Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I have an acccess/entry card chip I want to copy for demonstrational purposes. However I am not sure how I can find out what type of RFID reader I need to get a hold of.

Does anyone have a suggestion how I can figure out what type of chip it is and thus what type of reader I need to be able to copy it?

Possible use cases:

  • Social engineering the business who owns the card or the card issuer (ex. G4S) and try find out the manufacturer is.
  • Oscilloscope - Read the frequency and get a reader with the same scope.
  • Dissolving the card (ex. with nail polish remover) and try find out who the manufacturer is by looking for clues on the chip or on the plastic.
share|improve this question
2  
I would inspect the hardware used for reading the cards. You are almost sure to find a vendor and model number written on it. –  Dog eat cat world Jul 12 '11 at 15:56
    
Though I understand your security-purpose, it does sound like this part of the task would be better asked elsewhere, no? RFID is not an inherently "security" technology... –  AviD Jul 13 '11 at 20:08
    
@Avid, Maybe I could've put it here: electronics.stackexchange.com –  Chris Andrè Dale Jul 13 '11 at 21:00
    
@Karrax, might be worth a shot - unless you already got here what you needed... –  AviD Jul 13 '11 at 21:03
    
Rook's answer seems like exactly what I want :) thank you. –  Chris Andrè Dale Jul 13 '11 at 21:05
add comment

2 Answers 2

up vote 5 down vote accepted

You only need one RFID device, its the Proxmark3. There are many protocols and frequencies used by RFID and the Proxmark3 tries to support all of them. It is open source hardware and software and breaks every commercial RFID card I know of. The real problem with RFID is that you have a very limited power usage so you are forced to use weak crypto systems. Often times they rely upon security though obscurity, and the Proxmark3 is designed to overcome this.

share|improve this answer
add comment

Might sound glib, but often a quick Google gives information on which companies use which card providers. I would always use this first if the company won't tell you before the test.

Have a look at Major Malfunction's extensive back catalogue of rfid presentations, as he discusses issues such as this.

Try http://www.google.co.uk/m/search?q=major+malfunction+rfid

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.