Security BSides London 2017

Have you ever watched a film where the actor attaches a 'hacking device' to something, and after a few seconds (and some flashing lights) the thing magically unlocks? Did you think to yourself 'that's totally unrealistic!'?

Well now it's real life! Building on the previous credential stealing attack by Mubix, Trevor and Jon have created 'Pi-Key', a £20 device built on the Raspberry Pi Zero which steals credentials from Windows machines, cracks them and then unlocks the machine, all in under 60 seconds*.

This talk explains the tool we've built and how it works, why we chose the final components we did and finally the success rate we've had. All instructions and code will be available after the talk so you can build your own!