[18] Hunting for credentials with the long range RFID card reader

Sdílet
Vložit
  • čas přidán 7. 07. 2024
  • Today we do a quick voltage test and run some real world scenarios using the hunt pad long range rfid card reader.
    Build items:
    Reader:
    www.amazon.com/gp/product/B00...
    Battery Pack:
    www.amazon.com/gp/product/B00...
    ESPKey:
    redteamtools.com/espkey

Komentáře • 110

  • @amihirata
    @amihirata  Před 3 lety +21

    Credit Cards are out of scope.

    • @Anishshabbir
      @Anishshabbir Před 3 lety +1

      Don't the use same RF ids

    • @mikenorth4249
      @mikenorth4249 Před 3 lety

      Can this device read Car key fobs?
      I need to get in my car ASAP

    • @deandredavis2002
      @deandredavis2002 Před 3 lety +1

      Do it doesn’t read credit cards?

    • @flighttherapybullisticfpv133
      @flighttherapybullisticfpv133 Před 2 lety +1

      @@mikenorth4249 You are better off to get an SDR dongle, or a portahack, and do a basic replay attack. Depending on how new the car is, the attack can get pretty sophisticated, but for modern keyfobs you need to be able to capture and replay in order

    • @nertervern
      @nertervern Před 2 lety

      Lol perps

  • @BASE5NYC
    @BASE5NYC Před 4 lety +7

    I already liked your channel because of your topics & discussion.... but now, after your hallway improv...this may be my all time favorite channel. 🥇

  • @mattferreira9750
    @mattferreira9750 Před 4 lety +2

    Great content nice see TNSCE doing field tests. Hope the content may one day soon be a 10 min vid

  • @DroolingNeoBrewery
    @DroolingNeoBrewery Před 3 lety +6

    The neck lanyard and shirt/coat pocket placement can be defeated by placing the hunt pad in a backpack and standing in front of them (like on an elevator), it will also grab most belt placements. This depends on the target location of course. Some places a backpack may be suspect by itself but if they employ software devs / IT people or get/send deliveries by bicycle courier a backpack will not raise any eyebrows. You can figure that out with osint and field reckies.

    • @minarchisttrucker2775
      @minarchisttrucker2775 Před 2 lety +1

      You could also probably get a plastic clip board that has compartments and put it inside. People carry clipboards at chest high or hip height in their arms all the time.
      Not to mention if your "arms get tired" it's reasonable to switch hands

  • @CapsAdmin
    @CapsAdmin Před 2 lety +1

    Interesting video! Just some quick thoughts;
    Maybe this could be prevented if the tag was by default concealed within the card being blocked by some rfid blocking material? Something like a flat plastic part you can pull out from the bottom center of the card to reveal and push back in to conceal.

  • @honorvirtue2904
    @honorvirtue2904 Před 2 lety +17

    How can you actually see the data? Do you need another piece of software, or head to a website? Any advice is greatly appreciated, and please keep the vids coming. Thank you 😊

  • @danielroglich3309
    @danielroglich3309 Před 4 lety

    Awesome video

  • @BD90..
    @BD90.. Před 4 lety +5

    Checkout three is now open.

  • @smhmyhead7969
    @smhmyhead7969 Před 2 lety

    Great Channel Name

  • @Viii_Glasseye
    @Viii_Glasseye Před 2 lety

    The lanyard and the coat pocket solution I came up with is a little out there but you can make use of a winter coat to place the scanner at chest level. You can either put it into one of the large pockets the coat may have or cut it open from the inside and sew in a custom compartment. As long as the coat is thick enough no one should be able to notice it. You can then get close enough using some social engineering to grab credentials. The main downside I see is this is weather dependent and possibly useless in a coat check environment. But hey I did say it's an out there idea lol.

  • @jwrm22
    @jwrm22 Před 4 lety +16

    The 9V shown will not power the reader, at least not for very long. The 9V block battery is optimised for long life with low current.
    This reader likely has an average current of 500mA. In most optimum scenario it will last for 45minutes to an hour.
    The AA pack will likely last for at least 5 hours.
    I'd suggest searching for a LiFePO battery pack of the required voltage and power. 2Ah is plenty for a days work.
    While much more uncommon than alkaline, LiON or LiPO it's much safer in use.

    • @jwrm22
      @jwrm22 Před 4 lety

      @@amihirata No problem. Don't forget to use a battery protector/monitor when using LiPO.

    • @Dannydawson537
      @Dannydawson537 Před 4 lety

      Expert 👍🏻 you know your stuff

    • @mikenorth4249
      @mikenorth4249 Před 3 lety

      Can this device read Car key fobs?

    • @mikenorth4249
      @mikenorth4249 Před 3 lety

      I need to get in my car ASAP

    • @splashigamingz342
      @splashigamingz342 Před 3 lety

      @@mikenorth4249 have you found

  • @mumbles1justin
    @mumbles1justin Před 3 lety +6

    A sling pack works better then messenger bag.
    1) Read from behind you. (chest hight of someone behind you) good for standing in a line.
    2) Side cary sling pack for waist height reads.
    3) Front cary sling pack
    So in all three of these carry options your able to maneuver a sling bag in ways no other bag allows without suspicion. Depending on the carrying orientation when removing allows the reader to be raised higher and closer to subject if needed without much suspicion.

  • @marcossolis7164
    @marcossolis7164 Před rokem +2

    would the range increase if i attached a 12 watt battery pack to a 13.56 khz rfid reader? or would i also need an antenna?

  • @brendanrandle
    @brendanrandle Před 4 lety

    how about a quick charge power bank and one of those ali express boards the do the handshake for higher voltage

  • @normalperson9444
    @normalperson9444 Před 2 lety +4

    this is so scary, imagine the data you would collect by going on the tube at rush hour. what credentials would this gather? i wouldve thought it would just collect stuff like someones fob to their apartment

  • @peeonu8291
    @peeonu8291 Před rokem

    Is just for access cards does it pick up the other type of cards and can u add a memory chip

  • @michaelopie269
    @michaelopie269 Před 2 lety

    Will this work for cattle rfid tags? Bought from Allflex

  • @TheYoutubeVideoFactory
    @TheYoutubeVideoFactory Před rokem +2

    For those wondering, this will NOT work on HID Prox, mifare, indala, iclass etc. You need a special reader for those.

  • @amadigweprincechristopher6850

    With social engineering is it not possible to increasing the range. Maybe by adding a high powered or long range antenna?

  • @webdronez
    @webdronez Před 3 lety +4

    what about adding a vibrating module to it? So you can feel the aquire alert...

  • @noahfarmer9542
    @noahfarmer9542 Před 10 měsíci

    Upgraded from the phone reader

  • @jayschafer1760
    @jayschafer1760 Před 4 lety +1

    How much does stuff that you would use to disguise the reader (like leather or nylon for a briefcase or backpack) degrade the range? Does metal hardware (e.g., zippers, buttons, loops, snaps, etc) matter?

  • @sumayakay
    @sumayakay Před 2 lety

    Hello sir, Does this read HF 13.56 MHz ??

  • @TheMinatozzz
    @TheMinatozzz Před 2 lety

    Tutorial link to cell phones and card machines ?

  • @Dannydawson537
    @Dannydawson537 Před 4 lety

    Absolutely fantastic vid sir and even using 15v did not increase the reading range that surprised me , if increasing the power doesn’t increase read range then what would sir ?

    • @taylorh1883
      @taylorh1883 Před 4 lety +1

      To get more range you probably need a bigger coil. Which means more money. However increasing the voltage or using the 9 AA batteries will give you a longer battery life over the 9 volt battery.

    • @Dannydawson537
      @Dannydawson537 Před 4 lety

      Taylor H hi I’m working on a similar project right now , so do you think a bigger coil would help?

    • @marcossolis7164
      @marcossolis7164 Před rokem +1

      @@Dannydawson537 let me know if you found out

    • @Dannydawson537
      @Dannydawson537 Před rokem

      @@marcossolis7164 hi and it is possible to increase the range by tinkering around with the power and size of the rfid Aerial antenna

    • @marcossolis7164
      @marcossolis7164 Před rokem +1

      @@Dannydawson537 so your telling me i would be able to increase the range on a NFC 13.56 MHZ reader by adding a battery pack and external aftermarket antenna? or would i have to design the antenna myself? also if you could please let me know if you have ever got a NFC 13.56 mhz reader to amplify the read range.

  • @speeddemon5339
    @speeddemon5339 Před 5 měsíci

    Hmm, I wonder if it would be possible to make the reader pad smaller. Of course with it being smaller the range would decrease, but at least you wouldn’t have to swing around a big bag all the time.
    If it was shrunken down to be small enough to fit in a relatively big pocket (one big enough to store a Crystal Geyser bottle) with a range of 5 inches, then I could definitely see someone swiping a person’s card data with a simple pass by.
    If the criminal is looking at their phone in both hands, then the target wouldn’t really suspect that they have been pick pocketed.
    Pair that with a fork device, and you can easily drain an entire ATM without hurting your target. Granted, the bank does take a hit, but oh well.
    If a more expensive one where used that were bigger, then you could easily steal multiple credit card numbers just by wearing a back pack with the device inside, no matter where the credit card is on a person’s body.

  • @sebastianA83
    @sebastianA83 Před 2 lety

    Protocol 14443? 135mhz?

  • @adamrat3597
    @adamrat3597 Před rokem +1

    how is the rfid or card information saved, can i save it to an sd card or does it have to be plugged into a pc, asking for a friend :3 !!!

  • @josefinandersson7646
    @josefinandersson7646 Před rokem

    will it range be shorter if i have the reader in a backback and the victim has his card in his wallet in the pocket or jacket?

  • @marcozamudio100
    @marcozamudio100 Před 2 lety

    Where can I follow you or txt u for any questions I have 😅

  • @MRES3
    @MRES3 Před 3 lety

    Does this work on car key fobs??? And how do increase its range

    • @amihirata
      @amihirata  Před 3 lety +2

      It only works for credentials on the EM410x specification, and the way to increase range is to use a custom coil and voltage

    • @MRES3
      @MRES3 Před 3 lety +2

      @@amihirata once you get the credentials from the rfid card how do u transfer it to another card?

    • @TrevorBock
      @TrevorBock Před 2 lety

      @@MRES3 Just in the research stage, but I think you need to have a proxmark as well (~$350). If you found a cheaper option, I would love to know!
      czcams.com/video/kUduHIygbY8/video.html

  • @Sourpusscandy
    @Sourpusscandy Před 3 lety +2

    Building 7? Oh that’s already down!

  • @user-nm5tn7td5b
    @user-nm5tn7td5b Před rokem

    Can read range on 1000m

  • @monix4995
    @monix4995 Před 3 lety +4

    But what about the software? If we For example catch a credit card. Where does it store the credit card number, EXP date and more?

    • @asmrticklemesenses3343
      @asmrticklemesenses3343 Před 3 lety +1

      There is probably an SD card

    • @Omni7600
      @Omni7600 Před 3 lety +4

      @@asmrticklemesenses3343 lol, no. Credit Cards function on entirely different tech than rfid id badges, and are completely out of scope for a device like this. Because of the emv chip technology behind these cards, even with an advanced device, you could only get authorization for one transaction. You dont get the credit card number, you don't get the exp date, you don't get a cvv, you get basically nothing.

    • @YARDSTAR187
      @YARDSTAR187 Před 2 lety

      @@Omni7600 u kno where I can get one that does catch 💳 credentials

    • @justchillin1012
      @justchillin1012 Před 2 lety +1

      @@YARDSTAR187 @ me when you find out bruh 😭

    • @YARDSTAR187
      @YARDSTAR187 Před 2 lety +1

      @@justchillin1012 let me kno if u think its legit big dog Im trying to find a legit plug

  • @deandredavis2002
    @deandredavis2002 Před 3 lety +1

    So do you get dumps from this device?

  • @gb4breezy281
    @gb4breezy281 Před rokem +1

    Can it read credit cards yes or no ?

  • @RicardoJoseRuizFdez
    @RicardoJoseRuizFdez Před 4 lety

    Hi! Are there any cheap long range NFC readers? The R90 is too expensive for just research :P

  • @davemark8121
    @davemark8121 Před 2 lety

    Can this read credit cards when linked to an esp

  • @deanhankio6304
    @deanhankio6304 Před 2 lety

    well, long-range. still less than 1 meter

  • @plixplux
    @plixplux Před 2 lety

    Lol, yes that guy definitely looked like he deserved to get it stolen =)

  • @marketwarriorfx
    @marketwarriorfx Před rokem +1

    fabricate a hunt pad into the chestplate of a robo cop costume and walk around like a street performer, everybody will walk up to you and you can face them directly, offer to take photos with them and even give them a departing robo cop hug as good faith. You will get erreybodys info

    • @marketwarriorfx
      @marketwarriorfx Před rokem +1

      wire it with internal concealed wires to a car battery in a backpack and crank that slick rick to maximum juice,.... jamba anyone????

    • @marcossolis7164
      @marcossolis7164 Před rokem +1

      you just expanded my mind. thank you

  • @cleeptv7280
    @cleeptv7280 Před 11 měsíci

    Can it read credit cards

  • @aliyigitsoy4378
    @aliyigitsoy4378 Před 3 lety

    Oder unter der schaut

  • @Sp4derWeb
    @Sp4derWeb Před 3 lety +1

    can this read credit cards ?????

  • @sheaguy2922
    @sheaguy2922 Před 2 lety

    Did is horrible

  • @xox8897
    @xox8897 Před rokem

    how do u retrieve the data now?