Applied Cash Eviction through ATM Exploitation
Trey Keown and Brenda So reverse engineer automated teller machines, defeating firmware code signing and discovering network zero-days to jackpot ATMs remotely.
Summary
The Stagnant State of Commercial ATM Security
Despite a decade of high-profile ATM jackpotting disclosures, legacy architectures and unverified peripheral middleware continue to plague retail ATMs.
Hardware Reverse Engineering and Firmware Emulation
Trey Keown and Brenda So restore physical JTAG interfaces, defeat firmware code signing, and construct custom bank host simulators to speak proprietary ATM transaction protocols.
Discovering Two Zero-Day Remote Exploits
The authors reveal a critical remote administration flaw granting unauthenticated root code execution, and a middleware vulnerability permitting remote network command injection.
Executing Remote Network Jackpotting
Live demonstrations illustrate how an attacker on the same banking network can command the physical cash dispenser to eject currency without physical machine tampering.
Related talks
Main Stage·43 min
Yaniv Balmas · Lior Oppenheim
Yaniv Balmas and Lior Oppenheim demonstrate reverse engineering KVM switch firmware, subverting the 8051 microcontroller to install an undetectable, persistent hardware keylogger.
Main Stage·41 min
Jeroen 'Jeroen' Domburg
Demonstrates hardware hacking and reverse engineering to run custom Linux kernels and open software on inexpensive USB webcams.
Main Stage·42 min
Mark Omo · James Rowley
Reverse engineers electronic gun safes and commercial digital vaults, demonstrating effortless physical and electromagnetic bypasses across leading brands.