- [Instructor] NFC is built on RFID technology.
One of the main differences
is that NFC provides two way wireless communication,
and RFID rather, is mostly one way.
As we discussed in lesson one,
NFC is actually used on payment systems,
and it's also used to bootstrap other wireless technologies.
For example, it can help with Bluetooth pairing.
It can also be used in batch readers
to provide an identity card, for example,
or an access token, to allow you into a building
or to use a computer or an application.
Some of the security concerns
with NFC is basically similar to RFID.
So you can perform frequency jamming
for denial of service attacks,
or you can also perform relay or replay attacks,
in the case of man-in-the-middle scenarios.
And especially, if somebody actually has gained access
to unencrypted data.
Of course, there's also the potential of theft,
or if your phone or your batch is actually lost.
All that is actually possible.
Now, NFC attacks are a little bit more difficult to execute
than the traditional attacks that you learn in this course
and in the first course of this series.
So this is because you have to be
in close proximity of your victim.
However, they're still definitely possible.
So for example, what if you actually attract a controller?
So an an NFC controller or an RFID controller.
Well controllers should not be accessible
through the internet, and you should practice segmentation
in your organization, but many folks leave them out there.
And also, they're using unsecured protocols like Telnet.
So if you actually do a quick Shodan search
for a controller that is fairly popular,
it's called Vertex.
So you will actually see dozens
of these controllers exposed on the internet.
Now let's take a look at another example.
So a security researcher called Bishop Fox
created a tool called the Tastic RFID Thief.
And this is actually a silent, long range
RFID and NFC reader that can actually steal
the proximity batch information from an unsuspected employee
as they actually physically walk near
the actual concealed device, so near this tool.
Specifically, it is actually targeting the 125 kilohertz
low frequency RFID batch systems used for physical security.
You can even use this tool to weaponize the 13.56 megahertz,
which is actually a high frequency NFC RFID reader.
Like those for HID iCLASS access control systems.
Now his goal was actually to make it easier
for security professionals and pen testers
to actually recreate these tools,
so it's completely open source,
so that they can actually perform RFID and NFC
physical penetration testing.
He actually has detailed information
about how you can actually build one of these tools
at his website,
at the link that I'm actually showing in the screen.