拆解SEOS协议.pdf

1、#BHAS BlackHatEventsDismantling the SEOS Protocolevildaemond&Iceman#BHAS BlackHatEventsWho is evildaemond?Day job as a Senior Penetration TesterAlmost 10 years in Physical SecuritySpecialises in electronics and hardware specialist#BHAS BlackHatEventsWho is Iceman?Been hacking RFID systems over a dec

2、adeLoves open source!Uses 4 spaces instead of#BHAS BlackHatEventsWhy?Newest security technologyCards came with a new access control systemNo substantial any information online Dont trust people saying its secure#BHAS BlackHatEventsUnderstand how these systems workReview what the system usesEvaluate

3、its security#BHAS BlackHatEventsRFID 101#BHAS BlackHatEventsRF-IDRadio Frequency Identification#BHAS BlackHatEvents#BHAS BlackHatEvents#BHAS BlackHatEventsFACILITY CODE1337CARD NUMBER1337#BHAS BlackHatEventsRF Field#BHAS BlackHatEventsRF Field#BHAS BlackHatEventsHello+Negotiation#BHAS BlackHatEvents

4、Hello+NegotiationSend me contents of X#BHAS BlackHatEventsHello+NegotiationSend me contents of XOKFACILITY CODE1337CARD NUMBER1337#BHAS BlackHatEventsHello+NegotiationSend me contents of XOKFACILITY CODE1337CARD NUMBER1337#BHAS BlackHatEventsHello+Negotiation#BHAS BlackHatEventsHello+NegotiationSend

5、 me contents of X#BHAS BlackHatEventsHello+NegotiationSend me contents of XOKFACILITY CODE1234CARD NUMBER1234#BHAS BlackHatEventsHello+NegotiationSend me contents of XOKFACILITY CODE1234CARD NUMBER1234#BHAS BlackHatEventsHello+Negotiation#BHAS BlackHatEventsHello+NegotiationSend me contents of X#BHA

6、S BlackHatEventsHello+NegotiationSend me contents of XOKFACILITY CODE1337CARD NUMBER1337#BHAS BlackHatEventsHello+NegotiationSend me contents of XOKFACILITY CODE1337CARD NUMBER1337#BHAS BlackHatEventsHello+Negotiation#BHAS BlackHatEventsHello+NegotiationSend me contents of X,the password is lemons#B