ESP RFID Tool

Introduction

The ESP RFID Tool is an RFID implant tool, designed to wirelessly log, exfiltrate and inject data directly off the wires of access control readers.

When a badge is scanned, the Access Control Reader decodes the information in the card, and communicates this data over a wired connection to the authentication system. The authentication system will then decide whether to authorise or decline entry.

One of the most communication protocols is "Wiegand", typically used on commercial and industrial systems, including 26-37bit HID cards.

Via its built-in splicer, the ESP RFID Tool can be rapidly installed onto the wires behind an access control reader, where it sniffs and records all entry attempts.

This data is accessible via a WIFI Admin panel - for replay or extraction for writing to another physical badge.

The ESP RFID Tool is open-source, and can be used in a variety of extra configurations : sniffing key-codes, connected to portable readers for sniffing access cards in the wild, etc.

Out-of-the-box use cases include:

• Credential Capturing & Decoding
  
• Replay (via Experimental TX feature)
  
• Brute Forcing PIN codes
  
• Portable Long Range Reader (via HID 5375)
  
• HID MultiClass RFID / Magstripe Reading
  
• HID Multiclass RFID Reading
  
• Data interception on many other readers..
  

Installation Instructions

The ESP-RFID Tool is designed for rapid installation during pentesting engagements.

1. Remove / detatch the target access control reader.
2. Extract the cable attached to the access control reader, until individual wires are exposed. The initial wires are typically sheathed, but after ~10 - 30cm the individual wires are exposed.
3. Insert each wire into the splicer (Labels are silk-screened onto the bottom of the PCB.
   1. White Wire (Clock)
   2. Green Wire (Data)
   3. Black Wire (Ground)
   4. Red Wire (Power)
4. The LED will light on the ESP-RFID Tool
5. Re-install the access control reader
6. The Wifi Interface is now available.