Release v4.21611
Nickname "BREAKMEIFYOUCAN!"

CHANGELOG - [BREAKMEIFYOUCAN!][2026年04月14日]

• Fixed hf mf wrbl and hf mfp wrbl the ACL RO checks on 16-block sectors correct (@team-orangeBlue)
• Changed hf mfp wrbl command to check for Sector Trailer errors that could potentially lock sectors out (@team-orangeBlue)
• Changed hf felica info and hf felica rqsyscode system code name annotation (@kormax)
• Added lf relay command where it relays between two pm3 devices over internet. Thanks to Moerno for the code! (@iceman1001)
• Changed hf mf acl command to have more recognized generic configurations (@team-orangeBlue)
• Added hf mfp acl command (@team-orangeBlue)
• Modified data_hex_crc.lua script, it now takes a -s parameter and the output is now in alternative row colors. (@iceman1001)
• Added hf mfdes brutedamslot command (@kormax)
• Added hf mfdes getdelegateappinfo command (@kormax)
• Added hf secc info command to retrieve the Card Recognition Template(@Antiklesys)
• Added hf mfdes createdelegateapp command (@kormax)
• Optimized hf iclass legbrute throughput: replaced recursive suc()/output() cipher functions with iterative loops, added 256-entry LUT for the select() function eliminating redundant bit arithmetic and halving key lookups per state step, switched successor state to in-place pointer update removing per-call struct copies, added doMAC_brute() with byte-wise LSB-first processing and direct output bit packing eliminating all bitstream struct overhead and output reversal calls per key candidate, and replaced per-iteration 64-bit modulo progress check with a countdown counter (@Antiklesys)
• Improved hf iclass legbrute fixed multithreaded key-range partitioning so threads cover non-overlapping slices of the 40-bit keyspace, added ETA display, keyboard abort with resume hint, _Atomic correctness for shared state, pthread_create error handling, and thread count capped at available CPUs (@Antiklesys)
• Changed hf secc sim it nows supports wildcard to payloads (@Antiklesys)
• Added hf secc to build a base for simulating basic function of iclass SE config cards (@Antiklesys)
• Changed hf iclass view , improved SIO parsing for based on @iceman1001's "Dismantling the SEOS Protocol" talk (@Antiklesys)
• Changed hf iclass tagsim added live fc/cn update to refreshing the csn with each update (@Antiklesys)
• Added --live option to hf iclass lookup command to perform a live recovery of the reader's key by simulating a tag and running the lookup command against both standard and elite dictionaries (@Antiklesys)
• Added hf iclass tagsim command to quickly simulate an iclass card based on facility code and card number(@Antiklesys)
• Added -f parameter to hf iclass sam command to use the sam to parse a card dump (@Antiklesys)
• Fixed WTX response behavior in ExchangeRaw14A() (@team-orangeBlue)
• Added -t / --timeout option for hf 15 sim (@recursivenomad)
• Added --aid parameter to hf seos commands (@kormax)
• Added hf iclass blacktears command to perform an automated tearoff of block 1 to set non-secure page mode(@Antiklesys)
• Changed wiegand encoding to use shared helpers and have unified parameters (--raw, --bin, --new, --wiegand, etc.) (@cindersocket)
• Added hf gst read command (@kormax)
• Added hf gst info command (@kormax)
• Added hf 14b tearoff - interactive ST25TB/SRx monotonic counter tear-off attack (@xNovyz)
• Fixed missing WDT_HIT() in Get14443bAnswerFromTag() DMA polling loop causing hardware watchdog reboot on SSC clock stall (@xNovyz)
• Added hf vas info command (@kormax)
• Changed wiegand encode / wiegand decode - added support for encoding and decoding the new 96-bit ASN.1 encoded format, --bin encoding, verbose PACS encoding output, and explicit rejection of raw/binary decodes above 96 bits (@cindersocket)
• Added Mifare Classic support to hf gallagher command (@pingu2211)
• Added hf felica discnodes command (@kormax)
• Added hf mfp dump command (@apply-science)
• Added hf felica seacinfo command (@kormax)
• Added hf mfdes bruteisofid and hf mfdes selectisofid commands (@kormax)
• Added DESFire AID values related to LEAF (@kormax)
• Added dict, ascii, mad presets for hf mfdes bruteaid (@kormax)
• Added tag loss detection & recovery into hf mfdes bruteaid (@kormax)
• Added hardening for all host binaries. Exact level of hardening depends on the OS (@doegox)
• Added hf aliro read command (@kormax)
• Added hf aliro info command (@kormax)
• Added Qt6 support for the client (@doegox)

Contributors

• @doegox
• @kormax
• @Antiklesys
• @iceman1001
• @pingu2211
• @team-orangeBlue
• @xNovyz
• @apply-science
• @recursivenomad
• @cindersocket

Release v4.21128
Nickname "Permafrost"

CHANGELOG - [Permafrost][2026年02月25日]

 Added standalone mode HF_DOEGOX_AUTH0: UL-C / UL-AES unlocker (@doegox)
 Fixed lf t55xx wakeup options parsing (@suut)
 Added -- arg separator to client to pass following args to scripts (@doegox)
 Fixed ISO14443-4 type B NDEF workflow + parsing (@team-orangeBlue)
 Added Snapmaker U1 filament spool KDF in hf mf keygen (@Foxushka)
 Replaced hf mf bambukeys with hf mf keygen with multiple KDFs support (@Foxushka)
 Fix hf seos adf/pacs handling of cards with different diversifier lengths and different ADF OIDs (@nvx)
 Added data qrcode - to generate QR codes from inside the pm3 client (@iceman1001)
 Fix unicode on mingw/proxspace (@nvx)
 Fix hf felica raw - wrong length calculationes. Thanks @dxl for the solutions! (@iceman1001)
 Added basic QR code generation support. Thanks @mistial-dev for the idea! (@iceman1001)
 Added identification of NDEF/Open print tag record (@iceman1001)
 Added support for Bruce dump files [.rfid] (@iceman1001)
 Added script read_t-union.py (@klks)
 Added better ECP configuration aliases (@kormax)
 Added hf 14b config (@kormax);
 Added polling loop annotation support to hf 14b config (@kormax);
 Updated id48lib (adds unit tests, better build management) (@henrygab)
 Added two trace files for Ultralight AES (@iceman1001)
 Added support for Ultralight AES secure messaing in hf 14a raw (@iceman1001)
 Added support for Ultralight AES secure messaging in hf mfu info/rdbl/wrbl/dump/ndefread/wipe/setkey (@iceman1001)
 Added support for Ultralight AES auth in hf mfu info/rdbl/wrbl/dump/ndefread/wipe/setkey (@doegox)
 Added Ultralight AES basic DataProtKey emulation support (@doegox)
 Changed mem info and how the signature handling is done (@iceman1001)
 Added client/resources/pm3_generic_private_key.pem in order to self-sign a modded device (@iceman1001)
 Fix hf mfdes value --op clear commands for clearing more than 0x80000000 values and getfilesettings mac mode (@merlokk)
 Added ATR fingerprinting to hf 14a/14b info (@doegox)
 Added Verkada 40-bit format (@aaronmaxlevy)
 Added hf seos write command (@aaronjamt)
 Added hf seos sim command (@aaronjamt)
 Fix hf mf staticnested faild to find a KeyB (@xianglin1998)
 Fix errors(jansson) for MSYS2+UCRT compiler (@xianglin1998)
 Added Kaba evolo AIDs (@xtruan)

Release v4.20728
Nickname "Phrack"

CHANGELOG - Phrack [2025年09月11日]

• Change lf t55xx restore - now skips writing block0 if its all zeros (@iceman1001)
• Added HID Simplex Grinnell 36-bit - Improved Simplex decoder (@datafx, @henrygab)
• Change lf search - also test for chipset even if there was just signal noice (@iceman1001)
• Added detection of PCF 7961 , thanks progman (@iceman1001)
• Change reveng -g - now correctly take 1024 hexstring as input (@iceman1001)
• Added --override parameter to NDEF read for overriding MAD CRC check (@iceman1001)
• Added hf saflok commands (@STIEBELJOSHUA)
• Added ntag_clean.lua script for easier NTAG memory wipe (@trigat)
• Changed from Bigbuf malloc to Bigbuf calloc calls on device side (@iceman1001)
• Added lf t55xx view - now viewing of T55XX dump files is possible (@iceman1001)
• Fixed lf indala cone - now writing the right bits when using --fc and --cn
• Changed readline hack logic for async dbg msg to be ready for readline 8.3 (@doegox)
• Improved To avoid conflicts with ModemManager on Linux, is recommended to masking the service (@grugnoymeme)
• Changed data crypto - now also handles AES-256 (@iceman1001)
• Changed hf mfdes info - add recognition of Swissbit iShield Key Mifare (@ah01)
• Changed hf mf info - add detection for unknown backdoor keys and for some backdoor variants (@doegox)
• Changed mqtt commnands - now honors preference settings (@iceman1001)
• Changed prefs - now handles MQTT settings too (@iceman1001)
• Fixed mqtt segfault and gdb warning under windows (proper thread stopping and socket handling). (@virtyvoid)
• Added mqtt - the pm3 client can now send and receive MQTT messages or json files. (@iceman1001)
• Changed hf iclass wrbl - replay behavior to use privilege escalation if the macs field is not passed empty(@Antiklesys)
• Changed hf iclass restore - it now supports privilege escalation to restore card content using replay (@Antiklesys)
• Fixed hf 15 dump - now reads sysinfo response correct (@iceman1001)
• Changed make clean - it now removes all pycache folders (@iceman1001)
• Fixed hf 15 readmulti - fix block calculations (@iceman1001)
• Changed mem load - now handles UL-C and UL-AES dictionary files (@iceman1001)
• Changed hf mfu sim - now support UL-C simulation (@iceman1001)
• Added ! - run system commands from inside the client. Potentially dangerous if running client as SUDO, SU, ROOT (@iceman1001)
• Implemented hf felica scsvcode - now dumps all service and area codes. (@zinongli)
• Added hf felica liteauth - now support FeliCa Lite-S authentication(@q0jt)
• Added he felica dump - partial support for dumping all blocks from unauth readable services (@zinongli)
• Changed hf 14b calypso - now don't break the file id loop when one file can't be selected or read. Add new file ids to iterate through (@zinongli)
• Fixed script run hf_mfu_amiibo_restore.lua - broken reference to a dependency. (@corysolovewicz)
• Changed /client/update_amiibo_tools_lua.py - updated the output to make things more clear. (@corysolovewicz)
• Changed /client/lualibs/amiibo_tools.lua - updated to the most recent data. (@corysolovewicz)
• Changed /client/pyscripts/mf_backdoor_dump.py - fixed output checks to handle whitespace variations. fixed output of card dump. (@robo-w)

Contributors

• @doegox
• @ah01
• @henrygab
• @datafx
• @virtyvoid
• @Antiklesys
• @iceman1001
• @robo-w
• @corysolovewicz
• @trigat
• @STIEBELJOSHUA
• @grugnoymeme
• @q0jt
• @zinongli

Release v4.20469
Nickname "Daddy Iceman"

Change log for this release

 Fixed edge case in fm11rf08s key recovery tools (@doegox)
 Removed --par from lf em 4x70 commands.
 Changed hf 14a info - refactored code to be able to detect card technology across the client easier (@iceman1001)
 Changed hf mf info - now informs better if a different card technology is detected (@iceman1001)
 Changed hf mf autopwn - now exits if desfire is detected and limit attacks if mifare plus is detected (@iceman1001)
 Changed hf mfp chk - improved key handling and output (@iceman1001)
 Fix hf mf dump - added a check for keyfile to contain enough keys for card (@iceman1001)
 Fix hf mf eview - now viewing 2k, 4k cards doesn't get wrong background color (@iceman1001)
 Changed hf mf info - skip checking if it detects a MIFARE Ultralight family card (@iceman1001)
 Changed hf mf rdsc - it now addeds the used key to the output in the sector trailer (@iceman1001)
 Added the PM3ULTIMATE platform in the build / docs. untested (@iceman1001)
 Added fpga compilation for PM3ULTIMATE device (@n-hutton)
 Updated the ATR list (@iceman1001)
 Fixed fpga binary images to use fixed seed 2 (@n-hutton)
 Added hf iclass sam --info - option that returns sam specific details (@antiklesys)
 Changed hf iclass sim -t 7 - implemented simulation that glitches key block responses (@antiklesys)
 Changed hf iclass sim -t 6 - implemented simulation that glitches sio block (@antiklesys)
 Changed hf iclass legbrute - implemented multithreading support (@antiklesys)
 Changed hf iclass legrec - added a --sl option for further speed increase by tweaking the communication delays (@antiklesys)
 Changed hf iclass legrec - added a --fast option for further speed increase and automated AA2 block selection (@antiklesys)
 Changed hf iclass legrec - additional code optimizations gaining a ~147% speed increase (@antiklesys)
 Changed hf iclass tear - readability improvements for erase phase (@antiklesys)
 Changed hf iclass legrec - code optimizations gaining a ~8% speed increase (@antiklesys)
 Modified hf iclass tear - now has a device side implementation also. (@antiklesys) (@iceman1001)
 Changed hf iclass info - now uses CSN values based checks (@antiklesys)
 Changed hf iclass dump - now uses default AA1 key when called without a key or key index (@iceman1001)
 Renamed hf iclass trbl to hf iclass tear (@iceman1001)
 Changed hw tearoff - the device side message is now debug log controlled (@iceman1001)
 Changed pm3.sh - Serial ports enumeration on Proxspace3.xx / MINGW environments, now using powershell.exe since wmic is deprecated (@iceman1001)
 Fixed hf iclass trbl - to correctly use the credit key when passed and show partial tearoff results (@antiklesys)
 Fixed hf iclass legbrute was not correctly parsing the index value
 Fixed hf mf ekeyprn - failed to download emulator memory due to wrong size calculation (@iceman1001)
 Fixed hf mf fchk --mem to actually use flash dict (@doegox)
 Fixed make install on OSX thanks DaveItsLong (@doegox)
 Added new standalone mode HF_ST25_TEAROFF to store/restore ST25TB tags with tearoff for counters (@seclabz)
 Added hf_mfu_ultra.lua script enables restoring dump to ULTRA/UL-5 tags and clearing previously written ULTRA tags (@mak-42)
 Fixed hf mfu sim to make persistent the counter increases in the emulator memory (@sup3rgiu)
 Fixed hf mf mad to correctly display MAD version 2 card publisher sector (@BIOS9)
 Fixed lf hitag dump and related commands stability when tag is configured in public mode/TTF mode (@rfidgeek1337)

Release v4.20142
Nickname "Blue Ice"

CHANGELOG

• Added des_talk.py script for easier MIFARE DESFire handling (@trigat)
• Fixed hf 14b info - wrong endianess when looking for lock bits etc (@gentilkiwi)
• Changed hf mf autopwn - tries to detect static encrypted nonces and also user cancel during chk keys (@iceman1001)
• Added option to hf mf autopwn to use SPI flash dictionary (@jmichelp)
• Changed trace list -t seos - now annotate ISO7816 (@iceman1001)
• Updated aid and mad json files (@iceman1001)
• Changed hf 14a apdu - now can be interrupted and dynamically adds time (@iceman1001)
• Changed trace list -t - shortend the hitag types (@iceman1001)
• Added Be-Tech identification (@iceman1001)
• Added lf em 410x clone --htu clone EM410x ID to Hitag μ/8265 (@douniwan5788)
• Added lf hitag htu support for Hitag μ/8265 (@douniwan5788)
• Added hf mfu aesauth based on existing UL AES support (@doegox)
• Changed hf mfu sim deny OTP changes with all zeros (@iceman1001)
• Added missing file in CMakeLists.txt (@iceman1001)
• Changed lf em 4x70 internals on ARM side; Enabling improved debugging and reliability (@henrygab)
• Improved pcf7931 generic readability of the code. Unified datatypes and added documentation/explainations (@tinooo)
• Improved lf pcf7931 read code - fixed some checks for more stability (@tinooo)
• Changed trace list -t seos - improved annotation (@iceman1001)
• Added make commands to regenerate commands documentation files and autocompletion data independently of make style (@doegox)
• Added texecom identification, thanks @en4rab ! (@iceman1001)
• Added hf 15 slixprotectpage command
• Fixed hf mf gload - missing parameter (@iceman1001)
• Changed hf mf gload - now handles 1k ev1 sized dumps (@iceman1001)
• Changed wiegand format unpack functions to clear struct later (@iceman1001)
• Changed wiegand decode - now accepts new padding format (@iceman1001)
• Changed mem spiffs tree - ID is now shown in decimal (@iceman1001)
• Added sample wiegand format 56bit (@iceman1001)
• Changed Wiegand formats to include number of bits (@iceman1001)
• Fixed compilation warning in hitagS (@iceman1001)
• Added new wiegand format H800002 (@jmichelp)
• Changed Makefile.platform.sample file - now have clear instructions for generating images for other proxmark3 hardware (@iceman1001)
• Changed doc/magic_cards_notes.md - now contains documentation for iKey LLC's MF4 tag (@team-orangeBlue)
• Changed hf mf cload - now accepts MFC Ev1 sized dumps (@iceman1001)
• Changed hf mfu info - now properly identify ULEv1 AES 50pF (@iceman1001)
• Changed hf mf info - now differentiates between full USCUID and cut down ZUID chips (@nvx)
• Changed lf hitag chk - added key counter, client side abort and minor delay (@iceman1001)
• Added hf seos sam - Added support for HID SAM SEOS communications (@jkramarz)
• Changed (extended) area accessible by spiffs into last page of FLASH (@piotrva)
• Changed flash-stored key dictionaries (Mifare, iClass, T55XX) and T55XX configurations to SPIFFS files (@piotrva)
• Changed lf em 410x sim to use default gap value of 0 and extended help (@piotrva)
• Changed hf 14a info - now identifies MIAFRE Duox (@iceman1001)
• Added hf iclass trbl to perform tear-off attacks on iClass (@Antiklesys)
• Added support for connection to host device in all Docker envs (@doegox)
• Changed hf 15 info to show all type matches and check ST25TVxC signature (@doegox)
• Added initial support for ST25TN and its signature verification (@doegox)
• Changed originality checks handling to refactor code and pk data (@doegox)
• Changed uniq.yaml workflow to be case-insensitive (@iceman1001)
• Fixed mem load --mfc not erasing all SPI flash blocks after extending to 4095 keys (@piotrva)
• Changed extended area for Mifare keys in SPI flash to hold 4095 keys (@piotrva)
• Fixed DESFire D40 secure channel crypto (@nvx)
• Fixed hf mfp info fix signature check on 4b UID cards (@doegox)
• Automatically set maximum read/write block when using predefined types in hf_mf_ultimatecard script (@piotrva)
• Changed SPI flash detection to calculate the size instead of table lookup, updated spi_flash_decode.py script with more ICs (@ANTodorov)
• Fixed hf/lf tune segfault when called from script (@doegox)
• Added option to set and get maximum read/write block number using hf_mf_ultimatecard script (@piotrva)
• Added JEDEC information for SPI flash W25Q64JV (@ANTodorov)
• Added special iclass legacy config cards in hf iclass configcard (@Antiklesys)
• Added simulation function to hf iclass legrec (@Antiklesys)
• Added keys from Momentum firmware projects. (@onovy)
• Added Dutch Statistics Agency default key (@eagle00789)
• Fixed Wiegand decode with hex input dropping the first bit (@emilyastranova)
• Changed hf mf autopwn - now allows for custom suffix (@zxkmm)

Contributors

• @doegox
• @nvx
• @eagle00789
• @henrygab
• @onovy
• @jkramarz
• @gentilkiwi
• @jmichelp
• @douniwan5788
• @piotrva
• @en4rab
• @Antiklesys
• @iceman1001
• @ANTodorov
• @emilyastranova
• @trigat
• @zxkmm
• @tinooo
• @team-orangeBlue

Release v4.19552
Nickname "Orca"

[Orca.4.19552][2024年11月22日]

Fixed hf_legic.lua - removed bit32 commands from the script (@diorch1968)
Fixed mem spiffs tree - now show correct symlink name (@ANTodorov)
Fixed mem spiffs wipe - reported file/link names is now correct (@ANTodorov)
Updated atrs list (@iceman1001)
Added support for a new KDF (@iceman1001)
Added Inner range aid and mad entries (@iceman1001)
Changed mem spiffs - Use all available space in SPI flash (@ANTodorov)
Fixed hf mf sim - wrong size check in MifareSim (@iceman1001)
Fixed hf mf sim not to respond to authentication attempts for sectors out of bound for selected Mifare type (@piotrva)
Added option to build against non-default python3 with CMake as well (@doegox)
Added option to build against non-default python3 with Makefile (@ANTodorov)
Changed hf 14a info hf mf info - now detects FM1216-137 CPU cards (@iceman1001)
Changed hf iclass configcard - expanding the list of available options and functionalities (@antiklesys)
Fixed intertic.py - missing comma in array (@iceman1001)
Changed hf iclass legrec - improved algorithm leveraging reduced entropy from hash0 constraints (@antiklesys)
Fixed hf iclass configcard when generating elite or keyroll elite configcards for Rev.C legacy readers (@antiklesys)
Changed hf mf c* - now accepts a --gdm flag to write using uscuid/gdm 20/23 alt magic wakeup (@nvx)
Changed pm3_console() - Python/Lua/C: replace passthru by capture and quiet (@doegox)
Fixed hf iclass list - annotation crc handled better (@iceman1001)
Fixed hf_mf_uscuid_prog.lua - bad divisions and code style fixes (@iceman1001)
Changed hf iclass info - now checks for cards silicon version (@antiklesys)
Changed hf iclass legrec - updated script implementation to ensure functionality (@antiklesys)
Added recovered iclass custom key to dictionary (@antiklesys)
Added support for all Hitag S response protocol mode (@douniwan5788)
Fixed hf_young - flags declaration was missing a semicolon (@jakkpotts)
Changed hf mf sim - add option to allow key b to be used even if readable (@doegox)
Changed data num - outputed binary strings are now properly zero padded (@iceman1001)
Changed hf iclass info - now tries default keys and decode if legacy (@iceman1001)
Changed hf iclass chk - now loads dictionary file by default (@iceman1001)
Added Makefile variable DONT_BUILD_NATIVE in mfd_aes_brute Makefile to easify downstream package (@Cryolitia)
Auto detect whether compile option march=native is supported for mfd_aes_brute Makefile
Changed hf mf sim - support data-first and nested reader attacks (@doegox)
Fixed lf search and lf em 4x50 rdbl -b <blk> does not coredump reading EM4450 tag (@ANTodorov)
Fixed flashing - client doesnt fail every other flash attempt (@iceman1001)
Changed pref show - add option to dump as JSON (@doegox)
Changed mf_backdoor_dump.py- use faster ecfill/eview (@doegox)
Changed hf mf ecfill - wait for execution and return status (@doegox)
Changed hf 14a reader - added option to wait for a card (@doegox)
Changed hf mf ecfill - added support for quick dump via backdoor auth (@doegox)
Fixed hf mf restore - really skip strict ACLs unless --force (@doegox)
Added hf 14b setuid - set uid on magic 14b tag (@iceman1001)
Changed hf 14b info - now detect Tiananxin (@iceman1001)
Fixed lf em 410x brute - better filehandling and memory handling (@iceman1001)
Changed split PacketResponseNG status into status and reason (@douniwan5788)
Added spi_flash_decode.py - helper script to decode JEDEC data (@ANTodorov)
Changed hw status - now show SPI flash JEDEC Manufacturer ID and Device ID in output (@ANTodorov)
Changed hf iclass configcards to support generating config cards using a different key than the default k0 as the card's key (@antiklesys)
Added maur keys (@iceman1001)
Fixed hf mfu pwdgen for the 7 byte UID (@ANTodorov)
Added hf iclass unhash command to reverse an iclass diversified key to hash0 pre-images (@antiklesys)
Changed hf 14a raw - now supports crypto (@doegox)
Changed hw version command to print LUA and Python versions (@jmichelp)
Updated LUA to v5.4.7 which adds utf-8 support (@jmichelp)
Moved lf hitag sim --hts -> lf hitag hts sim (@douniwan5788)
Removed lf hitag read/write --hts (@douniwan5788)
Changed lf search - it now tries to read and decode paxton id (@iceman1001)
Changed lf search - to identify hitag2/s/82xx in chipset detection to preserve their EM4100 or other outputs (@iceman1001)
Added lf hitag hts reader - to act as a HitagS / 82xx reader (@iceman1001)
Changed lf hitag hts write -> lf hitag hts wdbl to fit rest of client command names (@iceman1001)
Changed lf hitag hts read -> lf hitag hts rdbl to fit rest of client command names (@iceman1001)
Changed hf mf info - Better handling when printing ATS (@iceman1001)
Changed to also try the MFC_B key when extracting memory (@iceman1001)
Fixed make -j check Thanks @elboulangero (@iceman1001)
Added support for 8268/8310 (@douniwan5788)
Changed scripting string params to accept 1024 chars, Thanks @evildaemond! (@iceman1001)
Added detection for FM11NT021 (@iceman1001)
Added detection of a magic NTAG 215 (@iceman1001)
Fixed hardnested on AVX512F #2410 (@xianglin1998)
Added hf 14a aidsim - simulates a PICC and allows you to respond to specific AIDs and getData responses (@evildaemond)
Fixed arguments for SimulateIso14443aTag and SimulateIso14443aInit in hf_young.c, hf_aveful.c, hf_msdsal.c, hf_cardhopper.c, hf_reblay.c, hf_tcprst.c and hf_craftbyte.c (@archi)
Added mf_backdoor_dump.py script that dumps FM11RF08S and similar (Mifare Classic 1k) tag data that can be directly read by known backdoor keys. (@Aptimex)
Added keys for Metro Q transit cards in Huston, TX. (@Anarchothulhu)
Added keys from MifareClassicTool and Flipper projects. (@onovy)

Release v4.18994
Nickname "Backdoor"

Release v4.18589
Nickname "Aurora"

Release v4.18341
Nickname "Zenith"

Release v4.18218
Nickname "DEFCON is Cancelled"