The Tick – The Next Evolution in RFID Security Testing!

The Tick  is the next evolution in covert access control system implants, designed by Jakub Kramarz, our Senior IT Security Consultant, to be seamlessly placed behind card readers to intercept, log, and replay access credentials transmitted over the wires. It is compatible with a wide (and still growing!) range of PACS systems, providing invaluable to red teamers insights into facility (in)security. 

The major differences, compared to the previously available interception tools, are: 

• Power supply voltage tolerance compatible with 24V long-range readers, 

• Enhanced hardware and operational fault tolerance,  

• Inclusion of both WiFi (like in ESPKey) and BLE (like in BLEKey) interfaces thanks to ESP32C3 SoC, 

• Support for not only Wiegand, but also clock&data-based protocols (e.g. Magstripe), 

• Hardware prepared for OSDP support in the upcoming software release, 

• Embedded JTAG interface for easier firmware development. 

Hardware License

The device has been released to the public as free and open-source hardware and software under CERN Open Hardware License and GNU General Public License in the following GitHub repository: https://github.com/jkramarz/TheTick

Field guide for Red Team operators

For additional information on the device operations and real-life tips for use during physical security assessments, we invite you to refer to our field guide for Red Team operators:

By use of relatively large components, hand-soldering friendly footprints and a ready-made module, it is prepared for DIY fabrication. If you need just a few PCBs, we invite you to contact the author on LinkedIn.

Connect with the author on LinkedIn!

Jakub Kramarz Senior IT Security Consultant