5 ms·

If you want to go deeper with RFID and can spend a bit more (~$50), I am pretty happy with my knockoff Proxmark3 Easy [0] I got on ebay. (Do some research to fi

by tkems 3y ago

If you want to go deeper with RFID and can spend a bit more (~$50), I am pretty happy with my knockoff Proxmark3 Easy [0] I got on ebay. (Do some research to find a good seller as I have heard some sellers ship bad units). It can do both 125khz and 13.25Mhz RFID/NFC and is easier to use then some of the Android apps for cracking Mifare keys. For the price, it is great for more complex attacks and almost has all the features of a full Proxmark RDV4 (minus BLE and a battery). [0] https://proxmark.com/proxmark-3-hardware/proxmark-3-easy https://proxmark.com/proxmark-3-hardware/proxmark-3-easy

stavros 3y ago
Do you have any resources for learning about RFID? I have some tokens for opening my garage door that I'd like to clone, and I'd like to know how they work.
- tkems 3y ago
  I would check out the Proxmark3 Github repo [0]. They have a cheatsheet [1] with the basics on how to get started. I also did a talk about RFID security last year about the basics [2] To get started, the basics are: low freq (LF) is usually around 125khz and is rarely encrypted (HID Prox is the most common in the US). The data is often encoded in Wiegand format for access control systems (something to keep in mind when reading the raw data). High freq (HF) (aka NFC) is ~13Mhz and is readable by most Android phones with NFC. Not all tag data can be read however. HF cards support a lot of different options including data storage (normally in a block layout with permissions to read and write depending on keys) and encryption (iCLASS and SEOS being the HID offerings and very common). Some can be cloned (like hotel cards) while others (like SEOS) require a downgrade attack to work correctly (SEOS -> normal SEOS reader -> Weigand data -> older style card like HID Prox). [0] https://github.com/RfidResearchGroup/proxmark3 https://github.com/RfidResearchGroup/proxmark3 [1] https://github.com/RfidResearchGroup/proxmark3/blob/master/doc/cheatsheet.md https://github.com/RfidResearchGroup/proxmark3/blob/master/d... [2] https://www.youtube.com/watch?v=zKOAywZqisc https://www.youtube.com/watch?v=zKOAywZqisc
  - stavros 3y ago
    Thanks! I've just bought a Proxmark clone, so this will be very useful.

by tkems 3y ago

stavros 3y ago

Do you have any resources for learning about RFID? I have some tokens for opening my garage door that I'd like to clone, and I'd like to know how they work.

tkems 3y ago
I would check out the Proxmark3 Github repo [0]. They have a cheatsheet [1] with the basics on how to get started. I also did a talk about RFID security last year about the basics [2] To get started, the basics are: low freq (LF) is usually around 125khz and is rarely encrypted (HID Prox is the most common in the US). The data is often encoded in Wiegand format for access control systems (something to keep in mind when reading the raw data). High freq (HF) (aka NFC) is ~13Mhz and is readable by most Android phones with NFC. Not all tag data can be read however. HF cards support a lot of different options including data storage (normally in a block layout with permissions to read and write depending on keys) and encryption (iCLASS and SEOS being the HID offerings and very common). Some can be cloned (like hotel cards) while others (like SEOS) require a downgrade attack to work correctly (SEOS -> normal SEOS reader -> Weigand data -> older style card like HID Prox). [0] https://github.com/RfidResearchGroup/proxmark3 https://github.com/RfidResearchGroup/proxmark3 [1] https://github.com/RfidResearchGroup/proxmark3/blob/master/doc/cheatsheet.md https://github.com/RfidResearchGroup/proxmark3/blob/master/d... [2] https://www.youtube.com/watch?v=zKOAywZqisc https://www.youtube.com/watch?v=zKOAywZqisc
- stavros 3y ago
  Thanks! I've just bought a Proxmark clone, so this will be very useful.