DC33 PenTest Workshop

Note: This is an exclusive product for DEF CON 33.  It is not available online.

PenTesting is the authorized, simulated cyberattack on a computer system, performed to evaluate the security of the system. The test is performed to identify weaknesses or vulnerabilities, including the potential for unauthorized parties to gain access to the system's features and data.  The purpose of the test is to understand and correct these vulnerabilities.  Additional general information and educational resources can be found in this HackerBox Guide at Step 6.

Ethical Considerations - Please carefully review, and take serious inspiration from, the code of ethics promulgated by The Open Organisation Of Lockpickers (TOOOL). These ethical guidelines certainly apply to the broader realm of penetration testing beyond lock sports.  Use your knowledge for good and not evil.

ESP32-2432S028R - Dual Core Platform with 2.8" Color Display

• General Information - including Enclosure Assembly
• Quick Start:
  • Power via USB cable and verify touch screen operation
  • Install the Latest Release of Bruce Firmware:
    • Browse to Web Flasher
    • Select: Latest Release and CYD
    • Specify: CYD-2432S028
    • Click CONNECT
• Survey of other available firmware 

Chameleon Ultra RFID Tool

• Tag Emulation Quick Start Video
• Detailed How To Video

Integrate Bruce Firmware with Chameleon Ultra

• Video 

RFID Tags  

• PCB Dog Tag with 13.56MHz NFC NTAG215
• Two S50 Mifare Classic 13.56MHz Cards
• Two T5577 125kHz RFID Cards
• Tag details and mobile app integration is covered in this HackerBox Guide at Step 1

Locksport and Folding 7-in-1 Lock Tool

• Video and links in this HackerBox Guide at Step 2

Reverse Engineer Iron-On Patch 
Four Exclusive Hacker Stickers
Tactical Tool Pouch with Velcro Patch