[Thomas Cannon] created his own hacking game by adding some circuitry to this toy vault. The original toy uses the keypad to control a solenoid keeping the door shut. He kept the mechanical setup, but replaced the original circuit board with his own ATmega328 based internals. He also added a USB port to the front. The gist of the game is that you plug-in through USB to gain access to the vault’s terminal software. If you can make your way through the various levels of admin access the loot inside will be yours.
This little box remembers all of your user names and passwords. Inside you’ll find an Atmel AT89S5131 microcontroller which has built-in USB capability. When the box is plugged into a USB port it identifies as a keyboard. Manipulating the buttons on the top and side will select and print out various stored usernames and passwords. Passwords are generated on-chip from a random seed and the device itself requires a passcode after power up as a security feature.
[SigFLUP's] included a pretty nifty configuration algorithm. It doesn’t rely on a terminal connection, since the device is a keyboard you can communicate with it in an editor window (which should make it platform independent). There’s no code available, but trying to write your own to the spec outlined in the demo after the break will make for a fun weekend project.
Continue reading “Portable password vault”