Presentation is loading. Please wait.

Presentation is loading. Please wait.

GPN11 (v1.1)hackstation – 15 minutes of packet rage.

Published byClarence Lucas Modified over 8 years ago

Similar presentations

Presentation on theme: "GPN11 (v1.1)hackstation – 15 minutes of packet rage."— Presentation transcript:

1 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage

2 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage

3 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage ← imagine this is me

4 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage Wats dat? ● Packstation ● A “service” by DHL used widely in Germany ● Basically a P/O box ● Send DHL (and only DHL) packets to a packstation ● Pick it up whenever you want

5 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage How Does it Work? ● Packstation lets you login with ● Magstripe + PIN ● Card Number + PIN

6 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage How Does it Work? ● Packstation lets you login with ● Magstripe + PIN ● Card Number + PIN ← teh awesome!

7 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage A Little History ● Signed up for Packstation ● Used it plenty (→ Amazon <3) ● Lost my card T_T ● Used just the number & PIN to log in :3 ● But “suddenly” …

8 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage A Little History ● Signed up for Packstation ● Used it plenty (→ Amazon <3) ● Lost my card T_T ● Used just the number & PIN to log in :3 ● But “suddenly” …

9 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage A Little History ● Signed up for Packstation ● Used it plenty (→ Amazon <3) ● Lost my card T_T ● Used just the number & PIN to log in :3 ● But “suddenly” …

10 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage A Little History … card required for login!!1

11 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage A Little History Okay, not so suddenly... who reads mail anyway

12 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage A Little History Okay, not so suddenly... who reads mail anyway

13 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage A Little History ● Called Packstation support ● Raged ● … ● No profit (claimed it protects from phishing) ● But got a new card

14 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage A Little History ● Called Packstation support ● Raged ● … ● No profit (claimed it protects from phishing) ● But got a new card

15 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage A Little History ● Called Packstation support ● Raged ● … ● No profit (claimed it protects from phishing) ● But got a new card ● Same number … and pin …

16 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage A Little History ● Called Packstation support ● Raged ● … ● No profit (claimed it protects from phishing) ● But got a new card ● Same number … and pin …

17 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage

18 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage

19 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage How to Read a Magstripe ● When in doubt... C4!

20 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage How to Read a Magstripe ● When in doubt... SCOPE!

21 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage How to Read a Magstripe ● Just for blog-creds: Hook it up to an Arduino

22 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage How to Read a Magstripe ● Or maybe not... ● Turns out it's too slow for this kind of reader :(

23 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage How to Read a Magstripe ● OpenBench Logic Sniffer!

24 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage What's on That Thing?

25 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage What's on That Thing? *drumroll*

26 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage What's on That Thing? #$%&ing plaintext!

27 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage The Actual Data ● Track 1: Your Name ● Track 2: Your Card ID ● Track 3: 005900000000000000000000

28 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage The Actual Data ● Track 1: Your Name ● Track 2: Your Card ID ● Track 3: 0059000… ● Get it from: your shipping address

29 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage The Actual Data ● Track 1: Your Name ● Track 2: Your Card ID ● Track 3: 0059000… ● Get it from: your shipping address (again)

30 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage The Actual Data ● Track 1: Your Name ● Track 2: Your Card ID ● Track 3: 0059000… ● Get it from: nowhere. Always the same.

31 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage The Actual Data ● Track 1: Your Name ● Track 2: Your Card ID ● Track 3: 0059000… ● Get it from: nowhere. Always the same.

32 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage Using a Logic Sniffer ● Pro ● Very versatile ● Let's you grab plenty of channels ● +5 offense against hardware ● Contra ● Not really practical :( ● Doesn't actually write cards :(((

33 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage Using a Logic Sniffer ● Pro ● Very versatile ● Let's you grab plenty of channels ● +5 offense against hardware ● Contra ● Not really practical :( ● Doesn't actually write cards :(((

34 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage But... Proof of Concept, Baby!

35 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage So now I have to get a proper writer.

36 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage Toys and Stuff ● Turns out writers are expensive :( ● Around 250, 500,... 1000 EUR

37 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage Toys and Stuff ● Turns out writers are expensive :( ● Around 250, 500,... 1000 EUR ● All writers? Nah...

38 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage Toys and Stuff ● Turns out writers are expensive :( ● Around 250, 500,... 1000 EUR ● All writers? Nah... ● China to the rescue!

39 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage 150 EUR later...

40 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage

41 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage

42 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage

43 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage

44 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage

45 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage

46 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage What Now? ● For minute, let's assume we're phishing. ● This is, after all, what using the card should protect you against.

47 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage What Now? ● For minute, let's assume we're phishing. ● This is, after all, what using the card should protect you against.

48 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage What Now? ● For minute, let's assume we're phishing. ● This is, after all, what using the card should protect you against.

49 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage What we Need ● A name ● A number ● Another number ● A PIN

50 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage What we Need ● A namegot it! (address) ● A number ● Another number ● A PIN

51 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage What we Need ● A namegot it! (address) ● A numbergot it! (address) ● Another number ● A PIN

52 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage What we Need ● A namegot it! (address) ● A numbergot it! (address) ● Another numbergot it! (always the same) ● A PIN

53 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage What we Need ● A namegot it! (address) ● A numbergot it! (address) ● Another numbergot it! (always the same) ● A PINgot it! (remember, phishing)

54 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage Let's get to Work! ● Phish some! (I'll just phish myself) ● Clone^W backup a card. (my own) ● … ● Profit

55 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage

56 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage Results ● The name field is totally irrelevant

57 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage Results ● The name field is totally irrelevant ● … says Bobby Tables

58 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage Results ● The name field is totally irrelevant ● … says Bobby Tables ● Modifying track 3 doesn't do a thing

59 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage Results ● The name field is totally irrelevant ● … says Bobby Tables ● Modifying track 3 doesn't do a thing ● Number + PIN is checked online

60 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage Results ● The name field is totally irrelevant ● … says Bobby Tables ● Modifying track 3 doesn't do a thing ● Number + PIN is checked online ● Packstation keeps greeting me with my full name

61 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage Results ● The name field is totally irrelevant ● … says Bobby Tables ● Modifying track 3 doesn't do a thing ● Number + PIN is checked online ● Packstation keeps greeting me with my full name

62 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage What now? ● Added security?

63 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage What now? ● Added security? ● Nil, Null, Nada

64 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage What now? ● Added security? ● Nil, Null, Nada ● It's actually worse! → False sense of security!

65 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage What now? ● Added security? ● Nil, Null, Nada ● It's actually worse! → False sense of security! ● If you're smart enough to phish…

66 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage What now? ● Added security? ● Nil, Null, Nada ● It's actually worse! → False sense of security! ● If you're smart enough to phish… ● … you're smart enough to clone a card.

67 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage What now? ● Added security? ● Nil, Null, Nada ● It's actually worse! → False sense of security! ● If you're smart enough to phish… ● … you're smart enough to clone a card. ● Costs: 150 EUR → nothing

68 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage

69 2011-06-25 GPN11 (v1.1)hackstation – 15 minutes of packet rage Meta ● Thanks ● @momorientes - for the Pollin card reader ● @dop3j0e – logic sniffer and perl foo ● Contact ● hadez@shackspace.de hadez@shackspace.de ● @hdznrrd ● Slides ● http://bit.ly/m0MAF9

Download ppt "GPN11 (v1.1)hackstation – 15 minutes of packet rage."

Similar presentations

An E-bay Storyboard Kevin Anderson COMP325-V2WW Human Computer Interaction Assignment 13-2 Storyboard Lorraine Normore July 30, 2006.

An E-bay Storyboard Kevin Anderson COMP325-V2WW Human Computer Interaction Assignment 13-2 Storyboard Lorraine Normore July 30, 2006.
Computer Technology Timpview High School. E-mail Email is inexpensive and easy to use and track Spam – emails sent in bulk to many peoples email accounts;

Computer Technology Timpview High School. is inexpensive and easy to use and track Spam – s sent in bulk to many peoples accounts;
Accessing and Using the e-Book Collection from EBSCOhost ® When an arrow appears, click to proceed to the next slide at your own pace. To go back, click.

Accessing and Using the e-Book Collection from EBSCOhost ® When an arrow appears, click to proceed to the next slide at your own pace. To go back, click.
1 Transportation Model. 2 Basic Problem The basic idea in a transportation problem is that there are sites or sources of product that need to be shipped.

1 Transportation Model. 2 Basic Problem The basic idea in a transportation problem is that there are sites or sources of product that need to be shipped.
Let’s Set Up Google. Open your Google Chrome Browser.

Let’s Set Up Google. Open your Google Chrome Browser.
Creating an Amazon Simple Email Service Account. 1- Sign Up for an Amazon Account 2- Verify Sending Email Account or Domain 3- Send Test Message 4- Request.

Creating an Amazon Simple Service Account. 1- Sign Up for an Amazon Account 2- Verify Sending Account or Domain 3- Send Test Message 4- Request.
Welcome to Florida International University Online J.O.B.S. Link Applicant Tutorial.

Welcome to Florida International University Online J.O.B.S. Link Applicant Tutorial.
CS533 Concepts of Operating Systems Class 3 Data Races and the Case Against Threads.

CS533 Concepts of Operating Systems Class 3 Data Races and the Case Against Threads.
Scams and Schemes. Today’s Objective I can understand what identity theft is and why it is important to guard against it, I can recognize strategies that.

Scams and Schemes. Today’s Objective I can understand what identity theft is and why it is important to guard against it, I can recognize strategies that.
WPX The smart way to go. Our interactive website allows customers secure online access for package tracking and more! WPX Delivery Solutions Track & Trace.

WPX The smart way to go. Our interactive website allows customers secure online access for package tracking and more! WPX Delivery Solutions Track & Trace.
PASSWORD MANAGEMENT MADE EASY A Project Play Date - September 26, 2008 Beth Carpenter, Library Services Manager, Outagamie Waupaca Library System.

PASSWORD MANAGEMENT MADE EASY A Project Play Date - September 26, 2008 Beth Carpenter, Library Services Manager, Outagamie Waupaca Library System.
What’s the best one for you?. Positives of Credit Cards Credit cards let you buy items without using your own money They are easy to take overseas and.

What’s the best one for you?. Positives of Credit Cards Credit cards let you buy items without using your own money They are easy to take overseas and.
Microsoft ® Office Access ™ 2007 Training Get to know Access ICT Staff Development presents:

Microsoft ® Office Access ™ 2007 Training Get to know Access ICT Staff Development presents:
Working with Wholesale Consultants. You have one year to keep a consultant for life! Focus on servicing your consultants Focus on servicing your consultants.

Working with Wholesale Consultants. You have one year to keep a consultant for life! Focus on servicing your consultants Focus on servicing your consultants.
Agenda Last class: Internet Literacy Lab Today: Internet Safety.

Agenda Last class: Internet Literacy Lab Today: Internet Safety.
ACCESS TO LMS The EASY way in to our online workbook. www.cambridgelms.org.

ACCESS TO LMS The EASY way in to our online workbook.
Online Ordering by Karl Riley. Goal all authorized users will successfully enter and track the status of a requisition in the companies computer based.

Online Ordering by Karl Riley. Goal all authorized users will successfully enter and track the status of a requisition in the companies computer based.
Ten Common Interview Questions. Tell me a little about yourself Keep it relevant to the job or position you are applying for. Keep it relevant to the.

Ten Common Interview Questions. Tell me a little about yourself Keep it relevant to the job or position you are applying for. Keep it relevant to the.
New Online Signup – Slide 1 You can register a new Distributor on the existing link on Distributor Services or the Ordering Website in the usual places.

New Online Signup – Slide 1 You can register a new Distributor on the existing link on Distributor Services or the Ordering Website in the usual places.
Who Are You, Arduino? Er. Sahil Khanna www.SahilKhanna.org.

Who Are You, Arduino? Er. Sahil Khanna

Similar presentations

Ads by Google