Unlocking secrets of the Proxmark3 RDV4.0
summary
Firmware and hardware changes to the Proxmark3 RDV4.0 make it a quarter of the original size and add 2 Mbit flash for onboard dictionaries, a 7.816 contact interface for smartcards, and 4 active antennas plus Bluetooth and battery for covert, standalone use. Demonstrations show MIFARE Classic cloning, a hotel-lock attack pipeline, on-device dictionary cracking in ~6s, EMV contact/CONTACTLESS traces, and improved MF hard-nested solvers that cut attack time dramatically.
AI-written summary · about
chapters (22)
- 0:00Introduction and presenters
- 2:54What is Proxmark3 RDV4
- 6:06Limitations of older models
- 7:10Hardware improvements in RDV4
- 10:23Standalone mode and covert use
- 11:28Smart card module added
- 13:18Setting up Proxmark3 client
- 16:15Comparing Proxmark generations
- 19:48Testing antennas and connectivity
- 21:15Reading Mifare Classic cards
- 23:01Default keys and dictionary attacks
- 24:50Dumping and analyzing card data
- 26:21Simulating tags with Proxmark
- 27:03Crypto analysis and vulnerabilities
- 27:50Onboard memory and dictionary files
- 29:35Wing Lock hotel card hack
- 32:05Dual interface card demo
- 34:56EMV card analysis
- 35:17Return of Coppersmith attack
- 37:09Hard nested attack improvements
- 41:42Optimized Mifare cracking
- 44:07Q&A session
related talks
20mFun with Proxmark3
47mMIFARE Classic: Exposing The Static Encrypted Nonce Variant
41mExploiting Keyspace Reduction And Relay Attacks In 3Des And Aes Protected NFC Tags
46mRFID: Flippers and Access Control
01h 03mHack To Discover Weaknesses In A Series Of Smartcards
40mBiohacking: The Invisible Threat
40mExposing The Deep-Secure Elements Of Smartcards
41mUnlock hidden Superpowers in MediaTek Wi-Fi Chips