Just for fun, I decided to make a few crash bar (J tool) bypass tools to hand out at DEF CON 26. They are made with weldable wire, and some heat shrink for the grip, and to help prevent scratching. Also, for the sake of size, I decided to create a very small hook that … More Crash Bar Bypass Tools for DEF CON 26
Found some awesome write-ups from Alex Dib regarding building your own RFID cloner and a useful Proxmark3 cheat sheet, and wanted to share! Proxmark3 Cheat Sheet Great cheat sheet for those using the Proxmark3 software. https://scund00r.com/all/rfid/2018/06/05/proxmark-cheatsheet.html RFID Thief v2.0 Very detailed write-up for building your own long-range RFID cloner. https://scund00r.com/all/rfid/tutorial/2018/07/12/rfid-theif-v2.html
Recently, I performed a physical assessment against a large hospital. There are several gaps that were discovered, but I will not cover those in this post. With the high level of traffic in an environment like a hospital with many employee types, patients, vendors, volunteers, etc., it’s common for many people to be in/out of … More Physical Assessments Against Hospitals
What a blast this year! As always, DerbyCon was a huge success. Paul Oakenfold was great, DualCore always keeps it real, Busta is…well… and a big shout out to Dave Kennedy and team for putting together one of our favorite cons. On a sad and serious note, the community lost a dear friend to a … More DerbyCon 2017
We had a great time speaking at DC25 SE Village. It keeps getting bigger! For those who were interested in our slides for “Skills for a Red Teamer” you can get them here: Skills for a Red Teamer v1 DC25 SE Village DEFCON 25: The SEVillage Wrap-Up https://www.social-engineer.org/social-engineering/def-con-25-sevillage-wrap/ Also, check out some of the amazing … More DEFCON 25: The SEVillage
Podcast discussing social engineering and knowing your adversary. … More Know your adversary: Focus on social engineering
As a pentester and former street magician, I have used distraction and trickery to divert the attention of a target, mostly through social engineering. This has helped me professionally and during parties. A 2014 article written by Kacey Henley lists some of the old fashioned short and long cons (albeit names vary) that still work … More 10 Classic Cons
A couple of tips and examples of the “Red Team Toolkits” that we typically use in the field. … More Red Team Toolkits
A great reference for things to consider about electronic locks. … More Electronic Locks
Running Nethunter from my automobile’s touchscreen dash. … More Auto-Mobilizing NetHunter
