The HID Proxcard continues to be a very popular RFID access card solution, despite its inherent weaknesses. RFID cloners such as the Proxmark and RFIDler are expensive. Kevin will show how an inexpensive RFID lock, an RFID tag, an Arduino and a few electronic components can be used to create an HID Proxcard reader and spoofer. In addition to the “how to” portion, the talk will cover “how it works,” including topics such as RF signals, RFID communications and advanced features of the Arduino’s Atmega processor chip utilized in the project. This will be all new material that builds upon the hardware hacking basics talk Kevin previously presented at THOTCON 0x5.
Kevin is a Manager at 403 Labs focusing on information security and compliance issues faced by financial institutions. Kevin is the creator of the MiniPwner, a pocket-size penetration testing device used to get remote access to a network. He’s also an author, instructor and a speaker at conferences like RSA, DerbyCon, Security BSides and WACCI.