Hacking Pepsi Vending Machines

This hack allows you to get into the system menu of Pepsi vending machines. In the menu, you can view diagnostics information for the machine as well as see how many times each product has been sold. The hack is very straightforward and only requires hitting 4 buttons on the front of the machine. I can only confirm that it works on the vending machine in the picture since that is the only Pepsi vending machine type Michigan State University has on its campus. The original hack was done by bored154 at i-hacked.com. I have only added additional information to help browse the menus and such. This is the vending machine all of this was tested on. The author assumes this hack can be done on any Pepsi machine with an LCD display such as the one above, however I nor him can confirm that it is possible. Gaining Access

Just press the above buttons in that order and you will see the LCD display change and display "Sales Data". Navigating the Menu

  Now that you have access, you can browse through the options with the navigation above. 1 & 2: Browse next option 3 & the one next to it: Select the option 4 & the one next to it: Back The buttons on the left hand side of the machine are a mirror image of the ones on the right. Therefore navigation can be done using either one. Making use of the Data

Initially the sales numbers did not mean anything to me. I figured out their numbering scheme however and now one is able to know how much of exactly which item has been sold. There are different possible combinations for their numbering, however, by noting all the totals and then purchasing an item from a particular location (I chose location 6) I was able to determine that the above is the scheme used by Pepsi for this particular machine. The first item in the "Sales Data" is just the sum of all of the totals for items 1-12. The diagnostics option seems to run too fast for it to actually be doing a full system scan. However, on one machine that I tested an error did come up. It was an error with the "Changer" and after pressing the Next button it said "Tube Sensor". So I think either the diagnostics runs at specified times, or when an error does occur, it is stored in some log buffer until the machine is reset by a technician. Let me know if anyone else comes up with any ot
her information.