Jason Haddix MEMBER_OF HP
Jason says he later got a penetration-testing job at HP.
Explicit Confidence 98% · Jack Rhysider EP 130 Details
“then got another job doing penetration testing at HP”
Qualified triples from the transcripts. Origin, speaker, and evidence stay attached. These are not independently verified facts.
Jason Haddix MEMBER_OF HP
Jason says he later got a penetration-testing job at HP.
Explicit Confidence 98% · Jack Rhysider EP 130 Details
“then got another job doing penetration testing at HP”
Jason Haddix USES Burp Suite
Jason used Burp Suite as an interception proxy to inspect mobile-app traffic and later to brute-force a password.
Explicit Confidence 99% · Jason Haddix EP 130 Details
“I was proxing the web traffic between the phone and the web server with an interception proxy like Burp Suite”
Jason Haddix USES password reset abuse
Jason initiated a password reset for the target account and exploited the resulting reset flow.
Explicit Confidence 99% · Jason Haddix EP 130 Details
“you could start a password reset for any user on the site”
Jason Haddix USES mobile application penetration testing
Jason was assigned to test a bank's new mobile application.
Explicit Confidence 98% · Jason Haddix EP 130 Details
“the other was their new mobile app and their mobile application”
Jason Haddix USES Brute-force attack
Jason brute-forced the five-character reset password in approximately fifteen minutes.
Explicit Confidence 99% · Jason Haddix EP 130 Details
“You could brute-force that in about fifteen minutes”
HP USES penetration testing
Jack says HP obtained contracts to provide penetration testing for companies subject to compliance requirements.
Derived Confidence 91% · Jack Rhysider EP 130 Details
“I guess HP was one of those auditors and offered this service”
Jason Haddix USES web application penetration testing
Jason worked on the web portion of a bank penetration test and later tested a large web site.
Explicit Confidence 97% · Jason Haddix EP 130 Details
“one was the network and web portion of the penetration test”
Jason Haddix USES ShadowCrew
Jason says ShadowCrew was an underground forum where he learned how to make fake IDs.
Explicit Confidence 99% · Jason Haddix EP 130 Details
“one of the resources that I fell upon was ShadowCrew”
Jason Haddix USES Tomcat
Jason gained access to a Tomcat server and used its administrative upload capability to obtain operating-system access.
Explicit Confidence 96% · Jack Rhysider EP 130 Details
“this web server was running something called Tomcat, which as an admin you could upload stuff to it”
Jason Haddix USES Metasploit
Jason uploaded a payload to a Tomcat server using Metasploit.
Explicit Confidence 99% · Jack Rhysider EP 130 Details
“Jason just uploaded a payload using Metasploit to it”
Jason Haddix USES Reconnaissance
Jason performed reconnaissance to find the bank's publicly exposed web assets and servers.
Explicit Confidence 99% · Jason Haddix EP 130 Details
“We started doing recon on them. We had found a whole bunch of web servers”
Jason Haddix USES Tailgating
During a physical penetration test, Jason and two others entered a building by following an authorized person through a locked door.
Explicit Confidence 99% · Jack Rhysider EP 130 Details
“they simply waited until someone was going in and they just went in right behind them and just tailgated them right in through the door”
Jason Haddix USES network penetration testing
Jason says the majority of his penetration tests were network-based.
Explicit Confidence 99% · Jack Rhysider EP 130 Details
“the majority of pen tests he’s done have been network-based”
Jason Haddix USES penetration testing
Jason describes performing hundreds of penetration tests during his career.
Explicit Confidence 99% · Jason Haddix EP 130 Details
“I’ve probably done over my career maybe three hundred pen tests”
Jason Haddix USES physical penetration testing
Jason performed physical penetration tests, including attempts to enter buildings and server rooms.
Explicit Confidence 98% · Jack Rhysider EP 130 Details
“Jason did a few physical pen tests”
IP address exposure AFFECTS Welcome to Video
A coding mistake exposed the IP addresses serving Welcome to Video thumbnails, despite the site being hosted through Tor.
Explicit Confidence 99% · Jack Rhysider EP 131 Details
“the thumbnail images weren’t hidden. They weren’t on Tor. They were just being served on the plain, old internet”
Cypherpunks ASSOCIATED_WITH encryption
Andy says the Cypherpunks wanted to use encryption and anonymity tools to shift power from governments and corporations to individuals.
Explicit Confidence 98% · Andy Greenberg EP 131 Details
“the Cypherpunks that wanted to use encryption and anonymity tools enabled by encryption”
Welcome to Video ASSOCIATED_WITH Son Jung-woo
Investigators connected enough dots to believe Son Jung-woo was the administrator and owner of Welcome to Video; the relationship is presented as an investigative belief rather than an unconditional fact.
Uncertain Confidence 93% · Jack Rhysider EP 131 Details
“they connected enough dots for them to believe Son Jung-woo was the admin and owner of the dark web site Welcome to Video”
Reactor DEVELOPED_BY Chainalysis
Chainalysis made the Reactor cryptocurrency-tracing tool.
Explicit Confidence 99% · Jack Rhysider EP 131 Details
“they made a tool to make it even easier, called Reactor”
Chainalysis DEVELOPED_BY Jonathan Levin
Jack says Jonathan Levin started Chainalysis, and Andy identifies him as a co-founder.
Explicit Confidence 98% · Jack Rhysider EP 131 Details
“This guy started a company called Chainalysis”
“Jonathan Levin was a co-founder of the company”
Welcome to Video investigation and takedown INVOLVES Child Sexual Abuse Material
The incident involved a market distributing child sexual abuse material.
Explicit Confidence 99% · Andy Greenberg EP 131 Details
“a financial investigation to find and dismantle a child abuse network”
Welcome to Video investigation and takedown INVOLVES National Crime Agency
The NCA was the first agency Andy knew to have investigated Welcome to Video.
Explicit Confidence 99% · Andy Greenberg EP 131 Details
“The first agency that I’m aware of that was looking at Welcome to Video was the NCA”
Welcome to Video investigation and takedown INVOLVES cryptocurrency exchange
The investigation relied on subpoenas to cryptocurrency exchanges for identifying information about wallets and users.
Explicit Confidence 95% · Andy Greenberg EP 131 Details
“get a law enforcement agency involved that would send subpoenas to them”
Welcome to Video investigation and takedown INVOLVES BTCE
Investigators used records from BTCE, which had been taken down by US authorities, to investigate the site's suspected moderator.
Explicit Confidence 98% · Jack Rhysider EP 131 Details
“they were able to find a similar e-mail address as a user of a popular Bitcoin exchange called BTCE”
Welcome to Video investigation and takedown INVOLVES phishing
A Welcome to Video user impersonated a moderator and phished other users' credentials to access their videos.
Explicit Confidence 99% · Andy Greenberg EP 131 Details
“He was actually just phishing people, essentially, on Welcome to Video, pretending to be a moderator”