A new application named Specter has been developed to enhance the capabilities of the Flipper Zero device, enabling it to detect active 13.56 MHz NFC readers. This functionality allows users to identify potentially unauthorized NFC readers concealed near payment terminals, access control systems, desks, or other equipment.
Unlike traditional NFC tools that read or emulate cards, Specter operates passively. It does not transmit signals, query devices, decode card data, or collect information from readers. Instead, it alerts users upon detecting the radio-frequency field emitted by powered NFC readers.
NFC readers continuously emit a 13.56 MHz field while awaiting contactless interactions from cards, key fobs, smartphones, transit passes, or badges. Specter leverages this emission as a detection signal.
Integrating Specter with Flipper Zero
The Flipper Zero is equipped with an ST25R3916 NFC chip and a 13.56 MHz high-frequency antenna, hardware typically used for reading, saving, and emulating compatible NFC cards. The ST25R3916 series includes an external-field detector designed to identify the presence of external RF fields.
Specter utilizes this hardware by placing it into a detection-only mode, continuously sampling for the presence of an external field. It then translates these samples into a live FIELD % reading, providing users with a proximity indication rather than exact signal strength or distance measurements.
The application’s main interface features an analog-style EMF gauge, live waveform, peak-hold marker, and a red “hot zone” to visualize nearby NFC activity. As the detected field becomes more consistent or stronger, the meter needle rises, and the proximity status updates from FAINT to NEAR, CLOSE, or STRONG.
Upon locking onto an active reader, Specter can display an alarm-style border and activate optional feedback through clicks, vibration, and the Flipper’s LED. The click rate increases as the user approaches the field source, facilitating physical sweeps without constant visual monitoring.
This functionality can be particularly useful for authorized inspections of point-of-sale environments, office hardware, access-control installations, parcels, or personal belongings. Security teams can test the app against known legitimate contactless terminals or door readers and then compare unexpected detections elsewhere.
It’s important to note that Specter detects the presence of an active HF NFC carrier but does not identify the reader, determine its intent, capture transactions, or reveal the data being processed. Therefore, a positive detection should be treated as an investigative lead rather than definitive proof of skimming.
The tool is limited to the 13.56 MHz NFC band and cannot detect older 125 kHz low-frequency systems, such as many HID Prox or EM4100 deployments, due to its reliance on the Flipper’s HF NFC hardware. Detection also depends on the reader being powered and actively polling; shielded, dormant, intermittent, or trigger-based devices may not produce a detectable field, so a clean sweep does not guarantee an area is free of tampering.
Specter is distributed as a single `.fap` application, with a prebuilt release intended for installation through qFlipper or the Flipper Mobile App. Users interested in enhancing their Flipper Zero’s functionality with Specter can find the application and installation instructions on the official GitHub repository.
The introduction of Specter underscores the growing versatility of the Flipper Zero device. By transforming it into a portable NFC skimmer detector, users gain a valuable tool for identifying potential security threats in various environments. As NFC technology becomes increasingly prevalent, tools like Specter play a crucial role in safeguarding against unauthorized data collection and enhancing overall security measures.
