Apr 23, 2023
Loading...
seen from China
seen from Malaysia
seen from Germany
seen from China
seen from Sri Lanka
seen from Germany
seen from United States
seen from Kazakhstan
seen from Japan
seen from Germany
seen from United States
seen from Lithuania
seen from Malaysia
seen from Kenya
seen from Kenya
seen from United States
seen from Philippines
seen from China
seen from Denmark
seen from Italy
Anya is live and ready to show you everything. Watch her strip, dance, and perform exclusive shows just for you. Interact in real-time and make your fantasies come true.
Free to watch • No registration required • HD streaming
RFID/NFC Research
Tools
Proxmark3
NFC Proxy
RFID Module RC522 works with Arduino and RaspberryPI
Various NFC Tag reading apps on Android
Tactics
RFID/NFC is susceptible to cloning, spoofing/emulating, and sniffing attacks.
Cloning and Emulating RFID cards with Proxmark3
NFC Proxy/Sniffing/Fuzzing
3D printing your own RFID readers (video and slides)
Contactless Credit Cards
Techniques
Emulating Amiibos with a Proxmark3
Using the Proxmark RFID reader, we scanned the kyber crystals we had and then dumped all their EEPROM data into a spreadsheet to look for any patterns.
RFID tags have a TagID that they send out to RFID readers to identify themselves. After scanned lots of crystals, we learned that there were multiple unique Tag IDs of each color. For example, instead of all Red Kybers having the same ID to identify as "Red", there was a "Red 1", "Red 2", etc.
By changing the Tag ID or Word 6 in the EEPROM word data, we could make a Red kyber crystal thing it was a Green one.
After doing most of our testing by repeatedly assembling then dissassembling lightsabers, we switched over to using a holocron for easy of quick testing.
Kudos to Spork for figuring out how Word 6 works, and actually trying to rewrite a kyber crystal. (Like most people, I had assumed it would have been write-protected and was just focusing on rewritting other FOBs. Haha.)
And a BIG thank you to volunteers who offered to lend us their crystals to scan to help with our research, and a special big hand to Nick for his help and excellent reference doc on the available voices on each crystal.
Savi’s Custom Lightsabers and Dok’s Holocrons all work with kyber crystals via low frequency (LF) RFID. The kyber’s themselves have EM4305 RFID chips, which work via Passive RFID. Unlike Active RFID, they have low range and do not have any power themselves, but they’ll “power up” when near an RFID reader and start sending their data. I had done a basic Arduino tutorial or two in the past with some of the high frequency (HF) RFID tags, but this was my first time really having some serious hands-on with set goals:
To learn what data is on the crystals, what is being sent to the sabers/holocrons, and can we change the data?
We’ve always had an interest in seriously learning more about RFID, so this was a great excuse. The only RFID readers we had on hand were really basic HF Arduino sensors, so we ordered a very basic Proxmark model to really get started.
Using the Proxmark, I was able to read all the data on the kyber and also confirm the RFID chip model.