Lab401.com

@lab401.bsky.social

2 days ago

#pentestips Using the iCopy-x as a proxmark As you may already know, the iCopyX is an autonomous device based on the Proxmark 3. Most of the time, you will use it handheld, with its dedicated interface and buttons. But if you want to go further, you can use it as a proxmark. in today’s #pentestips we are Using our iCopy-X as a Proxmark. While Using the icopy-x handheld, you can simply press the right arrow on the device while it’s working. It will display the proxmark console that works in the background. you can zoom in using the right button on top and zoom out using the left button on top. If you want to use the iCopyX as a true Proxmark, launch the PC-Mode on your icopy-x, then connect it to your PC, open the icopy-x drive and run the « run.bat » script. at this point, a console will pop on your PC asking you what COM port is assigned to the iCopyX. To find this information navigate in the Device Manager of your computer : just type device manager in your windows search, Input that number in the iCopyX console hit Enter. After a few seconds you get a genuine Proxmark console : Now you can use all the standard proxmark commands on your pc. Get your iCopy-X: https://lab401.com/products/icopy-x If you have questions, please contact support@lab401.com Stay safe! and see you next time.

#pentestips Using the iCopy-x as a proxmark
youtu.be/9ZVY8WXBikc
#RFIDCloning #Lab401 #pentesting #icopyxs #Proxmark3 #MIFARE #iCLASS #Autoclone

Lab401.com

@lab401.bsky.social

6 days ago

#pentestips - Flipper Zero : How to Read, Save Clone & Emulate RFID Cards Learn how to read, clone, and emulate RFID badges with the Flipper Zero. In this video, we cover how to: Rapidly read, save and emulate 13.56MHz High-Frequency RFID Cards: MIFARE Classic 1K & 4K, Ultralight, NTAG213. Read, save, clone, and emulate 125KHz Low-Frequency Cards (EM41XX, T5577, Indala, etc). We also demonstrate some advanced capabilities, like extracting information from a DESFire card. The Flipper Zero has full emulation (UID + Data). In this video for speed, we just demonstrate that the UIDs match when we emulate. Visit LAB401.com if you need to get a Flipper zero or learn about our curated collection of pentesting tools. Flipper zero: https://lab401.com/products/flipper-zero?variant=42927883518182

#pentestips - Flipper Zero : How to Read, Save Clone & Emulate RFID Cards
youtu.be/5qzblWqZtxU
#Pentesting #FlipperZero #Infrared #RFID #infosec #Lab401 #GPIO #RF

Lab401.com

@lab401.bsky.social

3 weeks ago

#pentestips flipperzero, everything you need to know about the iButton function In this video, we continue the exploration of the flipper zero functions. Today we check the ibutton function and show you all you need to know about it! Learn how to read, emulate, and write an ibutton. Visit LAB401 to get your Flipper zero and check our curated collection of pentesting products: https://lab401.com/

#pentestips flipperzero, everything you need to know about the iButton function
youtu.be/q8CFM4_mgS0
#Pentesting #FlipperZero #Infrared #RFID #infosec #Lab401 #GPIO #RF

Lab401.com

@lab401.bsky.social

1 month ago

#Pentestips : adding keys to the iCopy-x This video will present you how to update the list of keys on the iCopyX, to read and crack the 1 Kilo RFID badge more efficiently. In this video we will quickly see how a standard 1-kilo badge works, then we will learn how to update the list of keys included in the iCopyX, and finally, we will see how faster the device is with this update. First, let's see quickly how a badge works. You can use the software HxD (https://mh-nexus.de/en/hxd/) or any other hexadecimal editor to view and edit your dumps. Inside the badge, you have a series of 16 sectors, each protected by 2 keys (Key A and Key B). In this example, these are the keys JcRhFw (4A 63 52 68 46 77) and SfSdLe (53 66 53 64 4C 65), and FF FF FF FF FF FF at the end of the badge. In order to read and write a specific sector, you need to know these keys. Please also note the very first line of the dump contains the UID of the badge. In this example, it is FA 7C 7B 3A. In order to make a duplicate, the iCopyX device can crack the unknown keys by various attacks, but the more keys you know upfront, the easiest and quickest it is to fully crack a badge. Here is the procedure to add new keys to your device: 1/Turn On the device 2/Navigate to PC-Mode 3/Connect the device to your PC via USB 4/Wait a few seconds that your computer installs a few drivers 5/Press Start on your device (either of the top 2 buttons) 6/Wait for the device to connect to the computer, after a few seconds, you will have a new Disk (ICOPY-X) on My Computer. Open that disk. 7/Open folder "keys" and then "mf1". Here is the current list of keys of your device, called "mf_user_key.dic" 8/Open it with your favorite notepad editor. 9/Go online and check the link: https://github.com/ikarus23/MifareClassicTool/blob/master/Mifare%20Classic%20Tool/app/src/main/assets/key-files/extended-std.keys 10/Copy the content from this page and paste it on your notepad editor. Save, Exit, you are done. 11/Close the ICOPY-X folder, and press "Stop" on your device to disconnect from the PC. You can now duplicate more badges, more easily and more quickly!

#Pentestips : adding keys to the iCopy-x
youtu.be/2Ye-V3tolSs
#RFIDCloning #Lab401 #pentesting #icopyxs #HF #LF #Proxmark3 #MIFARE #iCLASS #infosec #Autoclone

Lab401.com

@lab401.bsky.social

1 month ago

#Pentestips : How to safely and permanently erase a RFID tag with the NFCKill In today's #pentestips we're checking How to safely and permanently erase an RFID tag with the NFCKill.

#Pentestips : How to safely and permanently erase a RFID tag with the NFCKill
youtu.be/4NVbGq7Q-rY
#DataDestruction #Lab401 #pentesting #NFC #NFCKill #infosec #RFID #Security

Lab401.com

@lab401.bsky.social

1 month ago

#PENTESTIPS - RFID antenna extender : covert use This week's pentestip is a hands-on how-to with the RFID Antenna Extender. Manufactured by Lab401, these devices are world-first: passively boost read/write/crack ranges to 7cm and displace reader zones up to 50cm. They are compatible with all 13.56MHz systems and require no wiring or soldering. We get hands-on with the devices in this week's #pentesttip!

#PENTESTIPS - RFID antenna extender : covert use
youtu.be/XsJJglUuqpU
#LAB401 #pentesting #rfid #tag #RFIDRangeExtender #Antennas

Lab401.com

@lab401.bsky.social

2 months ago

#pentestips Flipper zero infrared module - add a remote with multiple signals The infrared module of the Flipper zero is pretty straightforward. This module allows you to capture/save/send AND import infrared signals. Multiple signals can then be combined including all the functions you want to control from your flipper zero. This video shows how to add a remote with multiple signals to your Flipper zero and also goes thru all the functions of the Infrared module of the flipper zero. Visit LAB401 to get your Flipper zero and check our curated collection of pentesting products: https://lab401.com/ --------------------------------------------------------------------------------------------------------------------------- Useful links : IRDB for flipper zero: https://github.com/Lucaslhm/Flipper-IRDB To get more universal remotes (projectors, audio players, AC, fans, etc.): https://github.com/RogueMaster/flipperzero-firmware-wPlugins

#pentestips Flipper zero infrared module - add a remote with multiple signals
youtu.be/VqHkfCtG1Dw
#Pentesting #FlipperZero #Infrared #RFID #infosec #Lab401 #GPIO #RF

Lab401.com

@lab401.bsky.social

2 months ago

#pentestips How to Rubber ducky ? In Today’s #pentestips we'll check the 3 steps to get your payload messing with a host device. Info about duckyscript: https://github.com/hak5darren/USB-Rubber-Ducky/wiki/Duckyscript JS Ducky encoder download link: https://downloads.hak5.org/api/devices/usbrubberducky/tools/jsencoder/1.0/ Get your rubber ducky: https://lab401.com/products/rubber-ducky

#pentestips How to Rubber ducky ?
youtu.be/Su4Zyh1vLBg
#hak5 #pentesting #infosec #rubberducky #LAB401

Lab401.com

@lab401.bsky.social

2 months ago

#Pentestips : How to safely and permanently erase a RFID tag with the NFCKill In today's #pentestips we're checking How to safely and permanently erase an RFID tag with the NFCKill.

#Pentestips : How to safely and permanently erase a RFID tag with the NFCKill
youtu.be/4NVbGq7Q-rY
#DataDestruction #Lab401 #pentesting #NFCKill #infosec #RFID #Security

Lab401.com

@lab401.bsky.social

3 months ago

#pentestips: THE PERFECT CLONE. One Time Write RFID tag, the best for duplicating Mifare Classic. In this video, you will see how to bypass RFID Readers that detect "magic cards" and reject them. Using the Lab401 One Time Write, Undetectable Mifare Classic Compatible badges, your target reader will see the tag as being an original one, not a duplicate. OTW badges: https://lab401.com/products/undetectable-mifare-compatible-1k-one-time-write-uid For more #pentestips or information on pentesting tools, visit LAB401.com

#pentestips: THE PERFECT CLONE. One Time Write RFID tag, the best for duplicating Mifare Classic. youtu.be/6EBEZc4rvYo
#RFID #Lab401 #cloning #Pentesting

Lab401.com

@lab401.bsky.social

3 months ago

#pentestips Installing LibNFC on Kali linux. In today's #pentestips we are installing libnfc on Kali Linux. LibNFC is the fundamental tool for RFID manipulation on Windows/Linux/macOS.It is a mature suite of tools that provide read/write/emulate functionality for high-frequency RFID cards, covering ISO/IEC 14443 A and B, FeliCa & Jewel/Topaz. It supports most USB-based RFID readers, including Lab401's recommended DL533N. Whether you're already running Linux, using a VM, or using WSL, it's quick and easy, follow along: #Setup the build tools sudo apt-get install build-essential gcc make autoconf libtool automake pkg-config libusb-1.0-0-dev libusb-dev #Pull down the libnfc source mkdir tools cd tools git clone https://github.com/nfc-tools/libnfc.git cd libnfc #Configure and build the tool autoreconf -vis ./configure make && sudo make install #Test: nfc-list Want more #pentestips? check https://lab401.com/blogs/academy Thank you for watching, make sure to like, share this video and subscribe to the channel to know when we are uploading new #pentestips

#pentestips Installing LibNFC on Kali linux.
youtu.be/lmgGAJryzdY
#Pentesting #RFID #LibNFC #DL533N #Lab401

Lab401.com

@lab401.bsky.social

3 months ago

#pentestips : Identify credit card skimmers with the hunter cat If you want to ensure your magstripe cards are secure (hotel cards, credit cards, access control cards...), you can easily test a reader to ensure that no skimmer has been installed. Just slide the Hunter Cat in the target reader, and secure your assets. Check out this #pentetips video to see how to do just that :)

#pentestips : Identify credit card skimmers with the hunter cat
youtu.be/_GiWWxi4tOg
#Huntercat #infosec #pentesting #LAB401 #CardSkimmerDetector #RFID

Lab401.com

@lab401.bsky.social

3 months ago

#pentestips iCopy-X how to firmware update Hi, in today's #pentestips we show you how to update the firmware of your iCopy-x. firmware update : https://icopyx.com/pages/update-your-icopy-x https://icopy-x.com/otasys/index.php Get your iCopy-x: https://lab401.com/products/icopy-x

#pentestips iCopy-X how to firmware update
youtu.be/R8ynQgSWDrs
#RFIDCloning #Lab401 #pentesting #icopyxs #HF #LF #Proxmark3 #MIFARE #iCLASS #infosec #Autoclone

Lab401.com

@lab401.bsky.social

3 months ago

#pentestips - Proxmark3 Rdv4: How Deal with problematic tags ? It's often that some tags don't respond correctly to the proxmark commands. One very common problem is that the tag is actually too close to the antennas of the proxmark. In this case, the trick is very simple: just place a "spacer" between the antenna and the tag, and run your commands again. You like the #pentestips? Make sure to subscribe and to visit LAB401.com Do you have #pentestips to submit yourself? We would love to partner with you, contact us at support@lab401.com

#pentestips - Proxmark3 Rdv4: How Deal with problematic tags ?
youtu.be/PUDZK3s4soo
#LAB401 #proxmark3 #RFID #infosec #pentesting #redteam

Lab401.com

@lab401.bsky.social

3 months ago

#pentestips RFID theory - the right tool for your RFID job When starting out with RFID, most people often have a specific task: duplicate a specific type of badge, sniff reader communications etc. There are multiple tools, but which is the right one? Everyone's heard of a Proxmark, but is there another tool that could be easier for the job at hand? Or, do you need a combination of tools? In this PTT, we'll walk through finding the right tool for your job.

#pentestips RFID theory - the right tool for your RFID job
youtu.be/Gnf0o1OI3po
#RFID #Proxmark3 #Lab401 #Pentesting #infosec

Lab401.com

@lab401.bsky.social

3 months ago

#pentestips: How to Bypass a RFID reader without any tools In this video you will discover how to bypass an RFID reader by working directly on the door. What do you mean " it's not how it should work" ? Open is open, right ? And that's pentest :) See you next week for another #pentestips For more #pentestips or information on pentesting tools, visit LAB401.com

#pentestips: How to Bypass a RFID reader without any tools
youtu.be/s2xV4vgLvQ0
#RFID #Lab401 #Pentesting

Lab401.com

@lab401.bsky.social

3 months ago

#pentestips - Proxmark3: determine badge types How to quickly detect the frequency of a RFID badge ? How to effectively identify the model of a tag? Using the proxmark 3, connected to a Windows 10 PC, it takes only a few seconds to analyze an RFID card, to identify its technology. Using the "lf search" and "hf search" commands, you get all the basic information you need, with additional hints to further analyze Mifare badges for example. Stay safe, see you next week!

#pentestips - Proxmark3: determine badge types
youtu.be/zhUEK-hFkKA
#LAB401 #proxmark3 #RFID #infosec #pentesting #redteam

Lab401.com

@lab401.bsky.social

3 months ago

#pentestips RFID theory - the right tool for your RFID job #pentestips RFID theory - the right tool for your RFID job

#pentestips RFID theory - the right tool for your RFID job
lab401.com/blogs/academ...
#RFID #Lab401 #Pentesting #infosec

Lab401.com

@lab401.bsky.social

4 months ago

#Pentestips : adding keys to the iCopy-x This video will present you how to update the list of keys on the iCopyX, to read and crack the 1 Kilo RFID badge more efficiently. In this video we will quickly see how a standard 1-kilo badge works, then we will learn how to update the list of keys included in the iCopyX, and finally, we will see how faster the device is with this update. First, let's see quickly how a badge works. You can use the software HxD (https://mh-nexus.de/en/hxd/) or any other hexadecimal editor to view and edit your dumps. Inside the badge, you have a series of 16 sectors, each protected by 2 keys (Key A and Key B). In this example, these are the keys JcRhFw (4A 63 52 68 46 77) and SfSdLe (53 66 53 64 4C 65), and FF FF FF FF FF FF at the end of the badge. In order to read and write a specific sector, you need to know these keys. Please also note the very first line of the dump contains the UID of the badge. In this example, it is FA 7C 7B 3A. In order to make a duplicate, the iCopyX device can crack the unknown keys by various attacks, but the more keys you know upfront, the easiest and quickest it is to fully crack a badge. Here is the procedure to add new keys to your device: 1/Turn On the device 2/Navigate to PC-Mode 3/Connect the device to your PC via USB 4/Wait a few seconds that your computer installs a few drivers 5/Press Start on your device (either of the top 2 buttons) 6/Wait for the device to connect to the computer, after a few seconds, you will have a new Disk (ICOPY-X) on My Computer. Open that disk. 7/Open folder "keys" and then "mf1". Here is the current list of keys of your device, called "mf_user_key.dic" 8/Open it with your favorite notepad editor. 9/Go online and check the link: https://github.com/ikarus23/MifareClassicTool/blob/master/Mifare%20Classic%20Tool/app/src/main/assets/key-files/extended-std.keys 10/Copy the content from this page and paste it on your notepad editor. Save, Exit, you are done. 11/Close the ICOPY-X folder, and press "Stop" on your device to disconnect from the PC. You can now duplicate more badges, more easily and more quickly!

#Pentestips : adding keys to the iCopy-x
youtu.be/2Ye-V3tolSs
#RFIDCloning #Lab401 #pentesting #icopyxs #HF #LF #Proxmark3 #MIFARE #iCLASS #infosec #Autoclone

Lab401.com

@lab401.bsky.social

4 months ago

#pentestips: Know your 'BadUSB'. "BadUSB" devices are innocent-looking USB-based devices that have ulterior motives and are typically found in every pentester's toolkit. The "BadUSB" family of devices takes advantage of this system by emulating HID devices. When plugged in, they can pretend to be a keyboard, a mouse, a storage device, etc - simultaneously. And because they're not limited by fingers, they can "type" and "click" incredibly quickly. BadUSB devices are used for multiple purposes: from delivering 'payloads' to exfiltrate or gain access to data during red-team assessments to automating boring tasks for sys-admins. At Lab401, we've got multiple types of BadUSB devices, each with different characteristics. The rubber ducky: https://lab401.com/products/rubber-ducky The USB Ninja https://lab401.com/products/usbninja The inputstick RAT https://lab401.com/products/inputstick-rat If you have questions, please contact support@lab401.com Stay safe! and see you next time.

#pentestips: Know your 'BadUSB'.
youtu.be/vVX-akQmQpw
#BadUSB #Pentesting #Lab401 #infosec

Lab401.com

@lab401.bsky.social

4 months ago

#pentestips Using the iCopy-x as a proxmark As you may already know, the iCopyX is an autonomous device based on the Proxmark 3. Most of the time, you will use it handheld, with its dedicated interface and buttons. But if you want to go further, you can use it as a proxmark. in today’s #pentestips we are Using our iCopy-X as a Proxmark. While Using the icopy-x handheld, you can simply press the right arrow on the device while it’s working. It will display the proxmark console that works in the background. you can zoom in using the right button on top and zoom out using the left button on top. If you want to use the iCopyX as a true Proxmark, launch the PC-Mode on your icopy-x, then connect it to your PC, open the icopy-x drive and run the « run.bat » script. at this point, a console will pop on your PC asking you what COM port is assigned to the iCopyX. To find this information navigate in the Device Manager of your computer : just type device manager in your windows search, Input that number in the iCopyX console hit Enter. After a few seconds you get a genuine Proxmark console : Now you can use all the standard proxmark commands on your pc. Get your iCopy-X: https://lab401.com/products/icopy-x If you have questions, please contact support@lab401.com Stay safe! and see you next time.

#pentestips Using the iCopy-x as a proxmark
youtu.be/9ZVY8WXBikc
#RFIDCloning #Lab401 #pentesting #icopyxs #HF #LF #Proxmark3 #MIFARE #iCLASS #infosec #Autoclone

Lab401.com

@lab401.bsky.social

4 months ago

#pentestips FLIPPER ZERO BADUSB module - running scripts on different keyboard layouts. The BadUSB module of the flipper zero uses Ducky script, a language made for the world-famous USB rubber ducky by HAK5. Ducky script emulates keyboard strokes when plugged into a computer. The BadUSB doesn't send characters, it sends HID Codes: which the computer then interprets into characters, based on the user's keyboard configuration. BadUSB devices always assume that a keyboard is set to English QWERTY by default. If the computer's keyboard is configured to another format (let’s say French AZERTY for example), when the BadUSB script is launched, characters appear swapped, and the script will fail. Thanks to roguemaster and his roguemaster custom firmware, Flipper Zero now supports multiple keyboard layouts, which can be configured on the fly. In other words, you only need one script, and the Flipper Zero does all the hard work in real-time to adjust the script to the target's keyboard layout. Let's see how to change the keyboard layout so the badusb script will run smoothly. Roguemaster firmware link: https://github.com/RogueMaster/flipperzero-firmware-wPlugins/ Get your Flipper zero at LAB401: https://lab401.com/products/flipper-zero

#pentestips FLIPPER ZERO BADUSB module - running scripts on different keyboard layouts.
youtu.be/vYiQ3DeNbv4
#Pentesting #FlipperZero #Infrared #RFID #infosec #Lab401 #GPIO #RF

Lab401.com

@lab401.bsky.social

5 months ago

#pentestips How to Rubber ducky ? In Today’s #pentestips we'll check the 3 steps to get your payload messing with a host device. Info about duckyscript: https://github.com/hak5darren/USB-Rubber-Ducky/wiki/Duckyscript JS Ducky encoder download link: https://downloads.hak5.org/api/devices/usbrubberducky/tools/jsencoder/1.0/ Get your rubber ducky: https://lab401.com/products/rubber-ducky

#pentestips How to Rubber ducky ?
youtu.be/Su4Zyh1vLBg
#hak5 #pentesting #infosec #redteam #blueteam #rubberducky #LAB401

Lab401.com

@lab401.bsky.social

5 months ago

#PENTESTIPS - RFID antenna extender : covert use This week's pentestip is a hands-on how-to with the RFID Antenna Extender. Manufactured by Lab401, these devices are world-first: passively boost read/write/crack ranges to 7cm and displace reader zones up to 50cm. They are compatible with all 13.56MHz systems and require no wiring or soldering. We get hands-on with the devices in this week's #pentesttip!

#PENTESTIPS - RFID antenna extender : covert use
youtu.be/XsJJglUuqpU
#LAB401 #pentesting #rfid #tag #RFIDRangeExtender #Antennas

Lab401.com

@lab401.bsky.social

5 months ago

#pentestips - Flipper Zero : How to Read, Save Clone & Emulate RFID Cards Learn how to read, clone, and emulate RFID badges with the Flipper Zero. In this video, we cover how to: Rapidly read, save and emulate 13.56MHz High-Frequency RFID Cards: MIFARE Classic 1K & 4K, Ultralight, NTAG213. Read, save, clone, and emulate 125KHz Low-Frequency Cards (EM41XX, T5577, Indala, etc). We also demonstrate some advanced capabilities, like extracting information from a DESFire card. The Flipper Zero has full emulation (UID + Data). In this video for speed, we just demonstrate that the UIDs match when we emulate. Visit LAB401.com if you need to get a Flipper zero or learn about our curated collection of pentesting tools. Flipper zero: https://lab401.com/products/flipper-zero?variant=42927883518182

#pentestips - Flipper Zero : How to Read, Save Clone & Emulate RFID Cards
youtu.be/5qzblWqZtxU
#Pentesting #FlipperZero #Infrared #RFID #infosec #Lab401 #GPIO #RF

Lab401.com

@lab401.bsky.social

5 months ago

#pentestips: HackRF with Android Smartphone : Duplicate a Fixed Code Alarm Remote Did you know that you can connect your HackRF One directly to your android phone, and use the HackRF_Test application to control it, and do simple RX TX ? In this video, discover how simple it is to operate a Replay Attack on a Fixed Code 433MHz Alarm remote controller. You can copy an RF remote in less than 5 seconds with this #Pentestips !

#pentestips: HackRF with Android Smartphone: Duplicate a Fixed Code Alarm Remote
youtu.be/Y1ozu6cuwz0
#SDR #HackRF #RFEngineering #LAB401 #infosec #GNUradio

Lab401.com

@lab401.bsky.social

5 months ago

#pentestips - USBKill V4 : how to use As you may know, every open port is a potential vector of attack in a red teaming environment. In today’s #pentestips let's check how to use the USBKill V4 an important tool for red teamers.

#pentestips - USBKill V4 : how to use
youtu.be/6_-S8RQU8P8
#HardwareTesting #USBKillV4 #USBKill #pentesting #infosec #security

Lab401.com

@lab401.bsky.social

5 months ago

#Pentestips : adding keys to the iCopy-x How to update the list of keys on the iCopy-X ? we have a #pentestips for that!

#Pentestips : adding keys to the iCopy-x
lab401.com/blogs/academ...
#RFIDCloning #Lab401 #pentesting #icopyxs #HF #LF #Proxmark3 #MIFARE #iCLASS #infosec #Autoclone

Lab401.com

@lab401.bsky.social

5 months ago

#pentestips flipperzero, everything you need to know about the iButton function In this video, we continue the exploration of the flipper zero functions. Today we check the ibutton function and show you all you need to know about it! Learn how to read, emulate, and write an ibutton. Visit LAB401 to get your Flipper zero and check our curated collection of pentesting products: https://lab401.com/

#pentestips flipperzero, everything you need to know about the iButton function
youtu.be/q8CFM4_mgS0
#Pentesting #FlipperZero #Infrared #RFID #infosec #Lab401 #GPIO #RF