VSDC-NFC Hacking and Skull Penetration Testing Framework

near-field communication (nfc) penetration testing visa smart debit credit card (vsdc) smart phone

Authors

  • Mahmoud Akram Mahmoud Fahmy Abdulghany Forensics & Cybersecurity Research Center (FSEC) Asia Pacific University of Technology and innovation (APU) Kuala Lumpur, Malaysia
  • Nor Azlina Abd Rahman
    nor_azlina@apu.edu.my
    Forensics & Cybersecurity Research Center (FSEC) Asia Pacific University of Technology and innovation (APU) Kuala Lumpur, Malaysia
  • Julia Juremi Forensics & Cybersecurity Research Center (FSEC) Asia Pacific University of Technology and innovation (APU) Kuala Lumpur, Malaysia
  • Kuruvikulam Chandrasekaran Arun Forensics & Cybersecurity Research Center (FSEC) Asia Pacific University of Technology and innovation (APU) Kuala Lumpur, Malaysia
Vol. 6 No. 4 (2022)
Original Research
January 27, 2026

Downloads

Near-Field Communication (NFC) is a set of technologies and communication protocols that enable electronic devices such as smart phones to initiate or setup a radio communication with each other. It's security and reliability can be embraced by various banks, telecom operators, third-party payment platforms and of course mobile devices terminal manufacturers. A security researcher developed and implemented a malicious application that simulates an NFC card that the user needs to install on their phone. In a contactless transaction, the terminal detects, as soon as you have a card sufficient for the payment terminal card, it does not recognize that the card is set up to continue with the transaction. Due to the current inconsistency between the implementation, and therefore standards, it is tended to point out a related attack that compromises the privacy of the user by collecting the user's payment details. By proposing these attacks, will be raising awareness of privacy and security issues within the specifications, standardization, and implementation of contactless cards and readers. This paper will focus on the overview of NFC, Visa Smart Debit Credit Card (VSDC), Visa payWave and EMV security vulnerabilities. In addition, a Skull Penetration Testing Framework will be developed. It will consist of more than 300 hacking tools including NFC and RFID hacking.