nfc reading - NFC Hacking

ok this title is a little misleading but here is my question...is there an app that would all the user to read the data that is on the card. Also is there an app that can copy the data from one tag and then "write" it to another card. Let me clarify my question a bit. Lets say that i have an nfc tag that has data on it. Is there something that will allow me to see that data and can I transfer that data to another nfc tag...............

Related

[Q] Can you secure Photos on SDCARD?

With everything going on in the news with apps being able to read your media I was wondering how easy it is for someone to access your information from your phone.
While on the phone you can use a pin or password to prevent someone from going into your phone and I know that there are apps that will individually allow you to password protect individual apps or even "hide" your media if someone gets your phone. You can do a remote wipe of the card with some of the security software but you have be quicker than the "thief" in activating the wipe.
What I have not been able to figure out is how I would protect the SD Card on the phone if someone pulled it out before I had a chance to do a remote wipe. I have not seen anything, with a general search, that will block access on the SD Card if someone puts it in a computer. Other than not loosing my phone what options are out there?
I am running a rooted EVO 4G using the Senseless version of tommytomatoes Classic Rom.
Thanks for any suggestions.
Doc
Thanks for any suggestions.
Encrypt the card?
-------------------------------------
Sent from my Dell Streak 7
Yes Encrypt the card
HTC Desire HD
with
iCeColdSandwich
by LorD ClockaN
If I encrypt the card won't it prevent the other apps from accessing data on the card? Also what will that do to the function of the apps that have been partially moved to the SD Card?
Is there a step by step on how to encrypt?
Thanks,
Doc
What I feel we really need is an app that manages permissions instead of having to blanket allow an app it would be nice if I had another app that could block some of those permissions if I feel like it , sure it may break the app using those apps but control and security are more important, maybe a toggle feature so you can toggle permissions for various apps and sort them by permission type. I have no idea if this can be done, I'm just an end user that sees a need. What do you guys think?
As for the op , in some cases your just screwed , nothing can ever be 100% secure , who is to say even if encrypted it can't be cracked ? And encrypting the sd card but allowing apps access defeats the purpose if the thief can access the data through those apps before you can start a remote wipe.
Sent from my SCH-I510 using Tapatalk
I wish someone would solve this problem as soon as possible, looking forward to it
I realize that not everything is 100% but it seems silly that no matter what precautions I take by using a pin lock or pass-phrase, it can be circumvented just by removing the SD Card. Of course if I encrypt the card then many of the apps may not work unless they have the functionality to decrypt/encrypt on the fly.
I just need to make sure to remotely wipe the card if I ever loose the phone.
Thanks to everyone who responded.
Doc
.
Thread moved. Would advise you to read forum rules and post in correct section.
Failure to comply with forum rules will result in an infraction and/or ban depending on severity of rule break.
You can store it at Meero instead. It's free and the storage is unlimited. The most advanced portal for pro photographers at the moment guaranteed.

[Q] Copy NFC tag to another NFC tag

Hi everyone, this has probably been asked before but I didn't want to i guess bump a necro thread.
Basically I was wondering is it possible for me to copy an nfc tag to another nfc tag. From a post I saw here, it said it is possible as long as the tag isn't encrypted.
So basically what i was hoping to know is one how would be the best way I would know if its encrypted and two what would be the easiest way to do this.
If it helps my mindset is basically I want to copy the NFC tag from my bus card onto a wristband so that I don't need to use the card anymore. What I'm guessing is that everything is set electronically in terms of card cost and stuff like that as I read that I can recharge and view my balance online so I'm assuming the card just acts like a connecter to your specific account and doesn't actually contain any money information on it.
I tried an app to read from the card and it did show me what I think is numerous files, in which the one I saw said that I was allowed to read from the device but no write access which I'm guessing is fine since all I want to do is read and copy from that NFC tag and then write it to another one I can buy.
The other thing I could do is just cut up my bus card and get the nfc part and place it under a watch or something, the bus company said I can get a new card for free whenever I like if I lose my current one so that's another way but seems a bit crude to me.
eitherrideordie said:
Basically I was wondering is it possible for me to copy an nfc tag to another nfc tag. From a post I saw here, it said it is possible as long as the tag isn't encrypted.
Click to expand...
Click to collapse
You can copy any information you can actually read. BUT the following is not working:
If it helps my mindset is basically I want to copy the NFC tag from my bus card onto a wristband so that I don't need to use the card anymore. What I'm guessing is that everything is set electronically in terms of card cost and stuff like that as I read that I can recharge and view my balance online so I'm assuming the card just acts like a connecter to your specific account and doesn't actually contain any money information on it.
Click to expand...
Click to collapse
Wrong assumption. A card used for banking etc has a private key on it that the bank will use to authenticate you. In order to do this they let the card sign some data and verifies the signature. If everyone could read that key, that would be horrible unsafe. Everybody that would be able to read the key could sign the data on your behalf. That is why the key is on the card and never leaves it.
I tried an app to read from the card and it did show me what I think is numerous files, in which the one I saw said that I was allowed to read from the device but no write access which I'm guessing is fine since all I want to do is read and copy from that NFC tag and then write it to another one I can buy.
Click to expand...
Click to collapse
As I said above, this works for cards that contain only data. You can copy any data that is readable, but cards that give you the functionality you want are not copyable via nfc.
The other thing I could do is just cut up my bus card and get the nfc part and place it under a watch or something, the bus company said I can get a new card for free whenever I like if I lose my current one so that's another way but seems a bit crude to me.
Click to expand...
Click to collapse
Same as above. Id guess your buscard is some sort of mifare card. You can only read/write those if you have the keys. And I don't think you will have them. Well it depends on the exact card but still.
Damastus said:
You can copy any information you can actually read. BUT the following is not working:
Wrong assumption. A card used for banking etc has a private key on it that the bank will use to authenticate you. In order to do this they let the card sign some data and verifies the signature. If everyone could read that key, that would be horrible unsafe. Everybody that would be able to read the key could sign the data on your behalf. That is why the key is on the card and never leaves it.
As I said above, this works for cards that contain only data. You can copy any data that is readable, but cards that give you the functionality you want are not copyable via nfc.
Same as above. Id guess your buscard is some sort of mifare card. You can only read/write those if you have the keys. And I don't think you will have them. Well it depends on the exact card but still.
Click to expand...
Click to collapse
I guess I had too much I was hoping would work, but from reading what you said it doesn't sound like it will . I do get that it has a private key, I was just kind of hoping that in this case it wouldn't since the card doesn't really seem like its worth much, such as compared to something like a visa card or something like that.
Each card has a unique number on them written on the back, so I guess I just kind of assumed each number was assigned for each account type thing and if you lost a card they would just change the account with another different number since you can own multiple bus cards, and that would be all I need, but it seems like you are most likely correct. Our buscard only came into affect about a month or two a go, but I'm assuming they probably paid a company of some sort to do it, and if thats the case they probably would have it encrypted either way
Is there still a way I could check? Just in case theres like some sort of miracle and it is only just a basic card type thing? Even though thats most likely wrong?
You can copy any data that is readable, but cards that give you the functionality you want are not copyable via nfc.
Click to expand...
Click to collapse
If this is the case though I guess its impossible
Cheers though
eitherrideordie said:
Is there still a way I could check? Just in case theres like some sort of miracle and it is only just a basic card type thing? Even though thats most likely wrong?
Click to expand...
Click to collapse
You could try to identify the card. Maybe use sth. like NFC TagInfo or ReTAG to see what type of card it is. These TagInfo will also show you whats in the card when its readable. But dont get your hopes too high.
Damastus said:
You could try to identify the card. Maybe use sth. like NFC TagInfo or ReTAG to see what type of card it is. These TagInfo will also show you whats in the card when its readable. But dont get your hopes too high.
Click to expand...
Click to collapse
Hi, thanks heaps, had a go at using NFC TagInfo and this is what I get
Tag information says the tag type is ISO/IEC 14443-4 smart card
mifare desfire evi(mf3ICD2I)
Under the ISO/IEC 14443-4 Smart card part
it talks about the mifare desfire
Within there it says
Key configuration changeable YES
Master Key required for application creation/deletion YES
Master Key required for application directory list NO
Master Key changeable YES
Available Keys KEY 0: Key version 1
Another key configuration says the exact same thing but also says
Key change permissions AUTHENTICATE WITH KEY 0 application master key
And there's a whole heap of files in there, most of which are readable but some say read fail.
From the sound of all this, its starting to not look that good , I'm assuming if there's keys and things that the only way would be to break them and I don't want to do anything against the rules to be honest .

Replace my nfc Id card

Hi, I just downloaded some nfc reader app from the play store and discovered the phone reacted when I stick the gym I'd card at the back of it.
This card is usually used in order to enter the gym i go to every day (almost). I just have to place it close to a black box installed in the automatic doors and they get opened. I noticed I must place it very close in order to make it work.
Now, I'm not 100% sure it's this technology but if an nfc app is able to read it, o guess it is.
Now, my idea is to replace my Id card, which sometimes I forget, with my phone.
I want to ask if there is a way to make my phone store the nfc data in the card so when I go to my gym, I place the phone near this door instead and make the same function as with the card.
Is this doable? I'd need to read the card once store whatever is on it and then be able to transmit such info on demand.
I'm new to nfc but I'd like to see something like this.
Thanks!
Sent from my Nexus 4 using Tapatalk 2
Short answer:
No.
Long Answer:
Unless you know how to emulate the card's UID, you can't do it.
If your card uses the data stored non the card, which is not likely, you will have to find a way to emulate it.
Beamed from my Maguro.

Written to mifare, is no longer working,

Wrote a simple text record to a mifare classic card, then to remove this I selected "erase tag" in nfc tools pro. The card no longer operates the door controls. Is there anyway I can rectify this? From my Android device.
If not I will go to IT in the morning and get them to sort it.
Would format memory rectify this?
Would 'format memory'
Same problem. Same action. Same software. But One of my 2 door controls is working. The other isnt. Trying to find out why.
Try formatting NDEF in an app such as StartNFCexpert (Android). Then dump the card info back onto it.
Please be aware that this WILL erase the memory on the card. The door access most likely depends on the serial number of the card.
(I am aware this is an old post, it seems to be a common problem so I thought I would contribute)

if a nfc/rfid card is disactivated?

lets say a nfc/rfid card for a job or apt is disactivated. Is there a way you can reprogram the card in anyway for it to be able to gain access again to those places?
bump
q-live said:
lets say a nfc/rfid card for a job or apt is disactivated. Is there a way you can reprogram the card in anyway for it to be able to gain access again to those places?
Click to expand...
Click to collapse
Afaik, there is no 'activation' or 'deactivation' on nfc.
Afaik, again, the readers interpret what the card has written on it. Let's take opening a door. On the card you have an unique ID, the reader goes through a list of authorized IDs, and if yours is in there, it opens the door.
Via an NFC reader app you should be able to replicate any card you like, and I also think reprogramming is possible. If your ID is not allowed to cross a gate anymore, you would have to scan a tag which can and emulate it. This goes without saying, don't do anything illegal.
Also, there could (should) be some more layers of protection, like encryption of the data on the tag, which could prevent advanced editing.
Of course, these are my two cents, I may be ridiculously wrong.
Sent from my XT1068 using XDA Free mobile app
Wow

Categories

Resources