


Using combination of cloud services and mobile security, it is now possible to embed credit card (or NFC key to a lock) in your phone. With prevalence of NFC smartphones, a new implementation of this technology is recently gaining attention: mobile contactless payments/access control, on Android known as Host Card Emulation. A list of several hundred hotels affected included. Among other practical exercises performed on real installations, the attendees will reverse-engineer an example hotel access system, and as a result will be able to open all the doors in facility.

It is still surprisingly easy to clone most access control cards used for buildings today. However, the vulnerabilities pointed out years ago, probably won’t be resolved in a near future. NFC, on the other hand, has been around us for quite long. Based on hands-on exercises on real devices (including multiple smart locks) as well as a deliberately vulnerable, training hackmelock. Compressing years of painful debugging and reversing into practical, useful checklists. This is probably the most exhaustive and up to date training regarding BLE security – for both pentesters and developers. Not to mention best practices guidelines, which are practically absent. And yet, the knowledge on how to comprehensively assess their security seems very uncommon. Alarming vulnerabilities of these devices have been exposed multiple times recently. BLE devices surround us more and more – not only as wearables, toothbrushes and sex toys, but also smart locks, medical devices and banking tokens. The hardware will allow for BLE analysis (sniffing, intercepting), cloning and cracking multiple kinds of proximity cards, analyse BLE or NFC mobile applications, and practice most of the training exercises later at home.īluetooth Low Energy is one of the most exploding IoT technologies.

DURATION: 3 DAYS CAPACITY: 30 pax SEATS AVAILABLE: SOLD OUTĮarly bird registration rate ends on the 28th of FebruaryĮach attendee will receive a hardware pack worth over 300 EUR that includes among others Proxmark 3, a rooted Android smartphone and Raspberry Pi (detailed below).
