NFC attacks By Peter Swedinwww.omegapoint.us
This presentation was made possible     by the awesome research of• Charlie Miller (Twitter sec team, Accuvant)• Verdult &...
What is NFC?• Set of communication protocols based on  RFID (Basically all of the RFID standards plus  P2P instructions)• ...
Active Vs. Passive• Active, P2P  – Both devices generates their own fields• Passive (backwards compatible mode)  – Initiat...
Many usages
Android
Android Beam
Android Beam marketing buzz• This is one of the most admired features of  the android 4.0 ice cream sandwich update!• The ...
Absolutely trouble-free
Smart poster
Remote shell
Bluetooth pairing(!)
Use NFC to pair with a  Bluetooth speaker
Nokia N9 Bluetooth pairing• Absolutely trouble free• Pair devices without user interaction• No need for PIN/Pwd• Does not ...
Eddie Lee’s NFC proxy• Android app to skim RFID credit cards• Using the app an attacker can steal CC  number, expiration d...
NFC Proxy
Links• NFC Proxy (Tool and Source)  http://sourceforge.net/p/nfcproxy/• Charlie Miller - NFC Attack Surface  http://ia6005...
The EndPeter at omegapoint dot us
NFC attacks
NFC attacks
Upcoming SlideShare
Loading in...5
×

NFC attacks

3,760

Published on

Published in: Business, Technology
0 Comments
2 Likes
Statistics
Notes
  • Be the first to comment

No Downloads
Views
Total Views
3,760
On Slideshare
0
From Embeds
0
Number of Embeds
1
Actions
Shares
0
Downloads
85
Comments
0
Likes
2
Embeds 0
No embeds

No notes for slide
  • http://ia600505.us.archive.org/30/items/Defcon20Slides/DEFCON-20-Miller-NFC-Attack-Surface.pdfhttp://www.cs.ru.nl/~rverdult/Practical_attacks_on_NFC_enabled_cell_phones-NFC_2011.pdfhttp://www.blackwinghq.com/assets/labs/presentations/EddieLeeDefcon20.pdf
  • NFC attacks

    1. 1. NFC attacks By Peter Swedinwww.omegapoint.us
    2. 2. This presentation was made possible by the awesome research of• Charlie Miller (Twitter sec team, Accuvant)• Verdult & Kooman (Radboud University, SURFnet)• Eddie Lee (Blackwing Intelligence)
    3. 3. What is NFC?• Set of communication protocols based on RFID (Basically all of the RFID standards plus P2P instructions)• Runs in the frequency of 13.56Mhz• Range is usually less than 4cm• Narrow bandwidth (106, 212, 424 Kbits/s)
    4. 4. Active Vs. Passive• Active, P2P – Both devices generates their own fields• Passive (backwards compatible mode) – Initiating device generates carrier fields – Target device modulates existing field
    5. 5. Many usages
    6. 6. Android
    7. 7. Android Beam
    8. 8. Android Beam marketing buzz• This is one of the most admired features of the android 4.0 ice cream sandwich update!• The users can now share music, docs, videos, and photos just in a single tap!• No need to pair the devices before exchanging the data, the new ICS had made it absolutely trouble-free!
    9. 9. Absolutely trouble-free
    10. 10. Smart poster
    11. 11. Remote shell
    12. 12. Bluetooth pairing(!)
    13. 13. Use NFC to pair with a Bluetooth speaker
    14. 14. Nokia N9 Bluetooth pairing• Absolutely trouble free• Pair devices without user interaction• No need for PIN/Pwd• Does not have “Confirm sharing and connecting” enabled• Bluetooth doesn´t even have to be turned on. It will be switched on for you
    15. 15. Eddie Lee’s NFC proxy• Android app to skim RFID credit cards• Using the app an attacker can steal CC number, expiration date and CVV code• Replay this info to a RFID enabled POS device
    16. 16. NFC Proxy
    17. 17. Links• NFC Proxy (Tool and Source) http://sourceforge.net/p/nfcproxy/• Charlie Miller - NFC Attack Surface http://ia600505.us.archive.org/30/items/Defcon20Slides/D EFCON-20-Miller-NFC-Attack-Surface.pdf• Verdult & Kooman – Practical attacks http://www.cs.ru.nl/~rverdult/Practical_attacks_on_NFC_e nabled_cell_phones-NFC_2011.pdf• Eddie Lee – NFC Hacking The Easy Way http://www.blackwinghq.com/assets/labs/presentations/E ddieLeeDefcon20.pdf
    18. 18. The EndPeter at omegapoint dot us
    1. A particular slide catching your eye?

      Clipping is a handy way to collect important slides you want to go back to later.

    ×