Take a ride with a red teamer. A physical penetration tester as he tries to make his away into unauthorized areas, steal sensitive documents, hack into the computers, and escape with company property. This episode was sponsored by CMD. Securing Linux systems is hard, let CMD help you with that. Visit https://cmd.com/dark to get a free demo. This episode was sponsored by Hostinger. Go to https://hostinger.com/darknet and use code DARKNET to get 15% off a hosting plan and check out this week’s free feature. For complete show notes and links go to darknetdiaries.com. Learn more about your ad choices. Visit podcastchoices.com/adchoices
The speaker shares their experience of finding a back hallway that connects all the stores in the mall and seeing signs promoting the security awareness campaign JDLR. It serves as a reminder for shoppers to report any suspicious activity to mall security.
The speaker talks about gathering intelligence about companies through social media and surveillance, such as attending physical events, looking at company pages, and viewing Google Street View. This information can be useful for determining the atmosphere and security protocols of a company.
The lack of security measures in warehouses can pose a threat to the fleet of trucks and products, as demonstrated by this incident where hackers easily gained access using a cellphone and Raspberry Pi.
The hosts discuss how easy it can be for a red teamer to gain access to a network and its sensitive information simply by physically plugging in a computer.
The speaker shares a story about how he was instructed to steal multiple trucks and tools from a different city and state by using social engineering tactics such as passive reconnaissance and fake badges.
The speaker shares his experience of trespassing a high-security building by bypassing the security guards and using emergency exits.
Ensure the security of your server room by installing a security camera, a secure lock, pressure-sensitive plates, and extending the walls up into the dropped ceiling to prevent unauthorized access.
A man describes sneaking into a small office during the night to leave a Dropbox for a colleague, admitting that it's the "other half of the fun on physicals" and gives you time to "hack all night".
The speakers examine a building's layout, noting both the front entrance and the service entrance at the back, as well as a small office next to the latter which contains utility trucks and turbines.
Back doors often have less security than front doors, making them an easy target for bad actors. It's essential to ensure that all entry points are secure to mitigate risk of intrusion.
The speaker describes a potentially dangerous situation while working as a bodyguard where they realized that their client was being surrounded by people who did not look friendly.
Kyle and his team were able to demonstrate multiple vulnerabilities in an office's security system, resulting in approval of budgets to improve security for the company and an uproar in the office.