If you are not making something or inspiring something, you are doing something... wrong.
The Packet Boundary Flag (PBF) in NFC Controller Interface (NCI) devices plays a crucial role in managing the transmission of fragmented data packets between the NFC controller and the host device. Here’s an overview of how the PBF works in NCI devices: Overview of NCI, PBF and Extended APDUs How PBF Works in NCI Devices […]
I’m thrilled to announce that my upcoming training on payment systems: the art of analyzing magnetic stripe information, NFC, EMV, and tokenization technologies will be at Black Hat this year!! In this session, we’ll explore the latest threats and vulnerabilities facing payment systems. Real hands-on practices with hardware for specific scenarios. We will discuss real […]
Intro Flipper Zero is a flexible, portable and popular tool that implements different technologies: Focusing on Bluetooth, the device utilize the dual-core and multi-protocol STM32WB55RG. As researcher or pentester, sometimes, we need to change the Bluetooth MAC Address to impersonate, in the most of the cases, another device. By default, Flipper Zero does not offer this […]
Reading SFIs records is a requirement in the EMV transactions to request specific card elements to process EMV transactions. Without them, the transaction cannot be completed. The tricky part is how to generate the READ RECORD command and from which location the terminal obtains this information. In the next example, I will explain how the […]
Intro: reading mode Note: This code is in beta version, please test it and report any issues. I had the opportunity to start playing with the new RDV4 Proxmark3 and its interesting BlueShark Bluetooth HC-06 plugin. The BlueShark gives the ability to control the Proxmark3 remotely using Bluetooth technology. Adding that RDV4 team designed a […]
Intro During the last quarantine days, I sent a new commit to RFID Research Proxmark repository. It was my first standalone mode called hf_msdsal. This standalone module will be able to read or emulate ISO-14443A cards automatically if needed it. Before this standalone, it was possible to communicate with ISO-14443A cards using different methods, hf […]
Intro NFC Copy Cat is a new security research tool and open hardware device from the Mexican Electronic Cats company. Even when it is already documented in Hackster.io, I want to mention and upload new details, videos, and functionalities relating its last version 1.3 including: Microcontroller SAMD21 ARM 32 bit Cortex M0 Memory Flash for […]
Intro NFCGate is an open source project for security research purposes. It was designed by some Secure Mobile Networking Lab students from TU Darmstadt. The design is similar to NFCProxy which was presented in DEF CON 20. Implementing Android technology to achieved the NFC relay. The NFCProxy was a direct connection using WiFi connectivity. Moreover, the NFCGate […]
Pre-sale Hunter Cat is a project where Electronic Cats and I worked together to have the first portable skimmer detector. It works detecting the quantity of magnetic stripe heads inside a card reader. The scan process is simple. Before inserting the bank card, the user just has to insert and remove the Hunter Cat like […]
NFCopy85 is a 10 dollars device to make replay attacks against NFC payment systems. Tested it against Samsung Pay, Google Pay and Wells Fargo Wallet NFC tokens in US. Hardware NFCopy85 is a small version of NFCopy. This tiny version is a combination of ATtiny85 and a small PN532 board. Adding a 3.7 LiPo battery […]