I’ve always wanted a skeleton key — not a real one, but the kind you would see in a cartoon that opens any door immediately. The idea of just being able to slip in anywhere, smoothly and discreetly, has always been a secret dream for me.
The ChameleonMini is a skeleton key for RFID
Of course, time changes and so do keys. Your front door might still use a metal key, but offices and industrial facilities are more likely to use some kind of wireless keycard, whether it’s NFC, RFID, or some other radio signal. So what does a tappable skeleton key look like?
What is it?
The ChameleonMini is a tool that allows you to emulate and clone high-frequency contactless cards and read RFID tags. It functions as an NFC emulator and RFID reader and can sniff and log radio frequency (RF) data. From a distance, it looks vaguely like a credit card, although there are multiple form factors. You can use it standalone or connect the device to your phone over Bluetooth and use one of the many chameleon apps to conduct penetration tests on your own systems.
An NFC emulator and RFID reader
If you’ve got an employee’s key fob handy, it can make a functional replica of the fob that will get you in anywhere the original would — along with a few more complicated tricks we’ll get into later.
The device started as an open-source project on GitHub back in 2013, so there are a bunch of versions. The Revision G is our