Module 13 of 22 · Operator · 120 min
Cloning, replay and downgrade attacks
Reversing transactions to understand attacks seen in the wild, and building proofs of concept for each.
Enrollment required
Module 1 of this course is free to read. Buying the course opens every other module, the transaction lab and search across the course. The workbench and the APDU decoder stay free for anyone.
The course is tied to your account, so you sign in first and come straight back here.
One payment for this course. Access for as long as the course exists, with every update and new research module that follows, at no further cost.
No hardware is sold here, and none is needed to read the course.
Payments are final. Module 1 is free so you can judge the course before you pay. Terms
Already enrolled? Sign in
Open the free workbench →What this module covers
- 01Three different things called cloning
- 02Cloning: copying what nothing protects
- 03The chip carries the stripe around inside it
- 04Fallback: the downgrade you perform with tape
- 05Downgrade: telling the terminal the chip is not there
- 06The same trick on the chip: the AIP
- 07Cloning a transaction, not a card
- 08Replay, and why the counter matters
- 09The PIN retry counter
- 10What stops each of these
- 11How to reason about a new one