Skip to content
Mo Eltahir
العربية
Menu

All work

RF-LAB

A web app UI for hardware-based physical penetration testing tools, built as my BSc thesis.

Role
Author (BSc thesis)
Organisation
University of Debrecen
Period
Dec 2020 – May 2021
Location
Debrecen, Hungary

Highlights

  • Research into the security and privacy weaknesses of RFID in physical access control
  • A Flask web app with rooms, cards and an admin panel, a Tailwind front end and SQLite/PostgreSQL
  • A UI for a Raspberry Pi 3 B+, a Proxmark3 RDV and a Chameleon Mini
  • Lets a team of physical penetration testers share and manage cloned credentials safely

Physical penetration testers clone credentials such as badges and cards during engagements, and they need a safe way to share and manage them across a team. RF-LAB is my answer, and my BSc thesis at the University of Debrecen, supervised by Dr. Adamkó Attila.

It’s a Flask web app that acts as the interface for the hardware: a Raspberry Pi 3 B+, a Proxmark3 RDV and a Chameleon Mini. The thesis is public in the university repository.