|

Legal
Industry Educational Institution
greater Philadelphia area
On
a basic walk-through The CORE Group was able to identify major
weaknesses in the front door, passive IR exit systems, elevator
controls, and virtually all of the classroom and staff office
doors. Nearly all filing cabinets and storage cabinets were
either unlocked or locked with hardware of such weak design
that even improvised tools could be used to open them. Staff
were totally unprepared to counter basic social engineering
attempts and allowed strangers access to wiring, network equipment,
and critical data. We conducted a debriefing with the management,
helped them make some low-cost changes to some of the more
critical locks, and held a staff training session. The school
became much more prepared to properly guard their student
records, financial data, and technology equipment.
County
Paramedic Dispatch Vehicles
northern Delaware
A
member of The CORE Group was asked to inspect and assess the
quality of the locks used in mobile paramedic vehicles on
their chests that store "high restriction" drugs
and medical paraphernalia. The official, sanctioned hardware
offered virtually no protection at all and could be opened
by persons with little to no formal surreptitious entry training.
It is alleged that the reports of our findings have lead to
requests for upgrades of the lock mechanisms to pick-resistant
and pry-resistant hardware. This potential change could have
the ability to keep tens of thousands of dollars worth of
life-saving medicines out of the hands of illegal street dealers.

Hybrid
Keypad/Keyed Lock Door Access Control
Las Vegas, Nevada
A
high-end access control door lock was produced that incorporated
an electronic keypad as well as a conventional keyed locking
mechanism. Within the security industry there were rumors
of a number of manifold flaws in this system, and members
of The CORE Group were able to quickly identify and successfully
exploit these weaknesses, making the door handle operate repeatedly
and reliably without proper credentials. This exploit was
demonstrated live during one of our Black Hat training sessions,
during which time we explained to the students in attendance
how minor changes to the design of the lock could almost totally
eliminate every last aspect of this weakness.
Robotic
Key Lock
Stanton Concepts
The
developers of the "RKS Lock" approached a CORE Group
member very early in their project's life cycle and eagerly
listened to feedback that was offered in discussions of the
lock's design and operation. The RKS lock is one of the most
fascinating and potentially useful new designs coming to market
at this time due to the manufacturer's commitment to analysis
and inspection by outsiders during the hardware's development
cycle.

In-Depth,
Hands-On Training Seminars
Black Hat, SecTor, HackInTheBox, DeepSec, ToorCon,
HackCon, ShakaCon, et. al.
Members
of the CORE Group have been offering deep knowledge trainings
at highly renowned and respected events around the world for
many years. Our students consistently give high feedback marks
and conference organizers repeatedly ask us to return for
additional sessions in the future.
|
"This
topic is an excellent addition."
"Physical
security is a topic that's overlooked and this class
was great."
"It
was awesome!"
"Applicable to our jobs."
"Instructors
presented material effectively and were obviously experts
in their field."
~
comments submitted on feedback forms by training attendees
|
|
The
Lockpicking showcase is routinely one of the most well-attended
and highly sought after exhibits. Their proven teaching
methodology of 'learn, touch, do' ensures audiences
are kept constantly engaged in a fun and educational
environment.
~ Dhillon Andrew Kannabhiran
Founder & CEO
HackinTheBox Security Conference
|
|