44con 2014 - hot or not, the hacker way, dan tentler

69
Hot or not The hacker way One nerd, a flir e4, and monkey island syndrome.

Upload: 44con

Post on 12-Jan-2015

220 views

Category:

Technology


7 download

DESCRIPTION

44CON 2014 - Hot or not, the hacker way, Dan Tentler Thermal imaging has been a subject that not many people get the opportunity to research, without an exceedingly high number of dollars on the table. This pet project of mine began in 2010 when I asked FLIR for a demo unit to do a series of tests in an effort to see how infrared could be used in the world of information security. Their PR people replied to me saying that they didn’t think a FLIR device could be used to read heat signatures from a computer because they weren’t sensitive enough. This year I got my hands on a FLIR E4, and hacked it to have 4x the resolution. Boy was that PR guy wrong.

TRANSCRIPT

Page 1: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Hot or not The hacker way

One nerd, a flir e4, and monkey island syndrome.

Page 2: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Hot or not The hacker way

One nerd, a flir e4, and monkey island syndrome.

I had an epiphany: Infosec is

Monkey Island.To win, just rub everything against everything else

Page 3: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Hot or not The hacker way

One nerd, a flir e4, and monkey island syndrome.

Page 4: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

I’m @Viss

Dan Tentler ——

• Co-Founder, Carbon Dynamics • Sysadmin / Architect:: 10 years • Security engineering / pentest / redteam:: 8 years • Done some talks • Got some press • etc.. my resume isn’t important. • I know, I know “we don’t care about you, get to the TOYS :D”

Page 5: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Who never thought this was cool?

Page 6: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

It used to be SUPER expensive

Page 7: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Con organizer powers go!

Page 8: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

#facepalm

Page 9: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Sorry, Haley.

Page 10: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Okay, wait.. how did you do that?

Page 11: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Okay, wait.. how did you do that?

Page 12: 44CON 2014 - Hot or not, the hacker way, Dan Tentler
Page 13: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Yes, a bunch of EE nerds reverse-engineered

the flir E4.

Page 14: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

This is how I imagine flir:

(or at least, I would hope)

Page 15: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Then pretty much it was this

Page 16: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

First finding of note

80x60 320x240

Math = 16x more res.

Page 17: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Second finding of note

Unlock new modes

Page 18: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

TL;DR

Flir E4 - ~$1000 US !

Flir E8 - ~$7000 US

Though the E8 has wifi, video more bells and whistles…

Page 19: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

• Lockpicking • Wireless networking/cracking • CPU/GPU/Cracking etc • Networking • .. more stuff like that

On to the meat.

Page 20: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

One is doing evil.

Buuuut, you can’t really tell :(

Page 21: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Raspi!

Page 22: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Lockpicking

Page 23: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Wireless

(wep is pretty much dead so this becomes kind of moot)

Page 24: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Wireless

Page 25: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Sigh.

Page 26: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

But .. surprises!

Page 27: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

As it turns out..

They’re kinda glorious for redteam engagements.

Page 28: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Cameras!

From the business end, this time

Page 29: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Cameras!

Page 30: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Cameras!

Page 31: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Cameras on the same lan?

Page 32: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Cameras!

Page 33: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Cars!

Page 34: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Cars!

Page 35: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

What do you see?

Page 36: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

What do you see?

Page 37: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

A better view

Page 38: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

A better view

Page 39: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Some editorial..

Page 40: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

… footprints?!

Page 41: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

… footprints?!

Page 42: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Physical Security

Page 43: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Physical Security

Page 44: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Physical Security

Page 45: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Physical Security

Page 46: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Physical Security

Page 47: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Physical Security

Page 48: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Physical Security

Page 49: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Spot the phone

Page 50: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Scada gear runs hot!

Page 51: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Scada gear runs hot!

Page 52: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

And now for something Completely different.

Page 53: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Entertaining and useful Not really security related

Page 54: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Cooling silliness.

Page 55: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Coffee!

Page 56: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Oven top / microwave exhaust fan

Page 57: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Sunburns!

Page 58: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

English Muffins!

Page 59: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Face.. hugger?

Page 60: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Quad UAV!

Page 61: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Legs?

Page 62: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Clothing

Page 63: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Guess :D

Page 64: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Original intended use

Page 65: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Addons!

Zinc Selenide lenses

Page 66: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Addons!

Page 67: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Addons!

Thanks robotroom.com!

Page 68: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Questions?

Page 69: 44CON 2014 - Hot or not, the hacker way, Dan Tentler

Thank you very much!