Hacking Airline Ticket Seating - Not all Airlines are Secure!

[Will present this at local Defcon 414 in December 2015 and post slideshow here]

I have successfully done this over a dozen times - once for my girlfriend on a flight, sending her the credentials via email.

I MUST classify this as a "social engineering" hack despite several modifications to the boarding pass - which seems to be NOT associated with this airline's information other than flight number, date, time, and passenger name. Nobody checks, nor has the ability to check when you board the plane. I admit there is more info on the boarding pass barcode that I cannot figure out, nor will anyone tell me (yet). 

I did this on a whim, and it worked. Tried it 11 more flights and 2 for my girlfriend, no problems ever.

Views: 331

Comment

You need to be a member of Dissecting The Hack to add comments!

Join Dissecting The Hack

Latest Activity

Profile IconStephen Braudo, socia, Sean Tierney and 1 more joined Dissecting The Hack
Jun 2
Eleni Drier is now a member of Dissecting The Hack
May 13
Robert Anthony is now a member of Dissecting The Hack
May 8
Profile Iconbest hacker and Zadkin Mangum joined Dissecting The Hack
May 5

© 2017   Created by Marcus J. Carey.   Powered by

Badges  |  Report an Issue  |  Terms of Service