

Dav_Daddy on DIY Forklift For The Home Shop.on on Building A Tube-Based Stereo Amp, In Classic Style.Posted in Misc Hacks Tagged mifare, mifare classic, NFC, NFC tag, vending machine Post navigationĮlectrolytes, They’re What Dehydrated Hackaday Writers Crave! 103 Comments RFID tags are often not as safe as you’d hope, either! It goes to show just how vulnerable some NFC-based access control systems really are. In testing, the card performed flawlessly on all systems he tried it on.

He also managed to successfully clone a card onto a “Magic Mifare” from Amazon. When totals from the machine and credit system were reconciled, there’d be a clear discrepancy, and a short investigation would quickly point to his own card. However, wisely resisted the urge to cash in on candy and sodas. This means that it’s simple to change the values on the card in order to get free credit, and thus free snacks. From there, he was able to determine that the credit for the vending machines was stored on the card itself, rather than on a remote server. was able to use a tool called mfoc to dump the keys and data off the card. Conveniently, had a reader/writer on hand for these very cards.
THE NOUN PROJECT BACK HOW TO
There’s plenty of guides online on how to crack the private keys that are supposed to make the card secure. These cards are considered fairly old and insecure by now.

Initial scans with NFC Tools revealed the card was an Infineon MIFARE Classic Card 1k. He set about hacking the card to see what he could uncover. The card also served as a wallet for using the vending machines. That job came with an NFC access card, which was used for booking rooms and building access.
