Featured

NFC LED Nails: VanitySec’s Interview with Baybe Doll

September 20, 2017 / Snow

This week we were lucky enough to chat with Emily (Baybe Doll), who’s known for her bad ass NFC LED Nails.

Tells us about yourself

My name is Emily Mitchell, I go by the names Baybe Doll and N3x7. I am the COO of Terahash / Sagitta HPC, which develops state-of-the-art turnkey password recovery solutions, as well as the Co-Founder & CEO of the security consulting firm Haspanda. I also participate in a few bug bounty programs, own a real estate investment business, and a liquor distribution business. My primary interests are penetration testing, password cracking, NFC/RFID, and of course, fashion. I give back to the community by volunteering at several infosec conferences (SOC Goon at DEF CON, Senior Staff at Security B-Sides Las Vegas, and NCCDC), and a part of Austin Hackers Association (AHA.) I also have a rather large and impressive orchid collection!

What gave you the inspiration to create NFC nails?

I started off with cutting up old motherboards and PCI cards and placing the components on my nails by embeddeding them in acrylic, so that my nails looked like circuit boards. Then I decided I wanted to try to use functional hardware and have actual circuits on my nails. I started with the LEDs, and that quickly fueled the desire for other NFC & RFID chips as well. It’s similar to the bioglass RFID tags that people have been implanting under their skin, except my NFC nails have much higher utility: I can have up to 10 different NFC tags on my hands at any given time, there are far more chip options available, and they are quick and easy to change out. Today I might have 2x NTAG 213 and 2x Mifare Ultralight, tomorrow I might want 2x NTAG 216, 2x Mifare Classic 1K, a DESfire EV1, and a Proxmark 3 tag. It’s a lot easier to remove an acrylic nail than it is to cut your hand open.

Can you explain how they work?

The NFC LED nails have a small antenna tuned to 13.56 Mhz, which passively collects energy from NFC readers to power a small LED light. Some NFC readers emit a pulsing frequency, which will cause the LED to blink. Others are constantly transmitting, which will cause the LED to steadily glow. The nails with actual NFC & RFID tags in them rather than LEDs are tiny NFC/RFID chips (NTAG 213, NTAG 216, Mifare Classic, Mifare Ultralight) embedded in acrylic. The LEDs are useful for identifying where NFC readers are present, as well as which frequency they are transmitting on. The tags themselves have a plethora of uses, of course: authentication, identification, cryptography, payment applications, covert data exfiltration, state sponsored nfc attacks, malware, covert Nintendo Amiibo on my thumb — practically any NFC/RFID application, right at my (literal) fingertips.

Any fun tricks to show them off?

Do you see yourself doing anything next in Fashion + Tech?

I recently built and NFC-powered tiara (albeit more of a crown than a tiara, because queens don’t wear tiaras) which won first place in the Diana Initiative tiara hacking competition. The crown features an Arduino with a PN532 NFC reader and a small TFT LCD display. The LCD displays the Austin Hackers logo when idle, and displays the contents of one of the NFC chips in my nails when it is touched. My fingertips also glow when I place the crown on my head thanks to the NFC LED nails.
– https://twitter.com/DianaInitiative/status/891146387236294658 …
– https://twitter.com/Baybe_Doll/status/891211255976910848 … I’m working on a Version 2.0 of the crown for next year’s conference. Beyond that, I certainly do have other future plans, but they are a secret! 🙂

Huge thanks to Emily for sharing her story with us! Check her out on Twitter @Baybe_Doll

Physical Pentest Wearables: Picks and Keys

September 1, 2017 / Snow

Lock picks never go out of style. This article will provide options whether you want to look stylish or keep your tools concealed.

#1 Handcuff Earrings

#2 Uncuff link (see what they did there?)

#3 Angle Wing Shim Earrings

#4 Hidden Handcuff Key Clasp

Works great with paracord bracelets (as seen below in action shots)

#5 Escape Bracelet

This gummy bracelet can fit up to a 10” wrist but can be cut down to fit any size wrist, including child size wrists.

#6 Collar Stay Picks (coming soon)

Keep an eye on Colin Jackson’s Twitter account (@d1dymu5) for when these bad boys will be released on Kickstarter.

#7 Clothing Clip

#8 Escape Ring

#9 Bootlace Handcuff Key

#10 Lockpick Earrings

#11 Hidden Bogotas

#12 Patch with a hidden secret

#13 Zipper-Pull Covert Handcuff Key

#14 Acid etched stainless steel chandelier lock pick earrings

#15 Bracelet Wallet

Action shots

(click the image to see which hacker it is):

Special thanks to all the awesome hackers who gave their input for this article: @darksim905, @JimyLongs, @SynapticRewrite, @dontlook, @nite0wl, @d1dymu5, @deviantollam, @Cannibal, @hacks4pancakes , and @3ncr1pt3d

Poppin’ Shells with Brows That Pop

August 21, 2017August 21, 2017 / mzbat

Brows are often overlooked during makeup application. If you really want your eyes to pop, you have to pay attention to your brows. It’s always nice to look as great as you feel while popping shells, so here are a few goodies sure to tame your wild caterpillars.

Urban Decay Brow Box is an all-in-one kit that includes two shades of silky brow powder, perfecting/setting wax, high-quality metal mini tweezers, a mini angled brow brush, a mini spoolie, and two mirrors (one magnifies). The entire kit is tiny and will fit nicely in a small cosmetic bag with your Rubber Ducky and lock pick earrings.Anastasia DIPBROW Pomade is a creamy formula that works as a brow primer and provides color, sculpture, and shading. It is ideal for oily skin and in humid climates. You’ll have to pick up a brow brush to use this one, but it’ll last through the entire OSCP exam.

Benefit Gimme Brow Volumising Gel is tinted and contains tiny microfibers that adhere to skin & hairs, creating natural-looking fullness and definition. This is perfect for a quick, easy touchup after you’ve pivoted your way to your client’s Active Directory server.

Nyx Micro Brow Pencil builds full, beautiful brows and precisely coats your finest hairs with color. It even has a spoolie end to brush and blend for a more natural look. Best of all, this easy to use, all-in-one pencil will fit right in your lock pick kit or cable bag.

Smashbox Brow Tech To Go offers perfectly polished brows on the go. Now in a portable, travel-friendly version, it’s super convenient to shape and tune your brows after you’ve cried your way into a billion dollar data center. Bonus: This one is vegan friendly!

Woosh Beauty Even Eye Stencils are perfectly designed to help you achieve even eye makeup looks, every time. Shape your shadow, liner, and brows with these reusable, re-positionable stencils made of medical grade silicone, gentle for the eye area. Guaranteed to make your eyes pop like a CEOs shell after opening your phishing email.

Happy sculpting, shaping, and filling your brows! Now get out there and get those fabulous shells!

Red Lips for Red Teaming

August 20, 2017August 22, 2017 / Snow

Look fierce while red teaming with these stunning red lip colors.

#1 Kat Von D Studded Kiss Lipstick – Matte Fire Engine Red

#2 NARS – Fire Down Below

#3 LANCÔME Rouge in Love Lipstick – Rouge Valentine
(shout out to @malwareunicorn)

#4 MAC – Ruby Woo
(shout out to @tarah)

#5 NYX Cosmetics Plush Gel – Deep Red

#6 Yves Saint Laurent Rouge Pur Conture Lipstick Collection – Rouge Neon Bright Red

#7 MAKEUP GEEK Iconic Lipstick – Elegant

Fall Bags To Conceal Your RFID Reader

August 20, 2017August 30, 2017 / Snow

Look stylish while operating a RFID reading device? Yes, please. These bags are some of Fall’s cutest styles in a range of sizes. Whether you’re utilizing a RFIDler, Proxmark, or your own custom reader you can kept it hidden, while looking chic.

#1 TOM FORD – Large Alix Tote Bag