Chameleon Ultra
Approximate CAD. Charged in USD at checkout.
The Chameleon Ultra is the last RFID emulator you will ever need. Built around the Nordic nRF52840, it delivers simultaneous low-frequency (125 kHz) and high-frequency (13.56 MHz) emulation in a keychain-sized device — no other tool on the market does both in hardware at this price point. LF support covers virtually every legacy access control card in the field: EM4100, HID Prox, HID H10301, AWID, Indala, Gallagher, and more — readable, writable, and fully emulable in standalone mode. HF support covers the full ISO14443A stack: MIFARE Classic 1K/4K with built-in PRNG cracking, NTAG 210-218, Ultralight (Standard, C, EV1), DESFire EV1/2, and emulated 4-byte or 7-byte UIDs. The onboard reader/writer means you sniff, clone, and emulate without a separate device. Bluetooth 5.0 app control (iOS/Android) for card management. 8 credential slots on flash — no phone required in the field. Open source firmware on GitHub (RfidResearchGroup/ChameleonUltra) with active community development. The tool pentesters reach for when they need to own an access control system from front door to server room without dragging a Proxmark.
Key Features
- Simultaneous LF (125 kHz) + HF (13.56 MHz)
- 8 Credential Slots (Standalone)
- MIFARE Classic PRNG Cracking Built-In
- Read, Write & Emulate in One Device
- Bluetooth 5.0 iOS/Android App Control
- HID Prox, EM4100, AWID, Indala, Gallagher
- NTAG, Ultralight, DESFire EV1/EV2 Support
- USB-C Rechargeable + Open Source Firmware
SKU: CH-ULTRA
Compare ProductsCUSTOMER REVIEWS
Based on 3 reviews
Game changer for card emulation
The Chameleon Ultra is incredible for RFID/NFC work. Having 8 card slots means I can store multiple cloned credentials during an assessment and switch between them instantly via BLE from my phone. The form factor is small enough to palm during social engineering. It handles MIFARE Classic, DESFire, and even some iCLASS cards. The OLED display is a nice touch for confirming reads in the field.
Glad you are getting great use out of it! The BLE switching feature is a real game changer for field work.
Replaced my Proxmark for daily carry
I still use my Proxmark3 for deep research, but for day-to-day card emulation work the Chameleon Ultra has completely replaced it. It is so much more convenient — USB-C charging, Bluetooth control, and the standalone mode means I do not need a laptop in the field. The crack detection feature for MIFARE Classic is surprisingly fast. Battery lasts about a week of normal use.
Great hardware, software still maturing
The hardware is fantastic — well built, great form factor, excellent read range. My only criticism is the companion app and firmware are still being actively developed, so you occasionally hit bugs or missing features. The open-source community is very active though, and updates come regularly. For the price, it is an excellent NFC tool that will only get better over time.
YOU MAY ALSO LIKE
Proxmark3 RDV4
The gold standard for RFID/NFC security — read, clone, sniff & emulate any card.
Chameleon Ultra DevKit
Chameleon Ultra hardware exposed for developers — all debug breakouts, JTAG/SWD, same LF+HF capabilities.
RFID Field Detector Ultra — LF / HF / UHF
Tri-band RFID field indicator — detect LF/HF/UHF readers, map field strength, no battery needed.