3

I recently stumbled on a talk from Ruxcon 2012 explaining the reverse of a mass transit ticketing system.

Basically, they focused on paper tickets reverse engineering with a skimmer and a lot of brain activity. This seems to be quite amusing and interesting. But, nowadays a big part of the ticketing system is also using NFC (Near Field Communication) or RFID (Radio Frequency IDentification) especially for people who are subscribing for a month or more.

I found a few websites (like this one or this one), trying to gather knowledge about how all this ticketing system works. But, nothing really global and fully furnished (from the paper ticket system up to the NFC/RFID system). I would like to know how to set up such a lab.

  • What hardware is required (skimmer, NFC/RFID/Smartcard reader, the needed computing power to gather, ...) ?
  • What is, approximately, the cost, in time for setting such a lab (and getting the necessary material to work on) ?
  • How to proceed once the lab has been set-up and the material gathered ?
  • Is there some tricks that can lower the cost/time that you spend on it ?
Improve this question
6
  • 1
    Too many questions here as well. Legal issues by themselves can make up a single question. See my comment reverseengineering.stackexchange.com/questions/2371/…
    – asheeshr
    Commented Jun 28, 2013 at 10:08
  • I am okay to make the legal issue a separate question. But, more splitting will be just counter-productive, in my humble opinion.
    – perror
    Commented Jun 28, 2013 at 10:12
  • Thats why I said, ask the other questions based on the answers you get to your first. This would allow for better quality and more specialized questions.
    – asheeshr
    Commented Jun 28, 2013 at 10:16
  • 1
    Okay. Thanks for the help for improving the question(s) !
    – perror
    Commented Jun 28, 2013 at 10:19
  • 1
    @perror i was at that talk it was great fun! One of the key things they had was access to hundreds of cards which they all read the data from, as well as documenting what was printed on the card so they could match the variables that changed! :)
    – NULLZ
    Commented Jun 30, 2013 at 3:52

1 Answer 1

Reset to default
1

I haven't done a lot with NFC, but I recommend starting the same way I did. Start at the hardware level and then work up.

Hardware: + BladeRF (I think it works with NFV)

  • Misc Extra tags (get different ones from different vendors)

Software: + nfcinteractor (android)

Also check out: www.securitytube.net/video/8029

It's a really good talk on NFC related research.

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.