-11%

MagSpoof Complete

Name: MagSpoof Complete — V4 Card + Flipper Zero Add-On
SKU: EC-PACK-MAGSPOOF
Price: 34.00 USD
Availability: InStock

Two ways to replay a magstripe you are authorized to test: the standalone MagSpoof V4 card, and the MagSpoof add-on for your Flipper Zero.

Original price was: $38.00.Current price is: $34.00.

In stock

In the box

MagSpoof V4 board — the board only, nothing else in its box
Flipper Add-On MagSpoof board — its antenna coil is integrated in the PCB

Not included

The Flipper Zero itself
A USB magstripe card reader
A coil for MagSpoof V4
A case for either board — 3D-printable STL files are in the GitHub repos

You also need

A Flipper Zero for the add-on half — the MagSpoof V4 card runs without one
A USB magstripe card reader connected to a computer, to read the Track 1/2 data of the card you are authorized to emulate
A coil wired to MagSpoof V4’s coil pins — V4 does not integrate the antenna into the PCB
A browser for the MagSpoof Web Serial Client, or a serial terminal (PuTTY on Windows, Minicom on Linux/macOS)
A card, reader or terminal you are authorized to test

What is MagSpoof Complete?

MagSpoof Complete is a two-board pack for magnetic stripe testing: the standalone MagSpoof V4 card and the Flipper Add-On MagSpoof. Both emulate a magstripe card wirelessly, generating an electromagnetic field that a standard magstripe reader picks up without a physical swipe and without NFC or RFID, and both are built for authorized security audits. MagSpoof V4 runs on its own: power it over USB-C or a single-cell battery, then save and play tracks through its preloaded Serial CLI from a browser or a serial terminal. The Flipper Add-On MagSpoof attaches to a Flipper Zero and is driven by the MagSpoof app on the device, with Unleashed firmware installed. Either way, you first read the card’s tracks with a USB magstripe reader connected to a computer.

Test a magstripe reader you are authorized to audit

Situation: you have authorization to audit a POS terminal or a card reader. What you do: capture the test card’s track data with a USB magstripe reader connected to a PC, load it onto MagSpoof V4 over the Serial CLI (s to save) and replay it with p1/p2/p through the board’s coil. Aim at Track 2 alone — it carries the PAN, expiration and service code — because MagSpoof transmits the tracks one after another and a terminal may only process the last one it receives. Result: you learn whether that reader accepts an emulated swipe, on hardware you are authorized to test.

Run the same test from the Flipper Zero in your pocket

Situation: the reader you are authorized to test is on site and carrying a laptop is not an option. What you do: save the track data in a .mag file on the Flipper Zero’s SD card, attach the Flipper Add-On MagSpoof, open the MagSpoof app from the GPIO apps folder, pick the file under Saved Cards, choose which tracks to emulate — Track 1+2 together is typical — and set the power switch to 3.3V, or to 5V when the Flipper has USB power for a longer wireless range. Result: the same wireless emulation from a device that fits in a pocket; Electronic Cats confirmed transmission working against an MSR90 magstripe reader.

Run a workshop with two magstripe stations

One pack covers two ways of doing the same thing, so a class or a CTF can split into stations: one group saves tracks to MagSpoof V4 from the browser-based Web Serial Client, the other loads the same tracks onto a Flipper Zero with the add-on, following the published step-by-step tutorial. Students see the same Format B fields — start sentinel, PAN, expiration, service code, LRC — from both sides, against a reader the organizers own. Keep the framing visible throughout: these are tools for authorized security audits only.

Start in 10 minutes

Read the card’s tracks. Connect a USB magstripe reader to your computer, open a plain-text editor and swipe the card you are authorized to test — Track 1 and Track 2 read out as text (the wiki walks through every Format B field).
MagSpoof V4: power it up. Set the power-source switch to VBUS (USB) or BATT (battery), then the ON/OFF switch to ON — the preloaded Serial CLI starts on its own.
MagSpoof V4: save and play. From the MagSpoof Web Serial Client or a serial terminal, send s to save the tracks and p1/p2/p to play them.
Flipper add-on: load the file. Flash Unleashed firmware with qFlipper, fill the tutorial’s .mag template with your track data and copy it to the Flipper’s mag folder (see the full tutorial).
Flipper add-on: emulate. Attach the board, open the MagSpoof app, select your file under Saved Cards, set the tracks in Config and press Send.

Pack contents	MagSpoof V4 board, Flipper Add-On MagSpoof board
MagSpoof V4 microcontroller	CH552G — enhanced E8051 core, MCS51 instruction set, up to 24 MHz
MagSpoof V4 memory	16 KB EEPROM for saved tracks · 1 KB xRAM · 256 B iRAM
MagSpoof V4 power	Single-cell Li-Ion/LiPo battery or USB-C · 3.3 V I/O (never apply more than 3.3 V to digital/analog pins)
MagSpoof V4 connectors & controls	USB-C · UART pins · SWD pins · battery pins · coil pins · status LED · CHRG LED · ON/OFF switch · BATT/VBUS switch
MagSpoof V4 antenna	External coil wired to the coil pins (integrated into the PCB only from V5 on)
MagSpoof V4 firmware	Preloaded Serial CLI (h · s · p1/p2/p · l · d · e), auto-starts on power-up — latest release v5.5.2.0
Add-On TX driver	TC4424 chip — amplifies the Flipper Zero's pulses to the coil, no physical swipe needed
Add-On antenna	Coil integrated in the PCB
Add-On power switch	3.3V (Flipper without USB power), 5V (external/USB power — longer wireless range)
Magstripe tracks	Track 1 and Track 2, Format B — the V4 card transmits them sequentially; the Flipper add-on emulates Track 1+2 together
Licenses	Firmware GNU AGPL v3.0 · Hardware CERN Open Hardware Licence v1.2

Does the Flipper Zero handle magnetic stripe cards on its own?

No. Magstripe emulation needs hardware the Flipper Zero does not have on board, which is what the Flipper Add-On MagSpoof adds: it attaches to the device and is driven by the MagSpoof app. The MagSpoof V4 card in this pack needs no Flipper Zero at all — it runs standalone from USB-C or a battery. The Flipper Zero itself is not included in this pack.

Does MagSpoof use NFC or RFID?

No, at any frequency. Both boards generate an electromagnetic field that standard magnetic stripe readers pick up wirelessly — the same effect a physical swipe produces — with no NFC or RFID involved.

Which firmware does each board need?

MagSpoof V4 ships with its Serial CLI firmware preloaded and starts it on power-up, so nothing has to be flashed to save and play tracks. The Flipper Add-On MagSpoof runs the MagSpoof app on the Flipper Zero, and Unleashed Firmware by DarkFlippers is described as essential for compatibility with Electronic Cats Flipper Shields.

Is MagSpoof legal to use?

MagSpoof is a wireless penetration-testing tool intended solely for authorized security audits, where such use is permitted by applicable laws and regulations. The boards give no means or authorization to use payment cards that are not yours, and Electronic Cats holds no responsibility for unauthorized use. Always confirm you have permission before testing a system you do not own or operate.

Cart