Brute Forcing a HID Corporate 1000 Tag

Brute forcing an HID RFID reader using a HID Corporate 1000 35 bit format. Card number has been randomly generated and copied onto a blank T5577 card for testing. Requires a proxmark3.

Instructions for elechouse RDV2 model.

Write firmware.

Hold button 2 seconds(enter standalone)

Short press button several times until A&C are lit

Hold button 2 seconds until D&A&C are lit.

Read a valid tag.

Short press button B&C&A are lit.

Now brute forcing tag decrementing card numbers.

Short press button...

View more

From: Exploit Agency

Related topics : rfid card id number / rfid tag number format