(****) Chameleon Tiny ( Incl PRO)

Chameleon Tiny ( Mini )

There are 2 options:-

  • Chameleon Tiny

  • Chameleon Mini ( I don’t have one so won’t be directly reviewing here, However, the Mini is the big brother to the Tiny with the same / more functionality )

The Tiny also comes in 2 versions

  • Tiny

  • Tiny Pro ( Bluetooth )

Both are the same size and form factor

Both operate independently, but for configuring there are a couple of Apps, one being * Android Application

Communication via the app is done via Bluetooth (Pro) or Tethered via the included Type C to Type C cable.

They both now come with a leather holder with a built-in T5577 Chip

These can be purchased separately

image

image

SOURCE

Multiple sources, so the choice will likely come down to your region as to your best store:-

Asia Pacific area:

Sneak Technology ( $80 for BLE $60 for non-BLE )

Europe:-

KSEC ,

Lab401 are also an option in Europe,

USA:-

Hacker Warehouse in the USA

CAPABILITY

Mifare Ultralight

Mifare Ultralight EV1, Mifare Classic 1K/4K 4B/7B,

Mifare DESFire

Mifare DESFire EV1

Mifare DESFire EV2

Mifare PLUS

NTAG (all types)

LEGIC prime

HID iCLASS

ePass

ISO 15693 (All)

This is a review, not a “How To”, for more information, go to your chosen store, and there will be plenty of information there.

SOME of the sales guff

INTRODUCTION

The ChameleonMini is an RFID Emulation Device, capable of simulating multiple types of RFID Tag Formats in one device.

The ChameleonTiny is an impossibly small version of the Chamelon Mini RevG, designed as a keychain emulator for all your HF tags.

Emulating, storing and manipulating RFID tags is a vital part of any pentesting assignment. The ChameleonTiny is powerful and discrete, and its tiny physical size means it can be with you all the time.

The ChameleonTiny comes in two versions: Standard & Pro. The Pro Version includes Bluetooth / Wireless functionality.

PRACTICAL

Store all your badges on one tiny device.

PORTABLE

Powerful RFID emulator device on your keychain.

POWERFUL

Highest performance ChameleonMini device available.

DURABLE

High-quality case & built-in battery with huge standby time.

OVERVIEW

The ChameleonMini is an RFID Emulation Device, capable of simulating multiple types of RFID Tag Formats in one device.

Proxgrind’s ChameleonTiny is based on the RevG Framework, but optimised for size and portability.

  • Multiple Chipset Emulation

  • Read / Emulate Operations

  • MFKey32 Crack Support

  • UID Sniff

  • UID Fuzzing / Manipulation

  • Read / Write Lock

  • Advanced Sniffing & Logging

  • Open-Source

Backed by a strong community of active development, the Chameleon Mini is a must have tool for anyone interested in RFID.

MOBILE APPLICATION FUNCTIONALITY

The ChameleonTiny RevG is controllable on-the-fly via a fully-featured Android App.

  • Configure and control all aspects of the device via OTG cable

  • Save, restore, analyse and modify data dumps directly on your phone

  • Modify SAK/ATQA values in-app

  • Detect Sector Keys via reader

  • Manage keylists for MIFARE Classic® reading

  • Real-time device information

PRODUCT COMPARISON

There are several ChameleonMini devices available. The table below breaks down the differences in detail.

If your are a penetration tester / researcher, or require wireless functionality, Lab401 recommends the ChameleonMini RevG by Proxgrind or the ChameleonTiny Pro.

If you are looking to store all your tags in one device, or size is the most important factor for you, Lab401 recommends the ChameleonTiny.

Android App Showcase

What makes this interesting for “US”

CAN THE CHAMELEONTINY WRITE CARDS?

No. Although the hardware is capable, the current firmware of the Chameleon Tiny is designed to emulate cards, not act as a writing device.

Cool, clever simple bit of kit.

I carry mine in my bag with a Keysy ( HF - LF Bases Covered ) For Cards / Fobs, not implants…yet!

PROs

• Small/ very portable

• Robust ( The leather cover will also help to protect the resin )

• Low power draw

• 8 “card” slots

• Simple App interface

• Very capable

CONs

• Cannot write
BLE protocol undocumented

PRICE

$60

$80 ( BLE )

$1.50 - $5 (Leather T5577 case)

Summary:

Loses one star due to being capable of writing, but not currently supported ( Maybe “hackable” * ChameleonMini/Tiny GitHub code ) :man_shrugging:

LINKS AND RESOURCES
COMPATIBLE SYSTEMS
  • Windows: XP, 7, 8, 10 (All Versions)

  • OS/X: 10.0 - 10.7 (All Versions)

  • Linux: Debian, Ubuntu, CentOS, etc (All Versions)

  • Android (via OTG): Specific Builds

Rating by the community :robot:

PLEASE ONLY VOTE IF YOU HAVE ONE OR HAVE USED ONE

:star: = :poop:

:star::star: = :pleading_face:

:star::star::star: = :neutral_face:

:star::star::star::star: = :grin:

:star::star::star::star::star: = :trophy:

Chameleon Tiny 1-5 :star:
  • 1
  • 2
  • 3
  • 4
  • 5
0 voters
3 Likes

Another con: the BLE protocol is completely undocumented, and must be reversed-engineer from a so-called “reference” implementation with comments in Chinese. Good luck with that if you want to program the thing. I’ve tried to implement it but haven’t been able so far.

2 Likes

Lol if you never had to dig into chinese comments in code, yoi never lived :smiley:

Just a super quick little addition to the Chameleon Tiny Review

I bought the 5577 Leather Cover for ChameleonTiny
image

The ChameleonTiny and ChameleonTiny Pro fits in it perfectly
image
The obverse side has a “window” to see which slot is in use

Comes with 1x 5577 chip inside

By this advertised statement, I expected the T5577 chip to be embedded in the leather, It was actually a loose ~20mm disc with double sided 3M tape on one side.
It happens to sit nicely on the reverse side between the A-B buttons and the screws.

Tested and it works as expected

For $1.50 - $5

No complaints

I got mine from here

hey sorry i have off topic question. Does Chameleon tiny pro Copy/Duplicate LF and HF Fob.
also does Chameleon tiny pro Read And Write on Fobs.?

Only HF, Not LF

Currently it Only reads

Here is the official statement

CAN THE CHAMELEONTINY WRITE CARDS?

No. Although the hardware is capable, the current firmware of the ChameleonTiny is designed to emulate cards, not act as a writing device.

We recommend the DL-533N to easily write 13.56MHz cards.

2 Likes

Hello! Is chameleon tiny cheaper than smart rings?

Can you link to the smart rings you are referring to?

What are you planning / hoping to achieve?

1 Like

Hello!

I like the blue ring here 5 Best Smart Rings Reviews of 2021 - BestAdvisor.com

I have a Xiaomi Mi 11i (it’s without nfc) and i was wondering if I could get some gadget with nfc to get rid of bank card.

Okay, there may be a solution for you.
What country do you reside?

USA

Are you interested in an implant?

If not, there is a Ring that is not on your list because it is not quite avaliable yet
But you can sign up for updates

I dont think it will be far away from launch, and I think it will be your best option

Check out and subscribe to this

1 Like

It also looks good. Do you know how long to wait for the launch? I mean, ~month or longer?

I’ll subscribe, thank you!

1 Like

I don’t have a date for you, but somebody else may read this and be able to give you a closer approximation than I could

Ok! Thank you and have a nice day! :slightly_smiling_face:

1 Like

The Chameleon is more expensive than some NFC rings and cheaper than others.

Neither a Chameleon, not any of the rings in the list you included can replace a bank card.

As @Pilgrimsmaster suggested your best chance would be the Vivokey Apex Ring when it is released. It should be capable of payments but it uses Fidesmo and there are not currently any Fidesmo connected banks in the US.

There are other wearables such as Purewrist that work in the US.

2 Likes

Do you have a link to these? I’ve searched a bit but can’t find 'em. Looks like it might fit my Proxgrind RF Field Detector too.

well, you know how I linked to 3 stores for the tiny?

Did you?
Did you Really?

@biospoonie
YOU JUST MADE MY LIST !!!
:vault_boy_angry_fist:

Not really, I was just had time and was bored when I answered.

If you followed those links, and searched, you would have found

Sneak

KSEC

LAB4O1
Out of stock

or try a generic
“Chameleon Tiny Leather search”

3 Likes

It will fit as a sleeve/pocket
But the dome wont close


1 Like

Ah you know what it is… I admittedly only searched the ones with US stock, and typed too many 5s and 7s in. :joy:

Thanks buddy!

2 Likes