Skip to content

Elevator Hacking: From the Pit to the Penthouse

Deviant OllamHoward Payne

Deviant Ollam and Howard Payne explores elevator hacking: from the pit to the penthouse at DEF CON 22, examining penetration-testing and practical defenses.

Summary

Architecture and Background

Elevator Hacking - From the Pit to the Penthouse Deviant Ollam The CORE Group Howard Payne The CORE Group Throughout the history of hacker culture, elevators have played a key role. From the mystique of students at MIT taking late-night rides upon car tops (don't do that, please!) to the work of modern pen testers who use elevators to bypass building security systems (it's easier than you think!) these devices are often misunderstood and their full range of features and abilities go unexplored. This talk will be an in-depth explanation of how elevators work...

Vulnerability Analysis

allowing for greater understanding, system optimizing, and the subversion of security in many facilities. Those who attend will learn why an elevator is virtually no different than an unlocked staircase as far as building security is concerned! While paying the bills as a security auditor and penetration testing consultant with his company, The CORE Group, Deviant Ollam is also member of the Board of Directors of the US division of TOOOL, The Open Organisation Of Lockpickers.

Exploitation and Demonstrations

Deviant runs the Lockpicking Village with TOOOL at HOPE, DEFCON, ShmooCon, etc, and he has conducted physical security training sessions for Black Hat, DeepSec, ToorCon, HackCon, ShakaCon, HackInTheBox, ekoparty, AusCERT, GovCERT, CONFidence, the United States Military Academy at West Point, and the United States Naval Academy at Annapolis. His favorite Amendments to the US Constitution are, in no particular order, the 1st, 2nd, 9th, & 10th. Twitter: @deviantollam, @TCGsec Howard Payne is an elevator consultant from New York specializing in code compliance and accident investigations.

Remediation and Defensive Strategies

He has logged over 9,000 hours examining car-tops, motor rooms, and hoistways in cases ranging from minor injuries to highly-publicized fatalities, and has contributed to forensic investigations that have been recognized by local, State, and Federal courts. Howard has appeared on national broadcast television making elevators do things they never should. When he's not riding up and down high-rise hoistways, he moonlights as a drum and bass DJ and semi-professional gambler. His favorite direction is Up and his favorite elevator feature is riot mode. Twitter: @SgtHowardPayne

Related talks

Main Stage·47 min

  • DEF CON
  • Red Team
  • Date: Aug 2014
  • Location: Las Vegas

Nir Valtman

Nir Valtman explores bug bounty programs evolution at DEF CON 22, examining penetration-testing and practical defenses.

penetration-testingvulnerability-assessmentsecurity-research+1

Main Stage·42 min

  • DEF CON
  • Red Team
  • Date: Aug 2014
  • Location: Las Vegas

Major Malfunction

Major Malfunction explores old skewl hacking: porn free! at DEF CON 22, examining penetration-testing and practical defenses.

penetration-testingvulnerability-assessmentsecurity-research+1