ADI Pushing Cracked 125 kHz Access Control

Avatar
Brian Rhodes
•Published Oct 25, 2018 18:31 PM

Security distribution giant ADI commonly promotes access bundles featuring vulnerable and cracked 125 kHz card formats.  Even worse, they promote these kits as a 'hot deal' in email blasts:

The most confusing aspect of all is that there is no major cost difference in offering these products despite introducing major security risks. 

We examine the situation in this note, explain how easy it is to crack the systems using these cards and look at alternatives.

Hikvision's ******* ****** ***

********* ***** ******** ** * '*** deal' *****'* ******* ***** ** ********* ***'* 2-Door ****** ****** ********* * ***** ********** *** *** (cracked) *** *** '*********' *******:

*** *** **** ** ********* **** 25 ********** ***** *****, ** **** users *** ***** ***** *** ****** immediately **** ** ** *********.  

**** ****** *********'* ****** ********** ***** ** *** ******* ********** strengths, ********* '**** ********' ******** **** integrated ***** ****** *** ****** ****** support.

*******, *** *** ***** *********, ******* packaging *** ****** **** ***-********, ********** 125 *** ******* ***** *** ****** up ** **** ******** *****.

ADI's *** *** **** ******

*** ********** ***** *** *** ** boxed ****.

******** *** ********* ***** ********, ******* access ******* ******* **** ******* ***********, enclosures, ********, *** ******* *** * few ***** ** * *****-********* *** licensed ***.  *** ******** ** *** these **** ** **** *** ******* furnished **** *** ***, *** **.** MHz, *******.

** ************ *****, *** ***'* ********* from ****:

**** *********:

**** **********:

**** ******:

******:

****** ****** ***:

*** ******* ********:

**** **** *** *** ******* ** just ***** ********, *** ***** *** several ******.

** *** ** ***** *****, ****** more **** ** ****** ******* **** ADI ** ****** ** ******** *** install ***** ********** ****** ********.

Cracked *** *** **** ** ****

*** *** *********** **** **** *********** to ***** *** ***** ********** **** * ******, ********* ****** **** **** * cheap $** ****** *** **** ***** cards ** ****** ************ *** ************ copies ** ****.

*** ***** *****, **** *** **** **** ****** ******* **** **** $30 *** ****** **** ****** ****, **** *** ****** ***** *** how ******* * *** ***-***** ****** system *** ** ******* **********:

ADI ******** ******* ******* ***************

** **** ****** ***** ***, ***#* ******** *********** ** *** **, **** *** ******** ** ******* these ********** ***********, **** ******** ** ****** label ******** ****** ** *** ********* types ***** ***** ******-******* '********* *****' ****:   

**********, ***** *** ****** '**** *********, fastest ********' *** **** ******* ************* with **** ***-**** *******, **** ** not **** *** ****** ***** *** security *** ******** *** **** ********** of ***** ********.

Most **** **** **** ****** **.** ***

**** **** *********, *** *** ****** vendors ***** ***** ***** **** ********* ********* **.** *** ********* *********** ****** **********.

***** **** *** ** ***** *********** support******* ***/** **** **** ****** ******, ****** ********* ********* ******* ***** be **** *** ********* ** *** same ****** ** *** ******* *** kHz *****.

***** ***** **.** *** **** ********* reduce *** ***** ** ********** **** types *** **** ******* ********* **** ADI ********* ***** ********, ***** ***** encrypted, ****** ********* ***** *** ******* essentially ********** *** ***** ** *** kHz *******.

Not *********** **** **********
** *** ***** ** ****, *** much ***** ***** ** ***** *** kHz ***** ******* *** ***********, ******* with * **** ********** (**** ************ like ***) ** **** **** **% between *******, ********* **** **** ~$*.** per ****, *** **** ***** ****** within ******* ** **** *****.
*** *******, *** *** **.** *** iClass *** ** ****** ** *********** the **** ***** ** *** *** 125 *** ******** ****** ** ******* ******* **** ******:
*** * ******* ******-***** ****** ******, the **** ****** ** ***** **.** MHz ******* ** *** *** **** be **** **** $*** *** *** entire ****** *********** *** ********** ** 50-75 *****, *** * - ** readers.
ADI: **** ******** ***** *** ***
***** ***'* ******* **** ****** ******* cannot ** ******, ** ***** ** 2014's *** *** ****** ** ****** ******* than ***?, *** *********** ***** **** *** lead **** ** ******** * **** practical **** ** ****** ******* *** customers ***** ** ****** ******** ** stop ******* *** *** ********.
** **** *****, **** * ****** after *** ******** ****** *****, ***** is ******* * **** ** ******* nor **** ********** ** ***** **** risky *******.
Comments (31)
SD
Shannon Davis
•Oct 25, 2018
IPVMU Certified

* **** *** **** ********* *** could **** **** ***** *** ************* of * ********** **** ** ****. You *** *** ******** **** **** should ******* ** * **** ****** product *** **** ***** **** *** they ****** ***'* ****. *** *** drawback ******* ******* ** ****** *** due ** *** ******* **** ***** of *** **.** *** ********** ******** to *** *** ******. * ****** push *** ********* ** ****** *** to ***** **** ******* *** *********** but **** **** ***'* ****. ********* on *** **** * *** **, who ** ***** ***** ** ***** one ** ***** *****. 

(5)
(3)
Avatar
Brian Rhodes
•Oct 25, 2018
IPVMU Certified
In reply to Shannon Davis

****'* **** ********.  ** *** ******* with *** ***** ****, *** *'** be **** ** ******* *** ***** of ******* **** ****** **** **.** MHz ** *** **** **** ******* with.

** *** ****, ****'** ************ **** difference *** **** **** ********* ****** consider ******** ** ****** ************* ******* *** *** ****-***** ******* especially ******* *** **** **** ****** present * ****** '****** *********' ** exploit.

** ********, *********** ***** *** ** even *** *** ** ******* **** even *** *** ***********,***** ** ** **' ** **' feet.

(1)
JH
John Honovich
•Oct 25, 2018
IPVM
In reply to Shannon Davis

******* ********* *** ****** ***…

(1)
(3)
(4)
UI
Undisclosed Integrator #3
•Oct 26, 2018
In reply to Shannon Davis

********* ** *** **** * *** it, *** ** ***** ***** ** clone *** ** ***** *****.

* ***** ********** *** **** *** same **********.  ***** ** ** ****** for **** *** ** ****** *****-********** readers *** *** ****'* * ****** easy **** ** **** ** **** add *** *******.  *** *********** ********** are ********** *** ********* ************ *** larger *** ********* ******** **** *****.  I **** ******* ********* * ****** range ******* ** *** ****** **** IPVM ****** ** **** ********* *** easy ** ***** ** ** *********.  Has ****** *** *** ******* **** showing ******* **** *** ********** **** are?

****** *****'* **** ***** * **** point ** ****** ** ** ********* the ********* *******.  **** ** *** ******* mentioned ***** *** ******* ** **** doing ********* ***********.  *******, ***** *** a ***** *** *** ** ** I **** ** ****** ** *****, enable ********* ***** ** ******* ****** off, **** ** *** ***, ***.  The *** ******* ** **** * rarely **** ****** *** * **** no ******** **** ***** *** ** cards * **** *** ********* ******* are ** *** ***** ***** * need ****.

*** *** ******, * ***'* **** about *** *******.  * ** *** a ***** ****** *** ** *** commissioned.  **** ** *** ******* ******** credentials ********* ****** *** *** ***** revenue ***** ** * *****-**** ****** doesn't *** *** ***** ** ****.  I ** **** **** **, ** security *********, ****** ** ****** ***** reasonable ****** ** ******* *** ******* on ********* *****.

 

**** **** ********* ******* ****: **'* ADI, ** ****** *********?

(1)
UI
Undisclosed Integrator #5
•Oct 29, 2018
In reply to Undisclosed Integrator #3

*** ****** *** *** ******* **** showing ******* **** *** ********** **** are?

**** **** *****, **. * *****'* had *** **** ** ***** ****. I ** **** ** ******** ** in *** ****** **** * **** get **** ***** ****. * *** success *****. *** *** * ******, but ** ****'* ******* *** ******. I ******* ** ** ** **** once * ********** *** *******. * larger ***** ******* ******** ***** **** 125 ***  ** * ***** *******. We *** *** **** **** *** scanner ********** ** ****. ** ****** didn't **** ****** ******* *** **** was ** *** ***** **** ** the ****. **** ** ******, *** installation ******* ******* **** *** ** idea. **** ** ******** **** *** scary *********** * ***'* ******* ****** control.

*** ***** **** *** **** ** a ***** *** ****. * ******* someone's **** **** ***** ********* *** had **** *** ** ** ***** work. ** ****** **** ** *****. Now **** **** ****** ******* *** they *** ***** ***** *** *** for ***** ***********. *** ** ***** security ********* ***** ** *** **** out ** ***** **** **.  * told **** ****** ***'* ****** **** wanted ***** ****** ***** ********* ** the *****. * *** *** *** person * **** **** ******** **** what * *** *****. ***** *** no ****** *** ** ***** ***** system *** ******** ******* **** ****** to *** ******* **. **** ******* they ***** *** *****, ****** * don't ***** **** *** ******* * don't ******* ****** *** ****** *** credentials.

(1)
UI
Undisclosed Integrator #6
•Oct 29, 2018
In reply to Undisclosed Integrator #3

* **** ******** **** **** **** as * *******. * ******* ******** pool *** * ***** ********* **** the old ****** *** * ****** ** mass ******* ***** *** ***** *********.

 

(1)
(1)
RM
Ryan McGovern
•Oct 29, 2018
In reply to Undisclosed Integrator #6

**** ** ** ******* ** ****** control ***** **** *** *********** ******* of ********. * *** **** ** cases ***** *** *** **** **** over *** ***** ********* ** *** controlled **** ** *** **** *** enough.

SD
Shannon Davis
•Oct 25, 2018
IPVMU Certified

*** **** ***** ** **** ***** in *** ********** ******* ** ****. If *** *** ***** ***** **** for ***********, ********** *******, **** *** should *** * ***** **** **** makes **** *** ********. **** **** help. ** ********* ** *** ********* on *** ***** ***** *** ** maybe ****** **% ** *** ****. Oh *** * **** **** *** HID ********* ******* *** *** ***** to ** **** ******** ***. **** is **** ***** **** * ****** would ******** *** *** *** ** had * ********* **** *********** *** deluge *** ****** **** ***** ***** other ***. ******** ** *** ** shorted *** *** ******. *** ***** silicone *** ****** ** *** **** but **** ***** *** * ***** looking ******* ***** * ******* **** or ***. * **** *** * customer *** *** *** *** ****** you *** ******* *** **** ** your **** ** ** **** **** the ***** ** **** **** **** the ****** *** ****.

(2)
RM
Ryan McGovern
•Oct 25, 2018

****** *** ************ **** *****. *** company *** **** ********* ********** ********* systems *** **** ** ***** ** solve *** ******* ** ************ *** duplication. ** ****** ***** ******* ** the ******** ** ********** ************. * would ***** ***** *** ** *** customer **** *** ****** ****** *** the **** **** **** **** ********* a ********** ****** ** ** **** the ***** ****** **********. * ********* a ******* ****** * ***** *** and ***** **** **** *** ** is ****. *** **** ***** * would ***** *** ** **** ** identity *****. **** ******* ********** **** access **** **** ****** **** ****** level *** ** *** ***** ***** of *** ******* ******** *** **** of *** ****** ********* *** **** is ***. 

(2)
Avatar
Brian Rhodes
•Oct 25, 2018
IPVMU Certified
In reply to Ryan McGovern

****, * *** ****** *** *** confusion ** ******/**********/*********** ********** ******* **** *** ********* *** ****** ** exploit, *** *** *** *** ****** system *** ** ******** **** ** eBay *** ***** $**.

(1)
UD
Undisclosed Distributor #1
•Oct 25, 2018

**** **** *** ********** ** ******** 125khz ***** **** ********/********* ** ****** creds.  ******* **** **** *****-****** ******* would **** *** ** *** ** difficult ** ********** ******** ** ***** over *** ****** ** **.*****

(3)
(1)
(1)
Avatar
Brian Rhodes
•Oct 25, 2018
IPVMU Certified
In reply to Undisclosed Distributor #1

****** *** *** *******!

* **** ****** ** **** *** Banks *** ***** ********* ********* **** migrated **** **** *********** ** ******** 'Chip & ***' ***** **** *** much **** ********* **** *** ********* types **** ****** ******.

** **** *****, **** ***** (********* anti-spendthrifts) ******* *** ******** ***** *** high *** ****** *** *****.

*** *********** **** ********** ** * typical ********** ****** ****** ** **** smaller.  **** **** *** **** ** high ******? 

(1)
UI
Undisclosed Integrator #3
•Oct 26, 2018
In reply to Brian Rhodes

** **** *****, **** ***** (********* anti-spendthrifts) ******* *** ******** ***** *** high *** ****** *** *****.

*** *********** **** ********** ** * typical ********** ****** ****** ** **** smaller. **** **** *** **** ** high ******?

* **** ** ****** ** ** all ******** ** * **** *********** they *********.  **** ***** **** ***** comes ** ****:

* *** *** ***** ** ** company ****** ********* ********* ** ** mph. *** **** ************ ***** **. The *** ******* *** ***** **** everyone ******* ******. ***, ****** ** initiate * ******? **** *** ****** of ******** ** *** *****, *, multiply ** *** ******** **** ** failure, *, ******** ** *** ******* out-of-court **********, *. * ***** * times * ****** *. ** * is **** **** *** **** ** a ******, ** ***'* ** ***.

(2)
Avatar
Bryan Buenaventura
•Oct 25, 2018
www.dynamic-certified.org

****** **** ********* ** *** *******...

****'* *** ****** **** ***** ******* just ****** * **** ***: *****://***.**********.***/****/**/****-*****-*-****-******/

***** **% ******* ** ****** ***'* version.

(3)
UM
Undisclosed Manufacturer #2
•Oct 26, 2018

*** ******* ******** ** ******** *** can ** ******** *** $** ** 5 *******. *****’* ****** **** *** or ***, *********, **** ** *** feq. *** ** *** ****** ******.

(1)
Avatar
Brian Rhodes
•Oct 26, 2018
IPVMU Certified
In reply to Undisclosed Manufacturer #2

********* ****** **** ***** ****** ************ of *** '** *** ******' ******.  125 *** ******* ** **** **** grievous ******* ** *** ** **** without ********* ************ ** *** *** done ******* **** *********.

**'** *** ********* ******* ** ***, and **** ***** **** ***** ** rectify ***** **********, *** **** ** OSDP ** ****, *** *** **** tags *** ** ******.

(3)
Lv
Louis van Daalen
•Oct 26, 2018

****** ** *** ********* ********** ** all *****. ** ******* ** *** this ********** ** *******. ***** ************ - * ***** ******* ************ - and **** ** **** *****, *** launched ***** *-****** ******* * **** ago ********* ****-******* ***********. *** ***** website http://www.impro.net/box.

******* * *** ** **** **** the ********* **** ******* **** *** grant *** ****** **** *** *** these *** *** ******** 

Avatar
Brian Rhodes
•Oct 26, 2018
IPVMU Certified
In reply to Louis van Daalen

** ******* **** ***** *** *** credentials *** ******* *********'* ****** *** *********** *******. 

**** ****** *** *** ***, *** they *** *********** *** ***'* **** with *** *******-******* ******* ** *** kits *****, *** **** **** **** Impro.

(2)
Avatar
John Bazyk
•Oct 26, 2018
Command Corporation • IPVMU Certified

**** ** *** ** *** **** reasons ** ****** ******* **** **** pin. *****’* ****** **** ***** **’** using, **** ** **** ** ******* our ********* ** ***. ** ****** what ********** *** *** * **** can ** ******. **’** ***** ********* are **** **** ******** ** **** up **** ***** **** *** *** when ***** ** **** ** ** coworker. *’* *** **** *** **** + *** ***’* **** ******. 

(1)
(1)
Lv
Louis van Daalen
•Oct 26, 2018
In reply to John Bazyk

** ** *** *** *** *** of **** + *** ** **** systems. ******* ********* ***** ****+***  **** the *** ** *** ********* ** the **** ** ***, *.*. ******/******** hours: ****. ***** ***** ****+***. 

(1)
UI
Undisclosed Integrator #3
•Oct 26, 2018
In reply to John Bazyk

**** ** *** ** *** **** reasons ** ****** ******* **** **** pin.

* **** ******* ***** (** ************) the **** **** **** **.***** ***********.  IMO ***-****** ** *** *** ** go.  *** **** ** **** ****** the *** *********** *** *** **** stolen ** **** **** ******.

JH
Jay Hobdy
•Oct 26, 2018
IPVMU Certified

** ** **** ** ** **** the ***** **** **** *** ** to ***** ** ***** *** ********* kits **** ****** *******?

 

****** **** *** ******* *** *** to ***** ********?

 

****** **** *** ******* ******* *** to ********?

 

****** **** *** ******* **** *** to ******* ************?

 

*** **** ***** ** ** *** on.

 

 

JH
John Honovich
•Oct 26, 2018
IPVM
In reply to Jay Hobdy

**** *** ***** **** **** *** is ** ***** ** ***** *** promoting **** **** ****** *******?

***, **** ** *** *****.

*** *** ******* ***** ***** **** their ***** ********** ****** **** **** fixed, ** ***** *** *** ******** known ****.

** *** ********, *** *** ************* has *** **** *****. ********** *** would *** ******** ** **** ** IP ****** **** * ******** ***** backdoor, ***/**? ** **, *** ***** they ******** ** **** ** ****** control ********** **** ** ******* *** unfix(able)? 

JH
Jay Hobdy
•Oct 28, 2018
IPVMU Certified
In reply to John Honovich

** ***** ******* ** *** **** to ** ******* **.

 

*** *** *** ******** *** ***** on ***?

 

** * ******** *********, *** ********* several ******** ** *** *** ***** security ******, *** ******* ******** ** how *** *** ******* *** ***** on ****. ***** **** *** *** criticize *** *** ******* * ****** product. *** *** *****?

 

* ** **** *** *** **** a **** ** ****** ***** ****. Do *** **** *** **** ** is ** ****** * ************ ******? Shine * ***** **** **, **** a ****, **** ** **** ****** and ***** **, ***. **** **** mean ** *******'* **** *******?

 

** * **** *** ** ****** if ******* *** *** ***** ******. For ****, **'* *** **** *******.

 

** ** ******, ** ***** * small **** **** ******* *******. *** front **** ** * ****** ****, and *** ***** *** **** ****** have *** * *** **** *** years. **** ** ****** *** ** the ******** *****. *** ** * install ** ****** ******* ****** **** 125MHz *******, *** ****** ***** ***** they ***** *** ********** ** * tenant, ** * ***** ***? 

 

*** **** ****** *** ***'* *** write ** ******* ******* ***, **** and *** *** ***** **** ************* for **** ****** * ****** ******...

U
Undisclosed #4
•Oct 28, 2018
IPVMU Certified
In reply to Jay Hobdy

*** **** ****** *** ***'* *** write ** ******* ******* ***, **** and *** *** ***** **** ************* for **** ****** * ****** ******...

****, *** **************** ** ******** ******** ** ** **** **** ** “why ***’* *** ***** *** **** office *** ********* ****** ******* *** delivery”

 

JH
John Honovich
•Oct 28, 2018
IPVM
In reply to Jay Hobdy

***, **** ********, ******.

** *** **** *** **** ** is ** ****** * ************ ******? Shine * ***** **** **, **** * mask

*** *** ***** **** ***** ** it ***** **** *** ******. *** can ******* **** ****** ** ** drops **** * ****. *** *** blow ** **** ************ ****** ** you ***** ** **** * ******.

*** ******** **** **, **** ******** of * ******* ****** * ************ and ****** ** *********** ***?

*** ********** ******* ******** *** *** cards *** *** ******** ** **** gave ** **** *** ****** ** a ****** ** **** *** ************ and ******* ** *** ******** / seller. *** *** *********** **** ******** (originally) ** ** ******. ** ** now *********. *******, **** *** ************ and ******* ******** ** **** ** without ****** ** *** ****** **** warning ** *** ******.

*** **** ****** *** ***'* *** write ** ******* ******* ***, **** and *** *** ***** **** ************* for **** ****** * ****** ******...

**** *****. *** ** ****.

**** ** *** *****? ** *** think *** ** **. ****** ******** to **** ******* *** *** *****?

JH
Jay Hobdy
•Oct 28, 2018
IPVMU Certified
In reply to John Honovich

* ***** **** **** ********** ***** be ****. * ***** ***** **** be * *** *** *** *****, as *** ******* ******** ** ** to **.**.

 

* ******* *** **** ** **** is **** ***. ** * ** to * ******, ***** **** ******** be ** ***** ********* ** **** is *** ********, *** **** **** about ****, * ***** **** **** do ********. * ***** *** ** it. ****** ****** ** *** **** an ********* ********* *** **** ****** *******.

 

*** ** ********** ****** **** * school, *************/************ ******** *** *** **** bigger ********.

 

****** **** ***** ** *******? ****. Maybe **** *** ************'* ************** **** only ** **** ** ****** ********, and *** *** *** ********.

Avatar
Brian Rhodes
•Nov 05, 2018
IPVMU Certified
In reply to Jay Hobdy

** ********** *** *** **** ******* in: ***: **** ******* ******* *** *** Credentials

SB
Steven Burman
•Oct 29, 2018

**** ****** / ******. *** ****-**************.

U
Undisclosed #7
•Oct 30, 2018

* *** **** ** ******* *** client ********* *** *** ****.  ** is *****.

(1)
JP
Jamie Pugh
•Oct 30, 2018

**'** ***** ***** **** ***** ******* an ******* ***** ** ****** ******* at *** (*** ***** ** **********) who ***** * ******* **** **** 10 ***** ***. ** **** **** transitioning **** **** ****** *** ******* years. *** **** *** **** ************ is ********** ** *** **** ** only ***** ***** **** ******. ** existing ******* ** **** ******** **** and **** *** ************* ** **** out ** **** ******* *** ******* or ** ***** ******. ** *** change *** *** ******* ** *** multiclass *** *** ******* ***** ******* while ******* **.** *********** ** ******** new.

** **** ****** **********, ***** ****** but ** **** ***** *** ****** will ** *******. * ******** **** Wiegand ***** ***** **** *** ******** and *** **** ** ***** *** still ***** ****? * ***** ******** for ** ** ****** *** **** is * *** *******, ********** ** Toronto. ** ******** ** ****** ******* over *** *** ****** ** ********** there **** **** ******* ** ****** renting *** *** ********'* ***** ****** on *** *** *** ******* "******* club ***********" ***** ****** *** *** credentials.

* ***** **** ********* *** *** are ***** * *** *** ***** for ******** *** ** ******* ** the **** *** *** ** ** advise **** ******* *** **** ***************. If **** ***'*/***'* **** **** ****** then ** ** **.

** *** ******* *** *** ******* insecure ******** * ***** ****'* * bit ** * *****. **** **** boxes ** **** *****. *** ******** are ***** *** **'* ** ** the ****** ****** *** ******* ** understand *** *******'* *********** *** ** determine ** **'* *********** *** *** application. ** **** ** *** *** experience *** ********* ** ** **** to ** *** ***** ***** *** the ********. ********* *** *********** ** do **** ** ***********, *** ** my ****, ***********. *** ***** ** the ***** (****, ****** *** *****) not ****** *********. *** ************ ****** have ********* ********* ** ****** *** install *** ****** ** ********** **** the ********'* ************. *** **** *** "professionals"?

******: **** ******* *** **** ***** to *** *** **********:*** ************ ****** **** ********* ********* To ****** *** ******* *** ****** In ********** **** *** ********'* ************. Are **** *** "*************"?

(2)
(1)