Source code - transport card - NFC Hacking

Hi everyone
Some time ago I bought an nfc ring mostly I used it as a toy xD or a business card now I want to make it little a bit usefull and put there a code from my transport card but I completely don't know how to take code from nfc card. Nfc tool told me that he doesn't support this cart yet. Is there any other way to get source code from my card?
I apologize in advance for my English

Related

sony arc and nfc

i was wondering, since the launch of the official ics for our sony arcs is only around the corner, would there be a way to include the Google beam function into our phones,
Ive read that there is nfc adapters but i don't know if they would work for our devices or of any additional apps may be needed for then to function
http://thesmartsense.com/15701
would be sweet if we could make use of this function
any ideas, im a bit of a noob
I read that there is coming MicroSD cards with NFC... so if the software at some point wil support that, it is possible...
I don't see what's the point of nfc if it's not secure 100%, I saw a tv report about cyber robbery, which someone can steal ur credit card info with a small device hidden in a woman's hand bag or maybe jeans pocket.
zonetrooper90 said:
I read that there is coming MicroSD cards with NFC... so if the software at some point wil support that, it is possible...
Click to expand...
Click to collapse
That would be great news. Although NFC is still kinda of a gimmick right now, i can see it more widespread. Doesn't Visa Paywave also work with NFC?
I'm still kinda reluctant to use it though, looking at the security issues.
That's good news. I hope to see new sd cards soon, or another way to use nfc with arc

OV-Chipkaart

Hello people,
So I recently was playing around with some NFC apps, and I found out my OV-Chipkaart (Dutch public transit card) was read by my phone. Unfortunately I got a lot of numbers and stuff I didn't understand. Does anybody know more about this?
The card is encrypted. If you get the key (there are a couple of articles on the internet which tell you how to get it), you should be able to read the entire card. Without the key you can only see the expiration date.
I saw it was possible to add your own MIFARE key in the TagInfo app. The only thing you need to get this key is an RFID-reader for your PC and some processing power (and the appropriate software).
cool
Thats so cool
My acces card for school does the same. Found this out because everytime i put my phone kn my wallet it made a sound.
Sent from my GT-I9300 using xda premium
UID
Each contactless chip (incuding the Mifare you have) has a unique id which is accessible to any contactless reader, in this case you phone. Unique id enables the reader to overcome collision for reading one chip at a time. This is is probably used as the id of your card by the system it is being used.
htcsnap93 said:
My acces card for school does the same. Found this out because everytime i put my phone kn my wallet it made a sound.
Sent from my GT-I9300 using xda premium
Click to expand...
Click to collapse
hey on they internet i found this :
http://www.youtube.com/watch?v=L7wyHfYDg4A
http://www.ov-chipkaart.me/forum/vi...sid=601115f083127a3a86069b25feebdb43&start=30
i tested it on my personal ov chipkaart but it didn' t work because i haven' t made a dump off the card. i haven' t got a reader for it so maybe if a xda that lives in Rotterdam/Cappele a/d Ijssel is kind enough to make a dump for me
I also recently checked my bus-card and the phone could read some of the info in the card, so i was wondering if it is possible to clone the info in the card to some other nfc tag, which would be cool, and also if i use the phone as rifid reader, mentioned above, connected to pc with usb then theoretically it would be possible to reprogram the card...?
And also another question, is it possible for the phone to send out same info which is on the card so i could use phone instead of bus-card at the bus?
EDIT: I read previous topics and realized that this is impossible.
The ov-chipkaart part is now available and working in the source of github/wandcode/farebot. I have tried and confirmed that this is working. You will need to crack the MiFare classic keys first, this is only possible on a ov-chipkaart by NXP-semiconductors (so not the Infineon version)
I don't have a RFID card reader... Is it possible to dump the chipkaart keys with the Samsung Nexus and then crack the keys with the PC?
Credit
Funny
Now to find out how to upload vitual cash
leto78 said:
I don't have a RFID card reader... Is it possible to dump the chipkaart keys with the Samsung Nexus and then crack the keys with the PC?
Click to expand...
Click to collapse
No that's where the power of chip-cards come in play. There are no keys on it who a external device will receive and decipher. A Mifare Classic card has a built-in authentication system which you will have to pass to read/write onto the card.
The only possible way i could think of is to take the known key from the card, generate a dictionary on a computer and then bruteforce with a phone. But i think that would be more time/hassle then buying a 20 dollar NFC reader.
Factionwars said:
The only possible way i could think of is to take the known key from the card, generate a dictionary on a computer and then bruteforce with a phone. But i think that would be more time/hassle then buying a 20 dollar NFC reader.
Click to expand...
Click to collapse
All the Mifare card readers I could find cost at least 40 euros... Do you recommend any cheap ones?
leto78 said:
All the Mifare card readers I could find cost at least 40 euros... Do you recommend any cheap ones?
Click to expand...
Click to collapse
Ah you have to take a look around, there are loads of people owning a acr122u(touchatag) who bought them when the ov chipkaart got cracked, prices have been rising i guess. Try second hand
Factionwars said:
Ah you have to take a look around, there are loads of people owning a acr122u(touchatag) who bought them when the ov chipkaart got cracked, prices have been rising i guess. Try second hand
Click to expand...
Click to collapse
Anyone heard about the news today? The OV got hacked again.
You guys know any of this?
dragonwith said:
Anyone heard about the news today? The OV got hacked again.
You guys know any of this?
Click to expand...
Click to collapse
Here a hidden post on the details http://www.totalov.nl/m/index.php?type=n&n=166
I have been on it all morning, and it seems to be more of a theoretical hack rather than a real PoC. I also still don't understand how you could attach a sticker to a nfc card and the reader will read the sticker instead of the nfc card, it will read both in my logic.
Any news or how to's available.
Hi guys any app or news available on how to do this.
If anyone in holland is willing to help me with a dumpfile of my 0V chip card for a reward, sent me a pm please.:good:
Factionwars said:
Here a hidden post on the details http://www.totalov.nl/m/index.php?type=n&n=166
I have been on it all morning, and it seems to be more of a theoretical hack rather than a real PoC. I also still don't understand how you could attach a sticker to a nfc card and the reader will read the sticker instead of the nfc card, it will read both in my logic.
Click to expand...
Click to collapse
Isnt it kinda obvious that you have a huge sticker on your OV. Like Checkers can just take of the sticker and they can see its fake.
dragonwith said:
Isnt it kinda obvious that you have a huge sticker on your OV. Like Checkers can just take of the sticker and they can see its fake.
Click to expand...
Click to collapse
No Mifare classic stickers can be very small, and then again you can also attach it to the card holder it's in and when you get asked to take it out you just have bad luck. Though i am more interested in the Tech and Security rather then abusing it.
Hey guys. I'm willing to help and work together to make this work. I've also noticed that the forum of the last hack, ov-chipkaart.me is down. Does anyone know anything about this?
Factionwars said:
Here a hidden post on the details ---
I have been on it all morning, and it seems to be more of a theoretical hack rather than a real PoC. I also still don't understand how you could attach a sticker to a nfc card and the reader will read the sticker instead of the nfc card, it will read both in my logic.
Click to expand...
Click to collapse
The sourcecode of Farebot is avalible on github if you didn't already find it.
Since it can already read the data it must not be hard to be able to write it back to a new tag..
If you need any help or a Mifare reader you can contact me.
---------- Post added at 12:42 PM ---------- Previous post was at 12:37 PM ----------
DamianSewo said:
Hey guys. I'm willing to help and work together to make this work. I've also noticed that the forum of the last hack, ov-chipkaart.me is down. Does anyone know anything about this?
Click to expand...
Click to collapse
Just visit archive (I cant link, since < 10 posts. Google it, 1st link) and use the Way Back Macine.

External NFC readers

I found out my phone doesn't have NFC capabilities (Samsung Galaxy S2) and I hear there are external readers available that use the sim card slot or SD card slot. I was wondering if anyone has tried them and if there are any limitations compared to integrated NFC on a standard mobile phone.
I'm doing a project on NFC and its basically buy one of these or get my hands on a Nexus S.
Careful there buddy, your confusing things. What is it you want to do? Do you want to use your phone like a card, or do you want to read other cards? Either way, if your phone does not have any nfc capabilities, then that means you have neither the nfc antenna, nor the nfc controller, nor a secure element. The only way to get NFC capability to a non capable phone would be to use an sd card that brings all the components I just mentioned with it. I don't know of any company to currently sell that.
But before you go running after a new phone, be warned, if your project has anything to do with using your phone as a card, just let it go. Not worth buying a phone just for that as your project may probably fail.
My project deals with reading data off a card, altering the data and either writing the new data to the card or emulating it.
Are you saying this isn't possible with the SD readers or current phones ?
You could try to find a NFC-enabled battery for your S2.
Fennem said:
My project deals with reading data off a card, altering the data and either writing the new data to the card or emulating it.
Are you saying this isn't possible with the SD readers or current phones ?
Click to expand...
Click to collapse
Reading and writing to a card is possible as long as it complies to the nfc forum specifications. That means your phone can read most of the NFC Forum Tags and cards that generally comply to iso 14443 A or B. Some of the phones can also write Mifare Classic cards. It basicly depends on the NFC controller inside your smartphone. Smartphones that use NXP's PN544 chip for example have the capability to read and write them.
As for the SD, this is rather an open case. Adding NFC functionality to a non capable phone is not that easy to acchieve. In most cases you ned to equip your phone with secure element, nfc controller and nfc antenna. In order to do so you need hardware that basicly provides all of that. I read about some microSD cards that may bring all the components, but I haven't seen anyone sell them. It's definitly easier to buy a new phone that has all the capabilities you need.
Emulating a card is currently a dead end for third party devs. Unless you can talk to one of the big players like MNOs, TSMs or handsetmanufacturer you will be out of luck. If you are ok with rooting your phone and loosing warranty etc. you can maybe get card emulation to work. An example for it to work would be the app simplytapp that is available only for users of the cyanogenmod 9.1 and 10.
Buy a galaxy nexus
Sent from my GT-I9300 using xda premium

NFC bus tickets

So the country I'm visiting has these nfc bus fare tickets and they're pretty cheap and I'd like to use them after they're useless as nfc tags. Problem is they seem to be write protected. Does that mean there's no way to write to them or can they be overwritten? I'm a total noob at this whole nfc thing but I did manage to figure out that it's mifare ultralight. Any program I could use on Win7? And if there is can I use my phone (S4) as some usb nfc reader?
Write protected means you can't override them. However, you can use your phone and NFC Retag to do some cool stuff
you can't overwrite them, but there's already something written on them that you can use to identify that tag. so you could still use it to let your phone do something when you put it near it
I-TensE-I said:
Problem is they seem to be write protected. Does that mean there's no way to write to them or can they be overwritten?
Click to expand...
Click to collapse
How do you know they are write protected ?
Ive used an android app to read nfc tags which also claims to be able to write to them... I dont remember its name, but there's a few that do.
They have introduced NFC bus cards here in Australia over the past 12-18 months and ive become curious.
Stores have the ability to 'add credit' to them via some device they posses so I doubt they are (at least the ones here) write protected... just probably encrypted.
I only have a galaxy S2 which has no NFC so I havent had much chance to investigate, but I did have a quick look at a few cards with my friends S5, which reads the cards fine.
I would be curious what happens if you 'cash up' a card... read and store the nfc data, then write it back to the same card once the card runs low. Though in all honesty I doubt it is that easy... but who knows... maybe it is
We've had these cards in England... Since... Forever?
Shops can top them up, but I think that it doesn't actually write anything to them. Instead, it gets the cards ID then looks it up on the bus companies database, tops it up. And probably charges something from the guy in the shop.
I don't know for sure, but I think this is what is going on. Or someone would have cracked the encryption on these already.
there are different versions of cards, and also different security settings.
there is a soft protection, a permanent protection and it is also possible to password protect some cards
Re-Tagging the tags should do the trick, i guess

[Q] Copying NfcA Tag to another Tag

Hey guys. What I would like to ask is would it be possible to create another card for myself to school so I don't have to take my card out every time i can just use an NFC tag sticked to the back of my phone. I cannot find an answer to this and I would really like an expert to answer it. Preferable you developer guys. All i want to achieve is read the info of card then just write the read info to an NFC tag.
Thank you so much!
Sorry, it's a MIFARE Classic card MF1S50
Give this a try: https://play.google.com/store/apps/details?id=com.skjolberg.nfc.clone2
Yeah i tried Tag Cloner before sadly it says it's unsupported
if its mifare classic and you have a modern phone it wont work.
the broadcom chipset used in phones like the samsung s4, nexus 5 etc, doesnt support mifare classic/s50.
try on an older device
you may ave to clone the UID though, send milkyzone a message on ebay and they might be able to get you fully blank cards that you can change the UID of....
you might wanna check with your school though if youre allowed to do this
CountParadox said:
if its mifare classic and you have a modern phone it wont work.
the broadcom chipset used in phones like the samsung s4, nexus 5 etc, doesnt support mifare classic/s50.
try on an older device
you may ave to clone the UID though, send milkyzone a message on ebay and they might be able to get you fully blank cards that you can change the UID of....
you might wanna check with your school though if you're allowed to do this
Click to expand...
Click to collapse
Hey, well I have an LG G2 so it most likely doesn't have the NXP chip. Yeah the thing is i'd want to use my phone as the card reader for cloning, not sure if that would work. I was thinking of the NFC tools in Kali and booting that from my phone so maybe then it would recognize the reader, not sure though. Yeah I heard of the fully blank cards I was more concerned about doing it without buying an NFC reader for my PC. Yeah haha school might nit allow it but my goal is to just be able to do it haha, the sense of achievement.
Would i be able to write MiFare Classic cards with my phone using Kali? Or does the writing capability depend on the card? Cuz for sure my phone detects it as i used the app NFC ReTag to just assign functions depending on the UID. THanks
Simple and short answer, almost all modern Smart-phones can't read or write Mifare Classic, because they use Broadcom chips to handle NFC. And those Broadcom chips can't handle the proprietary Mifare Classic protocol from NXP. But you can try it with your computer and maybe a reader with a chip like the PN533 and libnfc.
Is it possible to clone tags to another tag. My work phone Samsung S5 mini is the reader and I have to scan the tags to say I'm at this place. My Samsung S6 Edge reads the tag type as Ultralight C, NTAG216.
Your Help would be appreciated
sammie786 said:
Is it possible to clone tags to another tag. My work phone Samsung S5 mini is the reader and I have to scan the tags to say I'm at this place. My Samsung S6 Edge reads the tag type as Ultralight C, NTAG216.
Your Help would be appreciated
Click to expand...
Click to collapse
Probably not with your phone alone. As stated above these newer phones do not have a compatible chipset. If you buy an nfc reader/writer online with the correct chipset you might be able to but its not simple especially if you have to overcome protection. Investing money in this might not be worth it especially if you are not 100% certain it will work. You can buy empty or unlocked cards on ebay they aren't too expensive but to actually write them you'd have to acquire information from the TAG with a good reader. Replaying the card with your phone is not possible.

Categories

Resources