frux-c / uhf_rfid

this is a uhf app for the flipper zero, that uses the YRM100 module.
190 stars 7 forks source link

SUGGESTED FEATURE: Card emulation #16

Open therealziggy opened 2 months ago

therealziggy commented 2 months ago

Would it be technically possible to add card emulation feature instead of just writing to a new card?

mxcdoam commented 2 months ago

Would it be technically possible to add card emulation feature instead of just writing to a new card?

Does yrm 100 module supports emulation? I think it's not.

skynet01 commented 2 months ago

the yrm is just a reader and a writer, it doesn't have the hardware to "become" a UHF card. It's like you are asking a credit card payment terminal to also become a credit card.

Didgitalpunk commented 2 months ago

the yrm is just a reader and a writer, it doesn't have the hardware to "become" a UHF card. It's like you are asking a credit card payment terminal to also become a credit card.

this. this is why some folks are talking about a dual CC1101 approach to making a custom reader/writer/emulator. CC1101 is a know chip that's already in use in the flipper itself, and the way UHF communications work is pretty well known, so it's just a matter of implementing it and writing the code for it

ARGOUA commented 2 months ago

Somebody was able to emulate tag but unfortunately they did not share source code. maybe this article will help somebody Simple Open-Source UHF RFID Tag Platform

zacharyweiss commented 2 months ago

this. this is why some folks are talking about a dual CC1101 approach to making a custom reader/writer/emulator. CC1101 is a know chip that's already in use in the flipper itself, and the way UHF communications work is pretty well known, so it's just a matter of implementing it and writing the code for it

The dual CC1101 is definitely a nifty approach. Tangentially: are traditional UHF readers all necessarily expecting a clock-locked response and/or a multi-step query & response process? Or would a "blind emulate" potentially work for a subset of readers, using just the single internal CC1101 and ignoring the reader's signal — sending out the EPC / other banks repeatedly into the void?

Didgitalpunk commented 2 months ago

Wouldn't work because the reader and the tag actually communicate, not just a here's power - here's data transaction.