Technique
technique:badge_cloning
Also: RFID key card cloning, badge access, badge cloner, badge replay, badge-cloning, cloned badge
Attempted copying or duplication of an access badge to gain entry to a facility.
Copying the data and appearance of an employee badge to gain access to controlled areas.
“We clone it with a Proxmark right on the spot”
“I had taken their badge design, put my photo on it, and printed it on this cloned badge.”
Attempted copying or duplication of an access badge to gain entry to a facility.
“maybe they can find a nearby coffee shop, see somebody with a badge to this place, bump into them casually, clone the badge”
“bringing my badge-cloning equipment wasn’t an option”
Capturing and reproducing RFID badge identifiers to bypass physical access controls.
“We can just walk past somebody and clone their badge”
“They prepare to use their RFID key card cloning machine”
Technique used to duplicate a Microsoft employee badge and obtain physical access to Microsoft facilities.
“He acquired a badge cloner and when his mom’s boyfriend came back, he was able to make a duplicate copy of that Microsoft employee badge.”
Using a copied access-badge signal to obtain physical entry.
“The Proxmark changed from sniffing to replaying.”
“I waved my bag by the badge reader by the door”
Technique involving duplication or testing of an access badge for entry to facilities.
“I tried a badge we had cloned from another building”
“We talked about card entry”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | USES | Kyle | Explicit | 40 |
| incoming | USES | Dave Kennedy | Explicit | 42 |
| incoming | USES | Arman | Explicit | 46 |
| incoming | USES | TinkerSecure | Derived | 55 |
| incoming | INVOLVES | Iowa courthouse penetration-testing arrest | Explicit | 179 |
Kyle USES badge cloning
Kyle clones a headquarters badge to obtain access to the target building.
Explicit Confidence 99% · Kyle EP 40 Details
“We clone it with a Proxmark right on the spot”
“I had taken their badge design, put my photo on it, and printed it on this cloned badge.”
Dave Kennedy USES badge cloning
Dave's team cloned an employee's badge to gain access to the data center.
Explicit Confidence 99% · Dave Kennedy EP 42 Details
“We cloned his badge at the same time.”
Arman USES badge cloning
Arman cloned a Microsoft employee badge to enter Microsoft's headquarters.
Explicit Confidence 99% · Jack Rhysider EP 46 Details
“He acquired a badge cloner and when his mom’s boyfriend came back, he was able to make a duplicate copy of that Microsoft employee badge”
TinkerSecure USES badge cloning
TinkerSecure uses badge replay/cloning to open a secured door.
Derived Confidence 94% · TinkerSecure EP 55 Details
“I waved my bag by the badge reader by the door and heard it click open.”
Iowa courthouse penetration-testing arrest INVOLVES badge cloning
During the Dallas courthouse attempt, Gary tried a badge cloned from another building to test whether it provided multi-building access.
Explicit Confidence 99% · Gary DeMercurio EP 179 Details
“I tried a badge we had cloned from another building”