28c3 lightning talks day3 - andrei costinandreicostin.com/papers/conf - 28c3 - harvesting boarding...
TRANSCRIPT
![Page 1: 28C3 Lightning Talks Day3 - Andrei Costinandreicostin.com/papers/Conf - 28C3 - Harvesting Boarding Passes... · Various /dev/random ideas Impersonate the person with a higher degree](https://reader033.vdocuments.net/reader033/viewer/2022041703/5e42fd699e0a0a6b165842a3/html5/thumbnails/1.jpg)
Harvesting boarding passes
28C3 – Lightning Talks – Day3
Andrei Costin <[email protected]>
andreicostin.com/papers
![Page 2: 28C3 Lightning Talks Day3 - Andrei Costinandreicostin.com/papers/Conf - 28C3 - Harvesting Boarding Passes... · Various /dev/random ideas Impersonate the person with a higher degree](https://reader033.vdocuments.net/reader033/viewer/2022041703/5e42fd699e0a0a6b165842a3/html5/thumbnails/2.jpg)
Intro
![Page 3: 28C3 Lightning Talks Day3 - Andrei Costinandreicostin.com/papers/Conf - 28C3 - Harvesting Boarding Passes... · Various /dev/random ideas Impersonate the person with a higher degree](https://reader033.vdocuments.net/reader033/viewer/2022041703/5e42fd699e0a0a6b165842a3/html5/thumbnails/3.jpg)
Modern concerns
![Page 4: 28C3 Lightning Talks Day3 - Andrei Costinandreicostin.com/papers/Conf - 28C3 - Harvesting Boarding Passes... · Various /dev/random ideas Impersonate the person with a higher degree](https://reader033.vdocuments.net/reader033/viewer/2022041703/5e42fd699e0a0a6b165842a3/html5/thumbnails/4.jpg)
Online check-in is established trend
![Page 5: 28C3 Lightning Talks Day3 - Andrei Costinandreicostin.com/papers/Conf - 28C3 - Harvesting Boarding Passes... · Various /dev/random ideas Impersonate the person with a higher degree](https://reader033.vdocuments.net/reader033/viewer/2022041703/5e42fd699e0a0a6b165842a3/html5/thumbnails/5.jpg)
We can learn airline preferences
![Page 6: 28C3 Lightning Talks Day3 - Andrei Costinandreicostin.com/papers/Conf - 28C3 - Harvesting Boarding Passes... · Various /dev/random ideas Impersonate the person with a higher degree](https://reader033.vdocuments.net/reader033/viewer/2022041703/5e42fd699e0a0a6b165842a3/html5/thumbnails/6.jpg)
FTdetails – checkins, logins, other actions
![Page 7: 28C3 Lightning Talks Day3 - Andrei Costinandreicostin.com/papers/Conf - 28C3 - Harvesting Boarding Passes... · Various /dev/random ideas Impersonate the person with a higher degree](https://reader033.vdocuments.net/reader033/viewer/2022041703/5e42fd699e0a0a6b165842a3/html5/thumbnails/7.jpg)
Preferred hours – predictable time
![Page 8: 28C3 Lightning Talks Day3 - Andrei Costinandreicostin.com/papers/Conf - 28C3 - Harvesting Boarding Passes... · Various /dev/random ideas Impersonate the person with a higher degree](https://reader033.vdocuments.net/reader033/viewer/2022041703/5e42fd699e0a0a6b165842a3/html5/thumbnails/8.jpg)
Preferred routes/ports – predictable space
![Page 9: 28C3 Lightning Talks Day3 - Andrei Costinandreicostin.com/papers/Conf - 28C3 - Harvesting Boarding Passes... · Various /dev/random ideas Impersonate the person with a higher degree](https://reader033.vdocuments.net/reader033/viewer/2022041703/5e42fd699e0a0a6b165842a3/html5/thumbnails/9.jpg)
Predictable $HOME
![Page 10: 28C3 Lightning Talks Day3 - Andrei Costinandreicostin.com/papers/Conf - 28C3 - Harvesting Boarding Passes... · Various /dev/random ideas Impersonate the person with a higher degree](https://reader033.vdocuments.net/reader033/viewer/2022041703/5e42fd699e0a0a6b165842a3/html5/thumbnails/10.jpg)
Various /dev/random ideas
Track reconstruction/following
and eventually analysis and alarm in case out-of-pattern/out-of-plan actions occur
Learn travelling habits
so that next “moves” can be predicted/evaluated and attacker-actions planned accordingly, etc.
![Page 11: 28C3 Lightning Talks Day3 - Andrei Costinandreicostin.com/papers/Conf - 28C3 - Harvesting Boarding Passes... · Various /dev/random ideas Impersonate the person with a higher degree](https://reader033.vdocuments.net/reader033/viewer/2022041703/5e42fd699e0a0a6b165842a3/html5/thumbnails/11.jpg)
Various /dev/random ideas
Impersonate the person with a higher degree of credibility given level of details learned
Learn very-near future plans
every 24h window try to check-in given FT-number and last name and see what flights are scheduled for the person)
![Page 12: 28C3 Lightning Talks Day3 - Andrei Costinandreicostin.com/papers/Conf - 28C3 - Harvesting Boarding Passes... · Various /dev/random ideas Impersonate the person with a higher degree](https://reader033.vdocuments.net/reader033/viewer/2022041703/5e42fd699e0a0a6b165842a3/html5/thumbnails/12.jpg)
Various /dev/random ideas
Direct effects on victim’s plans
checkin cancelation
checkin seat-assignment convenient to the attacker so that next-phases of social engineering can be conducted
group-checkin impersonation so that person is being more or less associated with a group of persons (good or bad) without their own will
![Page 13: 28C3 Lightning Talks Day3 - Andrei Costinandreicostin.com/papers/Conf - 28C3 - Harvesting Boarding Passes... · Various /dev/random ideas Impersonate the person with a higher degree](https://reader033.vdocuments.net/reader033/viewer/2022041703/5e42fd699e0a0a6b165842a3/html5/thumbnails/13.jpg)
Various /dev/random ideas
Marriage cheating cases more easily detectable, etc.
Useful for private-detective services
Deliberate “leakage” of fake/misleading boarding passes by the “victim”
“victim” is actually an attacker in this case
so that intelligence gathering dudes will have a hard time tracking down the so called “victim”
![Page 14: 28C3 Lightning Talks Day3 - Andrei Costinandreicostin.com/papers/Conf - 28C3 - Harvesting Boarding Passes... · Various /dev/random ideas Impersonate the person with a higher degree](https://reader033.vdocuments.net/reader033/viewer/2022041703/5e42fd699e0a0a6b165842a3/html5/thumbnails/14.jpg)
Useful “google dorks”
![Page 15: 28C3 Lightning Talks Day3 - Andrei Costinandreicostin.com/papers/Conf - 28C3 - Harvesting Boarding Passes... · Various /dev/random ideas Impersonate the person with a higher degree](https://reader033.vdocuments.net/reader033/viewer/2022041703/5e42fd699e0a0a6b165842a3/html5/thumbnails/15.jpg)
Useful “google dorks”
KLM
“BOARDING PASS" "Please keep this document until the end of your trip" filetype:pdf
intitle:"Internet Check-In" filetype:pdf
"Internet-CheckIn-Boarding-Docs.pdf“
LUFTHANSA
"API+Boarding+Pass"+filetype:pdf
(name OR nome) "etix" "Boarding Pass" filetype:pdf
boarding pass etix intitle:lufthansa intitle:pdf filetype:pdf
![Page 16: 28C3 Lightning Talks Day3 - Andrei Costinandreicostin.com/papers/Conf - 28C3 - Harvesting Boarding Passes... · Various /dev/random ideas Impersonate the person with a higher degree](https://reader033.vdocuments.net/reader033/viewer/2022041703/5e42fd699e0a0a6b165842a3/html5/thumbnails/16.jpg)
Useful “google dorks”
AMERICAN AIRLINES
"Print+Boarding+Pass(es)“
EASYJET
"easyJet.com Internet check-in boarding pass" filetype:pdf
AEGEAN
"boardingPass.pdf“
JETSTAR
"Web Check-in Boarding Pass" filetype:pdf
![Page 17: 28C3 Lightning Talks Day3 - Andrei Costinandreicostin.com/papers/Conf - 28C3 - Harvesting Boarding Passes... · Various /dev/random ideas Impersonate the person with a higher degree](https://reader033.vdocuments.net/reader033/viewer/2022041703/5e42fd699e0a0a6b165842a3/html5/thumbnails/17.jpg)
Take away: secure your sensitive details
![Page 18: 28C3 Lightning Talks Day3 - Andrei Costinandreicostin.com/papers/Conf - 28C3 - Harvesting Boarding Passes... · Various /dev/random ideas Impersonate the person with a higher degree](https://reader033.vdocuments.net/reader033/viewer/2022041703/5e42fd699e0a0a6b165842a3/html5/thumbnails/18.jpg)
Take away: Contribute
http://www.exploit-db.com/google-dorks/
![Page 19: 28C3 Lightning Talks Day3 - Andrei Costinandreicostin.com/papers/Conf - 28C3 - Harvesting Boarding Passes... · Various /dev/random ideas Impersonate the person with a higher degree](https://reader033.vdocuments.net/reader033/viewer/2022041703/5e42fd699e0a0a6b165842a3/html5/thumbnails/19.jpg)
Take away: Don’t stalk!
![Page 20: 28C3 Lightning Talks Day3 - Andrei Costinandreicostin.com/papers/Conf - 28C3 - Harvesting Boarding Passes... · Various /dev/random ideas Impersonate the person with a higher degree](https://reader033.vdocuments.net/reader033/viewer/2022041703/5e42fd699e0a0a6b165842a3/html5/thumbnails/20.jpg)
Thanks
andreicostin.com/papers
Harvesting boarding passes