{"id":301,"date":"2014-10-05T02:44:43","date_gmt":"2014-10-05T09:44:43","guid":{"rendered":"http:\/\/ismellsmoke.net\/\/?p=301"},"modified":"2014-10-05T03:11:39","modified_gmt":"2014-10-05T10:11:39","slug":"hacking-the-tastic-rfid-tool","status":"publish","type":"post","link":"https:\/\/ismellsmoke.net\/?p=301","title":{"rendered":"Hacking the Tastic RFID Tool"},"content":{"rendered":"<p>In my recent posts I hacked a BV4618 LCD to prepare it for use in my Tastic RFID project. Now that I have the BV4618 working and an improved and simple code library (<a href=\"https:\/\/ismellsmoke.net\/\/?p=276\" target=\"_blank\">sopBV4618_S<\/a>), we return to the Tastic tool. If you are not familiar with the Bishop Fox Tastic project you can read about it <a href=\"http:\/\/www.bishopfox.com\/resources\/tools\/rfid-hacking\/attack-tools\/\" target=\"_blank\">here<\/a>.<\/p>\n<p>Ol&#8217; Sopwith again wants to make it clear that I am <strong><span style=\"text-decoration: underline;\"><em>not<\/em><\/span><\/strong> interested in the dark-side of RFID hacking. Nor do I encourage anyone to do so. The goal of this project is to learn about RFID and how it all works. Fascinating stuff.<\/p>\n<p>After researching the Tastic RFID documentation I ordered three PCB&#8217;s using the Tastic project <a href=\"http:\/\/www.bishopfox.com\/download\/817\" target=\"_blank\">PCB documents<\/a>. The vendor I used was <a href=\"https:\/\/oshpark.com\/\" target=\"_blank\">OSH Park<\/a>. Highly recommended outfit that does great work.<\/p>\n<div id=\"attachment_303\" style=\"width: 310px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/ismellsmoke.net\/\/wp-content\/uploads\/2014\/10\/Tastic_PCB.jpg\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-303\" class=\"wp-image-303 size-medium\" src=\"https:\/\/ismellsmoke.net\/\/wp-content\/uploads\/2014\/10\/Tastic_PCB-300x198.jpg\" alt=\"Tastic PCB\" width=\"300\" height=\"198\" srcset=\"https:\/\/ismellsmoke.net\/wp-content\/uploads\/2014\/10\/Tastic_PCB-300x198.jpg 300w, https:\/\/ismellsmoke.net\/wp-content\/uploads\/2014\/10\/Tastic_PCB-452x300.jpg 452w, https:\/\/ismellsmoke.net\/wp-content\/uploads\/2014\/10\/Tastic_PCB.jpg 687w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><p id=\"caption-attachment-303\" class=\"wp-caption-text\">Tastic PCB<\/p><\/div>\n<p><!--more--><\/p>\n<p>I ordered all the parts in the Tastic project parts list with the exception of the LCD. It was going to be enormously expensive to ship the recommended LCD from Amazon in the USA to my home in London. So I replaced it with the ByVac BV4618 I wrote about in previous posts. Below is a photo of my assembled Tastic board.<\/p>\n<div id=\"attachment_305\" style=\"width: 310px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/ismellsmoke.net\/\/wp-content\/uploads\/2014\/10\/Tastic_Complete_PCB.jpg\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-305\" class=\"size-medium wp-image-305\" src=\"https:\/\/ismellsmoke.net\/\/wp-content\/uploads\/2014\/10\/Tastic_Complete_PCB-300x197.jpg\" alt=\"Tastic Assembled PCB\" width=\"300\" height=\"197\" srcset=\"https:\/\/ismellsmoke.net\/wp-content\/uploads\/2014\/10\/Tastic_Complete_PCB-300x197.jpg 300w, https:\/\/ismellsmoke.net\/wp-content\/uploads\/2014\/10\/Tastic_Complete_PCB-456x300.jpg 456w, https:\/\/ismellsmoke.net\/wp-content\/uploads\/2014\/10\/Tastic_Complete_PCB.jpg 645w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><p id=\"caption-attachment-305\" class=\"wp-caption-text\">Tastic Assembled PCB<\/p><\/div>\n<p>Since electronic hacking project processes are serial in nature, I decided to test the SD card circuit first. I fired up the Arduino Nano with a USB cable and wrote a quick sketch to read and write files to the SD card. The test worked great. Now I knew the Nano was wired correctly to the SD card.<\/p>\n<p>I next connected the BV4618 LCD to the three screw terminals on the PCB board labeled &#8216;LCD Screw Terminal.&#8217; Wiring was a snap. VDD -&gt; LCD GND. VSS -&gt; LCD +V. Rx -&gt; LCD Rx. When I fired up the Nano the LCD jumped to life. The Tastic board is wired to use Pin-4 (D4) for LCD display writing. I wrote a quick &#8216;Hello World!&#8217; sketch using my sopBV4618_S library and tested it. Worked great. Now I knew the LCD circuit was functioning properly.<\/p>\n<p>Next up &#8211; a HID card reader that will read the RFID cards and send the Weigand bits to the Tastic board. I found a <a title=\"HID Thinline II\" href=\"http:\/\/www.hidglobal.com\/products\/readers\/hid-proximity\/5395\" target=\"_blank\">HID Thinline II<\/a> on Ebay from a local seller here in London. Cost me 25 pounds. I also ordered 10 <a title=\"HID Prox II Cards\" href=\"http:\/\/www.hidglobal.com\/sites\/hidglobal.com\/files\/resource_files\/prox-proxcard-ii-card-ds-en.pdf\" target=\"_blank\">HID Prox II<\/a> cards to test the setup.<\/p>\n<p>When the card reader arrived I wired it up to the Tastic board. This was also a snap. &#8211; -&gt; HID Blk. + -&gt; HID Red. Data-0 -&gt; HID Grn. Data-1 -&gt; HID Wht. I needed an external power source to fire up the HID reader. This source is connected to the PCB at the large block terminal labelled &#8217;18V Battery.&#8217;<\/p>\n<p>The original Tastic project used a long-range card reader that required high voltage for a long antenna reach. The HID Thinline II can operate on 5-16 VDC so I decided to use a single 9V battery to power up the rig. You can see the complete rig up and running in the below photo.<\/p>\n<div id=\"attachment_306\" style=\"width: 310px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/ismellsmoke.net\/\/wp-content\/uploads\/2014\/10\/Tastic_Working.jpg\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-306\" class=\"size-medium wp-image-306\" src=\"https:\/\/ismellsmoke.net\/\/wp-content\/uploads\/2014\/10\/Tastic_Working-300x192.jpg\" alt=\"Tastic Operational\" width=\"300\" height=\"192\" srcset=\"https:\/\/ismellsmoke.net\/wp-content\/uploads\/2014\/10\/Tastic_Working-300x192.jpg 300w, https:\/\/ismellsmoke.net\/wp-content\/uploads\/2014\/10\/Tastic_Working-467x300.jpg 467w, https:\/\/ismellsmoke.net\/wp-content\/uploads\/2014\/10\/Tastic_Working.jpg 989w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><p id=\"caption-attachment-306\" class=\"wp-caption-text\">Tastic Operational<\/p><\/div>\n<p>Now that the rig was up and running, I had to make some slight changes to the Tastic project Arduino code. The changes were to the LCD display code because I was using a different LCD. I tested the code changes and ensured it all worked without smoke.<\/p>\n<p>When I passed a card over the reader it beeped and the card was read successfully. You can see the LCD display below.<\/p>\n<div id=\"attachment_307\" style=\"width: 310px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/ismellsmoke.net\/\/wp-content\/uploads\/2014\/10\/Tastic_LCD.jpg\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-307\" class=\"size-medium wp-image-307\" src=\"https:\/\/ismellsmoke.net\/\/wp-content\/uploads\/2014\/10\/Tastic_LCD-300x99.jpg\" alt=\"Card Read Display\" width=\"300\" height=\"99\" srcset=\"https:\/\/ismellsmoke.net\/wp-content\/uploads\/2014\/10\/Tastic_LCD-300x99.jpg 300w, https:\/\/ismellsmoke.net\/wp-content\/uploads\/2014\/10\/Tastic_LCD-500x166.jpg 500w, https:\/\/ismellsmoke.net\/wp-content\/uploads\/2014\/10\/Tastic_LCD.jpg 703w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><p id=\"caption-attachment-307\" class=\"wp-caption-text\">Card Read Display<\/p><\/div>\n<p>The final test was to ensure the read card data was written to the SD card. I read all 10 of my Prox cards and then pulled the SD card to read from my laptop. Sure enough, all the captured card data was written to the card.<\/p>\n<div id=\"attachment_308\" style=\"width: 310px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/ismellsmoke.net\/\/wp-content\/uploads\/2014\/10\/SDCard.jpg\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-308\" class=\"wp-image-308 size-medium\" src=\"https:\/\/ismellsmoke.net\/\/wp-content\/uploads\/2014\/10\/SDCard-300x73.jpg\" alt=\"SD Card - Click to enlarge -\" width=\"300\" height=\"73\" srcset=\"https:\/\/ismellsmoke.net\/wp-content\/uploads\/2014\/10\/SDCard-300x73.jpg 300w, https:\/\/ismellsmoke.net\/wp-content\/uploads\/2014\/10\/SDCard-500x123.jpg 500w, https:\/\/ismellsmoke.net\/wp-content\/uploads\/2014\/10\/SDCard.jpg 813w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><p id=\"caption-attachment-308\" class=\"wp-caption-text\">SD Card &#8211; Click to enlarge &#8211;<\/p><\/div>\n<p>I now have a working Tastic RFID tool to conduct additional experiments. This was a fun project and I learned a lot. As I continue my research, I am going to focus on the HID iClass proximity cards. Stay tuned.<\/p>\n<p><em>Sopwith<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>In my recent posts I hacked a BV4618 LCD to prepare it for use in my Tastic RFID project. Now that I have the BV4618 working and an improved and simple code library (sopBV4618_S), we return to the Tastic tool. &hellip; <a href=\"https:\/\/ismellsmoke.net\/?p=301\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4,5,6],"tags":[],"class_list":["post-301","post","type-post","status-publish","format-standard","hentry","category-arduino","category-general","category-how-to"],"_links":{"self":[{"href":"https:\/\/ismellsmoke.net\/index.php?rest_route=\/wp\/v2\/posts\/301","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ismellsmoke.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ismellsmoke.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ismellsmoke.net\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/ismellsmoke.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=301"}],"version-history":[{"count":8,"href":"https:\/\/ismellsmoke.net\/index.php?rest_route=\/wp\/v2\/posts\/301\/revisions"}],"predecessor-version":[{"id":315,"href":"https:\/\/ismellsmoke.net\/index.php?rest_route=\/wp\/v2\/posts\/301\/revisions\/315"}],"wp:attachment":[{"href":"https:\/\/ismellsmoke.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=301"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ismellsmoke.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=301"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ismellsmoke.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=301"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}