{"id":80486,"date":"2020-05-06T13:42:20","date_gmt":"2020-05-06T11:42:20","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/problemy-avtonomnyh-skud-tam-otkuda-ne-zhdali"},"modified":"2020-05-06T13:42:20","modified_gmt":"2020-05-06T11:42:20","slug":"problemy-avtonomnyh-skud-tam-otkuda-ne-zhdali","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/problemy-avtonomnyh-skud-tam-otkuda-ne-zhdali","title":{"rendered":"Issues with Autonomous Access Control Systems \u2014 From Unexpected Sources","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Good day to everyone. I will start with the background that led me to conduct this research, but first, I must warn you: all practical actions were carried out with the consent of the managing authorities. Any attempt to use this material for unauthorized access to restricted areas is a criminal offense. <\/p>\n

It all began when I was cleaning my desk and accidentally placed the RFID key for the entrance on the NFC reader ACR122 \u2014 I was amazed when Windows played a sound indicating a new device was detected, and the LED lit up green. Until that moment, I had thought these keys only operated on the Proximity standard.
\n\"Issues<\/a><\/noindex>
\n But since the reader recognized it, the key must comply with one of the protocols on top of the ISO 14443 standard (also known as Near Field Communication, 13.56 MHz). I quickly forgot about cleaning since I saw an opportunity to completely get rid of the keychain and keep the entrance key on my phone (the apartment has been equipped with an electronic lock for a long time). Diving into research, I discovered that the plastic concealed an NFC tag Mifare 1k \u2014 the same model used in access badges for enterprises, transport cards, etc. My initial attempts to access the sector contents were unsuccessful, and when I finally managed to hack the key, I found that only the 3rd sector was used, which contained a duplicate of the chip's UID. It seemed too simple, and it turned out to be so; there wouldn't be an article if everything had gone as planned. Here I obtained the insides of the key, and there were no issues if I needed to copy the key onto another identical one. But the task was to transfer the key to a mobile device, which I set out to do. This is where the fun began \u2014 we have a phone \u2014 iPhone SE<\/b> with iOS 13.4.5 Beta build 17F5044d<\/b> and some custom components for seamless NFC operation \u2014 I won't dwell on this for certain objective reasons. If desired, everything mentioned next is also applicable to the Android system, but with some simplifications.<\/p>\n

Task list to solve:<\/b><\/p>\n