Forensicsrfidtagsdecodereaderhardware

rfdump

RFDump is a tool to decode RFID tags and display their meta information such as tag ID, type, and manufacturer. It allows viewing and modifying user data memory using hex or ASCII editors and demonstrates RFID abuse potential via a cookie feature.

Description

RFDump detects RFID tags and shows their meta information including Tag ID, Tag Type, manufacturer, and more. The user data memory of a tag can be displayed and modified using either a hex or an ASCII editor, providing hands-on interaction with tag contents.

In addition, the integrated cookie feature illustrates how companies can easily abuse RFID technology to track and spy on customers, highlighting privacy risks. RFDump is designed to work specifically with the ACG Multi-Tag Reader or similar card reader hardware.

This tool is valuable for security researchers, pentesters, and forensics analysts investigating RFID-based systems or potential tracking mechanisms in physical security assessments.

How It Works

RFDump interfaces with RFID card reader hardware like the ACG Multi-Tag Reader via a serial port (e.g., /dev/ttyS?). It reads tag data, decodes protocols to extract meta information (tag ID, type, manufacturer), and provides editors for user data manipulation. The cookie feature simulates hidden tracking data embedding, demonstrating RFID abuse techniques through protocol-level interactions.

Installation

bash
sudo apt install rfdump

Flags

-hShow summary of options.
-pspecify port to use
--setupreadersetup the card reader
--helpShow summary of options.

Examples

Display the manual page for rfdump
man rfdump
Detect RFID tags using specified serial port /dev/ttyS0
rfdump -p /dev/ttyS0
Setup card reader on serial port /dev/ttyS1 and run rfdump
rfdump -p /dev/ttyS1 --setupreader
Setup reader and process or save to specified XML file
rfdump --setupreader file.xml
Use wildcard serial port and output to XML file
rfdump -p /dev/ttyS? file.xml
Run rfdump with default configuration to detect tags
rfdump
Show summary of available options
rfdump -h
Updated 2026-04-16kali.org ↗