New Years Circuit Challenge: Make This RFID Circuit

A 125kHz PCB antenna, a spiral pattern on a PCB.
The Proxmark3 PCB 125kHz antenna., GNU GPL version 2, GitHub link.

Picture this: It’s the end of the year, and a few hardy souls gather in a hackerspace to enjoy a bit of seasonal food and hang out. Conversation turns to the Flipper Zero, and aspects of its design, and one of the parts we end up talking about is its built-in 125 kHz RFID reader.

It’s a surprisingly complex circuit with a lot of filter components and a mild mystery surrounding the use of a GPIO to pulse the receive side of its detector through a capacitor. One thing led to another as we figured out how it worked, and as part of the jolity we ended up with one member making a simple RFID reader on the bench.

Just a signal generator making a 125 kHz square wave, coupled to a two transistor buffer pumping a tuned circuit. The tuned circuit is the coil scavenged from an old RFID card, and the capacitor is picked for resonance in roughly the right place. We were rewarded with the serial bitstream overlaying the carrier on our ‘scope, and had we added a filter and a comparator we could have resolved it with a microcontroller. My apologies, probably due to a few festive beers I failed to capture a picture of this momentous event. Continue reading “New Years Circuit Challenge: Make This RFID Circuit”

RFID Spoofer With Code And Instructions

Here’s a field-programmable RFID spoofer developed by [Doug Jackson]. He was inspired by the spoofers we looked at near the end of September that didn’t have source code available. With the idea seeded in his mind he figured he could develop his own version, and then decided to share the build details with the rest of us.

The tags that he purchased for testing and developing the spoofer have a code printed on the back of them. A bit of sleuthing at the data from a tag reader and he managed to crack the code. From there he built this tag spoofer with a keypad on which you enter the number from the back of any 125 kHz tag and the device becomes that tag. If you have been waiting to test your RFID hacking skills there should be nothing holding you back now that [Doug] shared the details of his own adventure.

ShmooCon 2009: Chris Paget’s RFID Cloning Talk

[googlevideo=http://video.google.com/videoplay?docid=-282861825889939203]

When we first saw [Chris Paget]’s cloning video, our reaction was pretty ‘meh’. We’d seen RFID cloning before and the Mifare crack was probably the last time RFID was actually interesting. His ShmooCon presentation, embedded above, caught us completely off-guard. It’s very informative; we highly recommend it.

The hardest part about selling this talk is that it has to use two overloaded words: ‘RFID’ and ‘passport’. The Passport Card, which is part the the Western Hemisphere Travel Initiative (WHTI), is not like the passport book that you’re familiar with. It has the form factor of a driver’s license and can only be used for land and sea travel between the USA, Canada, the Caribbean region, Bermuda, and Mexico. They’ve only started issuing them this year.

Continue reading “ShmooCon 2009: Chris Paget’s RFID Cloning Talk”