How we hacked a vending machine in 3 days
summary
A presentation describing how vulnerabilities in a vending machine’s Bluetooth implementation were exploited to bypass the purchase process and obtain snacks for free. It covers the specific Bluetooth-related weaknesses found in the machine’s firmware/communication and the practical steps used over a three-day effort to exploit them.
AI-written summary · about
chapters (15)
- 0:00Talk introduction
- 1:06Ethical context
- 3:13Day one hypothesis
- 6:25Purchase flow
- 10:18Bluetooth architecture
- 13:52Response algorithm
- 15:36Python exploit
- 19:29Adjusting delay
- 21:21Product obtained
- 22:03Bluetooth ESP32
- 24:13Risks and lessons
- 26:02Algorithm predictability
- 27:02Bluetooth study resources
- 28:07Closing remarks
- 28:30Q&A
related talks
25mSweynTooth: Unleashing Mayhem over Bluetooth Low Energy
38mMission mPOSsible
01h 06mBackdoors in Back Doors
36mI just hacked your app!
51mBluetooth Hacking: Tools And Techniques
29mFrom pocket to Pwn: How we hacked a multinational Corp for $200 with... (Tim Shipp)
33mHacking Next-Gen ATMs: From Capture to Cashout
45mATMS how to break them to stop the fraud