Can you hack the IKEA Rothult RFID lock

the Ikea Rothult rfid lock ? can you hack it ? well kind of :)
twitter channels
/ cybergibbons
/ herrmann1001
Ikea manual for the lock
www.ikea.com/ie/en/manuals/ro...
Buy your own lock from Ikea
www.ikea.com/us/en/p/rothult-...
Iceman on Patreon
/ iceman1001

[@dcripps]

My Taylor, you are costing me money....
I've just bought one of these to play with! Now back to my Proxmark :-)

[@QuentynTaylor]

have fun, i will stick up a video this weekend about how you can play with the 2 of them together

[@kabirthaddeus3688]

a trick: you can watch series at flixzone. Been using them for watching all kinds of movies recently.

[@jaydeerotterdamnl5507]

my bank card also seems to work. Or maybe just ANY rfid card for that matter... I guess my kids found out long before I did, since the candy seems to be eaten by invisible mice.

[@SPCoulson]

Brilliant video! Excellent run through.
Can I clarify.... if you put the master card on and then follow on with a hotel card for example, does it write to the hotel card OR does it allow the hotel card on the device?

[@QuentynTaylor]

no it seems to then just accept the mifare classic's UID to unlock which in effect lowers the security ( as you can see in the video) - so the hotel keycard is then just used as an access token

[@SPCoulson]

@@QuentynTaylor thanks for the update. Really interesting lock, I'm trying to work out WHY they would include that feature, really odd. Good teardown though.

[@QuentynTaylor]

@@SPCoulson i suspect that its so that they dont have to provide extra cards but thats a guess. They list the cards in the manual as the "master cards". Just weird that they chose such an esoteric standard for the cards and didnt just go mifare of some kind. Then again this is Ikea the home of weird non standard bulb and plumbing fittings :)

[@ramsesortega-gil1125]

Great video bruv

[@ExaByteTutorials]

Can you make a tutorial how you would design an access control system? I also would be interested in an explanation video about desfire and how the applications and encryption works.
Keep up the great work!

[@QuentynTaylor]

i can try but that would be a big complex video... regarding desfire the best place may be the discord channel ?

[@ExaByteTutorials]

Hello!
Which Discord Channel are you referring to?

[@seb5689]

he there cool vid, im really new to RFID: i've got a vivokey spark and a NeXT, can u suggest where to start with learning about all the different kinds of RFID? my communal parking lot has a HiTag 2 and my landlord refuses to pay for us to get a fob... any suggestions?

[@QuentynTaylor]

i would grab a proxmark and have a play but remember that the learning curve can be steep if you arent familiar with compiling and working on the console. if you just want to learn about rfid then have a look at the android app "NFC tools"

[@keithljarvis]

Cool device. I think I'll get one!

[@hippohoppa]

Can I make copies of the programmed key using my phone's nfc? 🤔 (I don't have one yet)

[@kshirley9337]

so we purchased the locker system that goes with these locks from IKEA. Thinking each lock was unique to the cards. However, we put the locks on all the 4 doors and all the keys open all the locks. Do you know of a way, to make them more secure? One key opens one specific lock only? Appreciate your time in advance, thanks

[@QuentynTaylor]

the original ikea card opens each of the 4 locks ? or the rfid card you bound yourself opens all 4 ?

[@sectokia1909]

@@QuentynTaylor Any RFID card opens any lock - doesn't even have to an ikea card... they don't code them, as long as its the same type of rfid card it opens... seems like at least the early batch of these were always set to learn mode (or just accepted any card), and they fixed this later.

[@firemanbraids8987]

In the manual it says only 1 extra card can be written but what if I copy the extra card and put the details on 9 more card so than I will have 10 would that all work

[@QuentynTaylor]

Yes that would work

[@husamothman1]

Have you had any luck with cloning an ISO14443B card? The proxmark3 cannot even detect it.
Any ideas?

[@QuentynTaylor]

You mean the provided cards ? The HF st commands will interrogate the provided IKEA cards. You will need the latest build from source

[@husamothman1]

@@QuentynTaylor not really. I was referring to another type of cards, namely ISO14443B which Proxmark3 cannot detect. Have you had any luck with these type of cards?

[@QuentynTaylor]

@@husamothman1 apologies have you tried the hf 14b commands ? that are in the latest build

[@husamothman1]

@@QuentynTaylor Thanks for the reply. I'll update to the latest and will try it out.

[@AbdulKalam-kq3fl]

can u pls post a video on how to use the chameleon tiny pro on linux

[@QuentynTaylor]

hi there is a video on how to build the firmware from source here th-cam.com/video/dOIbKCPY-mE/w-d-xo.html

[@petkopetkopp]

Try read master card on device 4 times in a row and I'll think it will mute the sound on device

[@ernieluna]

no need to hack installed and without any programming or hacking my APPLE AirTag opened the lock ..No hack just opened lock and closed it as well

[@temp50]

"very-very cheap" if you call a $30 device cheap than yes, it is basically cheap.

[@LL-eh6xi]

What proxmark is that

[@MarcusJGrey]

Looks like the new RDV4 with the bluetooth/battery standalone module. Blueshark or something along those lines.

[@LL-eh6xi]

@@MarcusJGrey ahh ight thanks been wanting one for while just not able to afford lol

[@QuentynTaylor]

thats the RDV4 with blueshark module