mastertap's Introduction

MasterTap

This is a PoC Android app that can effectively clone PayPass-enabled MasterCard credit cards and emulate them for contactless transactions. It implements the combined pre-play and downgrade attack on EMV contactless by Roland and Langer (2013).

Features

Store multiple cards and swipe to the desired card to select it for a contactless transaction.
Resume incomplete cloning.
Import/export cards in JSON format.
Lock/unlock application with a password.
Sensitive data is stored encrypted using SQLCipher.

Usage

Initial setup: Accept the disclaimer and register a numeric password.
Card cloning: Place the device over the card to clone it. If the device loses contact with the card, cloning will pick up where it left off when contact is re-established.
Card emulation: Simply swipe to the desired card and place the device over the POS terminal to perform a contactless transaction.

Limitations and Known Issues

SQLCipher key is not salted.
Only supports Android 4.4 (KitKat) and higher.
Has not been tested thoroughly and is not ready for regular/stable usage.

Licence

MIT

mastertap's People

Stargazers

Watchers

mastertap's Issues

Question

Im running a samsung s7 edge
Tried the app the card copies but then when i put it to the reader it does nothing and emulation wont take place
Nfc is turned on

Any ideas what might be wrong?
Thanks

Recommend Projects