No Key, No PIN, No Combo, No Problem: Pwning ATMs for Fun and Profit
Roy Davis evaluates modern retail ATM defenses, demonstrating physical bypasses, electronic lock manipulation, and safe compromise techniques that defeat recent security patches.
Summary
The Evolution of Commercial ATM Defenses
Since the pioneering jackpotting research of Barnaby Jack, ATM manufacturers have hardened network protocols, locked down USB ports, and upgraded safe electronic locks.
Auditing Modern Physical and Digital Lock Mechanisms
Roy Davis investigates the physical construction of retail ATMs, dissecting electronic dial locks, safe chassis tolerances, and interior cable routings.
Executing Physical Bypasses and Safe Manipulations
Davis demonstrates practical bypass techniques against supposedly hardened ATM safes, bypassing digital combination locks and accessing internal cash dispensing mechanisms without tools.
Actionable Countermeasures for Financial Institutions
The author provides retail ATM operators and financial institutions with physical hardening guidelines, intrusion sensor placements, and lock upgrade recommendations.
Related talks
Main Stage·42 min
Mark Omo · James Rowley
Reverse engineers electronic gun safes and commercial digital vaults, demonstrating effortless physical and electromagnetic bypasses across leading brands.
Main Stage·39 min
Matt Burch
Analysis and proof-of-concept exploitation of six zero-day vulnerabilities in Diebold Nixdorf Vynamic Security Suite ATM disk encryption.
Main Stage·40 min
Dennis Giese · braelynn
Security evaluation and hardware attack surface analysis of smart electronic lockers and storage cabinets.