WIP of MagSpoof for the Flipper Zero. Basic TX of saved files confirmed working against an MSR90 with an external H-bridge module mirroring Samy Kamkar's design. Sample files are included in resources.
RFID coil output weaker; able to be picked up/detected by more compact mag readers such as Square, but yet to have success with it being decoded/parsed properly. Additional investigation was made into alternate internal TX options (CC1101, ST25R3916, piezo); tentatively, RFID coil + speaker (LF + P config setting) results in the strongest internal TX tested to date but still weaker than a dedicated external module or an actual card swipe (and sounds like a dial-up modem from hell). For information on the state of internal TX &/or misc TODOs, known bugs, etc, confer NOTES.md.
Disclaimer: use responsibly, and at your own risk. I neither condone nor am sympathetic to malicious uses of my code. Please only use this with magstripe cards and mag readers you own — this is solely meant as a proof of concept for educational purposes. Similarly, if using internal TX: while in my testing, I've seen no reason to believe this could damage the RFID (or other) hardware, this is inherently driving the coil in ways it was not designed or intended for; I take no responsibility for fried/bricked Flippers.
For those desiring better TX than the internal RFID coil can offer, one can build the module below, consisting of an H-bridge, a capacitor, and a coil. Custom GPIO pin selection is a planned future feature.
This project interpolates work from Samy Kamkar's original MagSpoof project, Alexey D. (dunaevai135) & Alexandr Yaroshevich's Flipper hackathon project, and the Flipper team's LF RFID and SubGhz apps.
Many thanks to everyone who has helped in addition to those above, most notably:
- arha for bitmapping work, skunkworks testing, and innumerable suggestions/ideas/feedback (now a collaborator!)
- Zalán Kórósi (Z4urce) for an earlier app icon
- Salvatore Sanfilippo (antirez) for bitmapping suggestions and general C wisdom
- skotopes for RFID consultation
- Tiernan (NVX) + dlz for NFC consultation
- davethepirate for EE insight and acting as a sounding board
- cool4uma for their work on custom text_input scenes
- hummusec for testing of UART RX
- xMasterX and WillyJL for keeping the app updated across API changes while I was away!
- Everyone else I've had the pleasure of chatting with!
