The Chameleon Ultra is a portable LF and HF RFID emulator and analyzer designed for security research, red teaming, and advanced access control testing. Built on the NRF52840 platform, it offers 8 independent emulation slots, tag cloning and writing, key-cracking support, and full BLE 5.0 and USB-C connectivity for multi-platform workflows on iOS, Android, macOS, Windows, and Linux.

Perfect for penetration testers, physical security professionals, access control researchers, and RFID hobbyists who need a highly portable device that supports UID changeability, tag emulation, cloning, cracking, and system testing.

📦 Included in This Listing — Exactly What You Receive

This package ONLY includes the following items:

• 1× Chameleon Ultra device

• 1× USB-A to USB-C cable (30cm)

• 1× USB-C OTG adapter

• 1× Micro-USB OTG adapter

No additional accessories are included.

Key Features

🔹 8 Independent Emulation Slots

Switch between multiple LF (125kHz) and HF (13.56MHz) tag profiles instantly.

🔹 Full Emulation Support

Program the device to behave like a wide variety of smart cards, including many commonly used access badges.

🔹 Tag Cloning / Writing

Read supported LF/HF tags and write the data to compatible blanks — ideal for lab work, testing, or replacing badges.

🔹 Key Cracking Support

Works with MIFARE Classic® and other chipsets using known key-recovery methods.

(Capabilities vary based on current firmware.)

🔹 BLE 5.0 + USB Connectivity

Control the device via MTools BLE or ChameleonUltraGUI, or use direct USB-C communication.

🔹 Multi-Platform Support

Compatible with iOS, Android, macOS, Windows, and Linux.

Technical Specifications

• Chipset: NRF52840

• Memory: 256KB RAM / 1MB Flash

• Frequencies: 125kHz LF & 13.56MHz HF

• Connectivity: Bluetooth BLE 5.0, USB-C

• Battery: Rechargeable LiPo (up to ~6 months standby)

• Controls: 2× programmable hardware buttons

• Visual Indicators: RGB LED system for slot and mode status

What You Can Do With It

Emulate

Simulate various LF/HF tag types for system testing and reader validation.

Clone

Copy supported tag data to blanks or internal emulation slots.

Analyze & Test

Assess reader performance, validate access systems, and identify configuration weaknesses.

Experiment & Develop

Modify or rebuild the open-source firmware to create custom workflows and tools.

Software Compatibility

• MTools BLE (iOS/Android)

• ChameleonUltraGUI (Windows/macOS/Linux)

• Official ChameleonUltra CLI

• Full open-source firmware from the RRG team

Important Notes

• Some chipsets and features (e.g., T5557, certain cracking flows) may still be in development.

• Ensure legal compliance and proper authorization before testing or copying any credentialed media.

• Intended for security research, auditing, and lawful testing only.

Why Buy From STS Collective

• 🇺🇸 Fast domestic U.S. shipping

• ✔️ Curated tools for red teams, RF researchers, and access control professionals

• ✔️ Direct support from an experienced operator—not a dropship reseller

• ✔️ Secure, protective packaging with tracking