--- 
author: 
  email: ''
  keyid: 0
  name: Anonymous Coward
categories: []

date: 2008-09-08T21:28:44Z
guid: 42D69408-7DED-11DD-9AB5-BAC8CAD30611
modified: 2008-09-08T21:31:06Z
raw: "<p>\nCynops recently bought a <a href=\"http://www.iaik.tugraz.at/research/vlsi/02_products/05_rfid_demotag/\">RFID DemoTag</a>, a device that is made by the IAIK people at TU Graz. Its main use is to be able to copy a Mifare card's &raquo;unique&laquo; ID. Not having had a reader for Mifare cards, I wasn't able to play with it all week &#8212; not until the <a href=\"http://mrmcd.net\">mrmcd</a>, that is.\n</p>\n<p>\nLuckily, local and not-so-local RFID hackers where present and willing to play with it &#8212; thanks to Collin and starbug. Here are some pictures of us spoofing a Mifare card with ID &raquo;DEADBEEF&laquo; :-)\n</p>\n<p>\nHere is the device with two different readers:<br/>\n<img src=\"/static/photos/mifare_setup_1.png\"> <img src=\"/static/photos/mifare_setup2.png\">\n</p>\n<p>\nThis is how it looks on the client &#8212; you connect to the device via the serial port and tell it to be the tag with ID x, and you can see the communication between the reader and the tag:<br/>\n<img src=\"/static/photos/mifare_client.png\">\n</p>\n<p>\nAnd this is how it looks on the reader side &#8212; DEADBEEF received correctly :-)<br/>\n<img src=\"/static/photos/mifare_collin.png\"><br/>\n<img src=\"/static/photos/mifare_starbug.png\">\n</p>\n"
signed: 0
summary: " Cynops recently bought a RFID DemoTag [1], a device …"
tags: 
  - 
    english: 1
  - 
    mifare: 1
  - 
    mrmcd: 1
  - 
    mrmcd111b: 1
  - 
    security: 1
text: "\n Cynops recently bought a RFID DemoTag [1], a device that is made by the\n IAIK people at TU Graz. Its main use is to be able to copy a Mifare\n card's »unique« ID. Not having had a reader for Mifare cards, I wasn't\n able to play with it all week — not until the mrmcd [2], that is.\n\n Luckily, local and not-so-local RFID hackers where present and willing\n to play with it — thanks to Collin and starbug. Here are some pictures\n of us spoofing a Mifare card with ID »DEADBEEF« :-)\n\n Here is the device with two different readers: <img src=\"/static/photo-\n s/mifare_setup_1.png\" /> <img src=\"/static/photos/mifare_setup2.png\" />\n\n\n This is how it looks on the client — you connect to the device via the\n serial port and tell it to be the tag with ID x, and you can see the\n communication between the reader and the tag: <img src=\"/static/photo-\n s/mifare_client.png\" />\n\n\n And this is how it looks on the reader side — DEADBEEF received cor-\n rectly :-) <img src=\"/static/photos/mifare_collin.png\" />\n\n<img src=\"/static/photos/mifare_starbug.png\" />\n\n-- \n [1] http://www.iaik.tugraz.at/research/vlsi/02_products/05_rfid_demota-\n     g/\n [2] http://mrmcd.net\n"
title: DemoTag works
type: html
uri: http://shiftordie.de/articles/DemoTag%20works
xhtml: "<p> Cynops recently bought a <a href=\"http://www.iaik.tugraz.at/research/vlsi/02_products/05_rfid_demotag/\">RFID DemoTag</a>, a device that is made by the IAIK people at TU Graz. Its main use is to be able to copy a Mifare card&apos;s »unique« ID. Not having had a reader for Mifare cards, I wasn&apos;t able to play with it all week — not until the <a href=\"http://mrmcd.net\">mrmcd</a>, that is. </p><p> Luckily, local and not-so-local RFID hackers where present and willing to play with it — thanks to Collin and starbug. Here are some pictures of us spoofing a Mifare card with ID »DEADBEEF« :-) </p><p> Here is the device with two different readers:<br /><img src=\"/static/photos/mifare_setup_1.png\" />\n <img src=\"/static/photos/mifare_setup2.png\" />\n</p><p> This is how it looks on the client — you connect to the device via the serial port and tell it to be the tag with ID x, and you can see the communication between the reader and the tag:<br /><img src=\"/static/photos/mifare_client.png\" />\n</p><p> And this is how it looks on the reader side — DEADBEEF received correctly :-)<br /><img src=\"/static/photos/mifare_collin.png\" />\n<br /><img src=\"/static/photos/mifare_starbug.png\" />\n</p>"