Navigoat

Android PoC for reading the new french transportation card "Navigo" via NFC.

sp1d3rb0y · fr.spiderboy.navigoat

Not rated yet 1K+ downloads v1.0 1.9 MB Android 4.0.3+ PEGI 3 · Everyone

Download APK 1.9 MB All versions

At a glance

Latest version: v1.0 (3)
Updated: Aug 23, 2018 (8 years ago)
APK size: 1.9 MB
Requires: Android 4.0.3+ (API 15)
CPU support: Any (no native code)
Category: Tools (app)
Permissions: 2 (1 sensitive)
Website: spiderboy.fr
Developer contact: [email protected]

About this APK

Navigoat is an app by sp1d3rb0y in the Tools category. It has no native code, so it runs on any Android processor.

It asks for 2 permissions, 1 of them sensitive: modify shared storage.

What's new in v1.0

Fix crashes regarding bad interpretation on contracts list

Description

From the listing uploaded by “apk-4-fr”.

Android PoC for reading the new french transportation card "Navigo" with any Android equiped with a NFC reader. Features: - Prints the 3 last visited stations - Prints contracts information - Prints the 3 last validation failures - Save raw dumps on external SD card This project is **not** associated with the french transportation enterprise "RATP". This PoC will only work with the new Navigo models "Designed by Stark". Credit where it's due: https://github.com/Eric-Bourry/pssi Code: https://github.com/sp1d3rb0y/Navigoat Permissions details: - android.permission.NFC : Mandatory for reading contactless information from card - android.permission.WRITE_EXTERNAL_STORAGE: For dumps saving on external SD card

Security & authenticity

Security rating: Trusted

Signing certificate

Certificate with Google's generic name Google Play App Signing gives the keys it manages this name, but anyone can put it in a certificate, so this alone proves nothing.

Store checks and file details

Developer signature verified Apr 16, 2020
Antivirus scan passed Nov 4, 2020
Signed byCN=Android, OU=Android, O=Google Inc., L=Mountain View, ST=California, C=US
Signing certificate (SHA-1)BC:09:85:A2:C5:12:E9:2D:F2:5E:8E:2D:7D:96:C8:53:51:6C:F3:7D
File MD52c79b83941fe029ccd4bf101365891a4
Uploaded by “apk-4-fr” 5 followers · uploading since 2017

Scans and ratings come from the source store; the certificate comparisons are AAPKs's own, made from the files' published signatures. AAPKs doesn't scan files itself — compare the MD5 and signer after downloading.

Permissions (2)

Navigoat requests 2 permissions, 1 of them sensitive.

Modify shared storage Sensitive android.permission.WRITE_EXTERNAL_STORAGE
Nfc android.permission.NFC

Required hardware & features

NFC android.hardware.nfc
Touchscreen android.hardware.touchscreen

Navigoat APK: questions and answers

Can I install this APK over the version I already have?

Only if it is signed with the same certificate as the copy on your phone and isn't an older version. If Android says “App not installed”, the certificates differ; uninstalling your copy first works but deletes its data unless it is backed up.

Is the Navigoat APK safe?

No one can promise that a file is safe, but some things can be checked. The source store rates this file Trusted. After downloading, check that the file's MD5 is 2c79b83941fe029ccd4bf101365891a4.