Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[idea] Decode trace list when sniffing done #2674

Open
Yenniiii opened this issue Dec 2, 2024 · 5 comments
Open

[idea] Decode trace list when sniffing done #2674

Yenniiii opened this issue Dec 2, 2024 · 5 comments
Labels
enhancement New feature or request Request

Comments

@Yenniiii
Copy link

Yenniiii commented Dec 2, 2024

Is your feature request related to a problem? Please describe.
We sniff NFC system with proxmark3 and find that some key personal information is leaked; however, interpreting it required additional effort.

Describe the solution you'd like
We wish there was a code in client/src/cmd_trace that could decode it and output it.

Describe alternatives you've considered
We want to be able to output refined personal information through the command trace decode after the trace_save to cmd_trace.

@Yenniiii Yenniiii added enhancement New feature or request Request labels Dec 2, 2024
@iceman1001
Copy link
Collaborator

This is to generic formulated. You need to specify with examples and in with more details

@Yenniiii
Copy link
Author

Yenniiii commented Dec 3, 2024

When we decoded the sniffing communication between the nfc tag and reader by utf-8 and euc-kr, the personal information came out. We don't know which encoding method is commonly used in countries other than Korea, but if there are nfc system that vulnerable in security, it will be possible to see the personal information in the card using only Proxmark3's sniffing and simple decoding logic. We have written code that can extract personal information from our dataset. We’ll attach results obtained by our code. This is some of the extracted personal information that we can disclose. Thank you very much :)
sniffing_decoding

@iceman1001
Copy link
Collaborator

Which personal information did you see from that trace?

@Yenniiii
Copy link
Author

Yenniiii commented Dec 4, 2024

We could check student number, name, and birth with student ID card. The student number is a unique number for each student in our school.

@iceman1001
Copy link
Collaborator

You will need to provide sample trace, sample information in order to made a decoder.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request Request
Projects
None yet
Development

No branches or pull requests

2 participants