Keysy LF RFID Duplicator and Emulator

The Keysy is a pocket-sized device for copying and emulating Low Frequency (125KHz) RFID tags. The device can hold four LF tags, which can be written off the device at a later time onto the Keysy LF tags.

Tag reading is simple and takes 20-30 seconds – place the device on top of the target badge, press a few buttons and it will be saved to the button slot you pushed. Tags can be immediately emulated / replayed or written out onto a physical badge.

With its discreet looks and card compatibility performance, the Keysy is another solid RFID tool for penetration testers.

Keysy supports 125kHz RFID keycards/keyfobs. These are typically perimeter access control systems that require the keycard/keyfob to be placed within 10cm of the reader. Anything that works farther away is unsupported.

Supported Models

• HID Prox (Proxcard, ISOProx, ProxKey)
• (Emulation not supported on multiClass readers, can still clone to rewritable)
• HID Indala (Motorola Indala)
• EM400x, EM410x, EM420x
• Noralsy (KCP3000)
• Farpointe Pyramid
• Keri (KC-10X, MT-10X, PKT-10X)
• Kantech ioProx
• DoorKing (DKProx) [Not DKProx Long Range]
• AWID (Low frequency only – CS-AWID, GR-AWID, KT-AWID, PW-AWID) (Emulation not supported, can still clone to rewritable)
• Radio Key (SecuraKey RKKT-01, RKKT-02)
• Viking
• Visa2000
• Schlage IBF iButton (RFID portion only)
• T55x7 compatible keycard/keyfob

Note: Due to inconsistencies between different RFID readers as well as the small geometry of the Keysy antenna it is not possible for Keysy tag emulation to work with every reader. Keysy tag emulation as been tested and works well with the majority of commercial readers. In the cases where Keysy emulation doesn’t work, Keysy and the included rewritable RFID tag can still be used to make a duplicate copy of the original tag. Please see instructions for additional information on cloning tags.

Unsupported Models

• Automotive Keyfobs
• Garage Door openers that require pushing a button (rather than waving in front of a reader)
• Mass transit cards
• Stored value cards
• Hotel keys
• HID iClass, iClass SE
• Mifare Classic 1k/4k
• Mifare Plus EV1
• Mifare DESFire EV1/2
• Mifare Ultralight
• Farpointe Delta, Farpointe Ranger
• DKProx Long Range (AVI)
• AWID (all HF and UHF tags)
• Any other RFID cards/fobs not operating at 125kHz.