NFC attacks
Upcoming SlideShare
Loading in...5
×

Like this? Share it with your network

Share
  • Full Name Full Name Comment goes here.
    Are you sure you want to
    Your message goes here
    Be the first to comment
No Downloads

Views

Total Views
3,599
On Slideshare
3,599
From Embeds
0
Number of Embeds
0

Actions

Shares
Downloads
36
Comments
0
Likes
1

Embeds 0

No embeds

Report content

Flagged as inappropriate Flag as inappropriate
Flag as inappropriate

Select your reason for flagging this presentation as inappropriate.

Cancel
    No notes for slide
  • http://ia600505.us.archive.org/30/items/Defcon20Slides/DEFCON-20-Miller-NFC-Attack-Surface.pdfhttp://www.cs.ru.nl/~rverdult/Practical_attacks_on_NFC_enabled_cell_phones-NFC_2011.pdfhttp://www.blackwinghq.com/assets/labs/presentations/EddieLeeDefcon20.pdf

Transcript

  • 1. NFC attacks By Peter Swedinwww.omegapoint.us
  • 2. This presentation was made possible by the awesome research of• Charlie Miller (Twitter sec team, Accuvant)• Verdult & Kooman (Radboud University, SURFnet)• Eddie Lee (Blackwing Intelligence)
  • 3. What is NFC?• Set of communication protocols based on RFID (Basically all of the RFID standards plus P2P instructions)• Runs in the frequency of 13.56Mhz• Range is usually less than 4cm• Narrow bandwidth (106, 212, 424 Kbits/s)
  • 4. Active Vs. Passive• Active, P2P – Both devices generates their own fields• Passive (backwards compatible mode) – Initiating device generates carrier fields – Target device modulates existing field
  • 5. Many usages
  • 6. Android
  • 7. Android Beam
  • 8. Android Beam marketing buzz• This is one of the most admired features of the android 4.0 ice cream sandwich update!• The users can now share music, docs, videos, and photos just in a single tap!• No need to pair the devices before exchanging the data, the new ICS had made it absolutely trouble-free!
  • 9. Absolutely trouble-free
  • 10. Smart poster
  • 11. Remote shell
  • 12. Bluetooth pairing(!)
  • 13. Use NFC to pair with a Bluetooth speaker
  • 14. Nokia N9 Bluetooth pairing• Absolutely trouble free• Pair devices without user interaction• No need for PIN/Pwd• Does not have “Confirm sharing and connecting” enabled• Bluetooth doesn´t even have to be turned on. It will be switched on for you
  • 15. Eddie Lee’s NFC proxy• Android app to skim RFID credit cards• Using the app an attacker can steal CC number, expiration date and CVV code• Replay this info to a RFID enabled POS device
  • 16. NFC Proxy
  • 17. Links• NFC Proxy (Tool and Source) http://sourceforge.net/p/nfcproxy/• Charlie Miller - NFC Attack Surface http://ia600505.us.archive.org/30/items/Defcon20Slides/D EFCON-20-Miller-NFC-Attack-Surface.pdf• Verdult & Kooman – Practical attacks http://www.cs.ru.nl/~rverdult/Practical_attacks_on_NFC_e nabled_cell_phones-NFC_2011.pdf• Eddie Lee – NFC Hacking The Easy Way http://www.blackwinghq.com/assets/labs/presentations/E ddieLeeDefcon20.pdf
  • 18. The EndPeter at omegapoint dot us