Recently, I performed a physical assessment against a large hospital. There are several gaps that were discovered, but I will not cover those in this post. With the high level of traffic in an environment like a hospital with many employee types, patients, vendors, volunteers, etc., it’s common for many people to be in/out of … More Physical Assessments Against Hospitals
What a blast this year! As always, DerbyCon was a huge success. Paul Oakenfold was great, DualCore always keeps it real, Busta is…well… and a big shout out to Dave Kennedy and team for putting together one of our favorite cons. On a sad and serious note, the community lost a dear friend to a … More DerbyCon 2017
We had a great time speaking at DC25 SE Village. It keeps getting bigger! For those who were interested in our slides for “Skills for a Red Teamer” you can get them here: Skills for a Red Teamer v1 DC25 SE Village DEFCON 25: The SEVillage Wrap-Up https://www.social-engineer.org/social-engineering/def-con-25-sevillage-wrap/ Also, check out some of the amazing … More DEFCON 25: The SEVillage
Podcast discussing social engineering and knowing your adversary. … More Know your adversary: Focus on social engineering
As a pentester and former street magician, I have used distraction and trickery to divert the attention of a target, mostly through social engineering. This has helped me professionally and during parties. A 2014 article written by Kacey Henley lists some of the old fashioned short and long cons (albeit names vary) that still work … More 10 Classic Cons
A couple of tips and examples of the “Red Team Toolkits” that we typically use in the field. … More Red Team Toolkits
A great reference for things to consider about electronic locks. … More Electronic Locks
Running Nethunter from my automobile’s touchscreen dash. … More Auto-Mobilizing NetHunter
Just one of many useful ways to bypass AV when attempting to drop a metasploit payload. … More Bypass AV using .NET payload
Using the hostapd-wpe toolset is the easiest way to run an attack against WPA Enterprise implementations as everything is already built-in. The attack requires a compatible wireless card. The hostapd-wpe version has been updated from 2.1/2.2 to 2.6, which now allows for 802.11n/ac traffic as long as it’s supported by your card… Hacking WPA Enterprise with … More Hacking WPA Enterprise / hostapd-wpe
