Scan for a Bluetooth Low-Energy device, open the GATT handshake, and walk its services — read, subscribe, and write characteristics. Authorized / your-own devices only.
Read NDEF tags — decode URL / text / records + tag UID — or write your own tags. Android Chrome only.
After arming, hold a writable tag to the phone to program it.
A phone + Web NFC does NDEF and basic tag types only. It cannot:
- read MIFARE Classic sectors or crack Crypto-1
- read 125 kHz LF badges / fobs
- clone secure access-control or payment cards
Those need a Proxmark3 / Flipper Zero (raw sectors, crypto, 125 kHz radio). Web NFC is smart-poster · Wi-Fi · product-tag territory — NDEF read/write + tag UID.
Plug a Flipper Zero or Proxmark3 into the phone (USB-C / OTG) and drive it over Web Serial. Flipper = full CLI cockpit. Proxmark = serial bridge + command reference (real card ops run in the native pm3 client). Authorized / your-own hardware only.
Saved captures. Each device or tag is filed as an FS-09 dossier — export as JSON for your report.