Your SlideShare is downloading. ×
  • Like
NFC attacks
Upcoming SlideShare
Loading in...5

Thanks for flagging this SlideShare!

Oops! An error has occurred.


Now you can save presentations on your phone or tablet

Available for both IPhone and Android

Text the download link to your phone

Standard text messaging rates apply

NFC attacks



Published in Business , Technology
  • Full Name Full Name Comment goes here.
    Are you sure you want to
    Your message goes here
    Be the first to comment
No Downloads


Total Views
On SlideShare
From Embeds
Number of Embeds



Embeds 0

No embeds

Report content

Flagged as inappropriate Flag as inappropriate
Flag as inappropriate

Select your reason for flagging this presentation as inappropriate.

    No notes for slide


  • 1. NFC attacks By Peter
  • 2. This presentation was made possible by the awesome research of• Charlie Miller (Twitter sec team, Accuvant)• Verdult & Kooman (Radboud University, SURFnet)• Eddie Lee (Blackwing Intelligence)
  • 3. What is NFC?• Set of communication protocols based on RFID (Basically all of the RFID standards plus P2P instructions)• Runs in the frequency of 13.56Mhz• Range is usually less than 4cm• Narrow bandwidth (106, 212, 424 Kbits/s)
  • 4. Active Vs. Passive• Active, P2P – Both devices generates their own fields• Passive (backwards compatible mode) – Initiating device generates carrier fields – Target device modulates existing field
  • 5. Many usages
  • 6. Android
  • 7. Android Beam
  • 8. Android Beam marketing buzz• This is one of the most admired features of the android 4.0 ice cream sandwich update!• The users can now share music, docs, videos, and photos just in a single tap!• No need to pair the devices before exchanging the data, the new ICS had made it absolutely trouble-free!
  • 9. Absolutely trouble-free
  • 10. Smart poster
  • 11. Remote shell
  • 12. Bluetooth pairing(!)
  • 13. Use NFC to pair with a Bluetooth speaker
  • 14. Nokia N9 Bluetooth pairing• Absolutely trouble free• Pair devices without user interaction• No need for PIN/Pwd• Does not have “Confirm sharing and connecting” enabled• Bluetooth doesn´t even have to be turned on. It will be switched on for you
  • 15. Eddie Lee’s NFC proxy• Android app to skim RFID credit cards• Using the app an attacker can steal CC number, expiration date and CVV code• Replay this info to a RFID enabled POS device
  • 16. NFC Proxy
  • 17. Links• NFC Proxy (Tool and Source)• Charlie Miller - NFC Attack Surface EFCON-20-Miller-NFC-Attack-Surface.pdf• Verdult & Kooman – Practical attacks nabled_cell_phones-NFC_2011.pdf• Eddie Lee – NFC Hacking The Easy Way ddieLeeDefcon20.pdf
  • 18. The EndPeter at omegapoint dot us