How the technologies differ
Low-frequency vs high-frequency, and why that decides the whole approach.
← Store · // cardsz
Cardsz
A comprehensive, hands-on guide to assessing RFID and NFC access control with the Proxmark3 — the methodology behind the badge-cloning half of a physical engagement. This is learning material, not software.
from $149guide & updates
⚠ Education & authorized research onlyThis is a written guide for learning and authorized testing. Cloning cards you do not own or lack written permission to test is illegal in most jurisdictions.
// what it is
What it is
Cardsz is written learning material — a field methodology, not a tool you install. It walks through how RFID and NFC access-control cards actually work and how they are assessed with a Proxmark3, from reading and identifying a card to the specific attack path for each technology.
It covers Mifare Classic, HID Prox, EM4100, iCLASS, Mifare Ultralight, NTAG and DESFire, and — just as importantly — where cloning does not work: EMV payment cards use dynamic cryptographic authentication and are explicitly out of scope.
// what you'll learn
What you’ll learn
The Proxmark3 workflow
Reading, identifying and working a card end to end with real commands.
Mifare Classic
The classic key-recovery and cloning methodology, step by step.
HID Prox & EM4100
Low-frequency access badges: how they are read and reproduced.
iCLASS, NTAG & DESFire
Higher-security technologies and what they do and don’t resist.
Where it fails
Why EMV / chip payment cards cannot be cloned this way — and the ethics of that line.
// who it's for
Who it’s for
Physical-security and red-team testers who need a repeatable badge-assessment methodology, and access-control owners who want to understand how their cards are attacked so they can choose better ones.
// what you pay for
A maintained guide, not public facts
The techniques exist publicly; what you pay for is a curated, organised, maintained methodology and the author’s time.
- A structured methodology — the assessment path for each card technology in one place, in order.
- Command references — the actual Proxmark3 steps, not hand-waving.
- Updates — revisions as tools and card technologies change.
- Questions answered — a direct line to ask about your specific scenario.
// the fine print
Terms & liability
Education & authorized research only. This is written learning material. Applying these techniques to systems, cards or networks you do not own or lack written permission to test is illegal in most jurisdictions — always get authorization first.
No liability. The material is provided as-is for study; Cyber Sec and Stephan Botes accept no liability for how it is used.
What you pay for. A curated, maintained guide and the author’s time — updates and questions answered, not access to public facts.
Questions about scope, licensing or authorization? Get in touch first.