Learn how to read, clone, and emulate RFID badges with the Flipper Zero. In this video, we cover how to: Rapidly read, save and emulate 13.56MHz High-Frequency RFID Cards: MIFARE Classic 1K & 4K, Ultralight, NTAG213. Read, save, clone, and emulate 125KHz Low-Frequency Cards (EM41XX, T5577, Indala, etc). We also demonstrate some advanced capabilities, like extracting information from a DESFire card. The Flipper Zero has full emulation (UID + Data). In this video for speed, we just demonstrate that the UIDs match when we emulate. Visit LAB401.com if you need to get a Flipper zero or learn about our curated collection of pentesting tools. Flipper zero: https://lab401.com/products/flipper-zero?variant=42927883518182

The BadUSB module of the flipper zero uses Ducky script, a language made for the world-famous USB rubber ducky by HAK5. Ducky script emulates keyboard strokes when plugged into a computer. The BadUSB doesn't send characters, it sends HID Codes: which the computer then interprets into characters, based on the user's keyboard configuration. BadUSB devices always assume that a keyboard is set to English QWERTY by default. If the computer's keyboard is configured to another format (let’s say French AZERTY for example), when the BadUSB script is launched, characters appear swapped, and the script will fail. Thanks to roguemaster and his roguemaster custom firmware, Flipper Zero now supports multiple keyboard layouts, which can be configured on the fly. In other words, you only need one script, and the Flipper Zero does all the hard work in real-time to adjust the script to the target's keyboard layout. Let's see how to change the keyboard layout so the badusb script will run smoothly. Roguemaster firmware link: https://github.com/RogueMaster/flipperzero-firmware-wPlugins/ Get your Flipper zero at LAB401: https://lab401.com/products/flipper-zero

This week's pentestip is a hands-on how-to with the RFID Antenna Extender. Manufactured by Lab401, these devices are world-first: passively boost read/write/crack ranges to 7cm and displace reader zones up to 50cm. They are compatible with all 13.56MHz systems and require no wiring or soldering. We get hands-on with the devices in this week's #pentesttip!

This week's #pentestip introduces the Multi RFID Keyfob: the "Emergency Chameleon" device. The Multi-RFID keyfob is an ingenious low-tech, low-cost solution: It contains six independent RFID tags: 3x Low-Frequency T5577 ("Universal" LF Tags) and 3x MIFARE Classic® Compatible 1K UID Modifiable DirectWrite / Gen2 Tags (Android Compatible). We introduce why this tool is a key-chain must-have for pentesters.

Hi Pentesters, Welcome to #pentestips. Every Friday we will deliver a quick tip. We hope you'll enjoy those weekly tips. Also feel free to submit your tips to pentestips@lab401.com, we'll reward the best tips with discount codes, gear, etc. today's tip is about the RF-Field detector. As usual, stay safe! LAB401 team.

It's often that some tags don't respond correctly to the proxmark commands. One very common problem is that the tag is actually too close to the antennas of the proxmark. In this case, the trick is very simple: just place a "spacer" between the antenna and the tag, and run your commands again. You like the #pentestips? Make sure to subscribe and to visit LAB401.com Do you have #pentestips to submit yourself? We would love to partner with you, contact us at support@lab401.com

In this video, you will see how to bypass RFID Readers that detect "magic cards" and reject them. Using the Lab401 One Time Write, Undetectable Mifare Classic Compatible badges, your target reader will see the tag as being an original one, not a duplicate. OTW badges: https://lab401.com/products/undetectable-mifare-compatible-1k-one-time-write-uid For more #pentestips or information on pentesting tools, visit LAB401.com

In Today’s #pentestips we'll check the 3 steps to get your payload messing with a host device. Info about duckyscript: https://github.com/hak5darren/USB-Rubber-Ducky/wiki/Duckyscript JS Ducky encoder download link: https://downloads.hak5.org/api/devices/usbrubberducky/tools/jsencoder/1.0/ Get your rubber ducky: https://lab401.com/products/rubber-ducky

As you may know, every open port is a potential vector of attack in a red teaming environment. In today’s #pentestips let's check how to use the USBKill V4 an important tool for red teamers.

How to quickly detect the frequency of a RFID badge ? How to effectively identify the model of a tag? Using the proxmark 3, connected to a Windows 10 PC, it takes only a few seconds to analyze an RFID card, to identify its technology. Using the "lf search" and "hf search" commands, you get all the basic information you need, with additional hints to further analyze Mifare badges for example. Stay safe, see you next week!

In this video, we continue the exploration of the flipper zero functions. Today we check the ibutton function and show you all you need to know about it! Learn how to read, emulate, and write an ibutton. Visit LAB401 to get your Flipper zero and check our curated collection of pentesting products: https://lab401.com/

Learn how to read, clone, and emulate RFID badges with the Flipper Zero. In this video, we cover how to: Rapidly read, save and emulate 13.56MHz High-Frequency RFID Cards: MIFARE Classic 1K & 4K, Ultralight, NTAG213. Read, save, clone, and emulate 125KHz Low-Frequency Cards (EM41XX, T5577, Indala, etc). We also demonstrate some advanced capabilities, like extracting information from a DESFire card. The Flipper Zero has full emulation (UID + Data). In this video for speed, we just demonstrate that the UIDs match when we emulate. Visit LAB401.com if you need to get a Flipper zero or learn about our curated collection of pentesting tools. Flipper zero: https://lab401.com/products/flipper-zero?variant=42927883518182

This video will present you how to update the list of keys on the iCopyX, to read and crack the 1 Kilo RFID badge more efficiently. In this video we will quickly see how a standard 1-kilo badge works, then we will learn how to update the list of keys included in the iCopyX, and finally, we will see how faster the device is with this update. First, let's see quickly how a badge works. You can use the software HxD (https://mh-nexus.de/en/hxd/) or any other hexadecimal editor to view and edit your dumps. Inside the badge, you have a series of 16 sectors, each protected by 2 keys (Key A and Key B). In this example, these are the keys JcRhFw (4A 63 52 68 46 77) and SfSdLe (53 66 53 64 4C 65), and FF FF FF FF FF FF at the end of the badge. In order to read and write a specific sector, you need to know these keys. Please also note the very first line of the dump contains the UID of the badge. In this example, it is FA 7C 7B 3A. In order to make a duplicate, the iCopyX device can crack the unknown keys by various attacks, but the more keys you know upfront, the easiest and quickest it is to fully crack a badge. Here is the procedure to add new keys to your device: 1/Turn On the device 2/Navigate to PC-Mode 3/Connect the device to your PC via USB 4/Wait a few seconds that your computer installs a few drivers 5/Press Start on your device (either of the top 2 buttons) 6/Wait for the device to connect to the computer, after a few seconds, you will have a new Disk (ICOPY-X) on My Computer. Open that disk. 7/Open folder "keys" and then "mf1". Here is the current list of keys of your device, called "mf_user_key.dic" 8/Open it with your favorite notepad editor. 9/Go online and check the link: https://github.com/ikarus23/MifareClassicTool/blob/master/Mifare%20Classic%20Tool/app/src/main/assets/key-files/extended-std.keys 10/Copy the content from this page and paste it on your notepad editor. Save, Exit, you are done. 11/Close the ICOPY-X folder, and press "Stop" on your device to disconnect from the PC. You can now duplicate more badges, more easily and more quickly!

The infrared module of the Flipper zero is pretty straightforward. This module allows you to capture/save/send AND import infrared signals. Multiple signals can then be combined including all the functions you want to control from your flipper zero. This video shows how to add a remote with multiple signals to your Flipper zero and also goes thru all the functions of the Infrared module of the flipper zero. Visit LAB401 to get your Flipper zero and check our curated collection of pentesting products: https://lab401.com/ --------------------------------------------------------------------------------------------------------------------------- Useful links : IRDB for flipper zero: https://github.com/Lucaslhm/Flipper-IRDB To get more universal remotes (projectors, audio players, AC, fans, etc.): https://github.com/RogueMaster/flipperzero-firmware-wPlugins

In Today’s #pentestips we'll check the 3 steps to get your payload messing with a host device. Info about duckyscript: https://github.com/hak5darren/USB-Rubber-Ducky/wiki/Duckyscript JS Ducky encoder download link: https://downloads.hak5.org/api/devices/usbrubberducky/tools/jsencoder/1.0/ Get your rubber ducky: https://lab401.com/products/rubber-ducky

How to update the list of keys on the iCopy-X ? we have a #pentestips for that!

As you may already know, the iCopyX is an autonomous device based on the Proxmark 3. Most of the time, you will use it handheld, with its dedicated interface and buttons. But if you want to go further, you can use it as a proxmark. in today’s #pentestips we are Using our iCopy-X as a Proxmark. While Using the icopy-x handheld, you can simply press the right arrow on the device while it’s working. It will display the proxmark console that works in the background. you can zoom in using the right button on top and zoom out using the left button on top. If you want to use the iCopyX as a true Proxmark, launch the PC-Mode on your icopy-x, then connect it to your PC, open the icopy-x drive and run the « run.bat » script. at this point, a console will pop on your PC asking you what COM port is assigned to the iCopyX. To find this information navigate in the Device Manager of your computer : just type device manager in your windows search, Input that number in the iCopyX console hit Enter. After a few seconds you get a genuine Proxmark console : Now you can use all the standard proxmark commands on your pc. Get your iCopy-X: https://lab401.com/products/icopy-x If you have questions, please contact support@lab401.com Stay safe! and see you next time.

Learn how to read, clone, and emulate RFID badges with the Flipper Zero. In this video, we cover how to: Rapidly read, save and emulate 13.56MHz High-Frequency RFID Cards: MIFARE Classic 1K & 4K, Ultralight, NTAG213. Read, save, clone, and emulate 125KHz Low-Frequency Cards (EM41XX, T5577, Indala, etc). We also demonstrate some advanced capabilities, like extracting information from a DESFire card. The Flipper Zero has full emulation (UID + Data). In this video for speed, we just demonstrate that the UIDs match when we emulate. Visit LAB401.com if you need to get a Flipper zero or learn about our curated collection of pentesting tools. Flipper zero: https://lab401.com/products/flipper-zero?variant=42927883518182

In this video, we continue the exploration of the flipper zero functions. Today we check the ibutton function and show you all you need to know about it! Learn how to read, emulate, and write an ibutton. Visit LAB401 to get your Flipper zero and check our curated collection of pentesting products: https://lab401.com/

This video will present you how to update the list of keys on the iCopyX, to read and crack the 1 Kilo RFID badge more efficiently. In this video we will quickly see how a standard 1-kilo badge works, then we will learn how to update the list of keys included in the iCopyX, and finally, we will see how faster the device is with this update. First, let's see quickly how a badge works. You can use the software HxD (https://mh-nexus.de/en/hxd/) or any other hexadecimal editor to view and edit your dumps. Inside the badge, you have a series of 16 sectors, each protected by 2 keys (Key A and Key B). In this example, these are the keys JcRhFw (4A 63 52 68 46 77) and SfSdLe (53 66 53 64 4C 65), and FF FF FF FF FF FF at the end of the badge. In order to read and write a specific sector, you need to know these keys. Please also note the very first line of the dump contains the UID of the badge. In this example, it is FA 7C 7B 3A. In order to make a duplicate, the iCopyX device can crack the unknown keys by various attacks, but the more keys you know upfront, the easiest and quickest it is to fully crack a badge. Here is the procedure to add new keys to your device: 1/Turn On the device 2/Navigate to PC-Mode 3/Connect the device to your PC via USB 4/Wait a few seconds that your computer installs a few drivers 5/Press Start on your device (either of the top 2 buttons) 6/Wait for the device to connect to the computer, after a few seconds, you will have a new Disk (ICOPY-X) on My Computer. Open that disk. 7/Open folder "keys" and then "mf1". Here is the current list of keys of your device, called "mf_user_key.dic" 8/Open it with your favorite notepad editor. 9/Go online and check the link: https://github.com/ikarus23/MifareClassicTool/blob/master/Mifare%20Classic%20Tool/app/src/main/assets/key-files/extended-std.keys 10/Copy the content from this page and paste it on your notepad editor. Save, Exit, you are done. 11/Close the ICOPY-X folder, and press "Stop" on your device to disconnect from the PC. You can now duplicate more badges, more easily and more quickly!

In today's #pentestips we're checking How to safely and permanently erase an RFID tag with the NFCKill.

This week's pentestip is a hands-on how-to with the RFID Antenna Extender. Manufactured by Lab401, these devices are world-first: passively boost read/write/crack ranges to 7cm and displace reader zones up to 50cm. They are compatible with all 13.56MHz systems and require no wiring or soldering. We get hands-on with the devices in this week's #pentesttip!

The infrared module of the Flipper zero is pretty straightforward. This module allows you to capture/save/send AND import infrared signals. Multiple signals can then be combined including all the functions you want to control from your flipper zero. This video shows how to add a remote with multiple signals to your Flipper zero and also goes thru all the functions of the Infrared module of the flipper zero. Visit LAB401 to get your Flipper zero and check our curated collection of pentesting products: https://lab401.com/ --------------------------------------------------------------------------------------------------------------------------- Useful links : IRDB for flipper zero: https://github.com/Lucaslhm/Flipper-IRDB To get more universal remotes (projectors, audio players, AC, fans, etc.): https://github.com/RogueMaster/flipperzero-firmware-wPlugins

In Today’s #pentestips we'll check the 3 steps to get your payload messing with a host device. Info about duckyscript: https://github.com/hak5darren/USB-Rubber-Ducky/wiki/Duckyscript JS Ducky encoder download link: https://downloads.hak5.org/api/devices/usbrubberducky/tools/jsencoder/1.0/ Get your rubber ducky: https://lab401.com/products/rubber-ducky

In today's #pentestips we're checking How to safely and permanently erase an RFID tag with the NFCKill.