NFC-MIFARE-CRACKCredential Access

Mifare Classic Key Recovery

Crypto-1 cipher broken in 2008 — attack the nonce reuse / key-recovery via mfoc / mfcuk; clones to a 'magic card' in seconds.

§ Where this technique fits

NFC-MIFARE-CRACK is catalogued under the Credential Access tactic of the offensive-security kill-chain. It appears in 1 approved dossier in the registry, typically at step 3 on average.

§ Dossiers chaining this technique

Mifare Classic crack → cloned hotel key
Many hotel / corporate door systems still use Mifare Classic. Capture nonces during normal use, recover the Crypto-1 key with mfoc / mfcuk, write to a 'magic UID' card — full access to the property.
step 3 / 5

§ What commonly comes next

01
RFID / Badge Cloning
SE-RFID-CLONE · Initial Access
seen 1×

§ Where this technique fits

§ Dossiers chaining this technique

Mifare Classic crack → cloned hotel key

§ What commonly comes next