Hack Your ATM with Friend's Raspberry.Py
summary
Researchers drop a Raspberry Pi in service slot and use USB‑to‑serial adapters, PySerial/PyUSB and Facedancer to perform a USB/COM man‑in‑the‑middle that sniffs Track 2 and plain‑text PINs and replays proprietary device frames. They show XFS libraries and exact XFS commands to open safe/dispense and demonstrate remote dispensing via a plugged‑in RasPi, plus an MS08‑067 Windows exploit path to upload malware; service‑door key opening takes ~40 seconds.
AI-written summary · about
chapters (26)
- 0:00Start
- 6:48Card reader
- 10:15Like valid slots
- 11:223D printing skimming
- 12:41ATM countermeasures
- 17:35Hardware
- 18:26Software
- 19:39XFS insecurity
- 20:08XFS, PIN Keypad device
- 20:54XFS, Identification Card Device
- 21:43XFS, Cash Dispenser Device Cash Dispenser Device - Cash withdrawal without authorization
- 22:52XFS authentication
- 24:26Windows XP still alive
- 27:45RS232 insecurity
- 28:31Advantages
- 29:27Difficulties
- 31:20Life without wireshark
- 31:43Typical data
- 31:57Typical serial protocol
- 32:40IDC device flow
- 33:02IDC device attacks
- 33:47PIN device flow
- 34:27PIN MITM attack
- 35:03PIN device MITM attacks
- 35:34Dispenser device flow
- 38:30Conclusions
related talks
45mATMS how to break them to stop the fraud
33mHacking Next-Gen ATMs: From Capture to Cashout
50mBreaking Payment Points of Interaction (POI)
58mHow I used to rob banks!
28mGoldilocks and the Three ATM Attacks
01h 03mHack To Discover Weaknesses In A Series Of Smartcards
38mMission mPOSsible
40mWhen hardware attacks scale