Get to the Money - Hacking PoS and PoP Systems
Explore the world of Point of Sale (POS) and Point of Purchase (POP) system vulnerabilities in this eye-opening conference talk from HITB GSEC 2017. Delve into the methods attackers use to access these critical retail systems, with a focus on SAP POS. Witness a fully operational attack vector demonstration, from initial breach to accessing sensitive data. Learn about the structure of payment processing, communication between cashier workstations and POS servers, and potential vulnerabilities in store manager connections. Discover remote code execution techniques and ways to gain full control of these systems. Examine encryption methods, extra server vulnerabilities, and patches. Gain practical insights into POS security beyond common knowledge, and understand why the retail sector faces the most security incidents related to credit card theft. Be prepared for a new perspective on credit card transactions after this revealing presentation.