[Question] Ventra - Single Use #852
Replies: 1 comment
-
I am by no means a expert but would that information be on the card? Generally designing these systems would simply put an ID on the card and then check the expiration server side |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
I apologize for this being out of the blue, and probably not the best worded, but I just recently found out about MetroDroid.
Within the past 6 months, I've been trying to learn more about NFC/UHF/Etc...
I currently have a Proxmark3 and in one of the Discords I'm apart of (IceMan), I was able to find out about MetroDroid.
I've used my Proxmark to clone some cards here n there and also was able to find/report a vulnerability at a Semi-Local Driving Range, where they had the "Currency" setup as Plain ASCII on a Mifare Classic card.
Anyway, I currently have 2 Disposable 1 day use Ventra Tickets, along with a Ventra Card that is tied to my friend's Student ID.
What I'm currently curious about though, is when scanning the Ventra Disposable via MetroDroid. How are you able to determine the Expiration Date of the card?
I tried to read through some of the documentation, but I'm kind of at a loss. As to how MetroDroid is able to know the details of a card. Like, how it knows that my card expires 01/26/2024 at midnight. Or, how it knows how much is on the card.
I have attached a few screenshots of what I see when I scan the Card.
But, I was wondering if someone might be able to help me better understand, how you are able to get this data?
I'm just genuinely intrigued by this, and would like a bit of help learning more, while I go down this rabbit hole.
Thank You in advance.
Also, if you want/need any Proxmark Output. Let me know what you'd like me to run, and I'll get the info back to you.
Beta Was this translation helpful? Give feedback.
All reactions