Beyond the "Infinity Card": Practical Exploitation and Defense Strategies for High-Frequency RFID Systems
No ratings
Presented at Out of The Box 2025 by
This paper presents a practical analysis of vulnerabilities in high-frequency RFID systems, focusing on commonly used cards in Southeast Asia. We detail techniques for exploiting these vulnerabilities, demonstrating the ability to manipulate value and transaction data in widely deployed systems such as Kopitiam Cards (Singapore) and Touch 'n Go cards (Malaysia). We further analyze the defense mechanisms implemented by these systems, evaluating their effectiveness and proposing potential improvements for enhancing security against advanced attacks such as nested and darkside techniques. The findings highlight the need for robust security measures in RFID-based applications and underscore the importance of continuous improvement and vulnerability mitigation.