heikki.juva.lu

Display case for my projects and writeups. Most of my work involve automotive and robotics builds, infosec projects, as well as the disobey badges and KouvostoTelecom hardware.


Project maintained by Zokol Hosted on GitHub Pages — Theme by mattgraham

RFID lock by OBO HANDS

Target

https://www.aliexpress.com/item/32809023198.html

Description:

Rfid Metal Access Control Keypad 
With Waterproof Cover Contactless 
Door Controller Electric Security 
Lock + 20pcs 125KHz Keychains

• Security Mode: Fail Safe
• Working Voltage: DC 12V
• Working temperature: 0~65 °C
• Storage capacity: 1000 users
• Frequency: 125KHz
• Read range: 0-15 cm
• Material: Metal

Circuit

PSU+keypad+lock circuit

System operation

  1. PSU is powered up
  2. PSU powers keypad
  3. PSU sets relays to closed-state
  4. Keypad outputs LOW-state to PULL-input if access is granted
  5. PSU sets relays to open-state for T seconds
  6. PSU sets relays to closed-state

Keypad functions

Configuration mode

  1. Set configuration pin: [0] + [new 6 digit code] + [repeat new 6 digit code] + [#]
  2. Set access mode:
    • [1] + [0]: Access requires card OR pin
    • [1] + [1]: Access requires card AND pin
    • [1] + [2]: Disable private pins
    • [1] + [3]: Enable private pins
  3. Set door open delay: [2] + [time in two digits (seconds)] + [#]
  4. Set public pin (If public pin is set to 0000 and access-mode is card OR pin, public pin is disabled): [3] + [new 4 digit code] + [#]
  5. Set tamper detection:
    • [4] + [0]: Disable tamper detection (default)
    • [4] + [1]: Enable tamper detection
  6. Enroll new card: [5] + [3 digit memory ID (001-999)], present cards to reader and finally press [#]
  7. Set door contact sensor:
    • [6] + [0]: Disable door sensor (default)
    • [6] + [1]: Enable door sensor
  8. Delete card: [7] + [3 digit memory ID (001-999)] OR [7] + present card to reader and finally press [#]
  9. Set door alarm (gives out alarm if door sensor opens without keypad granting access):
    • [8] + [0]: Disable door alarm (default)
    • [8] + [1]: Enable door alarm
  10. UNUSED

Attack vectors

Keypad

Keypad internals

PSU

Wiring harness

Door / relays / solenoids