I have selected fifteen devices with which you can hack anything from physical devices to contactless cards.
This does not include more ordinary tools like screwdrivers and soldering irons - it is easier to choose them according to your taste. I hope you find something interesting on this list.
To begin with, remember that this article was written for educational purposes. We are not responsible for any possible harm caused by the materials of this article.
Price: from 35 dollars Officialsite - https://www.raspberrypi.org/products/raspberry-pi-4-model-b/
Raspberry Pi mini computers from the latest lineup run on quad-core ARM chips, are equipped with 1, 2 or 4 GB of RAM, support Wi-Fi and Bluetooth communication, and have two micro HDMI ports and four USB ports. They can almost replace an inexpensive office desktop, are often used to create media centers and home servers, as well as in a host of different projects - from musical instruments to robots. But we are interested in something else: Raspberry can become a portable system for hacking. And there are a great many ready-made cases, displays, batteries and other body kit for them. Malina is definitely a must-have.
Price: 100-300 euros Page on Kickstarter - https://www.kickstarter.com/projects/1408815241/proxmark3-rdv-40
One of the best assistants for carrying out attacks on contactless cards was and remains a device called the Proxmark3. It is available in several versions:
RDV1 is an old version of the device, rarely found on the market and does not have much advantages.
RDV2 - The advantage of this version is the presence of an external antenna connector.
RDV3 is the most popular (and cheapest) model on the market, Chinese clones are available with the same functions, but not always stable operation.
RDV4 is the latest version of Proxmark, which also includes hardware and software for working with smart cards. The most expensive model on the list.
Proxmark will replace all similar devices for you, but it is worth noting that if you are going to break only Mifare cards, then it is better to look towards Chameleon - https://lab401.com/products/chameleon-mini-reve-rebooted?variant=50258105543 Mini .
Price: $ 150 Official site - http://apimote.com/
If you've come across a smart home, you've probably heard about the ZigBee protocol. It is already many years old, but there are not so many ready-made devices for hacking networks. Among them is the APImote board, which works in conjunction with the killerbee framework. The device comes ready-made, but for those who like to solder, the developers have posted KiCad diagrams - https://github.com/riverloopsec/apimote on GitHub.
Price: $ 100 Official site - http://www.moorc.com/Products/E_MATE_X/2018/0510/443.html
The E-Mate X set will be a useful gift for those who often work with embedded systems or smartphones. It consists of thirteen adapters from non-volatile memory chips in a BGA package to various programmers and even to an SD-input (which in some cases allows reading memory without a programmer). The cost of analogs with only one of the adapters can exceed the cost of the E-Mate X twice, or even more.
Price: $ 60 Official site - https://samy.pl/magspoof/
Many people face the same problem when working with magnetic cards: a reader for three-lane cards with the ability to write sometimes costs five times more than the same reader without the ability to write. It is for such tasks that the MagSpoof board was developed, on which you can write data from three magnetic stripes and spoof them. Thus, the device replaces the real card. And in conjunction with a magnetic card reader, you will save half the money and get a full-fledged device for hacking the access or payment system.
Price: $ 120 Official website - http://mg.lol/blog/omg-cable/
The O.MG cable became famous mainly due to the presentation of its developers at DEFCON 2019. This cable is wired with a full-fledged Rubber Ducky with Wi-Fi, which allows you to remotely enter keyboard commands into a connected device. And the main plus of O.MG is that its appearance is indistinguishable from a regular charging cable. There are several options: Type-C, micro-USB, and Lightning.
Price: 60-150 dollars Official site - https://www.dreamsourcelab.com/
A logic analyzer helps debug digital circuits. And the analyzers of the DSLogic series have established themselves as one of the best in terms of price and quality. Moreover, unlike Saleae products, they support open source projects such as PulseView. There are three DSLogic models available on the official website: Plus, U3Pro16 and U3Pro32. And if you are fond of soldering, then you can search DSLogic Basic on AliExpress. This model is no different from DSLogic Plus, apart from lower price and storage capacity. By the way, there will be an additional challenge if you want to upgrade.
Price: $ 85 Official site - http://goodfet.sourceforge.net/hardware/facedancer21/
FaceDancer21 device is a must-have tool for a payment terminal cracker.
With it, you can do the following things:
Emulate different USB devices. You can, for example, create a device with a specific ID and bypass the list of allowed connected devices.
Determine what types of devices the USB port supports. Useful when working with ATMs and wireless chargers (in case wireless charging is a small computer port).
Fuzz: Convenient for finding 0day in USB drivers.
Interact over USB using a Python library.
Due to the fact that the board is open, its price varies depending on the greed of the manufacturer.
Price: $ 100 Official site - https://greatscottgadgets.com/yardstickone/
If you have tried to unlock your car by repeating the unlock signal, you will probably appreciate this device. The Yard Stick One allows you to send and receive traffic on popular frequencies (up to 1 GHz). Its distinguishing feature is the use of the CC1111 chip, which allows hardware demodulation or modulation of the signal, which improves the quality of reception and transmission. To work with the Yard Stick, you need to install the free RFCat utility.
Price: 180/250 dollars Official site - https://nfckill.com/
Few can now be surprised by devices for cracking contactless cards. But the NFC Kill device will definitely interest you: first of all, it is intended for fuzzing testing of contactless reading systems. And additional functions allow you to disable both the readers and the contactless cards themselves. The device operates at three frequencies: Low Frequency (125-134 kHz), High Frequency (13.56 MHz) and Ultra High Frequency (850-930 MHz). It comes in two versions: Standard and Professional. The difference between them is the ability to run tests without physically interacting with the device.
Price: $ 100
Most likely, you are already familiar with the Rubber Ducky - a device that emulates a keyboard and automatically enters malicious commands into the victim's computer. The Bash Bunny is a more sophisticated HID attack device. Besides the keyboard, it can emulate any serial device, file storage, and USB to Ethernet adapters.
Price: 75 euros Official website - https://hydrabus.com/
HydraBus was originally designed as a complete replacement for the outdated BusPirate board.
Here is a list of the main advantages of the HydraBus:
provides a full-fledged user interface for working with popular hardware interfaces (I2C, SPI, UART, 1-3-wire, JTAG / SWD);
HydraBus can be used in conjunction with PulseView - https://sigrok.org/wiki/PulseView for logic analyzer mode;
there is a Python library that makes it easier to use;
there is a microSD slot for saving information on the go.
The fee is 40–75 euros. Additionally, for 110 euros, you can buy a HydraNFC module for working with contactless cards or an open HydraLINCAN - https://github.com/smillier/HydraLINCAN card for working with a CAN bus.
Price: $ 65-100 Official site - http://opticspy.org/
Devices like routers often transmit a lot of valuable information by flashing LEDs, especially when turned on. It happens that such LEDs are connected to a data line, for example, to the TX pin of the UART bus. To receive information from this data transmission channel without soldering and expensive logic analyzers, a board called OpticSpy was developed. To work, you will need to install a Python library, connect OpticSpy to a computer via USB and bring its photodiode to a light source. You can watch the demo on YouTube .
Price: $ 35 Official site - https://hunter.electroniccats.com/
In 2019, an interesting device appeared on the market - the Hunter Cat. It was developed to find banking and other skimmers. Its essence is simple: you insert it into the card collector, take it out and look at the LED. If it glows green, then the skimmer was not detected, otherwise it is better not to use this ATM. Hunter Cat is slightly larger than a credit card and costs about $ 35.
Price: $ 18 Official site - https://www.nordicsemi.com/Software-and-tools/Development-Kits/nRF52840-Dongle
Well, at the end of the list - USB-dongle nRF52840. He has a lot of opportunities, among which two are worth highlighting. First, you can reflash it and get a complete Bluetooth Low Energy sniffer with a nice Wireshark plugin. Secondly, using the open project LOGITacker, you can turn this dongle into a device for hacking the wireless peripherals of your computer: mouse, keyboard and other things. The cost of the device starts at $ 18, but Chinese clones can be found on AliExpress for less.