Diebold ATM Bug

[epcdaniel]

Scary to think an ATM is running from Windows at all. It should be running within its own independant shell.

[dontwalkhand]

PC-Doctor for Windows on a Chase ATM? Hahahaa.

[iTechNetwork]

if its runing ME/2000/98 click start > run > type "con/con" :)

[soupnrc]

None of what is accessable in this video is exploitable. The only way to get your grubby hands on the cash is to make a withdrawl or open the safe of the atm.

[Commack08]

What about the "clear jam" function in the dispenser.. Has that been fixed too or is it still exploitable ? (if a bill gets jammed while trying to dispense, the machine will feed another bill through in an attempt to clear the jam.)

Also, how does the bill counter "count" the number of bills being dispensed.. I'd heard tale of using a bright light source to "jackpot" an ATM.. (The "counter" registers the shadow of each bill passing, so no shadow, keep dispensing.)

[xsk8erdudex]

The PIN number is encrypted within the firmware of the keypad and then transmitted to the computer, it's not a standard input device anyway.

-Diebold Tech-

[xsk8erdudex]

Lol, the desktop is supposed to be disabled by default and now that chase has standardized the ATM profiles this is really unlikely to encounter. Also you can't changed the recognized denominations from the windows interface. You have to physically configure the cassettes in a Diebold or an NCR ATM. In a Tranax or Triton you can adjust the denominations from the keypad if you have the admin password. Another thing, these ATM's aren't connected to the internet, and a keylogger wouldn't work.

[Tnuh555]

No games =(

[Commack08]

I dont think you can trigger the dispenser from the "windows" type screens, but what I DO know is you can reset the value of the bills inside the ATM. Tell it that its carrying 5's or 1's, then make a legitimate withdrawal of $300.00. Since the "brains" think the machine is loaded with 1's, it will dispense 300 bills. (300 x 20 is 6000 bucks the easy way.)

[dontwalkhand]

@Commack08 What ATM are you using that can give you 1's? We solved this problem in the US...the ATM can ONLY GIVE YOU 20s. Changing the denomination would just mean changing it from a cassette with 20s to another cassete with 20s...big whoop.

[trueboss926]

download a keylogger

[takahashi64]

the taskbar is not blocked from the administrator account

[Cabinmn2002]

What did he hack he clicked a couple buttons and the menu went away. Didn't see anything happen.

[KioskHacking]

The point of the vid was to point out that Windows isnt supposed to come to the top of the app because it poses as a risk because thiefts can install keyloggers on the machine (If it has internet access or physical access to the PC) and get people's credit info.

[Cabinmn2002]

I didn't see that cause soon as you clicked on a icon the menu went away. And how do you load the keylogger on to the atm I did not see any cd rom or usb hookup?

[KioskHacking]

If he cant get physical access to the PC then he can try to see if it has Internet Acess and download the keylogger, if not then the ATm is secure.

[djmaxmv]

the atm have internet

i fix atm

the bank ask you for a T1 conexxion

[KioskHacking]

How did you do that? I must know! Lol

[daalienx14]

pac can you tell me wtf is so good about diebold... what program is the one that allows the money to come out... thats all i think we care about... hehehehehe =)

[djharris68]

this has since then been fixed and is very uncommon. having a touch screen is what made this scenario a little dangerous.

[antiwonggalonggalo]

how u do that man>? how u do that? whut gets teh menu bro?

[PacApp5]

wtf? explanation? 

and why didn't you click on Diebold?