<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->

# Performing RFID Security Assessment — API & Tool Reference

> Quick reference for tools, commands, and APIs used in performing-rfid-security-assessment.

## Tools


### `proxmark3`

RFID research and security assessment tool

**Usage:**
```bash
proxmark3 <device>
```

**Key Flags:**
  - `hf search: high-frequency card detection`
  - `lf search: low-frequency card detection`
  - `hf mf autopwn: automated Mifare attack`
  - `hf mf dump: full card data dump`

---

### `mfoc`

Mifare Classic offline cracker

**Usage:**
```bash
mfoc -O <output_file>
```

**Key Flags:**
  - `-O: output dump file`
  - `-k: known key to start`
  - `-P: number of probes`

---

### `mfcuk`

Mifare Classic universal key recovery

**Usage:**
```bash
mfcuk -C -R 0:A -s 250 -S 250 -v 3
```

**Key Flags:**
  - `-C: connection mode`
  - `-R: recover key for sector:type`
  - `-v: verbosity level`

---

### `nfc-list`

NFC device and tag discovery

**Usage:**
```bash
nfc-list
```

**Key Flags:**
  - `-t N: target type (1=ISO14443A)`

---


## Integration Notes

- All tools should be run with least-privilege access appropriate to the task
- Log all tool invocations for audit trail
- Validate tool output before acting on results
- Cross-reference findings with multiple tools where possible

## See Also

- Parent skill: [Wireless Security](../../../SKILL.md)
- Technique SKILL.md: [../SKILL.md](../SKILL.md)
