Troika Dumper: Still Working and Supported Devices List

By Sydney ColeHardware Hacking

Troika Dumper: Still Working!

t.me/chipollin0nion — October 2, 2017

Today, I want to tell you about a program called Troika Dumper. Many of you have probably already heard of it or used it, but the most interesting thing is that this tool has been working for at least 10 months, and the vulnerability still hasn’t been patched.

The TroikaDumper app allows you to read, save, and restore the memory state of a Troika card. To use it, you need a phone with Android version 4.4 or higher and an NFC chip that supports Mifare cards. The NFC chip must be manufactured by NXP (see list on Wikipedia). Chips made by Broadcom and others will not work.

A partial list of supported phones can be found here: supported_phones_list.txt

Instructions

  1. Install the app by downloading it from this link: TroikaDumper.apk
  2. Launch the app and hold your Troika card to the phone.
  3. The balance, last entry time, and other information should be displayed.
  4. When you read the card, its memory state is automatically saved and available in the archive (the folder icon in the lower right corner).
  5. To write a memory dump to the card, select the desired dump from the archive and press the write button (to the left of the archive button).

How to Avoid Card Blocking

  • Do not operate with balance amounts over 100 rubles.
  • Never enter the metro twice with the same last entry time. After writing a dump, update the current time on the card using a validator on ground transport. In other words, before each metro entry, you need to validate your card using the yellow validator on a bus or tram.

App Interface

TroikaDumper Interface

List of Smartphones Compatible with Troika Dumper

  • ALCATEL ONETOUCH POP S9
  • ALCATEL ONETOUCH IDOL2 Mini S
  • Acer Liquid Express
  • Acer Liquid Glow
  • Asus Padfone 2
  • Asus PadFone infinity
  • Asus Padfone
  • Blackview bv6000
  • HTC One
  • HTC Desire 610
  • HTC One X
  • HTC One M8
  • HTC One M9
  • HTC One Max
  • Huawei Ascent P7
  • Huawei Honor 5C
  • Google Nexus 7 (2012 with NXP PN65)
  • Lenovo Sisley S90
  • Lenovo VIBE Z2
  • Lenovo Vibe Z2 Pro (K920)
  • LG Optimus 3D Max
  • LG Optimus G
  • LG Optimus G Pro
  • LG Optimus 4X HD
  • LG Optimus L5
  • LG Optimus L7
  • LG Optimus LTE
  • LG Optimus Vu
  • LG Prada 3.0
  • LG Optimus Vu 2
  • LG G3
  • LG G4
  • Motorola Droid Razr
  • Motorola Droid Razr HD
  • Motorola Droid Razr Maxx HD
  • Motorola Moto X
  • MEiZU Pro 5
  • Nexus 5X
  • Nexus 6p
  • Panasonic ELUGA
  • Philips Xenium W336
  • Samsung Galaxy Nexus I9250
  • Samsung Galaxy Note II
  • Samsung Galaxy SIII
  • Samsung Galaxy SIII Neo
  • Samsung Core, Samsung Core DUOS
  • Samsung Galaxy S5 G900F
  • Samsung Galaxy J5 (2016)
  • Sony Xperia M4 Aqua
  • Sony Xperia ZR
  • Sony Xperia Z
  • Sony Xperia M1
  • Sony LT25i/Xperia V
  • Sony Xperia TX
  • Sony Xperia C3
  • Sony Xperia C3 Dual
  • Sony Xperia L
  • Sony Xperia XA
  • Sony Xperia X Compact
  • Sony Xperia Z Ultra
  • Sony Xperia Z1
  • Sony Xperia Z1 Compact
  • Sony Xperia Z2
  • Sony Xperia Z3
  • Sony Xperia Z3 Dual
  • Sony Xperia Z3 Compact
  • Sony Xperia Z3 Tablet Compact
  • Sony Xperia Z3+
  • Sony Xperia Z3+ Dual
  • Sony Xperia Z5
  • Sony Xperia Z5 Compact
  • Xiaomi Mi5
  • Xiaomi Mi5 S
  • All recent Xiaomi models with NFC
  • Yotaphone 2
  • ZTE Grand S
  • ZTE PF200
  • ZTE Grand X
  • ZTE Render
  • ZTE Kis
  • ZTE Sprint Flash

Sources

Leave a Reply