proxmark3 VS rpitx

I would check out the Proxmark3 Github repo [0]. They have a cheatsheet [1] with the basics on how to get started. I also did a talk about RFID security last year about the basics [2]

To get started, the basics are: low freq (LF) is usually around 125khz and is rarely encrypted (HID Prox is the most common in the US). The data is often encoded in Wiegand format for access control systems (something to keep in mind when reading the raw data).

High freq (HF) (aka NFC) is ~13Mhz and is readable by most Android phones with NFC. Not all tag data can be read however. HF cards support a lot of different options including data storage (normally in a block layout with permissions to read and write depending on keys) and encryption (iCLASS and SEOS being the HID offerings and very common). Some can be cloned (like hotel cards) while others (like SEOS) require a downgrade attack to work correctly (SEOS -> normal SEOS reader -> Weigand data -> older style card like HID Prox).

[0] https://github.com/RfidResearchGroup/proxmark3

[1] https://github.com/RfidResearchGroup/proxmark3/blob/master/d...

[2] https://www.youtube.com/watch?v=zKOAywZqisc

🔗 https://github.com/RfidResearchGroup/proxmark3/releases/tag/v4.17140

After pulling and compiling a newer proxmark3 generic firmware from the RfidResearchGroup repo I got farther but now have a new message I've not found much about with static nonces. https://github.com/RfidResearchGroup/proxmark3/

you could use linux (ubuntu) https://github.com/RfidResearchGroup/proxmark3/blob/master/doc/md/Installation_Instructions/Linux-Installation-Instructions.md

You will have to do the leg word, but this is a starting point: https://github.com/RfidResearchGroup/proxmark3/blob/master/client/luascripts/hf_mf_sim_hid.lua

Grab yourself a Proxmark3, read the instructions here, and you can extract your iClass elite key in a few seconds. You can pick up a PM3 easy for a few bucks.

I cloned whatever the latest commit was at https://github.com/RfidResearchGroup/proxmark3, which is what the guide on dangerous things suggests (where I bought my PM).

As someone with a HackRF PortaPack knockoff I got from ebay, I would agree that SDRs are better and cheaper than ever before. However, I think the average person will struggle with using a HackRF for more complex projects. I've used URH before, and while useful, it can be intimidating for beginners.

Also, while I like the RTL-SDR (and the price tag!), you can't transmit with it. While this isn't a deal breaker to everyone, if you'd like to clone a garage door remote, for example, you need to be able to transmit. While you could use something like a raspberry pi and rpix [0], but I think it is more work than it's worth for many. Also, multiple RTL-SDRs are required for higher bandwidth applications like ASTC TV or trunked radios.

With the flipper, I think the main draw for most is the point-click-done nature. Include the Android/iOS app and it makes it easy to configure on the go without a computer. The expandability is one of the main feature that will increase adoption over time compared to the HackRF+PortaPack which, from what I saw in the past, lacked longer-term support and regular updates and new features.

[0] https://github.com/F5OEO/rpitx

HackRF One is an option. There are a number of others. Legality varies by country/frequency/power level.

Can also make a Raspberry Pi act as a transmitter (https://github.com/F5OEO/rpitx), which could hit the zwave frequency but not the zigbee one. (Also, make sure to put a low pass filter on it.)

The warning at https://github.com/F5OEO/rpitx#hardware suggests a bandpass filter will be needed but has no additional info. https://github.com/F5OEO/rpitx/issues/40 looked promising but is closed.

On a similar path, you might look at: rpitx

RF transmitter for Raspberry Pi With this project you can turn your Raspberry Pi into an RF transmitter with only a filter to avoid interferences.

RPITX is the spiritual successor of your project!

https://github.com/F5OEO/rpitx

And it does work with nearly every RPi.

And unlike only doing FM (97MHz-108MHz), it can emit from an IQ datastream from 10KHz to 1.5GHz.

Hey everyone, I've recently discovered that the Raspberry Pi can act as a radio tranceiver, and am hoping to use it for security research. While projects such as rpitx act as a great tech demo, they don't offer me the modularity/parametrization I was hoping for. Ideally the end state for this would be a cheaper/less effective HackRF.

The RPITX project supposedly can generate signals up to 1.5GHz with an unmodified Pi, though, which is interesting... a true spectrum analyzer needs a receiver end, though.

če si vešč z linuxom (no z GNU-linuxom da ne razjezim folka) pa najdeš en raspberry pi, ti lahk to pomaga https://github.com/F5OEO/rpitx