RFID Multipass spoof using ATTiny85

Posted on Tuesday, January 22nd, 2013 in AVR, Bus Pirate, hacks, RFID, security by the machinegeek

Hudson from NYC Resistor was inspired by Beth’s avrfid.S project to try to build a replacement for the multiple HID Prox card he carried for work. Hudson notes that “Beth’s design is simultaneously a technical tour-de-force and an example of how badly we can abuse the Atmel chips.” The entire schematic consists of an ATTiny85 and a coil!

He used the Bus Pirate to help programming the ATTiny85. “Once the fuse bits have been configured to use the RF waveform as the clock source the chip will no longer be programmable with a normal AVR ISP. One option is to use Dangerous Prototypes’ Bus Pirate, which can provide a “recovery” clock during programming. Unfortunately it didn’t work for me with the current release of avrdude; I had to make the following patches to the avrdude/buspirate.c source to get it to work.”

Read Hudson’s post on NYC Resistor’s website for complete details, code and more photos.

Kevin via the contact form.

This entry was posted on Tuesday, January 22nd, 2013 at 1:30 am and is filed under AVR, Bus Pirate, hacks, RFID, security. You can follow any responses to this entry through the RSS 2.0 feed. You can skip to the end and leave a response. Pinging is currently not allowed.

Leave a Reply

Notify me of followup comments via e-mail. You can also subscribe without commenting.

Recent Comments

  • readybrek: Anyone got a any recommendations for a budget-priced hot air station?
  • William: lol I'm happy to waste 3c for each program/debug cycle... but probably not the time spent soldering a new device down to a proto board!...
  • Joe Desbonnet: Ya, I can recommend the low melting point solder. I used brand 'ChipQuik' and it's amazingly easy to use.
  • Jerome: I need a new BusPirate for the Fablab ;) Many thanks!
  • Max: Seems like an unexpectedly violent way to remove the chip indeed. A hot air station should of course do the job just fine, but in...