HydraNFC Shield v1.0 Specifications

HydraNFC Shield v1.0 is an NFC shield hardware (to be plugged on top of HydraBus) to sniff/read/write/emulate any 13.56MHz NFC tags for anyone interested in advanced NFC Research/Dev/Debug/Hack/PenTest on NFC products.
It has been designed to be used with HydraBus but can also be used with other MCU.

HydraNFC is less expensive, more powerful/extensible than Proxmark3 Hardware and does not requires an FPGA (all is done by the MCU Cortex M4F@168MHz with the help of HydraBus with ultra fast unique algorithm to sniff & decode in real-time PICC/PCD NFC cards).

HydraNFC Shield
HydraNFC Shield v1.0 and HydraNFC Antenna

The HydraNFC Shield v1.0 + Antenna is now Available here: https://lab401.com/products/hydranfc

Note: HydraNFC shield shall be plugged on top of HydraBus (when used with HydraBus).

HydraBus/HydraNFC firmware see github: https://github.com/hydrabus/hydrafw

For more info on hardware of HydraNFC see github: https://github.com/hydrabus/hydranfc

HydraNFC firmware (requires HydraBus) can sniff ISO14443A PICC and PCD both side in real-time


  • HydraNFC shield v1.0 & HydraNFC Antenna package:
    • HydraNFC shield v1.0

      • Pocket size 54x35x13 mm and light weight about 33g
      • Support external NFC Antenna with U.FL connector or SMA (requires SMA male to SMA male cable)
      • 1 SMA female connector included (to be soldered on HydraNFC shield as option)
    • HydraNFC Antenna (included with HydraNFC shield v1.0)
      • U.FL connector (UFL cable included) or SMA
      • 1 SMA female connector included (to be soldered on HydraNFC Antenna as option)
  • Features of the HydraNFC shield board:
    • Autonomous mode with 4 User buttons and 4 User LEDs.
    • Use Texas Instrument TRF7970A NFC chipset with full access to all pins and all modes of TRF7970A through connectors J1/J2/J3.
      • Supports Near Field Communication (NFC) Standards NFCIP-1 (ISO/IEC 18092) and NFCIP-2 (ISO/IEC 21481)
      • Completely Integrated Protocol Handling for ISO15693, ISO18000-3, ISO14443A/B, and FeliCa
      • Integrated Encoders, Decoders, and Data Framing for NFC Initiator, Active and Passive Target Operation for All Three Bit Rates (106 kbps, 212 kbps, 424 kbps) and Card Emulation
      • RF Field Detector With Programmable Wake-Up Levels for NFC Passive Transponder Emulation Operation
      • Programmable System Clock Frequency Output (RF, RF/2, RF/4) from 13.56-MHz Crystal
      • Programmable Modulation Depth
      • Dual Receiver Architecture With RSSI for Elimination of “Read Holes” and Adjacent Reader System or Ambient In-Band Noise Detection
      • Programmable Output Power: +20 dBm (100 mW), +23 dBm (200 mW)
      • Support any protocols under 13.56 MHz with modulation depth OOK (100%) or ASK (from 7% to 30%)
      • HydraBus Antenna (external) with U.FL connector(cable included) or SMA (optional) and can read Mifare card at up to 8cm (with 20cm cable).
        • Antenna Impedance 50 Ohm
      • Hardware doc,  schematic/board are available on github: https://github.com/hydrabus/hydranfc/tree/master/hardware
      • Hardware license CC BY-NC 4.0 (for commercial license contact info@hydrabus.com)

Leave a Reply