Tech Enabled Crime

Many Hats Club inaugural meet September 2018

Transcript

1. 9/16/2018 1
2. 9/16/2018 Tech Enabled Crime 1 2 3 4 5 2 @5w0rdfish
3. 9/16/2018 1 3 @5w0rdfish
4. 9/16/2018 Background 4 @5w0rdfish
5. 9/16/2018 Background 5 @5w0rdfish
6. 9/16/2018 Background 6 @5w0rdfish
7. 9/16/2018 Background 7 @5w0rdfish
8. 9/16/2018 2 8 @5w0rdfish
9. 9/16/2018 PERSEC failures Routines Lack of Awareness Lack of Cyber Awareness No time for tech Lack of Investment Small Circle High Privileges External Vendors Anonymization issues Fast Paced Environment Targets 9 @5w0rdfish
10. 9/16/2018 2 10 @5w0rdfish
11. 9/16/2018 Tech 11 @5w0rdfish
12. 9/16/2018 Tech 12 https://www.pentestpartners.com/security-blog/alarm-systems-alarmingly-insecure-oh-the-irony/ @5w0rdfish
13. 9/16/2018 • Replay attacks – Copying the signal and disarming the alarm • One alarm, when it receives packets that are longer than expected, hangs entirely. Tech 13 • It would use a continuous signal on 434MHz and block the signal. Pyronix Enforcer and the Texecom Premier Elite Alarms @5w0rdfish
14. 9/16/2018 Tech 14 https://motherboard.vice.com/en_us/article/438ydj/break-into-a-tesla-key-fob-lock?utm_source=mbtwitter https://www.wired.com/story/hackers-steal-tesla-model-s-seconds-key-fob/ @5w0rdfish
15. 9/16/2018 RadioID Proxmark • 2 x challenges • 2 x responses KeyFob • Look Up Table • Replay to Car Car Tech 15 The fobs made by Pektron, used only a weak 40-bit cipher to encrypt those key fob codes • Yard Stick • A Proxmark, • a Raspberry Pi minicomputer, • their pre-computed table of keys on a portable hard drive, and some batteries @5w0rdfish
16. 9/16/2018 Tech 16 @5w0rdfish
17. 9/16/2018 Tech 17 https://IDidntMeanToDoItImSorry.not/sorry @5w0rdfish
18. 9/16/2018 Tech 18 https://motherboard.vice.com/en_us/article/43qkgb/flaws-in-gas-station-software-let-hackers-change-prices-steal-fuel-erase-evidence @5w0rdfish
19. 9/16/2018 Tech 19 https://motherboard.vice.com/en_us/article/43qkgb/flaws-in-gas-station-software-let-hackers-change-prices-steal-fuel-erase-evidence @5w0rdfish
20. 9/16/2018 Tech 20 https://www.theregister.co.uk/2018/07/09/gas_station_hack/ http://www.fox2detroit.com/news/local-news/thieves-hack-into-detroit-gas-pump-stealing-more-than-600-gallons @5w0rdfish
21. 9/16/2018 Tech 21 @5w0rdfish https://www.youtube.com/watch?v=y7GW-qACbvQ
22. 9/16/2018 4 22 @5w0rdfish
23. 9/16/2018 Hands On 23 @5w0rdfish
24. 9/16/2018 Hands On 24 @5w0rdfish
25. 9/16/2018 Hands On 25 @5w0rdfish
26. 9/16/2018 Hands On 26 @5w0rdfish
27. 9/16/2018 Hands On 27 Our Lab: Mazu Research Mazu.Tech @MazuTech https://www.youtube.com/watch?v=aqS-QsuFFTU @5w0rdfish
28. 9/16/2018 Please tweet me your questions! @5w0rdFish END