Saturday, January 2, 2016

Future of Penetration? Sexy Chinese Girl Shows You How to Penetrate Security with 3D Printed Shoes

Future of Penetration? Sexy Chinese Girl Shows You How to Penetrate Security with 3D Printed Shoes

penetrate29Back in July, you may recall a story we did on a young woman who goes by the moniker, “SexyCyborg”. She had created a very skimpy LED Hikaru Skirt with the help of a 3D printer. When looking at SexyCyborg, the last thing you would expect, would be for her to have a nerdy side. Perhaps it’s the large balls of silicone in her chest, or her body which obviously takes several hours of work in the gym each week to maintain. What lies beyond the over-the-top beauty and the exposed skin of SexyCyborg is actually a very intelligent and extremely geeky woman, who takes a keen interest in robotics, electronics, and most importantly 3D printing. This was seen in her clever creation of the Hikaru Skirt, and is seen again with her latest 3D printed creation for a unique pair of shoes.
“I spent this month hitting the books, watching lots of videos and learning a bit about information security and penetration testing (I wonder how many idiot jokes that phrase is going to cause…),” SexyCyborg explains. “I still don’t know much, but I know a tiny bit more than I did. Enough to ask people who know more than me the right questions, and enough for a fun project.”
penetrate1
Penetration, in the context that she uses it, is the breaching of security in ways which deceive those involved. Perhaps SexyCyborg has learned a thing or two from Hollywood films such as James Bond or The Matrix, or perhaps it’s just from reading articles on the internet, but somehow her demeanor, looks and intelligence make you think she could be quite successful in the profession of “penetration”. This is especially true when she is aided by a pair of 3D printed shoes that she designed and calls the “Wu Ying Shoes“.
penetrate26
“So I got to thinking — if I had to do penetration testing on a corporate facility, how would I do it? Social engineering for one, as I’m a natural honeypot,” SexyCyborg explains. “I think there’s a reasonable chance that a guy might invite me back to his office after a few drinks in the neighborhood, but a handbag would be suspicious and leaving cell phones at the gate would be standard practice in any reasonably secure facility. My typical clothing does not leave room to hide anything, but that’s all the more reason they would not be suspicious of me. “
But what if hacking, lock picking, and breaching devices were housed in a pair of 3D printed shoes? That is exactly what SexyCyborg decided to find out. She devised a design for her Wu Ying Shoes, which are each 3D printed with an inner drawer that can slide out without having to take the shoes off of her feet.
“This drawer can be customized for various payloads,” SexyCyborg says. “For the purposes of this first test version, my right shoe contains a pen testing drop box. This is a wireless router running OpenWRT with a built in rechargeable battery that could either be left running inside the shoe (for war-walking, wifi sniffing and logging etc) or could be removed and plugged into a convenient open network jack as soon as I was inside and had direct access to the LAN. Once this is done you can gain remote access anytime you want via SSH tunnel.”
penetrate6
Quite the lethal combination when contemplating a potential hacking and/or cyber attack. When the contents of the right shoe are combined with the equally damaging contents in SexyCyborg’s left shoe — a USB keystroke recorder, lock picking set, retractable ethernet cable for the OpenWRT router, and a shim for opening padlocks — government agencies, large corporations, and anyone interested in protecting their own privacy should be concerned. While this woman has no ill intentions, and in fact only created these shoes as an experiment, this experiment proves that the future of security might be a bit more complicated than we all imagine.
penetrate15
The design for these shoes with their nifty little drawers, have been made available for anyone to download and print themselves from Thingiverse.
“I had to print it at 0.3mm so the layers are a little coarse,” SexyCyborg explains. “It was taking forever at 0.2mm (what I did my LED skirt control box at). Still looks decent. That’s PLA plastic. Infill is 20% and it supports my weight without any issues. Each shoe weighs about the same as a normal, non-printed shoe.”
What do you think about these security penetrating 3D printed shoes? Is this a threat that more agencies and corporations should be weary of? Discuss in the 3D Printed Security Penetrating Shoe forum on 3DPB.com.  Check out additional photos below.