Chameleon Ultra LF + HF RFID Emulator & Analyzer
The Chameleon Ultra is a portable LF and HF RFID emulator and analyzer designed for security research, red teaming, and advanced access control testing. Built on the NRF52840 platform, it offers 8 independent emulation slots, tag cloning and writing, key-cracking support, and full BLE 5.0 and USB-C connectivity for multi-platform workflows on iOS, Android, macOS, Windows, and Linux.
Perfect for penetration testers, physical security professionals, access control researchers, and RFID hobbyists who need a highly portable device that supports UID changeability, tag emulation, cloning, cracking, and system testing.
📦 Included in This Listing — Exactly What You Receive
This package ONLY includes the following items:
-
1× Chameleon Ultra device
-
1× USB-A to USB-C cable (30cm)
-
1× USB-C OTG adapter
-
1× Micro-USB OTG adapter
No additional accessories are included.
Key Features
🔹 8 Independent Emulation Slots
Switch between multiple LF (125kHz) and HF (13.56MHz) tag profiles instantly.
🔹 Full Emulation Support
Program the device to behave like a wide variety of smart cards, including many commonly used access badges.
🔹 Tag Cloning / Writing
Read supported LF/HF tags and write the data to compatible blanks — ideal for lab work, testing, or replacing badges.
🔹 Key Cracking Support
Works with MIFARE Classic® and other chipsets using known key-recovery methods.
(Capabilities vary based on current firmware.)
🔹 BLE 5.0 + USB Connectivity
Control the device via MTools BLE or ChameleonUltraGUI, or use direct USB-C communication.
🔹 Multi-Platform Support
Compatible with iOS, Android, macOS, Windows, and Linux.
Technical Specifications
-
Chipset: NRF52840
-
Memory: 256KB RAM / 1MB Flash
-
Frequencies: 125kHz LF & 13.56MHz HF
-
Connectivity: Bluetooth BLE 5.0, USB-C
-
Battery: Rechargeable LiPo (up to ~6 months standby)
-
Controls: 2× programmable hardware buttons
-
Visual Indicators: RGB LED system for slot and mode status
What You Can Do With It
Emulate
Simulate various LF/HF tag types for system testing and reader validation.
Clone
Copy supported tag data to blanks or internal emulation slots.
Analyze & Test
Assess reader performance, validate access systems, and identify configuration weaknesses.
Experiment & Develop
Modify or rebuild the open-source firmware to create custom workflows and tools.
Software Compatibility
-
MTools BLE (iOS/Android)
-
ChameleonUltraGUI (Windows/macOS/Linux)
-
Official ChameleonUltra CLI
-
Full open-source firmware from the RRG team
Important Notes
-
Some chipsets and features (e.g., T5557, certain cracking flows) may still be in development.
-
Ensure legal compliance and proper authorization before testing or copying any credentialed media.
-
Intended for security research, auditing, and lawful testing only.
Why Buy From STS Collective
-
🇺🇸 Fast domestic U.S. shipping
-
✔️ Curated tools for red teams, RF researchers, and access control professionals
-
✔️ Direct support from an experienced operator—not a dropship reseller
-
✔️ Secure, protective packaging with tracking