salmg/academy
Sign in
Payment Systems: Magstripe, Tokenization, NFC and EMV
Level 3 · Operator120 min

Cloning, replay and downgrade attacks

Reversing transactions to understand attacks seen in the wild, and building proofs of concept for each.

Enrolment required

Module 1 of this course is free to read. The rest needs an enrolment — and so does nothing else on this site: the workbench, the APDU decoder and the whole capture corpus stay open to everyone, signed in or not.

Sign inAbout enrolmentThe workbench and decoder are free

What this module covers

  1. 01Cloning: copying what nothing protects
  2. 02Downgrade: telling the terminal the chip is not there
  3. 03Replay, and why the counter matters
  4. 04The PIN retry counter
  5. 05How to reason about a new one