How We Discovered a Critical Vulnerability Chain in the Dutch OV-Chipkaart System

⚠️ Disclaimer All vulnerabilities discussed in this post have been responsibly disclosed and remediated by the OV-chipkaart team. The attack chain outlined here is no longer valid and cannot be exploited. This blog post is for educational purposes an...