A Logo

Feel free to include my content in your page via my
RSS feed

Help Irongeek.com pay for
bandwidth and research equipment:

Search Irongeek.com:

Affiliates:
Irongeek Button
Social-engineer-training Button

Help Irongeek.com pay for bandwidth and research equipment:

paypalpixle


RavenHID: Remote Badge Gathering -or- Why we sit in client bathrooms for hours - Lucas Morris, Adam Zamora Derbycon 2014 (Hacking Illustrated Series InfoSec Tutorial Videos)

RavenHID: Remote Badge Gathering -or- Why we sit in client bathrooms for hours
Lucas Morris, Adam Zamora
Derbycon 2014

As penetration testers and security professionals, we need ways to ensure that we can gain persistent access to secured areas and facilities during our testing. What we need is a way to gather cards during penetration tests that won’t alert our targets that we’ve copied their cards. In order to be discreet, we must copy their cards from a short distance with a normal looking bag. During this time we will talk about how we have overcome these challenges with a weaponized HID reader. We’ll also talk about how we use this during our ongoing penetration tests to gain access on some of our most physically secure clients- as well as provide details on card systems and how they work. Finally, we’ll also share the design and process for our device, the RavenHID- which improves on some previous garage reader designs allowing the gathering of badges from up to two feet directly to a mobile phone.

Back to Derbycon 2014 video list

Printable version of this article

15 most recent posts on Irongeek.com:


If you would like to republish one of the articles from this site on your webpage or print journal please contact IronGeek.

Copyright 2016, IronGeek
Louisville / Kentuckiana Information Security Enthusiast