PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

RFID: Monotonic Counter Anti-Tearing Defeated

blog.quarkslab.com | research | #hardware-security | #rfid | #nfc | #proxmark3 | #mifare | #tear-off
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Using Proxmark3 tear-off techniques, Quarkslab defeated the anti-tearing monotonic counters in NXP MIFARE Ultralight EV1 and NFC cards, disclosing the issue to NXP which published mitigations.
Published
Collected

Related coverage

research · blog.quarkslab.com
MIFARE Classic: exposing the static encrypted nonce variant... and a few hardware backdoors
Quarkslab breaks the static encrypted nonce protection of FM11RF08S MIFARE-compatible cards, uncovering a hardware backdoor enabling keyless authentication and related backdoors in older chips.
research · blog.quarkslab.com
RFID: New Proxmark3 Tear-Off Features and New Findings
An overview of new Proxmark3 tear-off tooling and findings, covering attacks against EM4305 chips and Mikron Ultralight variants, and news from the open-source RFID/NFC hacking community.
research · blog.quarkslab.com
EEPROM: When Tearing-Off Becomes a Security Issue
Demonstrates how deliberately interrupting EEPROM writes on RFID tags (e.g. ATA5577C) with a Proxmark3 can bypass password protection and recover tag memory content, plus countermeasures.
blog · bugcrowd.com
How to hack with the Flipper Zero
A hands-on guide to the Flipper Zero: CC1101 sub-GHz radio for capturing and replaying garage and car keyfob signals, plus reading and writing NFC/RFID access cards like hotel and transit cards.
research · eshard.com
Security investigations for critical missions
Advanced security testing platforms for hardware and software investigations. Collaborative tools, proven attack libraries, and expert services for security teams.
research · eshard.com
Security investigations for critical missions
Advanced security testing platforms for hardware and software investigations. Collaborative tools, proven attack libraries, and expert services for security teams.
Back