Brute Forcing a HID Corporate 1000 Tag
Brute forcing an HID RFID reader using a HID Corporate 1000 35 bit format. Card number has been randomly generated and copied onto a blank T5577 card for testing. Requires a proxmark3.
Instructions for elechouse RDV2 model.
Write firmware.
Hold button 2 seconds(enter standalone)
Short press button several times until A&C are lit
Hold button 2 seconds until D&A&C are lit.
Read a valid tag.
Short press button B&C&A are lit.
Now brute forcing tag decrementing card numbers.
Short press button...
From: Exploit Agency
Related topics : rfid card id number / rfid tag number format
1 Resources