 03            | 0b          | sys.production_finished  |
 125 |               |             |                          |
 126 |     `04`      |             |         `Tests`          |
 127 | 04            | 00          | Hello test.0             |
 128 | 04            | 01          | Hello test.1             |
 129 | 04            | 02          | Hello test.2             |
 130 | 04            | 03          | Hello test.3             |
 131 | 04            | 04          | Hello test.4             |
 132 | 04            | 05          | Hello test.5             |
 133 | 04            | 06          | Hello test.6             |
 134 | 04            | 07          | Hello test.7             |
 135 | 04            | 08          | Hello test.8             |
 136 | 04            | 09          | Hello test.9             |
 137 | 04            | 0a          | Hello unknown_040A       |
 138 | 04            | 10          | Hello test.10            |
 139 | 04            | 11          | Hello test.11            |
 140 | 04            | 12          | Hello test.12            |
 141 | 04            | 13          | Hello test.13            |
 142 | 04            | 14          | Hello test.14            |
 143 | 04            | 15          | Hello test.15            |
 144 | 04            | 16          | Hello test.16            |
 145 | 04            | 17          | Hello test.17            |
 146 | 04            | 18          | Hello test.18            |
 147 | 04            | 19          | Hello test.19            |
 148