PhantomTap · Playground

Tweak a badge system's design — watch its security risk, information leakage, and remediation roadmap update live. No install, runs entirely in your browser.

client-side synthetic model mirrors the Python scoring source ↗

Deployment design

Credential format Card numbering Card family Sectors still on default keys 60%

Keys diversified per card

Issued credentials 500 Reader→controller link

Based on the real Proxmark3-compatible format specs and the OSDP / IEC 60839-11-5 link standards. Scores are a didactic model of the full Python engine.

Composite risk

——

—bits of guessing (informed attacker)

—bits leaked to structure

—wire-link risk /100

—risk removable via roadmap

Findings

Prioritized remediation roadmap

#	Fix	Risk after	Δ