Physical Security

October 5, 2019 · View on GitHub

General
Tamper Evident Related
Lockpicking
Alarm Systems
Doors

General
- 101
  - Physical Security - Centre for the Protection of National Infrastructure - UK
- Articles/Blogposts/Writeups
- Videos/Talks
  - Physical Security: From Locks to Dox - Jess Hires
    - This talk is an introduction to Physical Penetration Testing. I briefly cover the Penetration Testing Methodology from a Physical Security perspective, but the talk is mostly oriented around the analysis and exploitation phases. Various attacks will be covered, from lock picking and bypass to safe cracking. No prior experience with lock picking or physical security is required, I will start with the basics and work up to advanced topics.
  - Physical Penetration Testing You Keep a Knockin But You Cant Come In Phil Grime
  - Home Insecurity: No Alarms, False Alarms, and SIGINT
    - The market share of home security systems has substantially increased as vendors incorporate more desirable features: intrusion detection, automation, wireless, and LCD touch panel controls. Wireless connectivity allows vendors to manufacture cheaper, more featureful products that require little to no home modification to install. Consumer win, since adding devices is easier. The result: an ostensibly more secure, convenient, and connected home for a larger number of citizens. Sadly, this hypothesis is flawed; the idea of covering a home with more security sensors does not translate into a more secure home. Additionally, the number of homes using these vulnerable systems is large, and the growth rate is increasing producing a even larger problem. In this paper, we will demonstrate a generalized approach for compromising three systems: ADT, the largest home security dealer in North America; Honeywell, one of the largest manufacturers of security devices; and Vivint, a top 5 security dealer. We will suppress alarms, create false alarms, and collect artifacts that facilitate tracking the movements of individuals in their homes
  - Defcon 19: DIY Non-Destructive-Entry
  - Home Alone with localhost - Automating Home Defense - Chris Littlebury Defcon22
  - 88MPH Digital tricks to bypass Physical security- Andrew MacPherson - ZaCon4
- Tools
  - Hacks and Crafts: Improvised Physical Security Tools for Improvised Situations - CG
  - zoneminder
    - A full-featured, open source, state-of-the-art video surveillance software system.
Tamper Evident Related
- 101
  - What does tamper-evident mean?
  - Tamper-evident technology - Wikipedia
- Articles/Blogposts/Writeups
  - Tamper resistance and hardware security
  - How to Steal a Nuclear Warhead Without Voiding Your XBox Warranty (paper)
- Talks/Videos
  - Introduction to Tamper Evident Devices -DEFCON 19
Lock Picking
- 101
  - Wikipedia on Lockpicking
- General
  - Various types of locks
  - lockwiki
- Books
- Guides
- Videos/Talks
  - Safe to Armed in Seconds - Deviant Ollam - DEF CON 19
  - This Key is Your Key, This Key is My Key - Howard Payne & Deviant Ollam
  - I'll Let Myself In Tactics of Physical Pentesters - Deviant Ollam -B-sides Orlando 2017
  - Introduction to Lockpicking and Physical Security - DEFCON 13
  - Lockpicking by Deviant Ollam
    - Glorious set of videos and instructional information. Must watch.
  - Electronic Locks - are really secure?!
    - Many people are familiar with the ways in which mechanical locks can be attacked, compromised, and bypassed. Indeed, the hands-on workshops and the availability of pick tools at the Lockpick Village is an enduring part of the fun at DeepSec and other popular security conferences around the world. Often, attendees will ask questions like, "So, this is really great... but what if someone is using an electronic lock? How hard is it to open the door, then?" Unfortunately, due to time and space constraints, our answer is typically, "Well... that's a very complicated question. Sometimes they're good, and sometimes they're weak." We often promise greater detail another day, another time... but until now that time has not come. Finally now, however, TOOOL will describe some of the most popular electronic locks and show examples of how they can sometimes be attacked.
  - Distinguishing Lockpicks: Raking vs Lifting vs Jiggling and More - Deviant Ollam
  - Mastering Master Keys - Deviant Ollam - HOPE Number 9
  - ! $@$ Lockpicking & Physical security - Deviant Ollam - Best lockpicking course abc tutorial diy
  - Lockpicking, Safecracking, & More by Deviant Ollam & renderman at ShmooCon 3
    - For the first time on the same stage together at ShmooCon, renderman and i give a funny and informative presentation about lockpicking using much of my traditional material as well as a whole load of new content that my favorite Canadian demonstrates. In addition to his all-around general badassery, renderman even opened up a locked safe on stage... one that he had never seen before and was simply given by an audience member. That took fucking balls.
  - "Lockpicking in Real Life versus on the Screen" - The Eleventh HOPE (2016)
    - We all know that Hollywood has a difficult time portraying hackers accurately. This quirk often extends to the realm of showing lockpicking in movies and on TV. But sometimes, a film gets it really right! This talk is both an introduction to lockpicking (in case you still need to learn) as well as a walk through some of the best - and some of the worst - scenes of lockpicking that have ever been seen by movie and TV audiences. Learn about how to be a better lockpicker and a better filmmaker... all at the same time!
  - Electronic Safe Fail
  - Commonly safes are used in IT to secure backup tapes, certificate roots, and other sensitive material. This talk will demonstrate that many of the safes used to secure these sensitive materials are ineffective. Today there are many varieties of electronic safes that utilize a VERY weak mechanism to physically lock the safe. In many cases there are ways to open the safe in less than a minute that leaves no evidence behind. (Sometimes only a few seconds) This talk will cover my experience discovering the flaw and dealing with a safe vendor to issue a fix, then discovering the inadequacies of the fix itself and vendor's continuing ignorance of the problem with most electronic locks. Fixing these problems can be relatively easy. There will be general instruction on how to fix the problems and what needs to be done by the vendors to make safes well... safer."
  - Lockpicking how to video using a cut-away lock
  - Distinguishing Lockpicks: Raking vs Lifting vs Jiggling and More - Deviant Ollam
- Sites/Organizations
  - The Open Organization of Lockpickers
    - The mission of the Open Organisation Of Lockpickers is to advance the general public knowledge about locks and lockpicking. By examining locks, safes, and other such hardware and by publicly discussing our findings we hope to strip away the mystery with which so many of these products are imbued. The more that people know about lock technology, the better they are capable of understanding how and where certain weaknesses are present. This makes them well-equipped to participate in sportpicking endeavors and also helps them simply be better consumers in the marketplace, making decisions based on sound fact and research.
  - lockpicking101
    - A community dedicated to the fun and ethical hobby of lock picking.
  - /r/lockpicking - Reddit Lockpicking Community
  - keypicking.com
Alarm Systems
Doors
- 101
- Articles/Blogposts/Writeups
  - Door Control Systems: An Examination of Lines of Attack
- Talks/Videos
  - What Does The Perfect Door Or Padlock Look Like? - Deviant Ollam - BruCON 0x08
  - What Does The Perfect Door Or Padlock Look Like? - Deviant Ollam - BruCON 0x08
  - The Search for the Perfect Door - Deviant Ollam - Shakacon
    - You have spent lots of money on a high-grade, pick-resistant, ANSI-rated lock for your door. Your vendor has assured you how it will resist attack and how difficult it would be for someone to copy your key. Maybe they’re right. But… the bulk of attacks that both penetration testers and also criminals attempt against doors have little or nothing to do with the lock itself! This talk will be a hard-hitting exploration (full of photo and video examples) of the ways in which your door — the most fundamental part of your physical security — can possibly be thwarted by someone attempting illicit entry. The scary problems will be immediately followed by simple solutions that are instantly implementable and usually very within-budget. You, too, can have a near-perfect door… if you’re willing to learn and understand the problems that all doors tend to have.
  - Physical Security - Everything That's Wrong With Your Typical Door - Deviant Ollam - SANS Webcast

Table of Contents