Objective #5 - Open HID Lock

Objective

Open the HID lock in the Workshop. Talk to Bushy Evergreen near the talk tracks for hints on this challenge. You may also visit Fitzy Shortstack in the kitchen for tips.

Analysis

You'll need to learn to use the Proxmark3 and access the locked door in Santa's workshop.

Tip

Watch Larry Pesce's HID Card Hacking talk for an introduction to the Proxmark3.

Tip

Before you can complete this step, you'll need to pick up the Proxmark3 device that’s on the floor of the Wrapping Room. Once you have it, you can access it from the Items section of your badge.

Solution

Step 1: Stand near Angel Candysalt and activate the scanner to get your first valid card read.

[magicdust] pm3 → lf hid read
#db# TAG ID: 2006e22f31 (6040) - Format Len: 26 bit - FC: 113 - Card: 6040

Step 2: Repeat the process near Holly Evergreen and Sparkle Redberry.

[magicdust] pm3 → lf hid read
#db# TAG ID: 2006e22f10 (6024) - Format Len: 26 bit - FC: 113 - Card: 6024

[magicdust] pm3 → lf hid read
#db# TAG ID: 2006e22f0d (6022) - Format Len: 26 bit - FC: 113 - Card: 6022

Step 3: Stand near the HID card reader by the locked door in Santa’s workshop and transmit some generated tag ID’s.

Simply replaying the cards that were scanned will not open the door, so you’ll need to try some other nearby card numbers with the same facility code. Card #6025 opens the door.

[magicdust] lf hid sim -r 2006E22F13

Tip

You can use this handy calculator to generate a raw tag ID to enter into Proxmark3: http://www.ccdesignworks.com/wiegand_calc.htm

Being Santa Claus

On the other side of the door is a dark room with what appears to be eyeholes on the far end. After peeping through eye holes, you find yourself on the other side of the wall but as Santa Claus! Are you Santa Claus? Are you just controlling him like a puppet? Either way, you'll find that exploring the castle as Santa opens doors to some previously unreachable experiences.