Quickly Hacking RFID tags with Chameleon Ultra (using Proxmark Dictionary) Flipper Zero Killer

[@biganguria]

How could I modify the “amount” of money that’s stored in my work bedge (so I can get more coffee) I tried with the flipper zero but it says it cannot unlock the “sectors” (or blocks I don’t remember) I just need more coffee

[@taylorhay]

So that type of thing would depend alot on how the system is built - for examples id never store the value on the card, just use the cards unique identifier (UID) to lookup in a database how much value is allocated to that card. In which case all you could do is emulate a different users card and hope they have more value than you. But some systems DO store value on the card, it’s uncommon, but for example the MYKI system in Melbourne Australia (for public transportation) stores your value on the card, and it’s so damn encrypted and proprietary I wouldn’t even know where to begin modifying it. But I’m able to unlock all sectors on most chips I’ve tried, by using the brute force dictionary on the Proxmark GitHub repo

[@Shis6942]

501th subscriber less goo🎉🎉🎉 BTW nice video!

[@taylorhay]

I’ve been waiting for you, you legend!! Thanks 🤓

[@Shis6942]

​@@taylorhaynp legend but do you have tutorials on advance ethical hacking on yt? I really do wanna learn it and all the yt vid I've seen didn't really fit in with me wondering if you could tech me some concepts of it, it totally depends on you if you wanna and I recommend you use screen recording if possible.

[@taylorhay]

@@Shis6942 thanks for the reply - I havent done much like that - Maybe I'll start a course on Patreon - as I dont think KZbin would be the platform for it (demonitisation etc) ooc - what kind of topics would you want to learn?

[@ragnvaldrparkour4141]

How import The dicionary to app? My app can see The dicionary archive but dont work when i try to import

[@taylorhay]

I ended up copy pasting the information into a blank dictionary for that same reason!

[@anthonycampos7417]

Wait do you NEED to have it connected via the app to read, clone and save an RF tag? I assumed it could be done via button presses without the need for mobile Bluetooth or pc connection.

[@taylorhay]

Nope, once you assign cards to the slots, the buttons can be used to choose one, but all other functions need a phone / laptop to perform then (like Proxmark)

[@exposuretherapy]

Can you write it on to a new key or is it just onto the device?

[@Savage.735]

I think you can do this with the flipper zero as of last night new update momentum firmware update i think if so can you make video on how to use it

[@seanbrodie]

No one should be using Mifare Classic NFC tags. They've been broken for 10+ years...

[@hudal7210]

Which app do u use on your phone?

[@taylorhay]

It’s called Chameleon Ultra GUI

[@brandonkushner7751]

@@taylorhay any tips for helping make Connect mine to the app on iOS? I can get it to connect to the computer and update firmware, but I cannot get the phone to recognize it. I bought it used. Is there a way to do like a “factory reset” on it?

[@joecizin9357]

Great info, so many "un Box vids"😖 I have a Dev kit, not having much success on some LF cards "move card around" did that . . same issues for cable or App ?? Q. the mfc_default_keys.dic, which folder did you dump it in "chameleonultragui" thanks

[@taylorhay]

Right?! Who cares about the box… it took me ages just to figure out how to do a quick dump, zero of the other videos showed that… I’ve been surprised at how many RFID keys are not supported EDIT: Missed your dictionary question - I couldnt get the app to load the dictionary, so I copy pasted the contents in via the gui 🤷🏼‍♂

[@taylorhay]

Obviously this thing isn’t as versatile as a Flipper, but it’s so much cheaper, and does one thing really well! Does anyone have suggestions for a similar device for RF hacking?

[@seanbrodie]

Maybe you're looking for an SDR? HackRF, LimeSDR etc. And for RFID, Proxmark is king afaik.

[@taylorhay]

@@seanbrodie I had a HackRF with Portapack for a while - and it was cool! But capturing RF remote signals and saving them was clunky, and as most use rolling code it didnt often work. Maybe an SDR with a Python frontend running on my Blackberry Pi should be the next step 😆 hackaday.io/project/195587-blackberrypi-handheld

[@joecizin9357]

@@taylorhay Yer, the HackRF, very quickly becomes frustrating, SDR is the go but dongles and laptop/aerial, it is a pain . the Chameleon looks so attractive, but doesn't have the HP under the hood. A purpose built, no frills 10" tablet, SDR/decoding software aerial port, it must be on the drawing board, somewhere.

[@joecizin9357]

@@seanbrodie kzbin.info/www/bejne/fpCbmoakiLiCpJY

[@davealex2376]

Can this duplicate rfid wrist band