LockSkin

LockSkin is an educational ransomware specifically designed for NFC bioimplants. The tool allows users to lock bioimplants with a password after leaving a ransom note, simulating the behaviour of ransomware in a controlled environment.

During our talk "Locking Hands: Ransomware Meets Bioimplants", we placed rogue readers on door handles, and other common use surfaces (which didn't quite work out) to trick H+ users into scanning their implants. This was conducted professionally and in a controlled environment for educational purposes. Only use this tool on implants you can afford to lose due to potential lockout.

⚠️ WARNING
This tool is experimental and for educational purposes only. Improper use may render your implant unusable or inaccessible. Use it at your own risk.

---

System Requirements

• Operating Systems Supported:
  • macOS
  • *BSD
  • Linux
• Implant Compatibility:
  • NExT Implant
  • xNT Implant
  • Other NFC implants may work; testing is recommended.
• Reader Compatibility:
  • ACR1252 Dual Reader (ACS)
  • Other NFC hardware may work; testing is recommended.

---

Usage

# ⚠️ Warning: This tool is experimental. Improper use may render your implant unusable or inaccessible. Use it at your own risk.

#Install dependencies
pip3 install -r requirements.txt

# Compiled version
chmod +x ./dist/lockskin
./dist/lockskin

# Python version
python3 lockskin.py

Once lockskin has started, any implant that touches the concealed reader will be locked in 1 second or less with default settings. Larger payloads (e.g., larger ransom notes) take extra time to process and require longer exposure.

Locking an Implant

Reading a Locked Implant

Example Ransom Note

---

How to Decrypt

LockSkin is reversible by design. You can generate the NFC decode sequences using the following commands:

# ⚠️ Warning: This tool is experimental. Improper use may render your implant unusable or inaccessible. Use it at your own risk.

# Compiled version
chmod +x ./dist/decrypter
./dist/decrypter

# Python version
python3 decrypter.py

Once the commands are generated, you can use any NFC app like NFC Tools by Wakdev to submit them to the implant. This process resets both the password and the protected state (documented in this thread)

Example Using NFC Tools

Command Exchange with Implant

Password Protection Removed

---

Public presentations

#	Date	Conference	Link to Video	Link to Slides
1	August 2025	BSides Las Vegas	-	-
2	September 2025	DragonJAR 2025	-	-
3	September 2025	Nerdearla 2025	-	-

---

Credits

Special thanks to the DC5411 crew for their support while developing this project.