[18] Hunting for credentials with the long range RFID card reader

แชร์
ฝัง
  • เผยแพร่เมื่อ 26 เม.ย. 2024
  • Today we do a quick voltage test and run some real world scenarios using the hunt pad long range rfid card reader.
    Build items:
    Reader:
    www.amazon.com/gp/product/B00...
    Battery Pack:
    www.amazon.com/gp/product/B00...
    ESPKey:
    redteamtools.com/espkey

ความคิดเห็น • 109

  • @amihirata
    @amihirata  3 ปีที่แล้ว +21

    Credit Cards are out of scope.

    • @Anishshabbir
      @Anishshabbir 3 ปีที่แล้ว +1

      Don't the use same RF ids

    • @mikenorth4249
      @mikenorth4249 3 ปีที่แล้ว

      Can this device read Car key fobs?
      I need to get in my car ASAP

    • @deandredavis2002
      @deandredavis2002 2 ปีที่แล้ว +1

      Do it doesn’t read credit cards?

    • @flighttherapybullisticfpv133
      @flighttherapybullisticfpv133 2 ปีที่แล้ว

      @@mikenorth4249 You are better off to get an SDR dongle, or a portahack, and do a basic replay attack. Depending on how new the car is, the attack can get pretty sophisticated, but for modern keyfobs you need to be able to capture and replay in order

    • @nertervern
      @nertervern ปีที่แล้ว

      Lol perps

  • @BASE5NYC
    @BASE5NYC 3 ปีที่แล้ว +7

    I already liked your channel because of your topics & discussion.... but now, after your hallway improv...this may be my all time favorite channel. 🥇

  • @mattferreira9750
    @mattferreira9750 4 ปีที่แล้ว +2

    Great content nice see TNSCE doing field tests. Hope the content may one day soon be a 10 min vid

  • @honorvirtue2904
    @honorvirtue2904 2 ปีที่แล้ว +17

    How can you actually see the data? Do you need another piece of software, or head to a website? Any advice is greatly appreciated, and please keep the vids coming. Thank you 😊

  • @CapsAdmin
    @CapsAdmin 2 ปีที่แล้ว +1

    Interesting video! Just some quick thoughts;
    Maybe this could be prevented if the tag was by default concealed within the card being blocked by some rfid blocking material? Something like a flat plastic part you can pull out from the bottom center of the card to reveal and push back in to conceal.

  • @DroolingNeoBrewery
    @DroolingNeoBrewery 2 ปีที่แล้ว +6

    The neck lanyard and shirt/coat pocket placement can be defeated by placing the hunt pad in a backpack and standing in front of them (like on an elevator), it will also grab most belt placements. This depends on the target location of course. Some places a backpack may be suspect by itself but if they employ software devs / IT people or get/send deliveries by bicycle courier a backpack will not raise any eyebrows. You can figure that out with osint and field reckies.

    • @minarchisttrucker2775
      @minarchisttrucker2775 2 ปีที่แล้ว +1

      You could also probably get a plastic clip board that has compartments and put it inside. People carry clipboards at chest high or hip height in their arms all the time.
      Not to mention if your "arms get tired" it's reasonable to switch hands

  • @danielroglich3309
    @danielroglich3309 4 ปีที่แล้ว

    Awesome video

  • @BD90..
    @BD90.. 4 ปีที่แล้ว +5

    Checkout three is now open.

  • @smhmyhead7969
    @smhmyhead7969 ปีที่แล้ว

    Great Channel Name

  • @brendanrandle
    @brendanrandle 4 ปีที่แล้ว

    how about a quick charge power bank and one of those ali express boards the do the handshake for higher voltage

  • @normalperson9444
    @normalperson9444 2 ปีที่แล้ว +4

    this is so scary, imagine the data you would collect by going on the tube at rush hour. what credentials would this gather? i wouldve thought it would just collect stuff like someones fob to their apartment

  • @jwrm22
    @jwrm22 4 ปีที่แล้ว +15

    The 9V shown will not power the reader, at least not for very long. The 9V block battery is optimised for long life with low current.
    This reader likely has an average current of 500mA. In most optimum scenario it will last for 45minutes to an hour.
    The AA pack will likely last for at least 5 hours.
    I'd suggest searching for a LiFePO battery pack of the required voltage and power. 2Ah is plenty for a days work.
    While much more uncommon than alkaline, LiON or LiPO it's much safer in use.

    • @jwrm22
      @jwrm22 4 ปีที่แล้ว

      @@amihirata No problem. Don't forget to use a battery protector/monitor when using LiPO.

    • @Dannydawson537
      @Dannydawson537 3 ปีที่แล้ว

      Expert 👍🏻 you know your stuff

    • @mikenorth4249
      @mikenorth4249 3 ปีที่แล้ว

      Can this device read Car key fobs?

    • @mikenorth4249
      @mikenorth4249 3 ปีที่แล้ว

      I need to get in my car ASAP

    • @splashigamingz342
      @splashigamingz342 3 ปีที่แล้ว

      @@mikenorth4249 have you found

  • @Viii_Glasseye
    @Viii_Glasseye 2 ปีที่แล้ว

    The lanyard and the coat pocket solution I came up with is a little out there but you can make use of a winter coat to place the scanner at chest level. You can either put it into one of the large pockets the coat may have or cut it open from the inside and sew in a custom compartment. As long as the coat is thick enough no one should be able to notice it. You can then get close enough using some social engineering to grab credentials. The main downside I see is this is weather dependent and possibly useless in a coat check environment. But hey I did say it's an out there idea lol.

  • @mumbles1justin
    @mumbles1justin 3 ปีที่แล้ว +5

    A sling pack works better then messenger bag.
    1) Read from behind you. (chest hight of someone behind you) good for standing in a line.
    2) Side cary sling pack for waist height reads.
    3) Front cary sling pack
    So in all three of these carry options your able to maneuver a sling bag in ways no other bag allows without suspicion. Depending on the carrying orientation when removing allows the reader to be raised higher and closer to subject if needed without much suspicion.

    • @mikenorth4249
      @mikenorth4249 3 ปีที่แล้ว

      Can this device read Car key fobs?

  • @marcossolis7164
    @marcossolis7164 10 หลายเดือนก่อน +1

    would the range increase if i attached a 12 watt battery pack to a 13.56 khz rfid reader? or would i also need an antenna?

  • @amadigweprincechristopher6850
    @amadigweprincechristopher6850 2 ปีที่แล้ว

    With social engineering is it not possible to increasing the range. Maybe by adding a high powered or long range antenna?

  • @webdronez
    @webdronez 3 ปีที่แล้ว +4

    what about adding a vibrating module to it? So you can feel the aquire alert...

  • @TheYoutubeVideoFactory
    @TheYoutubeVideoFactory ปีที่แล้ว +2

    For those wondering, this will NOT work on HID Prox, mifare, indala, iclass etc. You need a special reader for those.

    • @gsesini1621
      @gsesini1621 ปีที่แล้ว

      what special reader do u need

  • @michaelopie269
    @michaelopie269 2 ปีที่แล้ว

    Will this work for cattle rfid tags? Bought from Allflex

  • @noahfarmer9542
    @noahfarmer9542 8 หลายเดือนก่อน

    Upgraded from the phone reader

  • @peeonu8291
    @peeonu8291 ปีที่แล้ว

    Is just for access cards does it pick up the other type of cards and can u add a memory chip

  • @adamrat3597
    @adamrat3597 10 หลายเดือนก่อน +1

    how is the rfid or card information saved, can i save it to an sd card or does it have to be plugged into a pc, asking for a friend :3 !!!

  • @Dannydawson537
    @Dannydawson537 3 ปีที่แล้ว

    Absolutely fantastic vid sir and even using 15v did not increase the reading range that surprised me , if increasing the power doesn’t increase read range then what would sir ?

    • @taylorh1883
      @taylorh1883 3 ปีที่แล้ว +1

      To get more range you probably need a bigger coil. Which means more money. However increasing the voltage or using the 9 AA batteries will give you a longer battery life over the 9 volt battery.

    • @Dannydawson537
      @Dannydawson537 3 ปีที่แล้ว

      Taylor H hi I’m working on a similar project right now , so do you think a bigger coil would help?

    • @marcossolis7164
      @marcossolis7164 10 หลายเดือนก่อน +1

      @@Dannydawson537 let me know if you found out

    • @Dannydawson537
      @Dannydawson537 10 หลายเดือนก่อน

      @@marcossolis7164 hi and it is possible to increase the range by tinkering around with the power and size of the rfid Aerial antenna

    • @marcossolis7164
      @marcossolis7164 10 หลายเดือนก่อน +1

      @@Dannydawson537 so your telling me i would be able to increase the range on a NFC 13.56 MHZ reader by adding a battery pack and external aftermarket antenna? or would i have to design the antenna myself? also if you could please let me know if you have ever got a NFC 13.56 mhz reader to amplify the read range.

  • @jayschafer1760
    @jayschafer1760 3 ปีที่แล้ว +1

    How much does stuff that you would use to disguise the reader (like leather or nylon for a briefcase or backpack) degrade the range? Does metal hardware (e.g., zippers, buttons, loops, snaps, etc) matter?

    • @mikenorth4249
      @mikenorth4249 3 ปีที่แล้ว

      @Catia Ribeiro how about car keep fobs?

  • @TheMinatozzz
    @TheMinatozzz 2 ปีที่แล้ว

    Tutorial link to cell phones and card machines ?

  • @sumayakay
    @sumayakay 2 ปีที่แล้ว

    Hello sir, Does this read HF 13.56 MHz ??

  • @marcozamudio100
    @marcozamudio100 2 ปีที่แล้ว

    Where can I follow you or txt u for any questions I have 😅

  • @monix4995
    @monix4995 3 ปีที่แล้ว +4

    But what about the software? If we For example catch a credit card. Where does it store the credit card number, EXP date and more?

    • @asmrticklemesenses3343
      @asmrticklemesenses3343 3 ปีที่แล้ว +1

      There is probably an SD card

    • @Omni7600
      @Omni7600 3 ปีที่แล้ว +4

      @@asmrticklemesenses3343 lol, no. Credit Cards function on entirely different tech than rfid id badges, and are completely out of scope for a device like this. Because of the emv chip technology behind these cards, even with an advanced device, you could only get authorization for one transaction. You dont get the credit card number, you don't get the exp date, you don't get a cvv, you get basically nothing.

    • @YARDSTAR187
      @YARDSTAR187 2 ปีที่แล้ว

      @@Omni7600 u kno where I can get one that does catch 💳 credentials

    • @justchillin1012
      @justchillin1012 2 ปีที่แล้ว +1

      @@YARDSTAR187 @ me when you find out bruh 😭

    • @YARDSTAR187
      @YARDSTAR187 2 ปีที่แล้ว +1

      @@justchillin1012 let me kno if u think its legit big dog Im trying to find a legit plug

  • @speeddemon5339
    @speeddemon5339 3 หลายเดือนก่อน

    Hmm, I wonder if it would be possible to make the reader pad smaller. Of course with it being smaller the range would decrease, but at least you wouldn’t have to swing around a big bag all the time.
    If it was shrunken down to be small enough to fit in a relatively big pocket (one big enough to store a Crystal Geyser bottle) with a range of 5 inches, then I could definitely see someone swiping a person’s card data with a simple pass by.
    If the criminal is looking at their phone in both hands, then the target wouldn’t really suspect that they have been pick pocketed.
    Pair that with a fork device, and you can easily drain an entire ATM without hurting your target. Granted, the bank does take a hit, but oh well.
    If a more expensive one where used that were bigger, then you could easily steal multiple credit card numbers just by wearing a back pack with the device inside, no matter where the credit card is on a person’s body.

  • @sebastianA83
    @sebastianA83 ปีที่แล้ว

    Protocol 14443? 135mhz?

  • @josefinandersson7646
    @josefinandersson7646 ปีที่แล้ว

    will it range be shorter if i have the reader in a backback and the victim has his card in his wallet in the pocket or jacket?

    • @marcossolis7164
      @marcossolis7164 10 หลายเดือนก่อน +1

      let me know if you found out gang

  • @user-nm5tn7td5b
    @user-nm5tn7td5b ปีที่แล้ว

    Can read range on 1000m

  • @deandredavis2002
    @deandredavis2002 2 ปีที่แล้ว +1

    So do you get dumps from this device?

    • @thraxexotics3406
      @thraxexotics3406 2 ปีที่แล้ว +1

      Yea gang this how you get dumps

    • @michaelemanuel9512
      @michaelemanuel9512 10 หลายเดือนก่อน

      @@thraxexotics3406 Information is key😎🗝💯🌟!

    • @michaelemanuel9512
      @michaelemanuel9512 10 หลายเดือนก่อน

      Information is powerful.

    • @MobfiaEnt
      @MobfiaEnt 8 หลายเดือนก่อน

      Yes but I’d imagine you need some sort of software to decrypt it

  • @Sourpusscandy
    @Sourpusscandy 2 ปีที่แล้ว +2

    Building 7? Oh that’s already down!

  • @MRES3
    @MRES3 3 ปีที่แล้ว

    Does this work on car key fobs??? And how do increase its range

    • @amihirata
      @amihirata  3 ปีที่แล้ว +2

      It only works for credentials on the EM410x specification, and the way to increase range is to use a custom coil and voltage

    • @MRES3
      @MRES3 3 ปีที่แล้ว +2

      @@amihirata once you get the credentials from the rfid card how do u transfer it to another card?

    • @TrevorBock
      @TrevorBock 2 ปีที่แล้ว

      @@MRES3 Just in the research stage, but I think you need to have a proxmark as well (~$350). If you found a cheaper option, I would love to know!
      th-cam.com/video/kUduHIygbY8/w-d-xo.html

  • @gb4breezy281
    @gb4breezy281 ปีที่แล้ว +1

    Can it read credit cards yes or no ?

    • @Glee..
      @Glee.. ปีที่แล้ว

      ?

  • @deanhankio6304
    @deanhankio6304 2 ปีที่แล้ว

    well, long-range. still less than 1 meter

  • @plixplux
    @plixplux 2 ปีที่แล้ว

    Lol, yes that guy definitely looked like he deserved to get it stolen =)

  • @RicardoJoseRuizFdez
    @RicardoJoseRuizFdez 3 ปีที่แล้ว

    Hi! Are there any cheap long range NFC readers? The R90 is too expensive for just research :P

    • @splashigamingz342
      @splashigamingz342 3 ปีที่แล้ว

      Have you found

    • @RicardoJoseRuizFdez
      @RicardoJoseRuizFdez 3 ปีที่แล้ว

      @@splashigamingz342 i tried one from AliExpress but It did not work. I gave Up :(

    • @choednugget6969
      @choednugget6969 3 หลายเดือนก่อน +1

      @@RicardoJoseRuizFdezwas it ever found been checking old videos

  • @marketwarriorfx
    @marketwarriorfx ปีที่แล้ว +1

    fabricate a hunt pad into the chestplate of a robo cop costume and walk around like a street performer, everybody will walk up to you and you can face them directly, offer to take photos with them and even give them a departing robo cop hug as good faith. You will get erreybodys info

    • @marketwarriorfx
      @marketwarriorfx ปีที่แล้ว +1

      wire it with internal concealed wires to a car battery in a backpack and crank that slick rick to maximum juice,.... jamba anyone????

    • @marcossolis7164
      @marcossolis7164 10 หลายเดือนก่อน +1

      you just expanded my mind. thank you

  • @davemark8121
    @davemark8121 ปีที่แล้ว

    Can this read credit cards when linked to an esp

  • @Sp4derWeb
    @Sp4derWeb 3 ปีที่แล้ว +1

    can this read credit cards ?????

  • @cleeptv7280
    @cleeptv7280 9 หลายเดือนก่อน

    Can it read credit cards

  • @aliyigitsoy4378
    @aliyigitsoy4378 3 ปีที่แล้ว

    Oder unter der schaut

  • @sheaguy2922
    @sheaguy2922 2 ปีที่แล้ว

    Did is horrible

  • @xox8897
    @xox8897 ปีที่แล้ว

    how do u retrieve the data now?