<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- NERF is a trademark of defconxt. -->
# API Reference — Performing Physical Security Assessment

## Proxmark3
```bash
# Auto-detect card type
proxmark3> lf search          # 125 kHz
proxmark3> hf search          # 13.56 MHz

# HID Prox (125 kHz)
proxmark3> lf hid read        # Read card
proxmark3> lf hid clone --r TAG_ID  # Clone to T55x7
proxmark3> lf hid sim --r TAG_ID    # Simulate card

# MIFARE Classic (13.56 MHz)
proxmark3> hf mf autopwn      # Dump all sectors
proxmark3> hf mf rdbl --blk 0 -k FFFFFFFFFFFF  # Read block

# iCLASS
proxmark3> hf iclass reader   # Read iCLASS card
proxmark3> hf iclass dump     # Dump card data
```

## Flipper Zero
```
# 125 kHz RFID
RFID → Read → (hold card to back) → Save → Emulate

# NFC (13.56 MHz)
NFC → Read → Save → Emulate

# Sub-GHz (garage doors, car fobs)
Sub-GHz → Read → Save → Send

# GPIO (BadUSB)
BadUSB → Select payload → Run
```

## USB Rubber Ducky
```
# Payload format (DuckyScript)
DELAY 500
GUI r
DELAY 200
STRING cmd
ENTER
DELAY 500
STRING powershell -ep bypass -c "COMMAND"
ENTER
```

## Common Lock Bypass
| Method | Target | Skill Level |
|--------|--------|-------------|
| Single-pin picking | Pin tumbler | Intermediate |
| Raking | Pin tumbler | Beginner |
| Bump key | Pin tumbler | Beginner |
| Shim | Padlocks | Beginner |
| Under-door tool | Lever handles | Beginner |
| REX sensor | Electronic locks | Beginner |
