Hacking Airline Ticket Seating - Not all Airlines are Secure!

[Will present this at local Defcon 414 in December 2015 and post slideshow here]

I have successfully done this over a dozen times - once for my girlfriend on a flight, sending her the credentials via email.

I MUST classify this as a "social engineering" hack despite several modifications to the boarding pass - which seems to be NOT associated with this airline's information other than flight number, date, time, and passenger name. Nobody checks, nor has the ability to check when you board the plane. I admit there is more info on the boarding pass barcode that I cannot figure out, nor will anyone tell me (yet). 

I did this on a whim, and it worked. Tried it 11 more flights and 2 for my girlfriend, no problems ever.

Views: 274

Comment

You need to be a member of Dissecting The Hack to add comments!

Join Dissecting The Hack

Latest Activity

Carol Schiffler is now a member of Dissecting The Hack
Dec 28, 2016
Martin Isaksson is now a member of Dissecting The Hack
Nov 4, 2016
Ben is now a member of Dissecting The Hack
Oct 8, 2016
Profile IconEmily, Tim Davis, Alex Townsend and 7 more joined Dissecting The Hack
Sep 8, 2016

Stratagem 13 News Feed

© 2017   Created by Marcus J. Carey.   Powered by

Badges  |  Report an Issue  |  Terms of Service