Red Team Alliance

PACS 201 - Commercial Platforms and Designs

Date:
Location:
Future Date
3/17 - 3/18, 2026
$1,600.00
$1,600.00
Shipping calculated at checkout.

Course Overview

PACS 201 is part of a complete refresh and expansion of Red Team Alliance's renowned PACS-2 course, delivered at Black Hat, DEF CON, and other premier security conferences worldwide. Over a full day of intensive, hands-on instruction, students will explore commercial PACS platforms, credential technologies, reader architectures, and the communication protocols that tie everything together. In addition to key elements of PACS architectures, this course establishes credentials as a technical concept, laying the foundation for regional deep-dives in subsequent courses.

This course emphasizes practical skill-building with the Proxmark3, the current industry-standard tool for RFID security research. Students will learn to read, analyze, clone, and emulate legacy 125 kHz technologies that remain pervasive in commercial installations worldwide. A Proxmark3 is required for this course—students who do not already own one must purchase the Field Kit Plus, which includes the Proxmark3 RDV4.

What You'll Learn

PACS Architecture and Design Principles
  • System Components: Credentials, Readers, Input Devices, Output Devices, Controllers, and Management Software
  • Standalone vs. Non-Standalone Readers
  • Centralized vs. Decentralized Authentication Architectures
  • Review of Commercial Platforms Commonly Found Worldwide
Reader-to-Controller Communication
  • The Wiegand Protocol: History, How It Works, Modern Usage, and Why It's Vulnerable
  • Wiegand Data Formats
  • The Fundamental "Wiegand Problem" in Modern Installations
  • Forward-Looking Protocols Such as OSDP, SSCP, and Others
Credential Technologies as a Concept
  • How RFID Credentials Work: Power Harvesting, Data Transmission, and Reader Interaction
  • Card and Technology Data Models
  • Low-Frequency (125 kHz) vs. High-Frequency (13.56 MHz) Technologies
  • Why and How Legacy Credentials Remain Widely Deployed
  • Preview of Regional Credential Technologies (Covered in 21x Courses)
Introduction to the Proxmark3
  • Hardware Overview and Setup
  • Reading and Identifying Unknown Credentials
  • Cloning and Emulation Fundamentals
  • Building Your Credential Analysis Workflow
125 kHz Credential Technologies In-Depth
  • Examples Include HID Prox, EM4100, and Indala
  • Reading, Cloning, and Emulation Techniques
  • Working with T5577 and Writable Credentials
Wiegand Interception with ESPKey
  • How the ESPKey Works
  • Installation Points and Techniques
  • Capturing and Replaying Credentials
Hands-On Labs Throughout
  • Working with the RFID Door Simulator
  • Credential Reading, Cloning, and Emulation Exercises
  • Wiegand Interception Practice

Hardware Kits

Lab Fee ($100) — Basic Credential Demo Pack and ESPKey Wiegand Interception Tool

Required for all students.

  • Assorted 125 kHz Demonstration Credentials
  • ESPKey Wiegand Interception Tool
Field Kit ($500) — RFID Door Simulator and Extended Credential Pack

Required for virtual students; optional for in-person attendees.

  • RFID Door Simulator
  • DoorSim Control Cards
  • Extended Credential Demo Pack
Field Kit Plus Add-On ($800)

Required for students who do not own a Proxmark3.

  • All Field Kit Contents, Plus:
  • Proxmark3 RDV4

Important Note: A Proxmark3 is required for this course. If you already own a Proxmark3 (RDV4 recommended), you may purchase the Field Kit. If you do not own a Proxmark3, you must purchase the Field Kit Plus.

Prerequisites

  • IDAC 101: Intrusion Detection and Access Control
  • Proxmark3: Required for all students. Students who do not own a Proxmark3 must purchase the Field Kit Plus.
  • Computer: Computer with administrative access and permission to install software. Windows 11 is the official platform used in class. Other operating systems are permitted, but students should understand that live technical support may not be available for OS-specific issues.

Course Progression

After completing PACS 201, students are prepared to advance to any PACS 21x Regional Course:

  • PACS 212: North American Platforms and Credential Technologies
  • PACS 213: European Platforms and Credential Technologies
  • PACS 214: Australian Platforms and Credential Technologies

Students must complete PACS 201 before enrolling in any 21x course. Only one regional course is required to progress to the 22x series.

Multi-Day Registration Discounts

Planning to take multiple courses? Save when you register for consecutive training days:

  • 2-Day Registration: $125 off per day ($1,375/day)
  • 3+ Day Registration: $250 off per day ($1,250/day)