Live 3 daysIntermediate Kit included

Red Team OTA: Physical Intrusion Systems

Get into premises stealthily. Three days on the current attacks against RFID, NFC, Bluetooth LE, nRF and sub-GHz systems you meet on pentest and Red Team engagements, so you can tackle access control and the radio links behind it.

You will leave able to
  • Identify and decode RFID and NFC access technologies
  • Crack MIFARE Classic, Ultralight and DESFire
  • Attack Bluetooth LE with MITM, injection and secured cases
  • Turn nRF devices into bugs and sniff keystrokes
  • Capture, replay and forge sub-GHz remotes and garage doors
  • Apply Red Team tricks for stealth
Who it is for
  • Red teamers and physical intrusion specialists
  • Pentesters covering access control
  • Security engineers on badge and building systems

Four parts, badge to garage door.

RFID and NFC, then Bluetooth LE, then nRF, then sub-GHz remotes.

Part 1

RFID and NFC

LF and HF targetsMIFARE Classic crackingUltralight and DESFireICopy-X
Part 2

Bluetooth LE

Association and MITMInjectionSecured casesRolling-code hookingBT5 challenges
Part 3

nRF

Capturing and analysing trafficSniffing and injecting keystrokesReusing AES keys
Part 4

Garage door remotes

Identifying a signalDemodulating and decodingReplay and attacks

What every attendee takes home.

A complete RF kit with real targets, kept by the attendee.

RF kit with targets
Proxmark3 standard kit, Evil Crow RF, garage door and RFID targets
Slides and scripts
Full deck and the tools used in class
Captures
Cleared for teaching

Prerequisites.

A laptop that can keep up

Linux recommended

Linux administration

Required

Programming basics

Python, C/C++ or Rust is a plus

Your trainer.

Sébastien Dudek
Sébastien Dudek
Founder, trainer since 2009, author of RF Swift

Published research on 5G security, Open RAN, baseband fuzzing, interception and mapping, and power-line communication in electric vehicles and charging stations. Practical work across Wi-Fi, RFID and other wireless systems.

Publications →

Current Status

Not Enrolled

Price

Closed

Get Started

Run it privately for your team.

Quoted per group, not per seat, and the content adapts to your stack. Remote live, on your site, or at our offices near Paris.

Request a quote +33 1 73 13 82 77 contact@penthertz.com