Uploaded September 2023 | Updated September 2026, 2 weeks ago
00:00 - Cold Open
00:40 - Intro
03:13 - Why Does the Problem Persist?
05:11 - How These Backdoor Codes Work
10:35 - Other Brands of Electronic Safe Lock Do This, Too
11:45 - Helpful Internet Advice
12:27 - Mechanical Safe Lock Lesson
16:20 - Combination Brute Forcing
18:47 - Shut the Actual Fuck Up
22:20 - Data Privacy Should Matter
24:11 - Can Your Safe Be Made Safe?
Sargent & Greenleaf's page about using the Management Code to reset the Master Code...
sargentandgreenleaf.com/knowledgebase/knowledgebase-2017-02-24-use-the-management-reset-code-to-reset-my-lock
Sargent & Greenleaf's page about changing the Managment Code itself...
sargentandgreenleaf.com/knowledgebase/knowledgebase-2017-02-24-change-the-management-reset-code
NotK's Shitter thread about the procedure to reset a Securam electronic safe lock...
twitter.com/NotK_US/status/1699653058865885511
Safe Lock AutoDialer Jack by MPM...
autodialerjack.com/jack
Ian Runkle's video about Liberty Safe backdoors...
youtube.com/watch?v=aeCwrX2gcXM
The Mozilla Foundation's report on automotive data privacy...
foundation.mozilla.org/en/privacynotincluded/articles/its-official-cars-are-the-worst-product-category-we-have-ever-reviewed-for-privacy
Eva Galperin on automotive data privacy...
https://staging.bsky.app/profile/evacide.bsky.social/post/3k6pbcn4crx2z
h/t to Drew for the joke that i put into the meme at the start
h/t to James H for the 3D printed Vernier scale
and the best hat doffing of all to the folk on Mastodon who joined in the little thread where we were using AI bots to generate fun images of the Statue of Liberty looking chagrined. π
Many thanks to all the folk who have been talking and commenting online about this topic and sharing knowledge as well as their own question. Hopefully, some of my answers here can be useful... Enjoy! πππ
- -- ----- ----------
Sign up for give-away drawings here...
deviating.net/contests/give-aways
I'm on the Fediverse. When Twitter dies completely that's a great place to find me...
https://defcon.social/@deviantollam
I still have my Twitter account. I mostly use it for making fun of Twitter...
twitter.com/deviantollam
I'm also on Instagram. I mostly use it for liking my friends' photos...
instagram.com/deviantollam
Bluesky may still be in beta, but I'm over there. I've avoided Hellthread thus far...
https://staging.bsky.app/profile/deviantollam.bsky.social
This is my GitHub. I post my design files there...
github.com/deviantollam
This is my personal web site. Most things i create wind up online...
deviating.net
This is my company. We're good at stuff...
enterthecore.net
This is where I train. Come and learn badass skills...
redteamalliance.com
- -- ----- ----------
00:00 - Cold Open
00:40 - Intro
03:13 - Why Does the Problem Persist?
05:11 - How These Backdoor Codes Work
10:35 - Other Brands of Electronic Safe Lock Do This, Too
11:45 - Helpful Internet Advice
12:27 - Mechanical Safe Lock Lesson
16:20 - Combination Brute Forcing
18:47 - Shut the Actual Fuck Up
22:20 - Data Privacy Should Matter
24:11 - Can Your Safe Be Made Safe?
Sargent & Greenleaf's page about using the Management Code to reset the Master Code...
sargentandgreenleaf.com/knowledgebase/knowledgebase-2017-02-24-use-the-management-reset-code-to-reset-my-lock
Sargent & Greenleaf's page about changing the Managment Code itself...
sargentandgreenleaf.com/knowledgebase/knowledgebase-2017-02-24-change-the-management-reset-code
NotK's Shitter thread about the procedure to reset a Securam electronic safe lock...
twitter.com/NotK_US/status/1699653058865885511
Safe Lock AutoDialer Jack by MPM...
autodialerjack.com/jack
Ian Runkle's video about Liberty Safe backdoors...
youtube.com/watch?v=aeCwrX2gcXM
The Mozilla Foundation's report on automotive data privacy...
foundation.mozilla.org/en/privacynotincluded/articles/its-official-cars-are-the-worst-product-category-we-have-ever-reviewed-for-privacy
Eva Galperin on automotive data privacy...
https://staging.bsky.app/profile/evacide.bsky.social/post/3k6pbcn4crx2z
h/t to Drew for the joke that i put into the meme at the start
h/t to James H for the 3D printed Vernier scale
and the best hat doffing of all to the folk on Mastodon who joined in the little thread where we were using AI bots to generate fun images of the Statue of Liberty looking chagrined. π
Many thanks to all the folk who have been talking and commenting online about this topic and sharing knowledge as well as their own question. Hopefully, some of my answers here can be useful... Enjoy! πππ
- -- ----- ----------
Sign up for give-away drawings here...
deviating.net/contests/give-aways
I'm on the Fediverse. When Twitter dies completely that's a great place to find me...
https://defcon.social/@deviantollam
I still have my Twitter account. I mostly use it for making fun of Twitter...
twitter.com/deviantollam
I'm also on Instagram. I mostly use it for liking my friends' photos...
instagram.com/deviantollam
Bluesky may still be in beta, but I'm over there. I've avoided Hellthread thus far...
https://staging.bsky.app/profile/deviantollam.bsky.social
This is my GitHub. I post my design files there...
github.com/deviantollam
This is my personal web site. Most things i create wind up online...
deviating.net
This is my company. We're good at stuff...
enterthecore.net
This is where I train. Come and learn badass skills...
redteamalliance.com
- -- ----- ----------









![Proxmark3 Blueshark-to-Android How-To-Guide, part 3: Connecting and Being Awesome!
There are three videos in this series. To make the details in the doobly-doo more useful Im simply replicating all my notes and links across all three. Enjoy! πππ
-
[= Video One: Hardware Install =]
1. Install the BlueShark Module
Pop open the Proxmark case, connect the Bluesharks ribbon cable, and optionally dim your LED lights if covert pocket carry is of interest to you.
You can acquire a Blueshark module either from Hacker Warehouse or from my own retail site that I dont mention on my channel because its cringe to do that shit. π
[= Video Two: Update Proxmark Firmware. =]
2. Flash your Proxmark to the latest firmware with the BT addon
The easiest way to go about if youre on Windows is by grabbing the latest pre-compiled bluetooth-enabled build from Gators site...
https://proxmarkbuilds.org/fileviewer.html#rdv4_bt/
If you want to fully compile from source, you can pull that from the RfidResearchGroups GitHub repo...
https://github.com/RfidResearchGroup/proxmark3
...and edit the Makefile.platform file to uncomment one line...
# If you want more than one PLATFORM_EXTRAS option, separate them by spaces:
#PLATFORM_EXTRAS=BTADDON
#PLATFORM_EXTRAS=FLASH
#PLATFORM_EXTRAS=SMARTCARD
PLATFORM_EXTRAS=BTADDON FLASH
#STANDALONE=LF_SAMYRUN
... notice how that fifth line is uncommented, thus enabling the BTADDON flash line. But for real, the precompiled binaries are a way easier choice here.
Connect your Proxmark to your laptop and run the pm3-flash-all.bat script to ensure that your device is fully up to date and that youre now running firmware that will play well with the Blueshark that youve installed.
[= Video Number Three: Connect Your Proxmark to your Android Device =]
3. You will need two tools:
Termux...
https://f-droid.org/packages/com.termux/
(yes this involves trusting an app outside of the Play Store)
Bluetooth TCP Bridge
https://play.google.com/store/apps/details?id=masar.bb
(i recommend spending the $3 for the pro version)
4. Install the Proxmark software from within Termux
There is also a guide here...
https://github.com/RfidResearchGroup/proxmark3/blob/master/doc/termux_notes.md#install-proxmark3-package-which-follows-tagged-releases
But this command should install the latest stable release...
pkg install proxmark3
You can also run this if youve re-flashed your Proxmark device elsewhere and now youre back on your phone again and want to make sure all software versions are the latest release...
pkg upgrade proxmark3
5. Pair your proxmark with your phone
Go to your Bluetooth interface in phone
Make sure the Proxmark and BlueShark are powered on (BT light should be flashing)
Add new device
Pairing with code 1234. Remember, pairing is not the same as connecting. If your Proxmark is listed in saved devices then it is paired.
6. Use the BT/TCP bridge to actually make the connection
Start Bluetooth TCP Bridge
Set the Proxmark as Device A using Connect to classic Bluetooth device
Set a TCP Server as Device B on an unused port (e.g. 4321)
Ensure Retransmission is set to both ways
(It is possible to record the config as autostart script under Settings. Hence why i like the Pro version)
7. from Termux you should now be able to connect to your proxmark
proxmark3 tcp:localhost:4321
8. Setting home screen icons, etc
If you are doing a little bit of polish and cleanup on your phones home screen, this is the link to the Blueshark icon that I have created...
https://deviating.net/stuff/Blue_Shark.png
... enjoy running your Proxmark3 device without the need for a laptop now, everybody! Keep in mind, that while loads of the usual functions that you are used to performing should work just fine, there is a slight communications lag when you are bridging over bluetooth. A few of the more advanced functions which involve very fast and timing-depending interrogation of certain credentials, readers, etc. may fail to work if youre operating in Bluetooth bridge mode like this. I have found that this is particularly true if youre in an environment with a lot of noise in the Bluetooth radio spectrum.
Good luck and Happy Pride! πππππ¦
-
Im on the Fediverse. Thats a great place to find me...
https://defcon.social/@deviantollam
Im also on Instagram. I mostly use it for liking my friends photos...
https://instagram.com/deviantollam
Bluesky has picked up a lot of momentum, and Im over there, too...
https://bsky.app/profile/deviantollam.bsky.social
Im also on Discord, but mostly only because my daughter uses it...
https://discord.com/users/deviantollam
I post dumb questions to Reddit and sometimes answer folks questions there, too...
https://www.reddit.com/u/deviantollam
This is my GitHub. I post my design files there...
https://github.com/deviantollam
This is my personal web site. Most things i create wind up online...
https://deviating.net Proxmark3 Blueshark-to-Android How-To-Guide, part 3: Connecting and Being Awesome!](https://i.ytimg.com/vi/eahcfOkVq3w/mqdefault.jpg)
