"The portable toolset is designed to search for, identify, and demonstrate weaknesses in RFID and NFC systems in the field."
The ProxmarkPro is a portable test instrument designed to quickly discover, identify, and demonstrate weaknesses in popular RFID and NFC systems in the field.
The ProxmarkPro is NOT another development kit. It has been designed from the ground up to meet the demanding requirements of Red Teamers and security research professionals.
The ProxmarkPro is intended to be used in the field or at a desk with no client connection or setup, just turn it on and start using it. The antenna can be easily and quickly swapped out to accommodate a wide variety of systems.
The ProxmarkPro is perfect for quickly, easily, and powerfully demonstrating vulnerabilities and risk to non-technical decision makers and stakeholders.
This latest addition to the Proxmark line has several significant upgrades and improvements over previous versions, including:
The ProxmarkPro represents the culmination of over three years of active research and development, incorporating contributions from a global team of experts and feedback from Red Teamers.
Identify low- and high-frequency tags with just a few clicks. Currently supports HID, EM4100, Mifare Ultralight, Classic 1K, and Classic 4K. Support for more tags is coming soon.
Read a tag and then save it to the SD card. Then load saved tags from the SD card. Currently supports HID, EM4100, and Mifare Ultralight.
From tag data saved on the SD card, the ProxmarkPro can make a physical clone of the tag by writing to a T5577 tag. Currently supports HID and EM4100, with more coming soon.
Simulate a saved tag to another reader. Currently supports HID, EM4100, and Mifare Ultralight.
A brute-force attack can be done by trying to guess multiple tag UID’s similar to a known working tag UID to gain access. You can also adjust the brute-force parameters like tag UID, facility code, format length, and replay rate. This functionality currently supports HID tags.
The ProxmarkPro has some notable upgrades over other Proxmark models. It features an LCD, more powerful FPGA (5x) and ADC, navigation switch, built-in Lithium-ion battery, and microSD card slot.
If you’ve used other Proxmark models, the ProxmarkPro will on one hand be familiar, and on the other hand offer a lot of new funcitonality not previously available. The ProxmarkPro is the only model that has an unchained mode, but, like earlier models, it can also still be controlled with PC client software over USB. However, as we add more features to the unchained mode, the hope is the client will be something you only occasionally need to use.
|FPGA||Spartan 3||Spartan 2||Spartan 2|
|Interface||LCD + Onscreen Menu||4x LED||8x LED|
|USB Device Mode||✓||✓||✓|
|Long Range Antennas||✓||✓||✓|
|HF Read Range||Up to 100 mm||Up to 100 mm||Up to 85 mm|
|HF Long Range||N/A||N/A||100 - 120 mm|
|LF Read Range||Up to 135 mm||Up to 100 mm||Up to 70 mm|
|ProxmarkPro||Phone + NFC Tools||ACR122U||HID OMNIKEY 5427 CK||ChameleonMini|
|Read Tag UID||✓||✓||✓||✓||✓|
|Write Tag UID||✓||✓||✓||✓|
|Clone Tag UID||✓||✓|
|Emulate Tag UID||✓||✓||✓|
|Read blocks and sectors||✓||✓||✓||✓|
|Write to blocks and sectors||✓|
|13.56 MHz Cards||✓||✓||✓||✓||✓|
|125 kHz Cards||✓||✓|
|Price||$400||Price of phone + free app||$40 - $50||$100||$100 - $150|
* Snoop: Eavesdrop communication between reader and tag
Each ProxmarkPro kit comes with:
Above: The kit includes a USB cable, low- and high-frequency antennas, the main unit with battery and LCD screen, and a 16 GB microSD card. The kit also includes a carrying case and low- and high-frequency tag bundles (see below).
Above: Carrying case for the ProxmarkPro and its accessories.
Above: Low-frequency antenna and sample tags (left), high-frequency antenna and sample tags (right), and ProxmarkPro main unit (center).
Above: Low-frequency antenna (left) and high-frequency antenna (right).
The ProxmarkPro Dual Band Antenna includes one High Frequency (HF) and Low Frequency (LF) inductor along with tuning circuitry matched to the ProxmarkPro. It represents a compromise between read range and the convenience of not having to swap antennas. Using the Dual Band Antenna, there is no need to swap between LF and HF antennas in order to read tags targeting the LF and HF RFID bands.
The antenna is comprised of an on-board PCB trace HF antenna and a wound-wire LF antenna. The LF antenna is connected to the PCB via a JST 2-Pin connector to the board. The whole antenna is wrapped in black shrink wrap to keep everything solid in the field.
|High Frequency||Low Frequency||Dual|
|HID||N/A||Up to 135 mm||Up to 85 mm|
|EM4100||N/A||Up to 120 mm||Up to 85 mm|
|T5577||N/A||Up to 120 mm||Up to 85 mm|
|Mifare Ultralight||Up to 100 mm||N/A||Up to 80 mm|
|Mifare 1K||Up to 95 mm||N/A||Up to 75 mm|
|Mifare 4K||Up to 100 mm||N/A||Up to 80 mm|
All manufacturers and suppliers have been selected. We plan to start production upon successful funding of our project. Manufacturing will take about two to three months to complete.
All ProxmarkPro units will be delivered to Crowd Supply’s warehouse for final distribution to backers worldwide. For more information, please see this page about ordering, paying, and shipping.
There are very few risks and challenges with this project, as the product is complete and all the manufacturers are lined up and ready to go. One challenges we may face is working with some of our new manufacturers - we hope to have no issues, but with new manufacturers some issues may occur.
Rysc Corp stands behind our products and plans to help support them as long as we are around. You can find documentation about our products at https://ryscc.com/.