Just use anything that has a matching 7 byte CardID. You don’t even have to fake the card type or protocol. It simply reads the CardID and compares that to a known list. Turns out the manufacturer uses none of the card’s security features nether outside or inside the building. However it was worth a shot to do a primitive replay attack, right? Couldn’t believe my eyes when that gate opened. So I got a proxmark v3 and found out the card is a Mifare Desfire EV2 which is very secure. However the way my car is built I have to open the entire door to get access to the reader. To open the gates you have to touch your card to the reader. Posted in Security Hacks Tagged access tag, rfid, rfid tag, security Post navigationĪ Similar happend at my work place. It also bears noting that you can snoop RFID cards from further away than you might expect. Anyone that found an access tag lying on the ground could easily replicate as many as they wanted and enter the building unimpeded. As per ’s Shmoocon talk on the topic, however, it shows that many buildings are using completely insecure RFID access methods with little to no security whatsoever. Of course, duplicating an RFID tag is no major hack. Now, by wearing the ring, he can enter his garage and building with a simple wave of the hand, gloves on or off. Eventually, turned up a ring complete with a compatible RFID chip, and was able to duplicate his entry tag onto that. Attempts to create a duplicate with a smaller tag failed, too. While the duplicate tags worked well, they were still too big to easily fit into a glove. Purchasing a 125 KHz RFID tag duplicator off eBay, he was able to quickly copy the tag, and create one that worked with his garage’s entry system. His initial plan was to duplicate the keytag and to sew one into his gloves. He decided to whip up a better solution with less fuss. The RFID access system meant he had to remove his gloves while sitting on his motorcycle to fish out the keytag for entry. Had a frustrating problem when it came to getting into his building’s garage.
0 kommentar(er)
