ESPKey + Long Range RFID Reader = A New Tastic Thief

A Bishop Fox consultant with no hardware background builds a field-ready badge cloning tool for physical assessments, sharing lessons on rapid learning and how hardware punishes unchecked assumptions.

Bishop Fox lays out five exploitable vulnerabilities in the OSDP badge reader protocol—starting with the fact that encryption is optional—and what defenders can do to secure facility access control.

A practical guide to silencing the Tastic RFID Thief before a physical penetration test: flip DIP switch SW1-4 on the HID MaxiProx reader to mute badge reads, or desolder the beeper for total silence.

A hands-on guide to the Flipper Zero: CC1101 sub-GHz radio for capturing and replaying garage and car keyfob signals, plus reading and writing NFC/RFID access cards like hotel and transit cards.

Inside Wiz's own physical security program: office access controls assigned by role, travel and remote-work safety, and real-time monitoring—framed as part of earning customer and partner trust.

Broken access control often slips past dynamic testing. This article shows how secure code review of Spring annotations, expressions, and filters surfaces Java Spring privilege escalation paths early.