mfoc

MFOC 是 Nethemba 所提出的“离线嵌套”（offline nested）攻击的一种开源实现。 该程序能够从 MIFARE Classic 卡中恢复认证密钥。 请注意，MFOC 只有在目标拥有已知密钥时才能恢复密钥：默认密钥（硬编码在 MFOC 中）或自定义密钥（用户通过命令行提供）。 从源码构建 root@kitploit: autoreconf -is ./configure make && sudo make install 用法 放入一张你想要恢复密钥的 MIFARE Classic 标签； 启动 mfoc 时，你需要传入选项，参见 root@kitploit: mfo...

MifareClassicTool

MIFARE Classic Tool MCT 一个用于对MIFARE Classic RFID标签进行读取、写入、分析等操作的Android NFC应用程序。 以其他语言阅读本文: English 简体中文 正體中文 链接: Google Play上的MIFARE Classic Tool 捐赠版 截图 帮助与信息/用户手册 其他内容 文档，APK文件等 Proxmark论坛上的主题 通过Paypal捐赠 特性 读取MIFARE Classic标签 保存，编辑和分享您读取的标签数据 写入MIFARE Classic标签逐块 克隆MIFARE Classic标签...

mfcuk

README 编译： autoreconf -is ./configure make 运行（最基本）： ./mfcuk -C -R 0:A -v 2 软件包 MiFare Classic Universal toolKit MFCUK 工具 Mifare Classic DarkSide Key Recovery Tool mfcukkeyrecoverydarkside.c（以前称为 zvmfdarkside） ... 许可证 GPL。更多信息请参阅 MFCUKLICENSE。 参考文献（不分先后） 1. WPMCC09 - "Wirelessly Pickpocketing a...

nfc-ic-keys-dict

nfc-ic-keys-dict 2021-05-31 nfcPro.exe 早期版本下载 http://www.nsccn.com/web/soft/win/20210531/nfcPro.exe keys for ic: 1D14130D1A0B/000000000000 如何检测iC卡类型： 谷歌商店 = MIFARE Classic Tool = 工具 = 显示标签信息 root@kitploit: UID: xxxxx 4 byte RF 技术：ISO/IEC 14443, Type A ATQA: 0004 SAK: 08 ATS: - 标签类型和制造商：MIFARE...

miLazyCracker

miLazyCracker Mifare Classic Plus - 面向 LibNFC USB 读卡器（SCL3711、ASK LoGO 等）的 Hardnested 攻击实现 安装： root@kitploit: ./miLazyCrackerFreshInstall.sh 使用示例：放上标签卡，尽情享受吧 root@kitploit: mkdir mydumps cd mydumps miLazyCracker 可能遇到的问题： root@kitploit: error libnfc.driver.pn53xusb Unable to set USB configuration...

CVE-2026-4648

Use of an insecure cryptographic algorithm in the cashless payment system using NFC wristbands from CasfID Servicios Tecnológicos S.L.U. version used at Resurrection Fest 2025, which employs cards based on MIFARE Classic technology FM11RF08S. The cryptographic weakness of the authentication...

CVE-2026-4648 Insufficient Encryption Level in CasfID Servicios Tecnológicos NFC Wristbands

Use of an insecure cryptographic algorithm in the cashless payment system using NFC wristbands from CasfID Servicios Tecnológicos S.L.U. version used at Resurrection Fest 2025, which employs cards based on MIFARE Classic technology FM11RF08S. The cryptographic weakness of the authentication...

CVE-2026-4648

Use of an insecure cryptographic algorithm in the cashless payment system using NFC wristbands from CasfID Servicios Tecnológicos S.L.U. version used at Resurrection Fest 2025, which employs cards based on MIFARE Classic technology FM11RF08S. The cryptographic weakness of the authentication...

EUVD-2026-49765

Use of an insecure cryptographic algorithm in the cashless payment system using NFC wristbands from CasfID Servicios Tecnológicos S.L.U. version used at Resurrection Fest 2025, which employs cards based on MIFARE Classic technology FM11RF08S. The cryptographic weakness of the authentication...

EUVD-2025-29040

Malicious code in bioql PyPI...

EUVD-2025-27972

Malicious code in bioql PyPI...

CVE-2025-8699

Some "Stored Value" Unattended Payment Solutions of KioSoft use vulnerable NFC cards. Attackers could potentially use this vulnerability to change the balance on the cards and generate money. The account balance is stored on an insecure MiFare Classic NFC card and can be read and written back. By...

CVE-2025-8699

Some "Stored Value" Unattended Payment Solutions of KioSoft use vulnerable NFC cards. Attackers could potentially use this vulnerability to change the balance on the cards and generate money. The account balance is stored on an insecure MiFare Classic NFC card and can be read and written back. By...

CVE-2025-8699

CVE-2025-8699 affects KioSoft’s Stored Value Unattended Payment Solutions. The flaw centers on insecure MiFare Classic NFC cards storing account balances that can be read and written, enabling an attacker to identify value fields and a checksum (calculated by XOR-ing cash with an unknown field) a...

CVE-2025-8699

Some "Stored Value" Unattended Payment Solutions of KioSoft use vulnerable NFC cards. Attackers could potentially use this vulnerability to change the balance on the cards and generate money. The account balance is stored on an insecure MiFare Classic NFC card and can be read and written back. By...

KioSoft Stored Value Unattended Payment Solutions 安全漏洞

KioSoft Stored Value Unattended Payment Solutions is a self-service payment solution from KioSoft USA. A security vulnerability exists in KioSoft Stored Value Unattended Payment Solutions that stems from the use of an insecure MiFare Classic NFC card to store account balances, which could allow a...

CVE-2025-4053

The data stored in Be-Tech Mifare Classic card is stored in cleartext. An attacker having access to a Be-Tech hotel guest Mifare Classic card can create a master key card that unlocks all the locks in the building. This issue affects all Be-Tech Mifare Classic card systems. To fix the...

CVE-2025-4053

The data stored in Be-Tech Mifare Classic card is stored in cleartext. An attacker having access to a Be-Tech hotel guest Mifare Classic card can create a master key card that unlocks all the locks in the building. This issue affects all Be-Tech Mifare Classic card systems. To fix the...

CVE-2025-4053

Be-Tech Mifare Classic card systems are affected. The root cause is that data stored on the Mifare Classic cards is in cleartext, enabling an attacker with a guest card to craft a master key card that can unlock all locks in the building. Affected component: Be-Tech Mifare Classic cards and assoc...

CVE-2025-4053 Unauthorized creation of master key in Mifare Classic Be-Tech cards

The data stored in Be-Tech Mifare Classic card is stored in cleartext. An attacker having access to a Be-Tech hotel guest Mifare Classic card can create a master key card that unlocks all the locks in the building. This issue affects all Be-Tech Mifare Classic card systems. To fix the...