Wrong... perhaps you should search before comment...
All cards have been dumped ROM previously with optical DUMP on xrays.. once dumps where analyzed they had an idea of how to glitch the cards with specific commands loading bytes of fault injected code in the card RAM in order to jmp and execute the specific ROM code available in the smartcards..
so there is no magic cmds... previous x-ray dumps allowed to understand the full ROM code available on the devices, which resulted in magic bootloaders for glitchers which enabled all of it and the rest was history or in other terms the rest was all scripts.xvb winexplorer..
Yes, you have wrong informations. Cryptoworks and conax cards really had bugs in timing 512 bit rsa.
If you have some v2, v3 or v5 cryptoworks card, you can try it on C841, it's really easy. You don't need some shits as dump rom etc. You can find ucpk and sapk modulus with timing, just to make factorization of this modulus and it's all what is necessary to do for moscing these cards, but this is really old info. I am surprised that you don't know about it, we made these things in year 2010