Welcome to the IRExitSensors repo, a hub where hardware hackers and red teamers collaborate on IR sensor technology. This project focuses on infrared sensors and their susceptibility to various signal patterns, with the goal of exploring methods to effectively bypass these security mechanisms. In addition, this repository aims to be a resource on constructing IR emitters (or torches), designed to execute these bypass door sensors. By providing detailed information on the necessary hardware components and assembly instructions, we hope enable professional red teamers and other security researchers to build their own devices tailored to specific security scenarios.
Please note that this repository is currently in the early stages of development. As we continue to gather more information and refine our techniques, expect regular updates and expansions to the content. We encourage contributions and feedback.
Very common in the UK. The OEM doesn't ever seem to be specified on listing or the device itself, but suspected to be YLI.
- EBNT_TF_3
- DS-K7P03
- SP80NT Videx NT Series Touch Free Entry & Exit
- SMB-I016
- AMS-EBIR3-RG
- DT_3L29
- CD-XJK-HW
- XimiirEI01
- EButton3
- K8W-TD
- K4 NT1 variant
- K10 NT1 variant
- XM-EI01B NT1 variant
- YS410
- SI86xx
- EI20
These devices look a lot like IR touchless exit buttons, some are even advertised as such, but actually use capacitive sensors which are touch or have a range of about an inch.
- unknown-00 no model number and unbranded fake IR sensor
- HBK-E02
- Flipper Zero - the flipper can be an easy to use device to show proof of concept, but doesn’t have sufficient power for many use cases. This is especially true when there is no direct line of sight or across larger distances.
- CHANZON - Chanzon produce a series of LED arrays, including some higher power components suitable for using at range.