See the excellent Peter Fillmore conference slides from SyScan2015: Crash & Pay: Owning and Cloning NFC Payment cards
For more details on Symposium on Security for Asia Network (SyScan) see


Special limited offer for “Purchase Combination” of HydraBus + HydraNFC on SeeedStudio Shop for final price of 99USD instead of 128 USD.
Contact me bvernoux at with your project details and I will send you a unique coupon (if you are elected).SpecialOffer_HydraNFC_HydraBus_99USD


Update HydraFW v0.5-beta-1-g4897d50 add HydraNFC Tag Emulation UID ISO14443A (Mifare 1K) command emul_uid_14443A
See github pre-built dfu firmware
See source code GitHub HydraFW
See also specific code for ISO14443A UID Emulation:


Updated commands:

For more details see:


HydraFW v0.5 Beta

  • New USB VID_0x1d50/PID_0x60a7 using OpenMoko HydraFW, update with new drivers
  • Added USB DFU boot by pressing UBTN at PowerOn/RESET for easier future update of the firmware (does not requires any wire).
  • Added Log command (thanks to biot):
    • Log all commands/answer in the Terminal to HydraBus SD card file: logging on off sd
  • Added command debug test-rx (debug rx) in order to test USB CDC reception performance.
  • Added PWM command:
    • Configurable PWM frequency between 1Hz to 42MHz and duty cycle from 0 to 100%: pwm, frequency, duty-cycle
    • Give feedback of real PWM frequency & duty cycle after configuration.
  • Added DAC command:
    • Configurable DAC1(PA4 used by ULED) or DAC2(PA5) with following modes:
      • raw (0 to 4095), volt (0 to 3.3), also returns feedback of raw/volt DAC value after configuration.
      • triangle (5Hz / 3.3V Amplitude), noise (0 to 3.3V Amplitude)
      • dac exit disable DAC1/2 & Timer6/7 and reinit GPIO for PA4 & PA5
  • UART:
    • UART returns real baud rate+% error after configuration.
    • Check and correct min/max value for UART baudrate.
  • I2C added scan (thanks to biot).
  • SPI:
    • Fixed cs on / off bug with Infinite Loop.
    • Fixed SPI mode slave.
    • Fixed configuration for phase & polarity (was always set to 0).
  • HydraNFC:
    • Fixed HydraNFC detection/init/cleanup and autonomous sniffer mode started with K4.
    • Fixed some potential problems/crash with scan/continuous.
  • Add full help for commands.
  • Lot of cleanup and fixes in code.

See all commands here:
HydraFW Link:
Release with pre-built firmware:


HydraFW HydraNFC/TRF7970A Tutorial added for HydraBus/HydraNFC and latest firmware (at least version HydraFW_v0.4-beta-56-g09d47ac see release).


The tutorial details how to:

  • Initialize GPIO & SPI to communicate with TRF7970A/HydraNFC
  • Initialize & read ISO15693/Vicinity Tag
  • Initialize & read ISO14443A/Mifare Tag
  • Use TRF7970A commands (SLOS743K – August 2011 – revised April 2014)

A very good news for the new year,
BlackMagic has been ported to Hydrabus and is fully working with JTAG & SWD.
(Tested JTAG/SWD debugging on target STM32F4 & LPC4330)

For more details see:


Major improvement/refactoring towards terminal/syntax using tokenline (instead of microrl) thanks to Bert Vermeulen (biot) for that amazing piece of software and all the work on this project.
Also lot of new commands added like ADC, GPIO, more sd commands.
SPI1&2, I2C and UART1&2 are tested with logic analyzer/oscilloscope.
See all commands here:
HydraFW Link:
Release with pre-built firmware:

Also a very good news now HydraBus have OpenMoko USB VID/PID see more details here
Those ID will be used in next release HydraFW v0.5


In latest version of HydraFW support of EmBlocks IDE have been added to simplify development, build and debug.
Thanks to rdollet for this contribution.
In order to build HydraFW it is required to install mingw (mainly for sh) & python 2.7 (for pre/post build).
When you have installed EmBlocks you just need to Open file “hydrafwEm.ebp” available in root of hydrafw github source code.
Also now code is compliant with Linux Kernel coding style.
HydraFW github:


For this new version the following modes have been added: SPI (Master & Slave), I2C (Slave only) & UART.
Also lot of fixes and cleanup.

HydraFW Link:
Wiki HydraFW commands:
Release with pre-built firmware:

Some tests done with SPI, UART and I2C with Logic Analyzer ScanaPLUS: