E Amazings
  • Home
  • Automotive
  • Business
  • CBD
  • Crypto
  • Education
  • Entertainment
  • Fashion
  • Finance
  • Health
  • Home Improvement
  • Law \ Legal
  • News
  • Shopping
  • Sports
  • Technology
  • Travel

Subscribe to Updates

Get the latest creative news from FooBar about art, design and business.

What's Hot

Users in Web3 Will Do a lot More Than Just Trade Crypto: Cronos’ Ken Timsit (Interview)

August 7, 2022

India poised to achieve $5 trillion economy dream through ‘Atmanirbhar Bharat’ strategy, says expert

August 7, 2022

Sister’s Day 2022: Date, Significance, WhatsApp message, greetings

August 7, 2022
Facebook Twitter Instagram
E Amazings
  • Home
  • Automotive
  • Business
  • CBD
  • Crypto
  • Education
  • Entertainment
  • Fashion
  • Finance
  • Health
  • Home Improvement
  • Law \ Legal
  • News
  • Shopping
  • Sports
  • Technology
  • Travel
Facebook Twitter Instagram
E Amazings
You are at:Home»Technology»Cracking The MiFare Classic Could Get You Free Snacks
Technology

Cracking The MiFare Classic Could Get You Free Snacks

Paul EasterBy Paul EasterJuly 14, 2022No Comments2 Mins Read
Facebook Twitter Pinterest LinkedIn Tumblr Email
Share
Facebook Twitter Pinterest WhatsApp Email


[Guillermo] started a new job a while back. That job came with an NFC access card, which was used for booking rooms and building access. The card also served as a wallet for using the vending machines. He set about hacking the card to see what he could uncover.

Initial scans with NFC Tools revealed the card was an Infineon MIFARE Classic Card 1k. These cards are considered fairly old and insecure by now. There’s plenty of guides online on how to crack the private keys that are supposed to make the card secure. Conveniently, [Guillermo] had a reader/writer on hand for these very cards.

[Guillermo] was able to use a tool called mfoc to dump the keys and data off the card. From there, he was able to determine that the credit for the vending machines was stored on the card itself, rather than on a remote server.

This means that it’s simple to change the values on the card in order to get free credit, and thus free snacks. However, [Guillermo] wisely resisted the urge to cash in on candy and sodas. When totals from the machine and credit system were reconciled, there’d be a clear discrepancy, and a short investigation would quickly point to his own card.

He also managed to successfully clone a card onto a “Magic Mifare” from Amazon. In testing, the card performed flawlessly on all systems he tried it on.

It goes to show just how vulnerable some NFC-based access control systems really are. RFID tags are often not as safe as you’d hope, either!



Source link

Paul Easter

Related Posts

Homemade CAT Scan Shouldn’t Scan Cats

By Paul EasterAugust 7, 2022

CT Scans Help Reverse Engineer Mystery Module

By Paul EasterAugust 7, 2022

Want Faster Extrusion But Don’t Have A Volcano? Nuts!

By Paul EasterAugust 7, 2022

MCH2022 Badge CTF Solved, With Plenty To Learn From

By Paul EasterAugust 7, 2022
Add A Comment

Comments are closed.

Our Picks

Users in Web3 Will Do a lot More Than Just Trade Crypto: Cronos’ Ken Timsit (Interview)

By Paul EasterAugust 7, 2022

India poised to achieve $5 trillion economy dream through ‘Atmanirbhar Bharat’ strategy, says expert

By Paul EasterAugust 7, 2022

Sister’s Day 2022: Date, Significance, WhatsApp message, greetings

By Paul EasterAugust 7, 2022
Recent Posts
  • Users in Web3 Will Do a lot More Than Just Trade Crypto: Cronos’ Ken Timsit (Interview) August 7, 2022
  • India poised to achieve $5 trillion economy dream through ‘Atmanirbhar Bharat’ strategy, says expert August 7, 2022
  • Sister’s Day 2022: Date, Significance, WhatsApp message, greetings August 7, 2022
  • Homemade CAT Scan Shouldn’t Scan Cats August 7, 2022
  • Q1 results: IOC, HPCL, BPCL post Rs 18,480 cr loss in quarter 1 on holding petrol, diesel prices August 7, 2022
  • Commonwealth Games 2022: Indian women’s hockey team wins bronze August 7, 2022
  • Commonwealth Games 2022: Boxer Amit Panghal bagged gold for India August 7, 2022
Archives
  • August 2022
  • July 2022
  • June 2022
Facebook Twitter Instagram Pinterest TikTok
  • Home
© 2022 E Amazings - All Rights Reserved.

Type above and press Enter to search. Press Esc to cancel.