theregister | A Chinese hardware hacker has hidden a penetration-testing toolkit into her high-heeled shoes.
The Wi-Fi-popping platforms were forged in a 3D
printer, and contain compartments to smuggle hacking hardware past
strict security checks in data centres and the like, and later
retrieved.
The hacker and pen-tester, who goes by the handle
"SexyCyborg", showcases the heels she dubs Wu Ying shoes, named after
the famed "shadowless kick" that Chinese folk hero Wong Fei Hung used to
distract opponents.
The hacker published snaps of the shoes in an Imgur gallery (somewhat NFSW)
showing how a router, backup battery, and lock-picking set can be
concealed from security guards while on red team penetration tests.
"With my shadowless shoes I distract the target with my upper body and they don’t see the real danger on my feet," she writes.
"Each shoe has a drawer that can be slid out without
my having to take the shoes off [which] can be customised for various
payloads.
SexyCyborg says "... my right shoe contains a pen
testing drop box which is a wireless router running OpenWRT with a built
in rechargeable battery that could either be left running inside the
shoe (for war-walking, wifi sniffing and logging) or could be removed
and plugged into a convenient open network jack [gaining] gain remote
access anytime via SSH tunnel."
