- 29 Şub 2020
- 538
- 575
Hello TurkHackTeam family, welcome to the topic titled What is RFID, RFID Attacks, I will explain them as I can. Good Forums
What is RFID?
RFID is a reading system. RFID is a very popular tool, it is software that works thanks to radio waves. It is especially used in systems such as personnel entry and exit cards. The main purpose of RFID is to provide fast authentication over the air. There are quite expensive and advanced models as well as cheap and economical models. In order for RFID to work, the device to be read must have a barcode to be saved in the database.
How Does RFID Work?
For RFID to work, it must be (RFID+Object with Reader). The system administrator who makes these definitions should make the definitions correctly, especially if there are more than 10 (turnstile or reader) systems in the institution or company, all cards should be classified and authorized one by one according to personnel and authority. Otherwise, unauthorized access may occur.
Areas Where RFID is Used
1-) Inventory Management
2-) Asset Tracking
3-) Personal Tracking
4-) Supply Chain Management
5-) Controlling Access to Restricted Areas
What are the types of RFID Attack?
As All Kinds of Device Attacks, RFID also has attacks, although they are not very common, there are methods. A large amount of knowledge is required to perform most of these attacks.
1-) Reverse Engineering Attacks
The target in this type of attack is to copy the card. To Copy the Card, attackers use rfid copying devices, as these devices are on the black market, most attackers prefer to make their own. In this type of attack, the target is to copy a high-access personnel card or credit card. The card is copied and the same is removed. In order to be protected from such attacks, the card should be stored in high places (jacket pocket, coat pocket).
2-) Power Analysis Attacks
The aim of this attack is to steal information from attacker target attackers from killing (vulnerability) from an attacker's mobile phone.
The aim of this attack is to steal information from attacker target attackers from killing (vulnerability) from an attacker's mobile phone.
3-) Listening and Attack
One of the most difficult and challenging methods is to use the RFID reader in the target institution as a listener.
4-) Denial of Service and attack
The purpose of this type of attack is to corrupt the reader. In order to corrupt the reader, radio frequencies are arranged so that the reader is out of service, and if the attacker moves forward, even rfid barcodes can be deleted.
5-) Man in the Middle Attack
The purpose of attacks on the web is the same. The attacker sends false signals between the rifd and the reader. The purpose of this attack is to steal data. As the attacker steals data, it sends straight signals to the reader. The purpose is to hide the attack.
have a nice day
