This is the kind of thing the international community condemns China or North Korea for doing. Anyone who thinks we’re still a free country is completely deluded.
Atlassian's CEO after firing the engineer who built their $1.79B infrastructure and the guy released a 38-minute breakdown of everything he built, free for anyone to copy
The new / old iCLASS legacy key recovery attack vector is now documented in the Proxmark3 repo.
Four phases. Full pipeline from card to master key.
1. hf iclass legrec
Card on antenna. XOR delta writes to induce a weak key state. Recovers lower 24 bits. Takes hours to days.
2. hf iclass legbrute / hashcat
Offline. Exhausts the remaining 2^40. ~9hrs CPU, under 10min on a decent GPU.
3. hf iclass unhash
Reverses hash0. Generates DES pre-images.
4. hashcat DES crack
Recovers the site master key.
Full walkthrough in the repo.
https://t.co/u9SnqJ6t2c
@LundukeJournal I dare you to try this goober, running it on 8GB of DDR5 and a i7 it still barely chugs along. Thats a death sentence bold face lie and you know it