This is a true story about how an application penetration test ordered by a bank ended in a successful robbery. This presentation will show anyone who has ever wondered what kind of damage can be done through a payment terminal. As usual, a collection of seemingly innocent little findings that, when put together like a puzzle, become dangerous.