Yesterday, 05:40 PM
![[Image: 6fe0e614-d85c-4a8c-b799-f7e157cae4d1.png]](https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Fi.ibb.co%2FZ1K4mYDf%2F6fe0e614-d85c-4a8c-b799-f7e157cae4d1.png)
WEBSITE - CLICK HERE "ESCROW ACCEPTED"
# NFC RIPPER – Full Feature Overview
NFC RIPPER is an Android NFC relay toolkit with a Python server and web admin panel. Two phones, one server, full control.
---
## Core Functions
### NFC Relay
- **Reader phone** reads a real NFC card; **Tag phone** emulates it at a POS terminal or ATM
- Communication goes through your own server (PC or VPS) — works over any network, any distance
- Multi-session: multiple Reader–Tag pairs on one server, each with its own session number
### PIN Bypass (7 methods, command-aware)
Bypass modifies only the correct APDU responses (READ RECORD, GPO, VERIFY) — all other commands pass through unchanged.
**POS (shop terminal) — 5 methods:**
- **Ghost CVM** — 8E → No CVM. Minimal, try first
- **Shadow CVM** — 8E + 9F34. For terminals checking both
- **Jinkusu Brute** — Shadow + IAC zeroed. Prevents offline denial
- **Phantom EMV** — Brute + CTQ (Visa) + AIP CVM bit + IAC relax. For stubborn POS
- **Blackout** — Phantom + AIP offline-PIN clear. Strongest POS profile
**ATM — 1 method:**
- **ATM Max** — full stack (same as Blackout). Always use with Accept any PIN
**Chip Reader — 1 method:**
- **Jinkusu CIP** — full stack for external CCID readers (ACR1552U, Rocketek, etc.)
### Smart Bypass Features
- **Command-aware** — only modifies READ RECORD (B2), GPO (A8), GET DATA (CA), VERIFY (20)
- **CDOL-aware** — skips tags listed in CDOL to preserve cryptogram integrity
- **Scheme detection** — detects Visa/Mastercard from AID, applies CTQ or 9F6B accordingly
- **Format 1 + 2 GPO** — handles both AIP formats
- **Auto-step-up** — if terminal rejects, automatically upgrades to the next bypass method
- **Accept any PIN** — spoofs wrong-PIN status (63 Cx → 90 00) on VERIFY responses only
- **Accept any PIN aggressive** — also handles 69 82/83/84/85, 6A 80/81/88
### Bypass Card Limit (on Reader phone)
- Caps tag 9F02 (Amount) so the card sees a lower amount and may approve without PIN
- Applied only on GPO commands, not on other APDUs
### Live Debug Log
- Green text lines in Tag APDU panel showing: method, INS name, MODIFIED/pass, SW, elapsed time
- Example: `[Brute] READ_REC → MODIFIED | SW 9000 | 142ms`
- Also in logcat via `adb logcat -s NfcManager:I EmvCvmBypass:I`
### Transaction History
- Each relay session saves: bypass method used, card scheme (Visa/MC), number of modified APDUs, last status word
- Stored in Room database, viewable in session logs
### Persistent Notification
- Foreground service notification when relay is active: shows mode, connection status, bypass method
- Stop button to end relay directly from the notification
- Works with screen locked or other apps open
### Capture, Clone, Replay
- **Capture** — record NFC traffic from your device
- **Clone** — emulate a previously captured card
- **Replay** — replay captured NFC sessions (index or AI pattern mode)
### Track2NFC
- Store card Track 2 data and emulate as Visa MSD at POS via HCE
- Manage multiple saved cards, activate/deactivate
### Saved Cards
- Cards detected during relay are saved with full EMV info: PAN, BIN, issuer, expiry, scheme, AID
- Tap to emulate at POS; long-press for details or delete
### External Chip Reader (CCID)
- USB-C chip reader support: ACR1552U, ACR122U, Rocketek, Alcor, Gemalto
- In Relay select "External" as Reader — reads card via chip (contact), Tag goes to POS
- Combines with any bypass method (use Jinkusu CIP)
### Web Admin Panel
- Start/stop relay server, view connected devices, sessions, live event log
- EMV payment amounts displayed: date, time, amount, currency
- Device management: see app logins, block unauthorized devices
- Cards page: all cards detected during relay sessions
- Telegram integration: send alerts to Telegram bot
- Multi-language: EN, RO, DE, ES, CN, RU
### Landing Page
- Product presentation page included, ready to deploy
---
## Requirements
- 2 Android phones with NFC
- NFC RIPPER app on both phones
- Python server (PC, VPS, or cPanel) for relay + web panel
- In the app: set server address, port, session number
---
## One Line Summary
NFC RIPPER: two-phone NFC relay with 7-method PIN bypass, web dashboard, card capture, Track2NFC emulation, chip reader support, and full transaction logging — all through your own server.
![[Image: c4c64b7e-4db8-4b9d-8c36-2a87229fc430.png]](https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Fi.ibb.co%2FmVxjjYNw%2Fc4c64b7e-4db8-4b9d-8c36-2a87229fc430.png)