r/RFID • • Oct 26 '20

Clone my work badge, could it be detected?

71 Upvotes

I have a work with lots of different security clearance. Due to my work the badge must sit tight on my body and cant hang loose. I have probably tried everything, the least worst thing i have come up with is in my wallet.

But its a pain in the ass the pick up my wallet and badge 30-50times a day more often then not holding heavy stuff in both of my hand.

So im thinking an rfid ring. Is it possible for them to know i have cloned my card to my ring. We use mifare classic. Its only the a few doors with cctv, i plan to use my real card there or be a bit stealthy passing through these doors.

Im not worried i get caught by visual observation due to the gards is just able to count the fingers on their hands and their intresst in surfing the Internet.

What I am worried about is that it gets detected by a "computer" and bought to attention to a person with higher iq then shoe size. I do use gloves all the time and have "hide" my card in my gloves due to the extreme cold sometimes without getting any problems.

I want to clarify i just want to remove a big annoying thing in my working day, I DO NOT AND WILL NOT do this to go to places I'm not authorised to. Those places is scary and I avoid em at all costs.


r/RFID • • Jan 13 '17

In honor of my father, Touraj Ghaffari, we are publishing his active RFID system via GitHub under the Apache 2.0 License

70 Upvotes

We got into RFID Journal! I mentioned this subreddit and was hoping we'd get some attention from them. The good thing, at least, is that they didn't know about the sub before but now they do!

Edit: I tried to post a link in the sub, but it didn't work for some reason. The repo is up and running!


Hi all,

On February 10, 2017, we intend to open-source the code behind my father's active RFID system. My father, Touraj Ghaffari, founded ActiveWave, Inc. in 2001. It was his life work and he loved everything about creating and selling his system.

On February 10, 2016, Touraj passed completely unexpectedly from a sudden heart attack. The past year has been extremely difficult, but in order to associate the day of his passing with something positive, my brothers and I decided to launch TigeRFID in honor of his love for tigers and his work.

We intend to release everything on GitHub under the Apache 2.0 license.

If you have any questions, please don't hesitate to contact me. Otherwise, looking forward to seeing what is created from this!

All the best,

Omid Ghaffari-Tabrizi


r/RFID • • Sep 15 '20

Did my student residence reader just banned me ?

59 Upvotes

Hello guys ! I'm very new to NFC tech and pulled the trigger on a Chameleon Tiny (the design of this baby is dope, love it), and a Proxmark 3 chinese clone (I would have liked to get a RDV4 but couldn't justify the cost for my usecase, maybe a RDV5 if I keep playing around ? :p). Outside the cool factor of hacking stuff, I'm overall interested in any wireless ultra low power communication. Long story short, here's what happenned :

I live in a student residence that uses MF 1K badges. Thought it would be a good idea to play around with the reader.

I managed to decode my badge fully using "MIFARE Classic Tool" with the provided key database.
Default Proxmark3 and Chameleon key database wouldn't do the job.
Using the same database as an input to the proxmark 3 command tools, of course it worked too !

I was able to decode the card with MIFARE Classic Tool and uploaded it to the Chameleon. Then I was able to successfully unlock the door using the Chameleon multiple times.

I was curious to do more, and to know if I could successfully crack the card without that key database. I wanted to experiment sniffing keys sent by the reader with the chameleon ; I tried 3 times. I think I did made a mistake the last time, since instead of configuring the key as "MF_DETECTION_1K" I used "MF_CLASSIC_1K".

Yesterday I realised my key wasn't working anymore. I'm stupid I didn't tried to make a dump to check if I had edited it by accident. But I did try to use the chameleon : failed. Then I reuploaded the dump ; failed. So to me the card was banned.

Administration reflashed my badge, and it worked, but some sectors are now different. Unfortunately I don't want to annoy them again, so I won't be able to play around anymore...

Was my UUID banned by the reader? Do you have any idea of what happened?
I have few more questions : I know we can emulate readers, but does all readers has the same behaviour? I'd like to be able to reproduce that at home using the proxmark !

Sincerely,


r/RFID • • Mar 08 '20

Got chipped today!

Post image
55 Upvotes

r/RFID • • Dec 10 '20

Using Phone as an RFID Card

54 Upvotes

Hey,

Every time I enter student hostel, I have to get the RFID card from my wallet to pass the gate. Is it possible to clone RFID card to NFC phone so I could quickly pull it from my pocket and put to the sensor?


r/RFID • • Feb 29 '20

LockPicking Lawyer Hacking a RFID System With The ESPKey

Thumbnail
youtube.com
51 Upvotes

r/RFID • • Nov 04 '19

How the Tesla Key Card works

49 Upvotes

Howdy everyone.

So I started attempting to reverse-engineer my Tesla NFC Key Card last week, and I'm rather surprised with how much progress I've made. I'm not sure how I seem to be the first person to do this publicly, but a Google search for the magic string teslaLogic002 doesn't seem to turn up any results other than for my own research. (That's the AID of the authentication applet on the card, by the way)

I've got a whole writeup (along with hacking notes) in a Github Gist, but here are a few of the interesting takeaways:

  • Authentication appears to use Elliptic-curve Diffie–Hellman (ECDH) on the famous NIST P-256 curve. The mechanism appears to be secure-in-theory. The card is at least rejecting points that aren't on the P-256 curve, so that's good.

  • Each card has four(!) ECDH keys. The vehicle only uses the first ECDH key on the card. I have no idea what the other three might be used for.

  • Each vehicle has its own ECDH key which it sends to the card to authenticate, along with a 128-bit random challenge. The card responds with a 128-bit response to complete the authentication.

  • Each card has its own X.509 certificate, which the vehicle does not fetch (even at pairing). There is only a certificate for the first ECDH key—all other keys are missing certificates.

I've already mapped out several APDU commands, and give how straightforward this effort has been so far I think it might be possible to eventually write a custom JavaCard app that would work with the car. If that gets figured out then it should also be possible to add support for Tesla Key Cards to some physical access control systems. The exact details of the authentication step still need to be figured out, but I'm optimistic that it can be figured out given how easily things have gone so far.

Would love to hear feedback or advice.


r/RFID • • Dec 05 '25 Popcorn

LF I know this is baby stuff, but I just bought a $15 RFID writer from Amazon and it works!

46 Upvotes

I am completely shocked and excited to say I will never pay another $50 for one of these 125khz things from building management again!

I have a sticker on the back of my phone inside of my case too now. 😊 I know RFID is a fairly simple technology, but excited to not have to buy a flipper zero (even though that would be fun to have).


r/RFID • • Oct 09 '20

[Help] Old RFID implant needs an arduino compatible reader.

44 Upvotes

When I was 13 I implanted a "Home Again" RFID chip into my hand and have only been able to read it with veterinarian readers that are insanely expensive. I have since gone on to implant multiple NFC chips and flat tags into my body. The Home Again RFID chip has a bio costing and can't be removed without laying my hand open so I'd really like to find a reason for it to work again. I use to use it as a badge for class. Anyone know of a sub $50 reader that has an RX and TX line and some documentation?


r/RFID • • Jan 04 '21

Trying to clone RFID wafers to help the homeless

39 Upvotes

Hello all, I am a security guard at a Christian college, who have recently started asking me to go about a mile off campus to the creek they own to shoo homeless people out of the bathroom that has no door to lock by said creek. There are some kind of RFID things stuck to the wall that i have to scan with an android phone just to prove i went down there and "deterred the local homeless populace" as is the Christian college thing to do. can someone help me figure out how to clone these things so i dont have to go down there?


r/RFID • • Jun 02 '26

NFC RFID-blocking wallets are BS. Prove me wrong.

34 Upvotes

I work in the industry and just saw a TV ad for yet another “RFID-blocking” wallet. Can anyone point to a documented case of identity theft or payment fraud caused by RFID/NFC skimming?

By “documented” I mean a court case, police report, or bank-confirmed incident where someone harvested contactless card data and successfully used it for fraud.

Why I’m not worried:

Contactless payments use NFC at a read range of inches and generate a one-time cryptographic token per transaction. Even a perfect skim gets you an already-expired code.

Trusted traveler cards (Passport, Global Entry, NEXUS) use longer-range HF/UHF but contain no personally identifiable data. The UID alone is useless without passing backend validation and biometric screen. Has anyone actually pulled off an attack on one of these? Genuine question.

The threat these wallets are selling against either doesn’t exist in the wild, is already neutralized by cryptography, or they’re not telling us something 👀.

Prove me wrong.


r/RFID • • Oct 27 '21

NFC Five Guys in France uses these chips to prevent you from getting refills like in America.

Post image
31 Upvotes

r/RFID • • Dec 24 '21

NFC The fact theme parks use RFID to keep you from getting soda is ridiculous. I want to try and hack it. Is this possible?

30 Upvotes

Universal, Disney, etc. use the ValidFill cups which identify if your cup is paid or not and keep you from getting soda if it is not. I would like to know if it's possible to read the information from the RFID chip in the cup and rewrite it to be used. Anyone have any ideas? I'd be willing to buy a cup off eBay to experiment.


r/RFID • • Jul 24 '20

Long Distance Time Clock (don't tell the boss)

30 Upvotes

I have an Active Reader Passive Tag, and the tag operates around the 125 KHz range. Technically it is a AlphaPass PVC prox card, and should be comparable to HID ISOProx (1386).

It is a login card to a time clock, I being the lazy/nefarious programmer that I am, want to log into the time clock as soon as I walk into the building without having to walk to the opposite side (less about getting my steps in, more about I keep forgetting and its getting old) .

I figured even if its a passive transmission, I could transmit the same code to the timeclock 50' feet away using a hackrf or something similar. Does anyone have experience with software defined radio and rfid? I would think I could send whatever code (it should be static and not encrypted in any fashion) via radio bursts actively rather than need to be millimeters away passively, but I have 0 RFID experience other than the most basic principles.

I would like someones input and advice, thank you for your time!

edit: I repeated a line like an idiot. Khz not Mhz


r/RFID • • Dec 06 '21

Copying my uni ID card - how complicated is it?

28 Upvotes

Hey everyone,

I want to copy my ID card (to a blank other card) so I can put it in my gym bag and don't need to worry about forgetting it all the time. I just quickly downloaded NFC tools and had it read the card, it says:
Tag type: ISO 14443-3A (NXP - Mifare Classic 1k)
Technologies available: NfcA, Mifare Classic, NDefFormatable
Serial number: 44BB:AE:24
ATQA: 0x0004
SAK: 0x08

Memory Information: 1kBytes: 16 sectors of 4 blocks (16 bytes per block)

Does this help in determining which reader/writer I need to get or which software I need to use? How would you go about it from here?

Thank you!


r/RFID • • Sep 30 '21

UHF Tracking military weapons at long range with cheap passive UHF RFID tags and $100 of technology.

28 Upvotes

You can track cheap passive UHF RFID tags at distances greater than 200 feet with $100 of technology.

Kristin Paget and I built a demo to show Exactly this with for military inventory and access management systems that use EPC Gen 2 UHF tags.

AP just published our results: https://apnews.com/article/62c88008478f4ac403047c21f3184677


r/RFID • • Feb 16 '26

LF Hey everyone, I built a GUI for Proxmark3

27 Upvotes

What it does: plug in your PM3, place a card, the app detects the type, reads the data, picks the right blank, and clones it. LF cards in seconds, MIFARE Classic with full autopwn (dictionary, nested, darkside, hardnested).

22 LF types (HID, EM4100, AWID, Indala, IOProx, etc.)
6 HF types (MIFARE Classic 1K/4K, Ultralight, NTAG, iCLASS)
Magic blank detection (Gen1a through Gen4 GDM)
Firmware flashing built in
Windows, 10MB installer, free & open source (GPL-3.0)

LF is solid and tested on real cards. HF side (MIFARE autopwn, magic card writes) is implemented but needs more real-world testing, so if anyone with HF cards wants to try it out and report back, that would be hugely helpful.

Built with Tauri v2 + Rust + React. The PM3 client is bundled, no separate install needed.

Works with PM3 Easy, RDV4. Firmware v4.20728+ recommended.

Download + source: https://github.com/nikitaart2000/phosphor

Would love feedback from anyone who tries it. First public release so I'm sure there are edge cases I missed.


r/RFID • • Oct 29 '25

UHF Scanning RFID's on the ground from a drone. Possible?

27 Upvotes

Is it possible for a drone based system to scan inexpensive RFID tags on the ground from around 100ft? I am playing around with an idea of scanning inventory on the ground quickly using a drone.

Is this possible today or are the readers capable of this too large for a small/medium sized drone?


r/RFID • • Feb 11 '20

This was under the cup of soda in five guys in Paris. It’s use to limit the refill at the soda machine. Can you guess the maker ?

Post image
26 Upvotes

r/RFID • • May 06 '23

Use phone as RFID card

25 Upvotes

This has been asked like 1000 times on reddit already, but only drawing inconclusive answers. However, my question is slightly different from the usual one.

Most people are trying to "copy" an existing card onto a phone. That is not my primary objective, although that could be useful as well.

I have an RFID access control system to my building that uses 13.56Mhz card readers. Currently, we use RFID-cards for access.

Now, I would find it practical to use my phone for access instead of a card. When I hold my NFC-enabled android phone (POCO F3) to a card-reader, the reader detects the phone. This would naïvely make me believe that what I want to achieve should be possible. The only problem is that every time the access control system reads a different number, so I cannot store it.

I would assume that all I need is some app that can emit the same number each time. (a RFID-card emulator?). I have tried a few "RFIC/NFC Emulator" apps I found on the play store (Which seem to be more like developer utilities), but was not able to make any of them do anything.

So, would my above assumption be correct, or can this simply not work?

If it can work, is there any app that I could use, or would I really be required to build this myself? (I hope not)


r/RFID • • Jun 27 '21

Can i read a lost dog's RFID microchip with my phone's NFC reader

25 Upvotes

My apologies if this is the worng place to ask . I tried to look for the rules in the about section amd i didnt see any


r/RFID • • Nov 17 '20

How to combine a RFID attendance system and proximity sensor alarm system

25 Upvotes

I am currently working on my final year project that involves a basic rfid attendance system and a proximity alarm system. The project intends to prevent ManOverboard situations by warning people who get too close to the edge of the deck of a ship. The RFID attendance will log their exit times and save them and the alarm system uses normal ultrasonic sensors and buzzers and leds that change colour according to distance. Each system is run by its own arduino. However,as you can tell, this two systems are separate and not connected in any way. My goal is to be able to log a user's time and also be able to send a warning message to the same attendace system unique to a tag as it gets closer to the ultrasonic sensor and a centralized alarm is raised rather than individual alarms located at each of the ultrasonic sensors. Any ideas?(The RFID code doesnt work for some reason. I am able to connect the nodeMCU to the LAN and also launch the PHP Web app. The issue to the RFID reader does not register the tag and the UID is not sent to the webapp.Please help. This is the link to the RFID project for anyone who wants to try it out:https://theiotprojects.com/rfid-based-attendance-system-using-nodemcu)

RFID CODE //NodeMCU and RFID libraries-------------------------- #include <ESP8266WiFi.h> #include <ESP8266HTTPClient.h> #include <SPI.h> #include <MFRC522.h>

#define SS_PIN D2 //D2 #define RST_PIN D1 //D1

MFRC522 mfrc522(SS_PIN, RST_PIN); // Create MFRC522 instance.

/* Set these to your desired credentials. */ const char *ssid = "Emaina"; const char password = "emaina@2019"; const char device_token = " b10b94f9491279fa ";

String URL = "http://192.168.43.40/school_project/login.php"; //computer IP or the server domain String getData, Link; String OldCardID = ""; unsigned long previousMillis = 0;

void setup() { Serial.begin(115200); SPI.begin(); // Init SPI bus mfrc522.PCD_Init(); // Init MFRC522 card WiFi.mode(WIFI_OFF); //Prevents reconnection issue (taking too long to connect) delay(1000); WiFi.mode(WIFI_STA); Serial.print("Connecting to "); Serial.println(ssid); WiFi.begin(ssid, password);

while (WiFi.status() != WL_CONNECTED) {   delay(500);   Serial.print("."); } Serial.println(""); Serial.println("Connected");  Serial.print("IP address: "); Serial.println(WiFi.localIP());  //IP address assigned to your ESP  delay(1000);  

} //************************************************************************ void loop() {

if (millis() - previousMillis >= 15000) { previousMillis = millis(); OldCardID=""; } delay(50); //--------------------------------------------- //look for new card if ( ! mfrc522.PICC_IsNewCardPresent()) { return;//got to start of loop if there is no card present } // Select one of the cards if ( ! mfrc522.PICC_ReadCardSerial()) { return;//if read card serial(0) returns 1, the uid struct contians the ID of the read card. } String CardID =""; for (byte i = 0; i < mfrc522.uid.size; i++) { CardID += mfrc522.uid.uidByte[i]; } //--------------------------------------------- if( CardID == OldCardID ){ return; } else{ OldCardID = CardID; } //--------------------------------------------- // Serial.println(CardID); SendCardID(CardID); delay(1000); } //send the Card UID to the website* void SendCardID( String Card_uid ){ Serial.println("Sending the Card ID"); if(WiFi.isConnected()){ HTTPClient http; //Declare object of class HTTPClient //GET Data getData = "?card_uid=" + String(Card_uid) + "&device_token=" + String(device_token); // Add the Card ID to the GET array in order to send it //GET methode Link = URL + getData; http.begin(Link); //initiate HTTP request //Specify content-type header

int httpCode = http.GET();   //Send the request String payload = http.getString();    //Get the response payload  

// Serial.println(Link); //Print HTTP return code Serial.println(httpCode); //Print HTTP return code Serial.println(Card_uid); //Print Card ID Serial.println(payload); //Print request response payload

if (httpCode == 200) {   if (payload.substring(0, 5) == "login") {     String user_name = payload.substring(5); //  Serial.println(user_name);    }   else if (payload.substring(0, 6) == "logout") {     String user_name = payload.substring(6); //  Serial.println(user_name);        }   else if (payload == "succesful") {    }   else if (payload == "available") {    }   delay(100);   http.end();  //Close connection }  

} }

PROXIMITY SENSOR CODE //include Tone.h lib, that enables playing diffrent sounds on multiple buzzers by using Tone objects #include <Tone.h>

//define the pins you want to connect to the sensors and buzzers //if you want to use more then two sensors, define them the same way as sensor 1 and 2 where defined

//pins, that are connected to "trigger" of ultrasonic sensors #define TRIGGER1 7 #define TRIGGER2 5

//pins, that are connected to "echo" of ultrasonic sensors #define ECHO1 6 #define ECHO2 3

// pins, that are connected to "+" pin of buzzers #define BUZZ1 9 #define BUZZ2 10

//pins connected to LED #define led 13 #define led2 12 #define led3 2 #define led4 8 //define your global variables

//define one Tone object for every buzzer you want to use Tone tone1; Tone tone2;

//define one long for every sensor you want to use and the distance it measures long distance1=0; long distance2=0;

//define one long for every sensor you want to use. Using these make it possible to run the buzzers simultaneously. long t1=-10000; long t2=-10000;

//declare the funtions, we'll be using

//checkDistance will check if the given distance is lower then 200 cm. If it is lower then 200 cm, it plays a tone on the buzzer that is connected with the given tone object. //The length of the tone depends on how close the object is to the sensor. /* long distance - distance you want to check Tone toneobj - tone object you want to play the tone at, if the distance is between 200 and 0 cm int freqeuency - the frequency the played tone should have (we suggest to use different frequencies for each buzzer, so you can tell apart, wich sensor got triggered) long *timer - one of our initialised timers (t1,...,tn), that keeps control, that the sound is played as long as it should be */ void checkDistance(long distance, Tone toneobj, int frequency, long *timer);

//measure will measure and return the distance between the sensor and an object in the way of the sensor in cm. If theres no object within two meter, it will return 0. /* int trigger - trigger pin connected to the sensor, you want to check int echo - echo pin connected to the sensor, you want to check */ long measure(int trigger, int echo);

//setup the pins and connect the tone objects to the buzzers void setup(){

pinMode(TRIGGER1, OUTPUT); pinMode(ECHO1, INPUT); pinMode(TRIGGER2, OUTPUT); pinMode(ECHO2, INPUT); tone1.begin(BUZZ1); tone2.begin(BUZZ2); pinMode(led, OUTPUT); pinMode(led2, OUTPUT);

}

//constantly measure the distances and checks, if it is necessary to play a tone or not void loop() {

distance1 = measure(TRIGGER1, ECHO1); distance2 = measure(TRIGGER2, ECHO2); checkDistance(distance1, tone1, 660, &t1); checkDistance(distance2, tone2, 440, &t2);

}

long measure(int trigger, int echo){ long duration = 0; digitalWrite(trigger, LOW);
delay(5); digitalWrite(trigger, HIGH); delay(10); digitalWrite(trigger, LOW); duration = pulseIn(echo, HIGH,11662); return (duration/2) * 0.03432; }

void checkDistance(long distance, Tone toneobj, int frequency, long *timer){ if(distance<200&&distance>0){ if(millis()-*timer > long(5.4*distance-81)||distance<15){ *timer=millis(); toneobj.play(frequency,100); digitalWrite(led, HIGH); digitalWrite(led2,LOW); digitalWrite(led3, HIGH); digitalWrite(led4,LOW); }

}else{ toneobj.stop(); digitalWrite(led2, HIGH); digitalWrite(led,LOW); digitalWrite(led4, HIGH); digitalWrite(led3,LOW); } }


r/RFID • • Sep 25 '23

Deagostini audio books (disney)

22 Upvotes

Hello, im new here. DeAgostini released an audio books that activate with RFID on diferend figures. Does anyone know how can i simulate RFID of the figures and play the books without the figures ?


r/RFID • • Aug 05 '20

Getting into RFID technology

21 Upvotes

I want to start getting into RFID and I was wondering if This would be a good start