How security testers can steal keycards with the Proxmark

[@FreeDomSy-nk9ue]

Holy shit! I can finally steal my dad's treasury.

[@rockybhaikusalaampodu4125]

He He

[@forreutubey780]

You will forget everything when you see your dad

[@hollowghost4527]

Lol that's the guy who saved the internet, never knew that he's on yt

[@CHAP_SEC]

Loving the short informative videos Marcus :)

[@mckdogdrums3543]

I never thought i'd see an episode of Burn Notice but in real life... :D

[@SOURCECODE_GAMEON]

Best thing I seen all day!

[@sayanthc938]

Why is no one talking about the smoothest hoody transition ever

[@Minawari1]

This is not true for most modern cards though, and the data you receive is part of a cryptographic protocol that you can't just replay back to a card reader. It's true that some outdated types of cards are still in use, like mifare classic which is pretty insecure, but most modern cards are fairly safe and can't easily be cloned.

[@kito8088]

True, but DESFire ev2 is also still pretty easy

[@OneManCanStopTheMotorOfWorld]

lol uhh ok wheres your youtube channel? thats what I thought

[@ko-Daegu]

@@kito8088 "but DESFire ev2 is also still pretty easy" any research paper ? MIFARE DESFire EV2 is Common Criteria EAL5+ security certified this is same level as banking cards I wouldn't call those easy

[@kito8088]

@@ko-Daegu true, but it depends more on how the scanners read those cards (only uid would be very stupid and easy as an example, but they can also mess other stuff up).

[@w1z4rd9]

@@OneManCanStopTheMotorOfWorld This comment was so stupid nobody even bother to comment. But I had to because it's one of the funniest thing I've seen today.

[@rogue4340]

need more of these kind of shorts

[@coopergaffney2012]

I like how youre a character in Archer

[@KatGray-wl8lg]

Reminds me of snowdens flash drive in the apple

[@H4R4K1R1x]

Could you do a full tutorial video on this? I wanted to a pi RFID read/writer for a project, but the proxmark looks promising too..

[@ko-Daegu]

doesn't work with all RFID but with most, I came around while in the industry forever the proxmark will be a must in any physical pentester or red teamer arsenal

[@gusthomas6872]

it’s crazy to me we still use RFID access cards. totally not worth the risk for the “convenience” benefit

[@Paintballman251]

Oh shit I saw this on tik Tok and had no idea it was you! I just read that wired article and hope life is treating you well nowadays

[@dalvizarkafilhamristijana1130]

this is very informative, thanks

[@mioarte3055]

Bro trying to redeem his 10yr sentence 💀👍

[@buf0rd]

Well done.

[@msqueaks1620]

Did you buy as a kit or all the parts ? I checked out Red Team tools an they have the proxmark 3 with add-ons you can buy seperately. Please post more videos. Its really cool stuff.

[@planespeaking]

Hotels and businesses are going to need to change to continually modifying code keys aren't they?.

[@sembutininverse]

awesome video 🙏🏻

[@tylerblugundersonspix3174]

un ejemplo a seguir, gracias

[@michaelinzo]

Awesome, I got proxmark3 easy!

[@patriciasarabia3356]

marcus help to venezuela broth

[@scellyyt]

I can do this on my phone with non proprietary key cards

[@trapOrdoom]

You know what’s interesting? This shit SEEMS so extra and almost “goofy” to a fucking user/noob. Like this is literally what you’d expect out of Dexters Lab. I almost get why regular users don’t even believe it. It’s the weirdest phenomenon and I cannot explain it.

[@tuckerthenpc4573]

Can anyone help me, for one what is the antenna thing he used for it and anything else that's not the base proxmark

[@wcsoutdoors1393]

Aaaaand subbed.

[@PacAnimal]

Why are there so many unencrypted key cards? Over here, there are none. Don't your security certifications require solid encryption?

[@ko-Daegu]

depends how the cards are encrypted also replay attacks don't care about encryption (alone) to be able to read the card certain cards have certain handshake as countermeasures also read about rolling code and session ID and MAC

[@mrjhrock2010]

Careful, you don't want the fbi stopping you again! Lol Jk this is really cool Marcus cheers mate

[@vytx1337]

you an do that with a phone too

[@knightbuilder3716]

Link?

[@harper5378]

V cool!

[@chosensamurai9047]

Epic

[@angelmorales8874]

So, is this a tutorial???

[@Hectik17]

can you add money to train cards?

[@CrystallineWisdom]

why are you teachijg people this 😢😢😢

[@zudokooo]

Como puedo hackear familink y poner a su lugar

[@dakshsharma2844]

what s this device called?

[@Lardladd]

Read the title or listen to what the guy is saying...

[@anacorsa8016]

Yo sé lo que isiste por el mundo gracias wana cray se dice así?

[@zudokooo]

En Android

[@user-cc1xu1pv9e]

:0 :0 :0

[@notclerk756]

СУЕТА

[@HussainBarajaa]

OMG that's so cool, can someone tell me what's the name of that device For research purposes only :)

[@dion8021]

It's called a proxmark. Can get quite expensive so make sure to research the product before you buy it

[@ko-Daegu]

also read and watch many tutorials about Physical Pentesting and specifically cloning/cracking/emulating RFID and NFC cards/tags I highly respected dude in the field is: Mr.Deviant Ollam he got many talks in the field one of my fav are: - I'll Let Myself In: Tactics of Physical Pen Testers - Copying Keys from Photos, Molds & More -> this is more about keys, not RFID cards but this is part of physical pentesting

[@ko-Daegu]

if you have any Q regarding the matter I will be more than happy to help however, I will highly recommend first studying: - brush up when it comes to Physics from high school about electro-magnetic induction الحث الكهرومغناطيسي لانه هو المبدآ اللذي تعمل به هذه البطاقات - Types of RFID cards - RFID vs NFC - stay familiar with different types of RFID cards: like popular brands (MiFare) pop[ular products that uses different tech and encryption (DESFire) also most popular standards around the world, - know what radio frequency the card operates at (Hi = 13.65 MGHz, Low= 125KHz for example) - understand that cards for physical reasons operate at different ranges (few cm to 100 of meters) Optional: - Read about Bluetooth and other radio tech like WiFi while you are at it, never hurt to learn more once you get advanced you can start to build your own long range reader that can clone, emulate and crack cards from a long range

[@utkarshsingh7757]

Came to know you Marcus after watching wanna cry ransomware virus attack documentary just now.