{"title":"RFID Tools: Implants","description":"","products":[{"product_id":"wiegand-sniffer-esp-rfid-tool","title":"ESP RFID Tool","description":"\u003ch2\u003eIntroduction\u003c\/h2\u003e\n\u003cp\u003eThe ESP RFID Tool is an RFID implant tool, designed to wirelessly log, exfiltrate and inject data directly off the wires of access control readers.\u003c\/p\u003e\n\u003cp\u003eWhen a badge is scanned, the Access Control Reader decodes the information in the card, and communicates this data over a wired connection to the authentication system. The authentication system will then decide whether to authorise or decline entry.\u003c\/p\u003e\n\u003cp\u003eOne of the most communication protocols is \"Wiegand\", typically used on commercial and industrial systems, including 26-37bit HID cards. \u003c\/p\u003e\n\u003cp\u003eVia its built-in splicer, the ESP RFID Tool can be rapidly installed onto the wires behind an access control reader, where it sniffs and records all entry attempts.\u003c\/p\u003e\n\u003cp\u003eThis data is accessible via a WIFI Admin panel - for replay or extraction for writing to another physical badge. \u003cbr\u003e\u003c\/p\u003e\n\u003cp\u003eThe ESP RFID Tool is open-source, and can be used in a variety of extra configurations : sniffing key-codes, connected to portable readers for sniffing access cards in the wild, etc.\u003c\/p\u003e\n\u003cp\u003e\u003cstrong\u003eOut-of-the-box use cases include:\u003c\/strong\u003e\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eCredential Capturing \u0026amp; Decoding\u003cbr\u003e\n\u003c\/li\u003e\n\u003cli\u003eReplay (via Experimental TX feature)\u003cbr\u003e\n\u003c\/li\u003e\n\u003cli\u003eBrute Forcing PIN codes\u003cbr\u003e\n\u003c\/li\u003e\n\u003cli\u003ePortable Long Range Reader (via HID 5375)\u003cbr\u003e\n\u003c\/li\u003e\n\u003cli\u003eHID MultiClass RFID \/ Magstripe Reading\u003cbr\u003e\n\u003c\/li\u003e\n\u003cli\u003eHID Multiclass RFID Reading\u003cbr\u003e\n\u003c\/li\u003e\n\u003cli\u003eData interception on many other readers..\u003cbr\u003e\n\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch2\u003eInstallation Instructions\u003cbr\u003e\n\u003c\/h2\u003e\n\u003cp\u003eThe ESP-RFID Tool is designed for rapid installation during pentesting engagements.\u003c\/p\u003e\n\u003col\u003e\n\u003cli\u003eRemove \/ detatch the target access control reader.\u003c\/li\u003e\n\u003cli\u003eExtract the cable attached to the access control reader, until individual wires are exposed. The initial wires are typically sheathed, but after ~10 - 30cm the individual wires are exposed.\u003c\/li\u003e\n\u003cli\u003eInsert each wire into the splicer (Labels are silk-screened onto the bottom of the PCB.\n\u003col\u003e\n\u003cli\u003eWhite Wire (Clock)\u003c\/li\u003e\n\u003cli\u003eGreen Wire (Data)\u003c\/li\u003e\n\u003cli\u003eBlack Wire (Ground)\u003c\/li\u003e\n\u003cli\u003eRed Wire (Power)\u003c\/li\u003e\n\u003c\/ol\u003e\n\u003c\/li\u003e\n\u003cli\u003eThe LED will light on the ESP-RFID Tool\u003c\/li\u003e\n\u003cli\u003eRe-install the access control reader\u003c\/li\u003e\n\u003cli\u003eThe \u003ca rel=\"noopener\" href=\"https:\/\/github.com\/rfidtool\/ESP-RFID-Tool\/blob\/master\/README.md#software-help\" target=\"_blank\" data-mce-href=\"https:\/\/github.com\/rfidtool\/ESP-RFID-Tool\/blob\/master\/README.md#software-help\"\u003eWifi Interface\u003c\/a\u003e is now available.\u003c\/li\u003e\n\u003c\/ol\u003e\n\u003cdiv class=\"grid\"\u003e\n\u003cdiv class=\"grid-item small--one-half medium--one-half large--one-half text-left\"\u003e\n\u003ch3\u003e\u003cstrong\u003eTechnical Specifications\u003cbr\u003e\u003c\/strong\u003e\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cstrong\u003eCPU\u003c\/strong\u003e : ESP32\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eI\/O \u003c\/strong\u003e: 4-wire auto-splicer\u003c\/li\u003e\n\u003cul\u003e\u003c\/ul\u003e\n\u003cli\u003e\n\u003cstrong\u003eInterface\u003c\/strong\u003e : WIFI\u003cbr\u003e\n\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"grid-item small--one-half medium--one-half large--one-half text-left\"\u003e\n\u003ch3\u003e\u003cstrong\u003eWhat's included\u003c\/strong\u003e\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003e1x ESP-RFID Tool\u003cbr\u003e\n\u003c\/li\u003e\n\u003cli\u003e1x Auto-Splicing connector\u003cbr\u003e\n\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003e\u003cstrong\u003eTechnical Resources\u003cbr\u003e\u003c\/strong\u003e\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003ca rel=\"noopener\" href=\"https:\/\/github.com\/rfidtool\/ESP-RFID-Tool\/blob\/master\/README.md#esp-rfid-tool\" target=\"_blank\" data-mce-href=\"https:\/\/github.com\/rfidtool\/ESP-RFID-Tool\/blob\/master\/README.md#esp-rfid-tool\"\u003eGitHub Repository\u003c\/a\u003e (Original)\u003cbr\u003e\n\u003c\/li\u003e\n\u003cli\u003e\n\u003ca rel=\"noopener\" href=\"https:\/\/github.com\/Einstein2150\/ESP-RFID-Tool-v2\" target=\"_blank\"\u003eForked Repository\u003c\/a\u003e (New updates, clean UI, replay features..)\u003c\/li\u003e\n\u003cli\u003eInstallation Instructions\u003cbr\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https:\/\/github.com\/rfidtool\/ESP-RFID-Tool\/blob\/master\/Connector-Adapter-Options\/README.md#screwdown-to-punchdown-adapter\" data-mce-href=\"https:\/\/github.com\/rfidtool\/ESP-RFID-Tool\/blob\/master\/Connector-Adapter-Options\/README.md#screwdown-to-punchdown-adapter\"\u003eSplicing Guide\u003c\/a\u003e\u003c\/li\u003e\n\u003cli\u003e\n\u003ca rel=\"noopener\" href=\"https:\/\/github.com\/rfidtool\/ESP-RFID-Tool\/blob\/master\/Installation-Schematics\/README.md\" target=\"_blank\" data-mce-href=\"https:\/\/github.com\/rfidtool\/ESP-RFID-Tool\/blob\/master\/Installation-Schematics\/README.md\"\u003eWiring Schematics\u003c\/a\u003e\u003ca href=\"https:\/\/greatfet.readthedocs.io\/en\/latest\/\" rel=\"noopener noreferrer\" data-mce-href=\"https:\/\/greatfet.readthedocs.io\/en\/latest\/\" target=\"_blank\"\u003e\u003c\/a\u003e\n\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\n\u003c\/div\u003e","brand":"Lab401","offers":[{"title":"Default Title","offer_id":48961270743387,"sku":"ESP-RFID-TOOL","price":30.0,"currency_code":"EUR","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/Wiregand-Sniffing-Tool---ESP-RFID-Tool.png?v=1725460346"},{"product_id":"dual-mode-paxton-long-range-stealth-decoy-reader","title":"Dual Mode Paxton Long Range \/ Stealth Decoy Reader","description":"\u003cdiv class=\"contentGroup\"\u003e\n   \u003cp\u003eLong-Range RFID capture is the holy-grail for security auditors and penetration testers. To date, the only solutions have been either complicated and unpractical in the field, or out-of-production and abandoned.\u003c\/p\u003e\n   \u003cp\u003eThe Long-Range RFID Capture by PPE changes everything. It is a modern, complete solution that covers all elements of the RFID Audit life-cycle. By using an \u003cb\u003eindustry-standard reader\u003c\/b\u003e, long-distance read-range and card compatibility are guaranteed. An embedded hardware module, the \u003ci\u003e\u003cb\u003eDoppelgänger Core\u003c\/b\u003e\u003c\/i\u003e, provides advanced pentesting functionality. The cross-platform UI tool, \u003ci\u003e\u003cb\u003eDoppelgänger Assistant\u003c\/b\u003e\u003c\/i\u003e provides all the functionality you need in one place, optimised for in-the-field use.\u003c\/p\u003e\n   \u003cp\u003eThe Long Range Reader + Doppelgänger Core covers the \u003cb\u003efull RFID pentest life-cycle\u003c\/b\u003e:  \u003c\/p\u003e\n   \u003col\u003e\n      \u003cli\u003e \u003cb\u003eCapture\u003c\/b\u003e: Long range (up to 45cm) capture of iCLASS, iClass SE\/SEOS RFID Credentials\u003c\/li\u003e\n      \u003cli\u003e \u003cb\u003eControl\u003c\/b\u003e: Manage multiple devices, analyse, save, tag and exfiltrate captured credentials via the cross-platform WebUI.\u003c\/li\u003e\n      \u003cli\u003e \u003cb\u003eClone\u003c\/b\u003e: Emulate, clone and write captured credentials directly from the UI via Proxmark 3. One click \u0026amp; wireless: No command lines, no code.\u003c\/li\u003e\n      \u003cli\u003e \u003cb\u003eAccess\u003c\/b\u003e: Gain and escalate access via cloned RFID Credentials.\u003c\/li\u003e\n   \u003c\/ol\u003e\n   \u003cp\u003eBuilt for professional red teamers and physical penetration testers in commercial or industrial environments with Paxton Net2 badge systems, with real-world performance that allows for advanced audit possibilities: vehicles, closets, or target perimeters.\u003c\/p\u003e\n   \u003cp\u003eThe Paxton P200 Long-Range Reader can also function as a \u003cb\u003eStealth Decoy Reader\u003c\/b\u003e. \u003ci\u003eStealth Decoy Reader\u003c\/i\u003e products from PPE provide a new vector for credential capture and exfiltration. By deploying decoy readers in and around a target's premises, credentials can be quickly harvested without requiring risky and invasive techniques: wire splicing, reader damage, decoration damage, etc.\u003c\/p\u003e\n   \u003cp\u003eThe Paxton P200 Dual Mode reader includes the \u003ci\u003eDoppelgänger Core\u003c\/i\u003e module for Long Range work; customers can also add the \u003ci\u003eDoppelgänger Stealth\u003c\/i\u003e module according to operational requirements.\u003c\/p\u003e\n   \u003cp\u003eThe Long Range Reader + Doppelgänger Core are delivered \u003cb\u003eready-to-use\u003c\/b\u003e. Turn on the reader, start collecting credentials. Select a badge to clone, and write or emulate it with one click.\u003c\/p\u003e\n   \u003cp\u003eThis is the modern, professional, feature complete version of the legendary Tastic RFID Thief for Paxton Net2 Systems.\u003c\/p\u003e\n\u003c\/div\u003e\n\u003cdiv style=\"margin-top: 2em; width: 95%; margin-left: auto; margin-right: auto;\" class=\"grid\"\u003e\n   \u003cdiv class=\"grid-item small--one-whole medium--one-whole large--one-half text-left\"\u003e\n      \u003ch3\u003eLONG RANGE, HIGH-PERFORMANCE\u003c\/h3\u003e\n      \u003cp\u003eBuilt on the Paxton P200 Net2 high-performance reader, get up to \u003cb\u003e10cm of \u003ci\u003ereal-world\u003c\/i\u003e performance\u003c\/b\u003e.\u003c\/p\u003e\n   \u003c\/div\u003e\n   \u003cdiv class=\"grid-item small--one-whole medium--one-whole large--one-half text-left\"\u003e\n      \u003ch3\u003eSUPPORTS PAXTON NET2\u003c\/h3\u003e\n      \u003cp\u003eAll-in-one capture, export, emulation and cloning solution for Paxton Net2 targets.\u003c\/p\u003e\n   \u003c\/div\u003e\n\u003c\/div\u003e\n\u003cdiv style=\"width: 95%; margin: 0.8em auto 2em auto;\" class=\"grid\"\u003e\n   \u003cdiv class=\"grid-item small--one-whole medium--one-whole large--one-half text-left\"\u003e\n      \u003ch3\u003eOPTIMISED FOR FIELD WORK\u003c\/h3\u003e\n      \u003cp\u003eNo unreliable antennas, no tethered computers. From capture to clone with no more missed opportunities.\u003c\/p\u003e\n   \u003c\/div\u003e\n   \u003cdiv class=\"grid-item small--one-whole medium--one-whole large--one-half text-left\"\u003e\n      \u003ch3\u003ePROFESSIONAL TOOL \u0026amp; SUPPORT\u003c\/h3\u003e\n      \u003cp\u003eBuilt by pentesters based on real-world requirements: modern hardware, software and frequent updates.\u003c\/p\u003e\n   \u003c\/div\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"contentGroup\"\u003e\n   \u003ch2\u003eENGINEERED FOR DEMANDING ENVIRONMENTS\u003c\/h2\u003e\n   \u003cp\u003eThe Paxton P200's extended read-range allows for novel audit approaches and enhanced operator safety. From the classic targeted \"reader-in-bag\" brush-by collections, passive collections via concealment or even in-vehicle drive-by collections, the Paxton P200 has dependable performance.\u003c\/p\u003e\n   \u003cp\u003eThe Doppelgänger module provides exhaustive configuration options to fit all mission specs, and complete card analysis and cloning workflow, from initial detection through successful write operations.\u003c\/p\u003e\n\u003c\/div\u003e\n\u003cstyle\u003e .scenario-caption { display: none; text-align: center; font-style: italic; margin-top: 0.5em; } @media only screen and (max-width: 749px) { .scenario-caption { display: block; } } .scenario-frame { padding: 10px; border: 1px solid #add8e6; border-radius: 16px; display: inline-block; line-height: 0; } .scenario-frame img { border-radius: 6px; margin-top: 0px !important; margin-bottom: 0px !important;} \u003c\/style\u003e\n\u003cdiv class=\"grid\" style=\"margin-top:2em; margin-bottom: 2em;\"\u003e\n   \u003cdiv class=\"grid-item small--one-whole medium--one-whole large--one-third text-left\"\u003e\n      \u003cspan class=\"scenario-frame\"\u003e\u003cimg alt=\"\" src=\"https:\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/Scenario---1---Final_x500.png?v=1767108006\"\u003e\u003c\/span\u003e \n      \u003cp class=\"scenario-caption\"\u003eTargeted \"bump\" collections\u003c\/p\u003e\n   \u003c\/div\u003e\n   \u003cdiv class=\"grid-item small--one-whole medium--one-whole large--one-third text-left\"\u003e\n      \u003cspan class=\"scenario-frame\"\u003e\u003cimg alt=\"\" src=\"https:\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/Scenario---2---Final_x500.png?v=1767108006\"\u003e\u003c\/span\u003e \n      \u003cp class=\"scenario-caption\"\u003eStrategic dead-drop capture\u003c\/p\u003e\n   \u003c\/div\u003e\n   \u003cdiv class=\"grid-item small--one-whole medium--one-whole large--one-third text-left\"\u003e\n      \u003cspan class=\"scenario-frame\"\u003e\u003cimg alt=\"\" src=\"https:\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/Scenario---3---Final_x500.png?v=1767108006\"\u003e\u003c\/span\u003e \n      \u003cp class=\"scenario-caption\"\u003ePublic-space vehicle-based captures\u003c\/p\u003e\n   \u003c\/div\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"contentGroup\"\u003e\n   \u003ch2\u003ePOWERED BY DOPPELGANGER\u003c\/h2\u003e\n   \u003cp\u003eInside every long-range reader is the Doppelgänger Core module - the high-performance, multi-protocol, wireless equipped RFID capture, analysis and cloning device. It works hand-in hand with the Doppelgänger Assistant, a cross-platform professional GUI application designed to handle every possible operation requirement.\u003c\/p\u003e\n   \u003cp\u003eTogether, they allow for automated card capture and wireless credential exfiltration. Teams can collaborate and share credentials; credentials can be analysed, exported or cloned.\u003c\/p\u003e\n   \u003cp\u003eThe Doppelgänger Assistant also works as a easy-to-use UI for the Proxmark 3, making credential writing, cloning and verification a one-click operation. Don't miss opportunities because of knowledge gaps or constrained time: the Doppelgänger Suite is a results-oriented system for complete RFID audits.\u003c\/p\u003e\n\u003c\/div\u003e\n\u003cdiv style=\"margin-top: 2em;\" class=\"grid\"\u003e\n   \u003cdiv class=\"grid-item small--one-whole medium--one-whole large--one-half text-left product-image-container\"\u003e\n      \u003cimg src=\"https:\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/PX200-Doppel-Scaled.png?v=1767689924\" alt=\"\"\u003e\u003cbr\u003e \n      \u003cul class=\"markers-list\"\u003e\n         \u003cli class=\"feature-marker\" data-feature-id=\"1\" data-x=\"38\" data-y=\"30\"\u003e1\u003c\/li\u003e\n         \u003cli class=\"feature-marker\" data-feature-id=\"2\" data-x=\"59\" data-y=\"33\"\u003e2\u003c\/li\u003e\n         \u003cli class=\"feature-marker\" data-feature-id=\"3\" data-x=\"48\" data-y=\"65\"\u003e3\u003c\/li\u003e\n         \u003cli class=\"feature-marker\" data-feature-id=\"4\" data-x=\"72\" data-y=\"55\"\u003e4\u003c\/li\u003e\n      \u003c\/ul\u003e\n   \u003c\/div\u003e\n   \u003cdiv style=\"text-align: start;\" class=\"grid-item small--one-whole medium--one-whole large--one-half text-left\"\u003e\n      \u003cdiv class=\"feature-item\" data-feature-id=\"1\"\u003e\n         \u003ch3\u003e1. BEST-IN-CLASS PERFORMANCE\u003c\/h3\u003e\n         \u003cp\u003eIndustrial reader hardware for guaranteed compatibility and range performance.\u003c\/p\u003e\n      \u003c\/div\u003e\n      \u003cdiv class=\"feature-item\" data-feature-id=\"2\"\u003e\n         \u003ch3\u003e2. ALL-IN-ONE PAXTON NET2 SOLUTION\u003c\/h3\u003e\n         \u003cp\u003eSupports Paxton Net2 cards. Compatible with the \u003ci\u003eDoppelgänger Stealth\u003c\/i\u003e module for additional credential harvesting possibilities.\u003c\/p\u003e\n      \u003c\/div\u003e\n      \u003cdiv class=\"feature-item\" data-feature-id=\"3\"\u003e\n         \u003ch3\u003e3. BUILT FOR DISCRETION\u003c\/h3\u003e\n         \u003cp\u003eCredential capture is silent, and can trigger notifications, SMS or emails. Haptic triggers or relays can be added to the Doppelgänger’s GPIO.\u003c\/p\u003e\n      \u003c\/div\u003e\n      \u003cdiv class=\"feature-item\" data-feature-id=\"4\"\u003e\n         \u003ch3\u003e4. FEATURE COMPLETE SOFTWARE\u003c\/h3\u003e\n         \u003cp\u003eThe modern, maintained, open-source software covers all operations: capture, analysis, calculation, export and more, and integrates directly with your Proxmark 3 for all cloning, writing and verification operations.\u003c\/p\u003e\n      \u003c\/div\u003e\n   \u003c\/div\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"contentGroup\"\u003e\n   \u003ch2\u003eFIELD-READY WORKFLOW\u003c\/h2\u003e\n   \u003cp\u003eUnlike traditional approaches for RFID audits, the P200 \u0026amp; its embedded Doppelgänger module provide a full end-to-end workflow for RFID audits. What previously required highly technical knowledge, complicated wiring, fussy tools and unstable software is replaced by an all-in-one device and intuitive, cross-platform software.\u003c\/p\u003e\n   \u003cp\u003eRed-teamers and auditors can literally plug in the device, slip it into their bag and instantly collect credentials. Captured cards can be detected, analysed and exported to other team-members, or effortlessly simulated or physically cloned wirelessly via a Proxmark - the included \u003cem\u003eDoppelgänger Assistant\u003c\/em\u003e handles everything.\u003c\/p\u003e\n\u003c\/div\u003e\n\u003cdiv style=\"margin-top: 2em;\" class=\"grid\"\u003e\n   \u003cdiv class=\"grid-item small--one-whole medium--one-whole large--one-whole text-left product-image-container\" style=\"margin-bottom: -3em;\"\u003e\n      \u003cp\u003eThe Long Range Reader and Doppelgänger ecosystem covers every step of an RFID Audit: acquisition, exfiltration \u0026amp; analysis, duplication and access \/ escalation.\u003c\/p\u003e\n      \u003cimg src=\"https:\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/Lifecycle---2.png?v=1767625623\" alt=\"\"\u003e\u003cbr\u003e \n      \u003cul class=\"markers-list\"\u003e\n         \u003cli class=\"feature-marker\" data-feature-id=\"1\" data-x=\"25\" data-y=\"47\"\u003e1\u003c\/li\u003e\n         \u003cli class=\"feature-marker\" data-feature-id=\"2\" data-x=\"70\" data-y=\"47\"\u003e2\u003c\/li\u003e\n         \u003cli class=\"feature-marker\" data-feature-id=\"3\" data-x=\"36\" data-y=\"82\"\u003e3\u003c\/li\u003e\n         \u003cli class=\"feature-marker\" data-feature-id=\"4\" data-x=\"60\" data-y=\"82\"\u003e4\u003c\/li\u003e\n      \u003c\/ul\u003e\n   \u003c\/div\u003e\n   \u003cdiv style=\"text-align: start;\" class=\"grid-item small--one-whole medium--one-whole large--one-half text-left\"\u003e\n      \u003cdiv class=\"feature-item\" data-feature-id=\"1\"\u003e\n         \u003ch3\u003e1. LONG-RANGE ACQUISITION\u003c\/h3\u003e\n         \u003cp\u003eCapture Paxton Net2 cards up to 10-cm away, silently. Can be embedded or carried. Plug and Play: No messy antennas, wiring or complex setup.\u003c\/p\u003e\n      \u003c\/div\u003e\n      \u003cdiv class=\"feature-item\" data-feature-id=\"2\"\u003e\n         \u003ch3\u003e2. CROSS-PLATFORM UI\u003c\/h3\u003e\n         \u003cp\u003eGet instant notifications of captures, across multiple readers. Share readers and card data in real-time with colleagues.\u003c\/p\u003e\n      \u003c\/div\u003e\n   \u003c\/div\u003e\n   \u003cdiv style=\"text-align: start;\" class=\"grid-item small--one-whole medium--one-whole large--one-half text-left\"\u003e\n      \u003cdiv class=\"feature-item\" data-feature-id=\"3\"\u003e\n         \u003ch3\u003e3. PROXMARK3 INTEGRATION\u003c\/h3\u003e\n         \u003cp\u003eInstantly emulate or clone captured credentials via the Proxmark 3 \u003ci\u003edirectly\u003c\/i\u003e via the UI. No commands, no code, no wires.\u003c\/p\u003e\n      \u003c\/div\u003e\n      \u003cdiv class=\"feature-item\" data-feature-id=\"4\"\u003e\n         \u003ch3\u003e4. FIELD-TESTED RESULTS\u003c\/h3\u003e\n         \u003cp\u003eThe Doppelgänger system is purpose-built by professional red-teamers to be results oriented. RFID Audits just got better and easier.\u003c\/p\u003e\n      \u003c\/div\u003e\n   \u003c\/div\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"contentGroup\"\u003e\n   \u003ch2\u003eCOMPATABILITY AND TECHNICAL DETAILS\u003c\/h2\u003e\n   \u003cp\u003eThe Paxton Dual Mode Longrange \u0026amp; Stealth Decoy Reader RFID Capture System is optimised for Paxton Net2 systems. Depending on your target, there are Long-Range solutions for Low-Frequency HID and Indala systems and iClass systems.\u003c\/p\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"chipset--tables-wrapper\"\u003e\n   \u003cdiv class=\"chipset--table-title\"\u003eDevice Performance\u003c\/div\u003e\n   \u003cdiv class=\"chipset--table-container\"\u003e\n      \u003ctable class=\"chipset--table\"\u003e\n         \u003cthead\u003e\n            \u003ctr\u003e\n               \u003cth\u003eChipset\u003c\/th\u003e\n               \u003cth\u003eNotes\u003c\/th\u003e\n            \u003c\/tr\u003e\n         \u003c\/thead\u003e\n         \u003ctbody\u003e\n            \u003ctr\u003e\n               \u003ctd data-label=\"Chipset\"\u003ePaxton Net2 (Card)\u003c\/td\u003e\n               \u003ctd data-label=\"Range\"\u003eUp to 10cm (4 inches)\u003c\/td\u003e\n            \u003c\/tr\u003e\n            \u003ctr\u003e\n               \u003ctd data-label=\"Chipset\"\u003ePaxton Net2 (Fob)\u003c\/td\u003e\n               \u003ctd data-label=\"Range\"\u003eUp to 10cm (4 inches)\u003c\/td\u003e\n            \u003c\/tr\u003e\n            \u003ctr\u003e\n               \u003ctd data-label=\"Chipset\"\u003ePaxton Net2 (Active Keyfob)\u003c\/td\u003e\n               \u003ctd data-label=\"Range\"\u003eUp to 2.5m (100 inches)\u003c\/td\u003e\n            \u003c\/tr\u003e\n         \u003c\/tbody\u003e\n      \u003c\/table\u003e\n   \u003c\/div\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"chipset--tables-wrapper\"\u003e\n   \u003cdiv class=\"chipset--table-title\"\u003eTechnical Specifications\u003c\/div\u003e\n   \u003cdiv class=\"chipset--table-container\"\u003e\n      \u003ctable class=\"chipset--table\"\u003e\n         \u003cthead\u003e\n            \u003ctr\u003e\n               \u003cth\u003eFeature\u003c\/th\u003e\n               \u003cth\u003eNotes\u003c\/th\u003e\n            \u003c\/tr\u003e\n         \u003c\/thead\u003e\n         \u003ctbody\u003e\n            \u003ctr\u003e\n               \u003ctd data-label=\"Protocols\"\u003eProtocols\u003c\/td\u003e\n               \u003ctd data-label=\"Notes\"\u003ePaxton Net2\u003c\/td\u003e\n            \u003c\/tr\u003e\n            \u003ctr\u003e\n               \u003ctd data-label=\"Feature\"\u003eUI\u003c\/td\u003e\n               \u003ctd data-label=\"Notes\"\u003eCross Platform App \/ WebUI\u003c\/td\u003e\n            \u003c\/tr\u003e\n            \u003ctr\u003e\n               \u003ctd data-label=\"Feature\"\u003eIntegration\u003c\/td\u003e\n               \u003ctd data-label=\"Notes\"\u003eIntegrates with Proxmark3 RDV4.\u003cbr\u003eOne-click cloning and emulation.\u003cbr\u003eWireless operation via Blueshark.\u003c\/td\u003e\n            \u003c\/tr\u003e\n         \u003c\/tbody\u003e\n      \u003c\/table\u003e\n   \u003c\/div\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"contentGroup\"\u003e\n   \u003ch2\u003eBACKED BY REAL-WORLD TRAINING \u0026amp; CERTIFICATION\u003c\/h2\u003e\n   \u003cp\u003eBeyond the professional support, highly-detailed documentation and active development - real-world training is available for all PPE products. Covering comprehensive product learning to in-the-field assignments simulating the toughest operating conditions, for individuals and teams.\u003c\/p\u003e\n   \u003cdiv class=\"grid\"\u003e\n      \u003cdiv class=\"grid-item small--one-whole medium--one-whole large--one-half text-left\"\u003e\n         \u003ch3\u003eEUROPE\u003c\/h3\u003e\n         We recommend \u003cb\u003e\u003ca href=\"https:\/\/www.covertaccessteam.com\/\" target=\"_blank\"\u003eCovert Access Team\u003c\/a\u003e\u003c\/b\u003e for Europe-based training. Highly reputed and intimately familiar specifically with this hardware, they have multiple training modules, both online and offline. \n      \u003c\/div\u003e\n      \u003cdiv class=\"grid-item small--one-whole medium--one-whole large--one-half text-left\"\u003e\n         \u003ch3\u003eNORTH AMERICA\u003c\/h3\u003e\n         For North American clients, we recommend the product's creators \u003cb\u003e\u003ca href=\"https:\/\/physicalexploit.com\/\" target=\"_blank\"\u003eMayweather Group\u003c\/a\u003e\u003c\/b\u003e. Field-trained and objective focused, Mayweather's products are deeply ingrained in their workshops. \n      \u003c\/div\u003e\n   \u003c\/div\u003e\n\u003c\/div\u003e\n\u003cdiv style=\"margin-top: 2em;\" class=\"grid\"\u003e\n   \u003cdiv class=\"grid-item small--one-whole medium--one-whole large--one-half text-left\"\u003e\n      \u003ch2\u003e\u003cstrong\u003eWhat's included\u003c\/strong\u003e\u003c\/h2\u003e\n      \u003cul\u003e\n         \u003cli\u003e\u003cstrong\u003e1x Paxton P200 Reader\u003c\/strong\u003e\u003c\/li\u003e\n         \u003cli\u003e1x PPE Doppelgänger Board (Pre-installed)\u003c\/li\u003e\n         \u003cli\u003e1x Protective Case\u003c\/li\u003e\n      \u003c\/ul\u003e\n      \u003ch2\u003e\u003cstrong\u003eRecommended Accessories\u003c\/strong\u003e\u003c\/h2\u003e\n      \u003cul\u003e\n         \u003cli\u003e\u003ca href=\"\/en-it\/products\/ppe-long-range-reader-power-supply\" target=\"_blank\"\u003e92Wh Power Supply device\u003c\/a\u003e\u003c\/li\u003e\n         \u003cli\u003e\u003ca href=\"\/en-it\/products\/stealth-decoy-reader?variant=51997340041563\" target=\"_blank\"\u003ePPE Stealth Decoy Reader Module\u003c\/a\u003e\u003c\/li\u003e\n         \u003cli\u003e \u003ca href=\"\/en-it\/products\/proxmark-3-rdv4\" target=\"_blank\"\u003eProxmark3 RDV4\u003c\/a\u003e (with optional \u003ca href=\"\/en-it\/products\/proxmark-3-rdv4-standalone-kit\" target=\"_blank\"\u003eBluetooth Extension\u003c\/a\u003e)\u003c\/li\u003e\n      \u003c\/ul\u003e\n   \u003c\/div\u003e\n   \u003cdiv class=\"grid-item small--one-whole medium--one-whole large--one-half text-left\"\u003e\n      \u003ch2\u003e\u003cstrong\u003eResources\u003cbr\u003e\u003c\/strong\u003e\u003c\/h2\u003e\n      \u003cul\u003e\n         \u003cli\u003e\u003ca href=\"https:\/\/physicalexploit.com\/docs\/products\/rfid\/longrange_v2\" rel=\"noopener\" target=\"_blank\"\u003eLong-range Reader Hardware Documentation\u003c\/a\u003e\u003c\/li\u003e\n         \u003cli\u003e\u003ca href=\"https:\/\/physicalexploit.com\/docs\/products\/code\/doppelganger_core\" rel=\"noopener\" target=\"_blank\"\u003eFirmware Documentation and Configuration\u003c\/a\u003e\u003c\/li\u003e\n         \u003cli\u003e\u003ca href=\"https:\/\/physicalexploit.com\/docs\/products\/code\/assistant\" rel=\"noopener\" target=\"_blank\"\u003eDoppelgänger Assistant Documentation and Configuration\u003c\/a\u003e\u003c\/li\u003e\n         \u003cli\u003e\u003ca href=\"https:\/\/physicalexploit.com\/docs\/products\/code\/flashing_firmware\" rel=\"noopener\" target=\"_blank\"\u003eFirmware \u0026amp; Flashing Documentation\u003c\/a\u003e\u003c\/li\u003e\n      \u003c\/ul\u003e\n   \u003c\/div\u003e\n\u003c\/div\u003e\n","brand":"Mayweather","offers":[{"title":"Default Title","offer_id":51993925321051,"sku":"PPE-PAX-P200-DMDI-001","price":475.0,"currency_code":"EUR","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/PAX-P200-DMDI-001---Cutaway.png?v=1767637317"},{"product_id":"stealth-decoy-reader","title":"Stealth Decoy Reader","description":"\u003cdiv class=\"contentGroup\"\u003e\n\u003ch2\u003eTHE PROBLEM\u003c\/h2\u003e\n\u003cp\u003eExtracting RFID \u0026amp; Keypad credentials via spliced implants is a well-known technique. However, these tools are rarely used in professional audits: installations are slow and complicated, and damage to wiring, hardware and infrastructure are rarely authorised in Scope of Engagement documents.\u003c\/p\u003e\n\u003cp\u003eThe implants themselves have limited functionality and protocol support, and only provide the \"capture\" part of an RFID Audit lifecycle. The analysis and cloning of a captured credential requires multiple manual steps, tools and skills.\u003c\/p\u003e\n\u003ch2\u003eTHE SOLUTION\u003c\/h2\u003e\n\u003cp\u003eImagine walking into an audit, placing an access control reader on a wall and instantly collecting credentials. Your phone gives you real-time notifications of skimmed badges and PIN codes, and directly writes a clone badge with your Proxmark.\u003c\/p\u003e\n\u003cp\u003eYou don't need a computer, you don't need to damage client property, you don't need to memorise arcane Proxmark commands. Everything is taken care of. When the audit is over, you've got a timestamped log of all operations, ready for export into a report. Your time and skills are spent on the audit, instead of the tools.\u003c\/p\u003e\n\u003cp\u003eYou've just imagined the Stealth Decoy Reader platform, a next-generation, non-destructive credential capture system designed specifically for red-teamers and pentesters. The Stealth Decoy Reader is an open-source, battle-tested hardware module built to collect and exfiltrate all known corporate access-control protocols and PIN codes.\u003c\/p\u003e\n\u003cp\u003eEven better, the Stealth Decoy Reader is available pre-installed inside the most common access control readers for perfect camouflage. The readers come equipped with non-destructive mounting systems, ready for rapid placement in public areas, choke points, doorways, cabinets, etc.\u003c\/p\u003e\n\u003c\/div\u003e\n\u003cstyle\u003e .scenario-caption { display: block; text-align: center; font-style: italic; margin-top: 0.5em; } .scenario-frame { padding: 10px; border: 1px solid #add8e6; border-radius: 16px; display: inline-block; line-height: 0; } .scenario-frame img { border-radius: 6px; margin-top: 0px !important; margin-bottom: 0px !important;} \u003c\/style\u003e\n\u003cdiv style=\"width: 95%; margin: 2em auto 2em auto;\" class=\"grid\"\u003e\n\u003cdiv class=\"grid-item small--one-whole medium--one-half large--one-half text-center\"\u003e\n\u003cspan class=\"scenario-frame\"\u003e\u003cimg alt=\"\" src=\"https:\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/SDR---Scenario---1.jpg?v=1767716240\"\u003e\u003c\/span\u003e\n\u003cp class=\"scenario-caption\"\u003eRapid deployment during public access\u003c\/p\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"grid-item small--one-whole medium--one-half large--one-half text-center\"\u003e\n\u003cspan class=\"scenario-frame\"\u003e\u003cimg alt=\"\" src=\"https:\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/SDR---Scenario---2.jpg?v=1767716240\"\u003e\u003c\/span\u003e\n\u003cp class=\"scenario-caption\"\u003eCredential capture\u003c\/p\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"grid-item small--one-whole medium--one-half large--one-half text-center\"\u003e\n\u003cspan class=\"scenario-frame\"\u003e\u003cimg alt=\"\" src=\"https:\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/SDR---Scenario---3.jpg?v=1767716240\"\u003e\u003c\/span\u003e\n\u003cp class=\"scenario-caption\"\u003eInstant notifications and credential management\u003c\/p\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"grid-item small--one-whole medium--one-half large--one-half text-center\"\u003e\n\u003cspan class=\"scenario-frame\"\u003e\u003cimg alt=\"\" src=\"https:\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/SDR---Scenario---4.jpg?v=1767716240\"\u003e\u003c\/span\u003e\n\u003cp class=\"scenario-caption\"\u003eOne-click cloning via Proxmark 3\u003c\/p\u003e\n\u003c\/div\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"contentGroup\"\u003e\n\u003cp\u003eThe Stealth Decoy Reader Platform covers the \u003cb\u003efull RFID pentest life-cycle\u003c\/b\u003e:\u003c\/p\u003e\n\u003col\u003e\n\u003cli\u003e\n\u003cb\u003eCapture\u003c\/b\u003e: Rapidly deployed, instant multi-factor credential skimming\u003c\/li\u003e\n\u003cli\u003e\n\u003cb\u003eControl\u003c\/b\u003e: Manage multiple devices, analyse, save, tag and exfiltrate captured credentials via the cross-platform WebUI.\u003c\/li\u003e\n\u003cli\u003e\n\u003cb\u003eClone\u003c\/b\u003e: Emulate, clone and write captured credentials directly from the UI via Proxmark 3. One click \u0026amp; wireless: No command lines, no code.\u003c\/li\u003e\n\u003cli\u003e\n\u003cb\u003eAccess\u003c\/b\u003e: Gain and escalate access via cloned RFID.\u003c\/li\u003e\n\u003c\/ol\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"grid\" style=\"margin-top: 2em; margin-bottom: 2em;\"\u003e\n\u003cdiv class=\"grid-item small--one-whole medium--one-whole large--one-half text-left\"\u003e\n\u003ch3\u003eMULTI-PROTOCOL\u003c\/h3\u003e\n\u003cp\u003eSupports all corporate RFID and keypad protocols, including HID \u0026amp; Wiegand, iCLASS, Indala, Paxton..\u003c\/p\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"grid-item small--one-whole medium--one-whole large--one-half text-left\"\u003e\n\u003ch3\u003eUNDETECTABLE\u003c\/h3\u003e\n\u003cp\u003ePhysical switch to deactivate WiFi for undetectable installation, NAC evasion, and reduced RF exposure.\u003c\/p\u003e\n\u003c\/div\u003e\n\u003c\/div\u003e\n\u003cdiv style=\"width: 95%; margin: 0.8em auto 2em auto;\" class=\"grid\"\u003e\n\u003cdiv class=\"grid-item small--one-whole medium--one-whole large--one-half text-left\"\u003e\n\u003ch3\u003eNON-DESTRUCTIVE INSTALLATION\u003c\/h3\u003e\n\u003cp\u003eNo need to remove readers, crimp cables or damage client hardware. Deploy and remove in seconds.\u003c\/p\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"grid-item small--one-whole medium--one-whole large--one-half text-left\"\u003e\n\u003ch3\u003ePROFESSIONAL TOOL \u0026amp; SUPPORT\u003c\/h3\u003e\n\u003cp\u003eBuilt by pentesters based on real-world requirements: modern hardware, software and frequent updates.\u003c\/p\u003e\n\u003c\/div\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"contentGroup\"\u003e\n\u003ch2\u003ePOWERED BY STEALTH\u003c\/h2\u003e\n\u003cp\u003eInside every Stealth Decoy Reader is a Stealth Decoy Module - the high-performance, multi-protocol, wireless equipped RFID capture, analysis and cloning device. It works hand-in hand with the Doppelgänger Assistant, a cross-platform professional GUI application designed to handle every possible operation requirement.\u003c\/p\u003e\n\u003cp\u003eTogether, they allow for automated card capture and wireless credential exfiltration. Teams can collaborate and share credentials; credentials can be analysed, exported or cloned.\u003c\/p\u003e\n\u003cp\u003eThe Doppelgänger Assistant also works as a easy-to-use UI for the Proxmark 3, making credential writing, cloning and verification a one-click operation. Don't miss opportunities because of knowledge gaps or constrained time: the Doppelgänger Suite is a results-oriented system for complete RFID audits.\u003c\/p\u003e\n\u003c\/div\u003e\n\u003cdiv style=\"margin-top: 2em;\" class=\"grid\"\u003e\n\u003cdiv class=\"grid-item small--one-whole medium--one-whole large--one-half text-left product-image-container\"\u003e\n\u003cimg src=\"https:\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/Reader-_-Battery.jpg?v=1767775419\" alt=\"\"\u003e\u003cbr\u003e\n\u003cul class=\"markers-list\"\u003e\n\u003cli class=\"feature-marker\" data-feature-id=\"1\" data-x=\"24\" data-y=\"10\"\u003e1\u003c\/li\u003e\n\u003cli class=\"feature-marker\" data-feature-id=\"2\" data-x=\"42\" data-y=\"37\"\u003e2\u003c\/li\u003e\n\u003cli class=\"feature-marker\" data-feature-id=\"3\" data-x=\"32\" data-y=\"65\"\u003e3\u003c\/li\u003e\n\u003cli class=\"feature-marker\" data-feature-id=\"4\" data-x=\"72\" data-y=\"65\"\u003e4\u003c\/li\u003e\n\u003cli class=\"feature-marker\" data-feature-id=\"5\" data-x=\"48\" data-y=\"89\"\u003e4\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\n\u003cdiv style=\"text-align: start;\" class=\"grid-item small--one-whole medium--one-whole large--one-half text-left\"\u003e\n\u003cdiv class=\"feature-item\" data-feature-id=\"1\"\u003e\n\u003ch3\u003e1. REAL HARDWARE\u003c\/h3\u003e\n\u003cp\u003eLegitimate readers with the Stealth Decoy Reader modules embedded inside are indistinguishable from your client's existing readers.\u003c\/p\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"feature-item\" data-feature-id=\"2\"\u003e\n\u003ch3\u003e2. MULTI-FACTOR CREDENTIALS\u003c\/h3\u003e\n\u003cp\u003eSkim RFID and matching PIN credentials simultaneously. Handles all corporate protocols, including iCLASS SE\/SEOS\/SR.\u003c\/p\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"feature-item\" data-feature-id=\"3\"\u003e\n\u003ch3\u003e3. NEVER MISS A CREDENTIAL\u003c\/h3\u003e\n\u003cp\u003eSupport for all major corporate RFID systems. Frequent firmware and software updates. Never miss a credential.\u003c\/p\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"feature-item\" data-feature-id=\"4\"\u003e\n\u003ch3\u003e4. NO RISK, NO DAMAGE INSTALLS\u003c\/h3\u003e\n\u003cp\u003eNo risky, lengthy or destructive installation or hardware modifications required. Deploy in seconds. Runs on internal power.\u003c\/p\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"feature-item\" data-feature-id=\"5\"\u003e\n\u003ch3\u003e5. BUILT FOR DISCRETION\u003c\/h3\u003e\n\u003cp\u003eCredential capture is silent, and can trigger notifications, SMS or emails. Hardware switch to disable all RF emissions.\u003c\/p\u003e\n\u003c\/div\u003e\n\u003c\/div\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"contentGroup\"\u003e\n\u003ch2\u003eFIELD-READY WORKFLOW\u003c\/h2\u003e\n\u003cp\u003eUnlike traditional approaches for RFID audits, the \u003ci\u003eStealth Decoy Reader\u003c\/i\u003e system provides a full end-to-end workflow for RFID audits. What previously required highly technical knowledge, complicated wiring, fussy tools and unstable software is replaced by an all-in-one device and intuitive, cross-platform software.\u003c\/p\u003e\n\u003cp\u003eRed-teamers and auditors can literally turn on the device, attach it to an appropriate wall \/ door \/ cabinet \/ public choke-point and instantly collect credentials. Captured cards can be detected, analysed and exported to other team-members, or effortlessly simulated or physically cloned wirelessly via a Proxmark - the included \u003cem\u003eDoppelgänger Assistant\u003c\/em\u003e handles everything.\u003c\/p\u003e\n\u003c\/div\u003e\n\u003cdiv style=\"margin-top: 2em;\" class=\"grid\"\u003e\n\u003cdiv class=\"grid-item small--one-whole medium--one-whole large--one-whole text-left product-image-container\" style=\"margin-bottom: -3em;\"\u003e\n\u003cp\u003eThe Long Range Reader and Doppelgänger ecosystem covers every step of an RFID Audit: acquisition, exfiltration \u0026amp; analysis, duplication and access \/ escalation.\u003c\/p\u003e\n\u003cimg src=\"https:\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/SDR---Lifecycle.jpg?v=1767775419\" alt=\"\"\u003e\u003cbr\u003e\n\u003cul class=\"markers-list\"\u003e\n\u003cli class=\"feature-marker\" data-feature-id=\"1\" data-x=\"25\" data-y=\"47\"\u003e1\u003c\/li\u003e\n\u003cli class=\"feature-marker\" data-feature-id=\"2\" data-x=\"70\" data-y=\"47\"\u003e2\u003c\/li\u003e\n\u003cli class=\"feature-marker\" data-feature-id=\"3\" data-x=\"36\" data-y=\"82\"\u003e3\u003c\/li\u003e\n\u003cli class=\"feature-marker\" data-feature-id=\"4\" data-x=\"60\" data-y=\"82\"\u003e4\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\n\u003cdiv style=\"text-align: start;\" class=\"grid-item small--one-whole medium--one-whole large--one-half text-left\"\u003e\n\u003cdiv class=\"feature-item\" data-feature-id=\"1\"\u003e\n\u003ch3\u003e1. MULTI-FACTOR ACQUISITION\u003c\/h3\u003e\n\u003cp\u003eCapture RFID \u0026amp; PIN Credentials, silently. Rapid deployment. No wiring or complex setup required. Turn on, drop and go.\u003c\/p\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"feature-item\" data-feature-id=\"2\"\u003e\n\u003ch3\u003e2. CROSS-PLATFORM UI\u003c\/h3\u003e\n\u003cp\u003eGet instant notifications of captures, across multiple readers. Share readers and card data in real-time with colleagues.\u003c\/p\u003e\n\u003c\/div\u003e\n\u003c\/div\u003e\n\u003cdiv style=\"text-align: start;\" class=\"grid-item small--one-whole medium--one-whole large--one-half text-left\"\u003e\n\u003cdiv class=\"feature-item\" data-feature-id=\"3\"\u003e\n\u003ch3\u003e3. PROXMARK3 INTEGRATION\u003c\/h3\u003e\n\u003cp\u003eInstantly emulate or clone captured credentials via the Proxmark 3 \u003ci\u003edirectly\u003c\/i\u003e via the UI. No commands, no code, no wires.\u003c\/p\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"feature-item\" data-feature-id=\"4\"\u003e\n\u003ch3\u003e4. FIELD-TESTED RESULTS\u003c\/h3\u003e\n\u003cp\u003eThe Stealth Decoy Reader system is purpose-built by professional red-teamers to be results oriented. RFID Audits just got better and easier.\u003c\/p\u003e\n\u003c\/div\u003e\n\u003c\/div\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"contentGroup\"\u003e\n\u003ch2\u003eAVAILABLE MODELS \u0026amp; TECHNICAL DETAILS\u003c\/h2\u003e\n\u003cp\u003eEvery major corporate reader is available - simply take the unit that your client uses for undetectable credential harvesting. Devices ships preconfigured with your choice of integrated reader hardware. For convenience, we have a \u003cb\u003eproduct selection assistant\u003c\/b\u003e to help you determine which model \/ device you require.\u003c\/p\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"chipset--tables-wrapper\"\u003e\n\u003cdiv class=\"chipset--table-title\"\u003eAvailable Models\u003c\/div\u003e\n\u003cdiv class=\"chipset--table-container\"\u003e\n\u003ctable class=\"chipset--table\"\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eModel\u003c\/th\u003e\n\u003cth\u003eType\u003c\/th\u003e\n\u003cth\u003eProtocols\u003c\/th\u003e\n\u003c\/tr\u003e\n\u003c\/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd data-label=\"Model\"\u003eHID multiCLASS SE RP40\u003cbr\u003eHID multiCLASS SE RP40\u003c\/td\u003e\n\u003ctd data-label=\"Type\"\u003eRFID\u003cbr\u003eRFID+Keypad\u003c\/td\u003e\n\u003ctd data-label=\"Protocols\"\u003eHID iCLASS Legacy\u003cbr\u003eHID iCLASS SE\/SEOS\/SR\u003cbr\u003eMIFARE Classic (via SE)\u003cbr\u003eMIFARE DESFire\u003cbr\u003eHID Prox, AWID, EM4102, T5577\u003c\/td\u003e\n\u003c\/tr\u003e\n\u003ctr\u003e\n\u003ctd data-label=\"Model\"\u003eHID Signo 20TKS\u003cbr\u003eHID Signo 20KTKS\u003cbr\u003eHID Signo 40TKS\u003cbr\u003eHID Signo 40KTKS\u003cbr\u003e\n\u003c\/td\u003e\n\u003ctd data-label=\"Type\"\u003eRFID\u003cbr\u003eRFID+Keypad\u003c\/td\u003e\n\u003ctd data-label=\"Protocols\"\u003eHID iCLASS Legacy\u003cbr\u003eHID iCLASS SE\/SEOS\/SR\u003cbr\u003eMIFARE Classic (via SE)\u003cbr\u003eMIFARE DESFire\u003cbr\u003eIndala\u003cbr\u003eHID Prox, AWID, EM4102, T5577\u003c\/td\u003e\n\u003c\/tr\u003e\n\u003ctr\u003e\n\u003ctd data-label=\"Model\"\u003ePaxton P75\u003cbr\u003ePaxton PK75\u003c\/td\u003e\n\u003ctd data-label=\"Type\"\u003eRFID\u003cbr\u003eRFID+Keypad\u003c\/td\u003e\n\u003ctd data-label=\"Protocols\"\u003ePaxton Net2\u003c\/td\u003e\n\u003c\/tr\u003e\n\u003c\/tbody\u003e\n\u003c\/table\u003e\n\u003c\/div\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"contentGroup\"\u003e\n\u003cp\u003e\u003ci\u003eThe \u003cb\u003estand-alone module\u003c\/b\u003e is compatible with all the above protocols and authentication methods.\u003c\/i\u003e\u003c\/p\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"chipset--tables-wrapper\"\u003e\n\u003cdiv class=\"chipset--table-title\"\u003eTechnical Specifications\u003c\/div\u003e\n\u003cdiv class=\"chipset--table-container\"\u003e\n\u003ctable class=\"chipset--table\"\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eFeature\u003c\/th\u003e\n\u003cth\u003eNotes\u003c\/th\u003e\n\u003c\/tr\u003e\n\u003c\/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd data-label=\"Feature\"\u003eUI\u003c\/td\u003e\n\u003ctd data-label=\"Notes\"\u003eCross Platform App \/ WebUI\u003c\/td\u003e\n\u003c\/tr\u003e\n\u003ctr\u003e\n\u003ctd data-label=\"Feature\"\u003eIntegration\u003c\/td\u003e\n\u003ctd data-label=\"Notes\"\u003eIntegrates with Proxmark3 RDV4.\u003cbr\u003eOne-click cloning and emulation.\u003cbr\u003eWireless operation via Blueshark.\u003c\/td\u003e\n\u003c\/tr\u003e\n\u003c\/tbody\u003e\n\u003c\/table\u003e\n\u003c\/div\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"contentGroup\"\u003e\n\u003ch2\u003eBACKED BY REAL-WORLD TRAINING \u0026amp; CERTIFICATION\u003c\/h2\u003e\n\u003cp\u003eBeyond the professional support, highly-detailed documentation and active development - real-world training is available for all PPE products. Covering comprehensive product learning to in-the-field assignments simulating the toughest operating conditions, for individuals and teams.\u003c\/p\u003e\n\u003cdiv class=\"grid\"\u003e\n\u003cdiv class=\"grid-item small--one-whole medium--one-whole large--one-half text-left\"\u003e\n\u003ch3\u003eEUROPE\u003c\/h3\u003e\nWe recommend \u003cb\u003e\u003ca href=\"https:\/\/www.covertaccessteam.com\/\" target=\"_blank\"\u003eCovert Access Team\u003c\/a\u003e\u003c\/b\u003e for Europe-based training. Highly reputed and intimately familiar specifically with this hardware, they have multiple training modules, both online and offline.\u003c\/div\u003e\n\u003cdiv class=\"grid-item small--one-whole medium--one-whole large--one-half text-left\"\u003e\n\u003ch3\u003eNORTH AMERICA\u003c\/h3\u003e\nFor North American clients, we recommend the product's creators \u003cb\u003e\u003ca href=\"https:\/\/physicalexploit.com\/\" target=\"_blank\"\u003eMayweather Group\u003c\/a\u003e\u003c\/b\u003e. Field-trained and objective focused, Mayweather's products are deeply ingrained in their workshops.\u003c\/div\u003e\n\u003c\/div\u003e\n\u003c\/div\u003e\n\u003cdiv style=\"margin-top: 2em;\" class=\"grid\"\u003e\n\u003cdiv class=\"grid-item small--one-whole medium--one-whole large--one-half text-left\"\u003e\n\u003cp\u003e \u003c\/p\u003e\n\u003ch2\u003e\u003cstrong\u003eWhat's included\u003c\/strong\u003e\u003c\/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAccess Control Hardware of choice\u003c\/li\u003e\n\u003cli\u003eStealth Decoy Reader (preinstalled)\u003c\/li\u003e\n\u003cli\u003ePPE 3.7V 1800mAh LiPo battery\u003c\/li\u003e\n\u003cli\u003ePPE Stealth Card\u003c\/li\u003e\n\u003cli\u003eHID iCLASS 2k card \u003cmeta charset=\"utf-8\"\u003e(HID Variants Only)\u003c\/li\u003e\n\u003cli\u003eT5577 card\u003c\/li\u003e\n\u003cli\u003eMagnetic mounting plate\u003c\/li\u003e\n\u003cli\u003eHook-and-pile mounting strips\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e\u003cb\u003eThe \"Module + Battery Only\" variant includes:\u003c\/b\u003e\u003cbr\u003e\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eStealth Decoy Reader \u003ci\u003e(preinstalled)\u003c\/i\u003e\n\u003c\/li\u003e\n\u003cli\u003ePPE 3.7V 1800mAh LiPo battery\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch2\u003e\u003cstrong\u003eRecommended Accessories\u003c\/strong\u003e\u003c\/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003ca href=\"\/en-it\/products\/proxmark-3-rdv4\" target=\"_blank\"\u003eProxmark3 RDV4\u003c\/a\u003e (with optional \u003ca href=\"\/en-it\/products\/proxmark-3-rdv4-standalone-kit\"\u003eBluetooth Extension\u003c\/a\u003e)\u003c\/li\u003e\n\u003cli\u003e\u003ca href=\"\/en-it\/products\/ppe-2-in-1-fast-usb-c-battery-charger\" target=\"_blank\"\u003ePPE Dual Battery Charger\u003c\/a\u003e\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"grid-item small--one-whole medium--one-whole large--one-half text-left\"\u003e\n\u003ch2\u003e\u003cstrong\u003eResources\u003cbr\u003e\u003c\/strong\u003e\u003c\/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https:\/\/physicalexploit.com\/docs\/products\/rfid\/stealth_v2\" rel=\"noopener\" target=\"_blank\"\u003eStealth Decoy Reader Hardware Documentation\u003c\/a\u003e\u003c\/li\u003e\n\u003cli\u003e\u003ca href=\"https:\/\/store.physicalexploit.com\/products\/physicalexploit.com\/docs\/products\/code\/doppelganger_stealth\" rel=\"noopener\" target=\"_blank\"\u003eFirmware Documentation and Configuration\u003c\/a\u003e\u003c\/li\u003e\n\u003cli\u003e\u003ca href=\"https:\/\/physicalexploit.com\/docs\/products\/code\/assistant\" rel=\"noopener\" target=\"_blank\"\u003eDoppelgänger Assistant Documentation and Configuration\u003c\/a\u003e\u003c\/li\u003e\n\u003cli\u003e\u003ca href=\"https:\/\/physicalexploit.com\/docs\/products\/code\/flashing_firmware\" rel=\"noopener\" target=\"_blank\"\u003eFirmware \u0026amp; Flashing Documentation\u003c\/a\u003e\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\n\u003c\/div\u003e","brand":"Mayweather","offers":[{"title":"RP40 multiCLASS SE","offer_id":51997339779419,"sku":"PPE-HID-SDR-RP40","price":375.0,"currency_code":"EUR","in_stock":true},{"title":"RPK40 multiCLASS SE","offer_id":51997339812187,"sku":"PPE-HID-MFAS-RPK40","price":650.0,"currency_code":"EUR","in_stock":true},{"title":"20TKS multiCLASS SE","offer_id":51997339844955,"sku":"PPE-HID-SDR-20TKS","price":400.0,"currency_code":"EUR","in_stock":true},{"title":"40TKS multiCLASS SE","offer_id":51997339877723,"sku":"PPE-HID-SDR-40TKS","price":410.0,"currency_code":"EUR","in_stock":true},{"title":"20KTKS multiCLASS SE","offer_id":51997339910491,"sku":"PPE-HID-MFAS-20KTKS","price":675.0,"currency_code":"EUR","in_stock":true},{"title":"40KTKS multiCLASS SE","offer_id":51997339943259,"sku":"PPE-HID-SDR-40KTKS","price":685.0,"currency_code":"EUR","in_stock":true},{"title":"Paxton P75","offer_id":51997339976027,"sku":"PPE-PAX-SDR-P75","price":325.0,"currency_code":"EUR","in_stock":true},{"title":"Paxton KP75","offer_id":51997340008795,"sku":"PPE-PAX-MFAS-KP75","price":450.0,"currency_code":"EUR","in_stock":true},{"title":"Module + Battery Only","offer_id":51997340041563,"sku":"PPE-SDR-BB-001","price":125.0,"currency_code":"EUR","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/HID-SDR-RP40---Cutaway.png?v=1767714696"},{"product_id":"doppelganger-core-rfid-dev-board","title":"Doppelgänger Core RFID Dev Board","description":"\u003cdiv class=\"contentGroup\"\u003e\n   \u003ch2\u003eINTRODUCTION\u003c\/h2\u003e\n   \u003cp\u003eThe \u003ci\u003e\u003cb\u003eDoppelgänger Core\u003c\/b\u003e\u003c\/i\u003e, is an advanced hardware module for RFID pentesting functionality. While specifically designed to be embedded in Long-Range RFID readers, it can also be used as a Wiegand\/Data implant for wireless exfiltration of RFID and PIN credentials.\u003c\/p\u003e\n   \u003cp\u003eThe module supports both Wiegand and Data formats, enabling capture of credentials from HID Global, Paxton, and Indala systems. Designed for reduced wiring and simplified installation, making it an ideal choice for custom long-range data interpreter builds.\u003c\/p\u003e\n   \u003cp\u003eThis product is the \u003cb\u003emodule only\u003c\/b\u003e. It can be implanted into on-site readers, or integrated into a custom reader.\u003c\/p\u003e\n   \u003cp\u003eThe included cross-platform UI tool, \u003ci\u003e\u003cb\u003eDoppelgänger Assistant\u003c\/b\u003e\u003c\/i\u003e provides all the functionality you need in one place, optimised for in-the-field use, and a full pentest life-cycle:\u003c\/p\u003e\n   \u003col\u003e\n      \u003cli\u003e \u003cb\u003eCapture\u003c\/b\u003e: Capture RFID and PIN credentials\u003c\/li\u003e\n      \u003cli\u003e \u003cb\u003eControl\u003c\/b\u003e: Manage multiple devices, analyse, save, tag and exfiltrate captured credentials via the cross-platform WebUI.\u003c\/li\u003e\n      \u003cli\u003e \u003cb\u003eClone\u003c\/b\u003e: Emulate, clone and write captured credentials directly from the UI via Proxmark 3. One click \u0026amp; wireless: No command lines, no code.\u003c\/li\u003e\n      \u003cli\u003e \u003cb\u003eAccess\u003c\/b\u003e: Gain and escalate access via cloned RFID Credentials.\u003c\/li\u003e\n   \u003c\/ol\u003e\n   \u003cdiv class=\"contentGroup\"\u003e\n      \u003ch2\u003eCOMPATABILITY AND TECHNICAL DETAILS\u003c\/h2\u003e\n      \u003cp\u003eThe PPE iCLASS Longrange RFID Capture System is optimised for iCLASS systems. Depending on your target, there are Long-Range solutions for Low-Frequency HID and Indala systems and Paxton systems.\u003c\/p\u003e\n   \u003c\/div\u003e\n   \u003cdiv class=\"chipset--tables-wrapper\"\u003e\n      \u003cdiv class=\"chipset--table-title\"\u003eTechnical Specifications\u003c\/div\u003e\n      \u003cdiv class=\"chipset--table-container\"\u003e\n         \u003ctable class=\"chipset--table\"\u003e\n            \u003cthead\u003e\n               \u003ctr\u003e\n                  \u003cth\u003eFeature\u003c\/th\u003e\n                  \u003cth\u003eNotes\u003c\/th\u003e\n               \u003c\/tr\u003e\n            \u003c\/thead\u003e\n            \u003ctbody\u003e\n               \u003ctr\u003e\n                  \u003ctd data-label=\"Protocols\"\u003eProtocols (HID)\u003c\/td\u003e\n                  \u003ctd data-label=\"Notes\"\u003eHID H10301 (26-bit)\u003cbr\u003e2804 WIEGAND (28-bit)\u003cbr\u003eATS Wiegand (30-bit)\u003cbr\u003eHID ADT (31-bit)\u003cbr\u003eHID D10202 (33-bit)\u003cbr\u003eHID H10306 (34-bit)\u003cbr\u003eHID Corporate 1000 (35-bit)\u003cbr\u003eHID Simplex \/ S12906 (36-bit)\u003cbr\u003eHID H10304 (37-bit)\u003cbr\u003eHID H800002 (46-bit)\u003cbr\u003eHID Corporate 1000 (48-bit)\u003cbr\u003e \u003c\/td\u003e\n               \u003c\/tr\u003e\n               \u003ctr\u003e\n                  \u003ctd data-label=\"Protocols\"\u003eProtocols (iCLASS)\u003c\/td\u003e\n                  \u003ctd data-label=\"Notes\"\u003eiClass\u003cbr\u003eiCLASS SE\u003cbr\u003eiCLASS SEOS\u003cbr\u003eiCLASS SR\u003c\/td\u003e\n               \u003c\/tr\u003e\n               \u003ctr\u003e\n                  \u003ctd data-label=\"Protocols\"\u003eProtocols (Indala)\u003c\/td\u003e\n                  \u003ctd data-label=\"Notes\"\u003eIndala (26-bit)\u003cbr\u003eIndala (27-bit)\u003c\/td\u003e\n               \u003c\/tr\u003e\n               \u003ctr\u003e\n                  \u003ctd data-label=\"Protocols\"\u003eProtocols (Paxton)\u003c\/td\u003e\n                  \u003ctd data-label=\"Notes\"\u003ePaxton Net2 (75-bit)\u003c\/td\u003e\n               \u003c\/tr\u003e\n               \u003ctr\u003e\n                  \u003ctd data-label=\"Feature\"\u003eUI\u003c\/td\u003e\n                  \u003ctd data-label=\"Notes\"\u003eCross Platform App \/ WebUI\u003c\/td\u003e\n               \u003c\/tr\u003e\n               \u003ctr\u003e\n                  \u003ctd data-label=\"Feature\"\u003eIntegration\u003c\/td\u003e\n                  \u003ctd data-label=\"Notes\"\u003eIntegrates with Proxmark3 RDV4.\u003cbr\u003eOne-click cloning and emulation.\u003cbr\u003eWireless operation via Blueshark.\u003c\/td\u003e\n               \u003c\/tr\u003e\n            \u003c\/tbody\u003e\n         \u003c\/table\u003e\n      \u003c\/div\u003e\n   \u003c\/div\u003e\n   \u003cdiv class=\"contentGroup\"\u003e\n      \u003ch2\u003eBACKED BY REAL-WORLD TRAINING \u0026amp; CERTIFICATION\u003c\/h2\u003e\n      \u003cp\u003eBeyond the professional support, highly-detailed documentation and active development - real-world training is available for all PPE products. Covering comprehensive product learning to in-the-field assignments simulating the toughest operating conditions, for individuals and teams.\u003c\/p\u003e\n      \u003cdiv class=\"grid\"\u003e\n         \u003cdiv class=\"grid-item small--one-whole medium--one-whole large--one-half text-left\"\u003e\n            \u003ch3\u003eEUROPE\u003c\/h3\u003e\n            We recommend \u003cb\u003e\u003ca href=\"https:\/\/www.covertaccessteam.com\/\" target=\"_blank\"\u003eCovert Access Team\u003c\/a\u003e\u003c\/b\u003e for Europe-based training. Highly reputed and intimately familiar specifically with this hardware, they have multiple training modules, both online and offline. \n         \u003c\/div\u003e\n         \u003cdiv class=\"grid-item small--one-whole medium--one-whole large--one-half text-left\"\u003e\n            \u003ch3\u003eNORTH AMERICA\u003c\/h3\u003e\n            For North American clients, we recommend the product's creators \u003cb\u003e\u003ca href=\"https:\/\/physicalexploit.com\/\" target=\"_blank\"\u003eMayweather Group\u003c\/a\u003e\u003c\/b\u003e. Field-trained and objective focused, Mayweather's products are deeply ingrained in their workshops. \n         \u003c\/div\u003e\n      \u003c\/div\u003e\n   \u003c\/div\u003e\n   \u003cdiv class=\"grid\" style=\"margin-top: 2em;\"\u003e\n      \u003cdiv class=\"grid-item small--one-whole medium--one-whole large--one-half text-left\"\u003e\n         \u003ch2\u003e\u003cstrong\u003eWhat's included\u003c\/strong\u003e\u003c\/h2\u003e\n         \u003cul\u003e\n            \u003cli\u003e\u003cstrong\u003e1x PPE Doppelgänger Core Module\u003c\/strong\u003e\u003c\/li\u003e\n            \u003cli\u003e1x 3D Printed Mounting Base\u003c\/li\u003e\n            \u003cli\u003e1x Adhesive Mounting Strip\u003c\/li\u003e\n         \u003c\/ul\u003e\n         \u003ch2\u003e\u003cstrong\u003eRecommended Accessories\u003c\/strong\u003e\u003c\/h2\u003e\n         \u003cul\u003e\n            \u003cli\u003e\u003ca href=\"\/en-it\/products\/ppe-long-range-reader-power-supply\" target=\"_blank\"\u003e92Wh Power Supply device\u003c\/a\u003e\u003c\/li\u003e\n            \u003cli\u003e \u003ca href=\"\/en-it\/products\/proxmark-3-rdv4\" target=\"_blank\"\u003eProxmark3 RDV4\u003c\/a\u003e (with optional \u003ca href=\"\/en-it\/products\/proxmark-3-rdv4-standalone-kit\"\u003eBluetooth Extension\u003c\/a\u003e)\u003c\/li\u003e\n         \u003c\/ul\u003e\n      \u003c\/div\u003e\n      \u003cdiv class=\"grid-item small--one-whole medium--one-whole large--one-half text-left\"\u003e\n         \u003ch2\u003e\u003cstrong\u003eResources\u003cbr\u003e\u003c\/strong\u003e\u003c\/h2\u003e\n         \u003cul\u003e\n            \u003cli\u003e\u003ca rel=\"noopener\" href=\"https:\/\/physicalexploit.com\/docs\/products\/rfid\/longrange_v2\" target=\"_blank\"\u003eLong-range Reader Hardware Documentation\u003c\/a\u003e\u003c\/li\u003e\n            \u003cli\u003e\u003ca rel=\"noopener\" href=\"https:\/\/physicalexploit.com\/docs\/products\/code\/doppelganger_core\" target=\"_blank\"\u003eFirmware Documentation and Configuration\u003c\/a\u003e\u003c\/li\u003e\n            \u003cli\u003e\u003ca rel=\"noopener\" href=\"https:\/\/physicalexploit.com\/docs\/products\/code\/assistant\" target=\"_blank\"\u003eDoppelgänger Assistant Documentation and Configuration\u003c\/a\u003e\u003c\/li\u003e\n            \u003cli\u003e\u003ca rel=\"noopener\" href=\"https:\/\/physicalexploit.com\/docs\/products\/code\/flashing_firmware\" target=\"_blank\"\u003eFirmware \u0026amp; Flashing Documentation\u003c\/a\u003e\u003c\/li\u003e\n         \u003c\/ul\u003e\n      \u003c\/div\u003e\n   \u003c\/div\u003e\n\u003c\/div\u003e\n","brand":"Mayweather","offers":[{"title":"Default Title","offer_id":52006972293467,"sku":"PPE-LONGRANGE-DEVBRD-001","price":60.0,"currency_code":"EUR","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/LONGRANGE-DEVBRD-001---Front.png?v=1767878049"}],"url":"https:\/\/lab401.com\/en-it\/collections\/rfid-tools-implants.oembed","provider":"Lab401","version":"1.0","type":"link"}