def con 34 · riding for free

RIDING FOR FREE // CTF

A NIMBUS TRANSIT fare card lands in your reader. 1 KB of MIFARE Classic. Some of its blocks end in a single checksum byte the validators trust. Nobody published the format. So you'll reverse it.

your mission

  1. Poke the card: reload it, tap the gate, buy passes, then diff how the bytes move.
  2. Issue fresh cards (up to 3) and compare them. Work out how each checksum byte is produced.
  3. Prove it on the Final Exam: a card with the checksums blanked. Fill them all in correctly.

leaderboard

  1. loading…