# NFC PM-Pro: reconstructing the FURUI reader's HID protocol

> NFC PM-Pro reconstructs the FURUI NFC PM-Pro reader's USB HID command exchange and implements a Linux GUI and CLI around it. The protocol notes describe report framing, RC4 encryption, CRC-16 and device commands; the client reads, writes and clones supported RFID cards, runs dictionary, nested, darkside and hardnested key recovery, and handles dumps and NDEF records.

- Type: Case study
- Targets: Protocol
- Category: Independent reconstruction cases
- Relationship: Independent reconstruction project
- Sources reviewed: 2026-11-06
- Added to the catalog: 2026-11-08
- Original resource: <https://github.com/frebergguru/nfc-pmpro>
- Primary source: <https://github.com/frebergguru/nfc-pmpro/blob/fdfc29a8e35247dff4d5f23ec05fe14c4655c9aa/PROTOCOL.md>
- Catalog page: <https://awesomerea.org/resources/nfc-pm-pro-case/>
- Record JSON: <https://awesomerea.org/resources/nfc-pm-pro-case/record.json>
- Chinese version: [简体中文](https://awesomerea.org/zh/resources/nfc-pm-pro-case/index.md)

## Requirements & limits

- **Prerequisites:** A FURUI NFC PM-Pro FR-RATEL device and Linux access to its hidraw node are required for device operations.
- **Prerequisites:** Building requires GTK4, libadwaita, liblzma, a C compiler and CMake/Ninja.
- **Scope:** Firmware updates, hotel-card presets and agreements for other device models are outside the project's scope.
- **License:** Licensed under GPL-3.0.

## Primary sources

1. <https://github.com/frebergguru/nfc-pmpro/blob/fdfc29a8e35247dff4d5f23ec05fe14c4655c9aa/PROTOCOL.md>
2. <https://github.com/frebergguru/nfc-pmpro/blob/fdfc29a8e35247dff4d5f23ec05fe14c4655c9aa/README.md>
3. <https://github.com/frebergguru/nfc-pmpro/blob/fdfc29a8e35247dff4d5f23ec05fe14c4655c9aa/CONTRIBUTING.md>

## More in Protocols

- [RF Power Meter V5 Companion: reconstructing the meter's serial protocol](https://awesomerea.org/resources/rf-power-meter-v5-companion-case/index.md) · Case study
- [miband-lit: reconstructing Mi Band 5 BLE heart-rate access](https://awesomerea.org/resources/miband-lit-case/index.md) · Case study
- [Zafro AC: replacing the I4season device cloud locally](https://awesomerea.org/resources/zafro-ha-local-case/index.md) · Case study
- [open-apt-flash: reconstructing the APT 860C UART flasher](https://awesomerea.org/resources/open-apt-flash-case/index.md) · Case study
- [MADLIONS 60 Configurator: reconstructing MAD60 USB HID configuration](https://awesomerea.org/resources/madlions-configurator-case/index.md) · Case study
- [ax206-usb-display-macos: driving the QDtech display over USB](https://awesomerea.org/resources/ax206-usb-display-macos-case/index.md) · Case study

## About this entry

The description was reviewed against primary sources.
Original editorial content: MIT. Linked projects, papers and assets retain their own rights and licenses.