ATM/POS Ethernet Cable Tap/Sniffer

CDN-VEN

Professional
Messages
180
Reaction score
23
Points
18
ATM/POS Ethernet Cable Tap/Sniffer

This information is for research and educational purposes only.

This article will explain the steps to make a Ethernet tap or sniffer to log incoming and/or outgoing data from Ethernet cables.

tapg.png


This device can either run in half duplex or full duplex. I have provided explanations below of half duplex and full duplex based on how this device works.

• Half duplex is basically allowing you to sniff only 1 direction either outgoing data or incoming data, you will need 1 network card, Standard in all computers since 1990's.
• Full duplex is sniffing both incoming and outgoing data, with this you will need 2 network cards.

Instructions on making the Ethernet Tap:

Item's needed:
• 4 category 5e network jacks.
• 6 inches of cat 5e cable
• Punch Tool for jacks
• Faceplate (Optional)

This part is the hardest, but it's actually real easy. LOL

We have 4 network jacks, One for HOST A, One for HOST B and Two for the TAP. TAP A is for all of HOST A's transmissions and TAP B is for all HOST B's transmissions.

You wire HOST A and HOST B straight through pin for pin the same, Then just continue the transmission lines for each host down to the TAP port for that host.

tap1.png


Here is a diagram that explains everything. It sounds hard but it's real easy once you start. The solid colored lines in the image are the solid colored wires and the colored dotted lines in the image are the striped colored wire's. The striped colored wire's are the wires with white in them. Example: Orange/White or Blue/White

Now strip the cat 5 cable outer plastic and untwist all the individual wires. If possible get a sharpie and mark each jack with HOST A, HOST B, TAP A and TAP B, just so you don't get confused and can follow the diagram better. Grab HOST A's jack and punch down all the wires for this jack with the punch tool based on the diagram.

jackhj.jpg


Doing one jack at a time is easier than running one wire at a time.

Next, grab TAP A and lace the orange wires from HOST A's jack to this jack and punch them down. Make sure you do not cut the wire when punching down into TAP A because the left over wire will run to HOST B. Now grab HOST B's jack and lace all wires except the green ones from HOST A (This also includes the 2 orange wires from TAP A) and punch them into HOST B's jack. Now grab the 2 green wires from HOST A and punch them down to TAP B, then lace the remaining length of green wires from TAP B to the HOST B's jack and punch them down.

wireal.jpg


At this point the Ethernet Cable Tap/Sniffer is completed. You can either place the jacks into a faceplate or make some kind of contraption to put the TAP into.

bluebox.jpg


Using Device:

When using this device you will need a computer with any operating system and also have your favorite sniffer program, so that you can log your sniffed data.

Here are some examples of sniffer programs:

• Wireshark
• Snort
• TCPDump
• WinDump
• Ettercap

Here is a finished Ethernet Tap Device:

tapep.jpg


TESTING:

All you have to do is plug the incoming line into HOST A and a patch cable from HOST B to the modem port, then verify your connection status. Now connect your sniffing computers Ethernet port to "TAP A's" or "TAP B's" jack with a patch cord and start up your sniffer program on the computer and your good to go. Before placing this device in the field, I would test the device at home and make sure it works properly and you know what TAP jack is incoming and what one is outgoing.

Written By: CDN-VEN
Written For: CARDER.PRO

Sources:
Building an Ethernet Tap
 
Would this really work on an ATM? All information between the ATM and whatever computer system they have in the bank will be encrypted?
 
it is encrypted. does not have any sence
 
ATM's communicate with computers inside the bank using a specifically designed protocol. Sniffing software may be able to pick it up but it will not be able to interpret it. You will have to code some software yourself that will take the packets being send and received and turn it into usable data.

All connections between the ATM and the computers inside the bank are encrypted with SSL which will be a pain in the ass but you should be able to get around it.

How do you plan to actually physically tap into the cable?

Also all the research I have done has shown that ATM's communicate over telephone wire, while you can also create a tap for that will standard sniffing software be able to pick up the packets being sent over the telephone cable?

Let me know if you need any help, this is a very interesting project!

Regards,
 
Top