ATM report files from server ... any help ?

[Rome0]

This is ONLY for old ass of forum ...
got on server acces Teller Machine .
looking into report files from teller machine and see files i never see before .. (.STL07030 ) etc...

Any interresting idea for got something cool from it ?

here screen from some files ...

Thanks

 

[mynetthebest]

del

 

[Rome0]

did you try to open them with something ?

Yes open some of them via notepad and got clear info -

1FISA 0368 ABxxxxxxxxxD CU -84025324 SETDATE 09/30/12 PAGE 1
JAxxxxxxY PASSPORT ATM -PR0368 VISA QUARTERLY REPORT RUNDATE 10/03/12
EFMU0450-RP01 RUNTIME 23:14:24
FOR BIN 464603
-VISA SALES VOLUME: (SETTLED PURCHASES)
---------------------------------------------
VISA SALES VOLUME:
MONTH 1 $132,807.85
MONTH 2 $131,509.17
MONTH 3 $141,569.64
=================
TOTAL FOR THE QUARTER $405,886.66
0 NUMBER OF VISA TRANSACTIONS (OR SALES DRAFTS)
FOR THE QUARTER 13,434

-CASH ACCESS FROM ATM/TELLER - SETTLED WITHDRAWALS
---------------------------------------------
ATM CASH DISBURSEMENTS: 788 $76,398.49
TELLER CASH DISBURSEMENTS: 7 $2,480.00
TOTAL: 795 $78,878.49

 

[zbox]

del

 

[p3rito]

If you got access to entire HD (including OS system), you can try to modify it for your needs... But you will need an insider to infect the atm with your modifications... Remember, any modification can be done, from just capture track1,2 or dispense cash...

 

[Ninja]

My guys traveled to one rich part of cheap country to ATM, which was remotely controlled by person. So ITS possible, but i dont know how much he prepared for it to remotely dispense the cash.

 

[Rome0]

If you got access to entire HD (including OS system), you can try to modify it for your needs... But you will need an insider to infect the atm with your modifications... Remember, any modification can be done, from just capture track1,2 or dispense cash...

Yes Got entire acces too the SERVER (admin right ) -
contain 3 teller machine + 1 ONLINE ATM -
i have only E-acces too it , not physical acces .

My guys traveled to one rich part of cheap country to ATM, which was remotely controlled by person. So ITS possible, but i dont know how much he prepared for it to remotely dispense the cash.

with your long experience , did you think it possible got something good too do with Only E-acces ??


Thanks for all

 

[Ninja]

All i know is what they just got money from ATM and person controlled it wasnt near atm in 100+ kms. I dont know about the way he done it.

 

[Rome0]

All i know is what they just got money from ATM and person controlled it wasnt near atm in 100+ kms. I dont know about the way he done it.

Humm interresting ... Thank you for reply

 

[p3rito]

Rome0, remotely will be hard to discover what exe/dll or system file make things like dispense cash. ATM manuals don't help much, the best way is reversing files to see how they work. But for a 1st timer, will be hard, better if someone who already worked with ATMs. But as Ninja said, the guy was 100+ km away. I believe this was possible because the guy found a way to patch the system for his control. So from his computer (maybe into another country, doesn't matter), he just exec the patch and 'voi-la;'! It starts dispensing cash )))

 

[vccsell87]

if you have virtual access to ATM and and ATM isnt firewalled you can check where is by ip geo...check windows services and see what function ATM use when cash is dispensed...Another thing is sniffer COM port from card read and from keyabord then you get D+P.. thats how i do in brazil for some POS.. The pin problaby arent encrypted on ATM.

 

[sinatra]

vccsell87, The dumps and pins are encrypted with 3DES in ATM's

 

[scorpyo]

rome0 you need the type of programmer for this kind of stuff )
i remember a man who was a programmer for DieBold, he re-program machines at BoFA which run windows --

this man created a trigger card, which he put in to force cash dispense. if you have access to the hd, then you must have access to this software it executes. with the right brains, you can become profitable. you must locate the atm location ))

take the ip2location and put there, and narrow it down. you can do this, i am certain you can find it. maybe find name of admin too

on windows, command prompt, types
net user USERNAMEHERE

it sometime will output Full Name of user's on the machine. find infos about them

 

[vccsell87]

sinatra, depend country of ATM location, some 3 world counntry you ca get d+p without any kind of crypt..im talking this cuz i have kwnolodge for brazil..but rome0 can give a shot and sniff com port and get logs to analyze,maybe can get something interesting.