Access Control on Sesame Street - Gallagher/Cardax access control system research

Presented at Kawaiicon 2019 by Matthew Daley. Research notes and source code available at https://github.com/megabug/gallagher-...

Gallagher (previously Cardax) make physical access control systems. This talk goes through research on the Gallagher access control system, including the hardware and software components, RFID technologies, communication protocols and credential formats. Several weaknesses are described and their prevalence in the real world is examined with actual fieldwork.

Learn how to clone access cards, modify card data to get elevated access, and brute-force controllers. For those on the other side of the locked door, learn how to avoid these weaknesses and make the most of your existing system.

I’ll even explain the reference to Sesame Street!