Qualified triples from the transcripts. Origin, speaker, and evidence stay attached. These are not independently verified facts.
Chris Rock USES keylogger
Chris says that after obtaining a remote shell, they used keyloggers; Jack also describes keyloggers on the targets’ computers.
Explicit Confidence 98% · Chris Rock EP 151 Details
“it’s things like key loggers and stuff like that.”
SIEMonster USES Elastic
Chris says SIEMonster was assembled using open-source products including Elastic.
Explicit Confidence 97% · Chris Rock EP 151 Details
“I can stitch some open-sourch products together like Elastic and stuff like that.”
Chris Rock USES Electronic Death Registration System
Chris describes researching and demonstrating how the Electronic Death Registration System could be abused to create or declare people dead.
Explicit Confidence 94% · Chris Rock EP 151 Details
“in the US, they have — they used to have a paper-based system”
“the doctor will log into a US system called EDRS”
Chris Rock USES Metasploit
Chris says he used Metasploit in penetration-testing work and used a listener comparable to Metasploit in this operation.
Explicit Confidence 97% · Chris Rock EP 151 Details
“we would use Metasploit as a pen tester”
“have a listener like Metasploit, but we would have our own listeners”
Chris Rock USES Linux
Chris says he built his own Linux stack for the planted Wi-Fi-hacking device.
Explicit Confidence 99% · Chris Rock EP 151 Details
“built up my own Linux stack with Wi-Fi hacking”
Chris Rock USES WEP
Chris’s team targeted the company’s WEP-protected Wi-Fi network and cracked it to obtain internal access.
Explicit Confidence 99% · Jack Rhysider EP 151 Details
“Their first goal is to get on the Wi-Fi network. To do that, they’re gonna have to crack the WEP protcol.”
Chris Rock USES lateral movement
The operation involved moving from compromised endpoints into servers and other systems on the target network.
Derived Confidence 91% · Jack Rhysider EP 151 Details
“from there he hopped into the server of the bank’s network”
Aircrack-ng USES WEP
Aircrack-ng was used to capture WEP packets and decipher the network encryption.
Explicit Confidence 99% · Jack Rhysider EP 151 Details
“They log into that little device and fire up a tool called Aircrack-ng.”
“After running Aircrack-ng long enough, they got their little device on the office Wi-Fi”
Chris Rock USES Adobe PDF Reader
Chris says he used malicious custom PDFs exploiting Adobe PDF Reader to gain access to targets.
Explicit Confidence 98% · Chris Rock EP 151 Details
“the Adobe was enough to get probably four or five of the eight people and also the subsidiaries.”
Chris Rock USES Wi-Fi network
Chris’s team planted a device near the target’s Wi-Fi network and used it to gain internal network access.
Explicit Confidence 96% · Chris Rock EP 151 Details
“sticking something behind it, and then, boom, we had a device planted in to get this last VC firm.”
Chris Rock USES Remote access Trojan
The episode says Chris used PDFs that installed a remote-access Trojan on targets’ computers.
Explicit Confidence 98% · Jack Rhysider EP 151 Details
“that would allow him to install a remote-access Trojan and get access to their computer.”
Chris Rock USES Amiga
Chris says he used an Amiga after the Commodore 64.
Explicit Confidence 96% · Chris Rock EP 151 Details
“From there it went to Commodore 64 and Amiga and then IBM.”
Chris Rock USES phishing
The episode describes Chris sending phishing emails with PDF attachments to compromise bank employees and other targets.
Explicit Confidence 99% · Jack Rhysider EP 151 Details
“he found a bank employee, sent them a phishing e-mail, got them to open a PDF which planted a Trojan on their computer”
Chris Rock USES LDAP
Chris says he queried LDAP directory data and found passwords stored in descriptive fields.
Explicit Confidence 99% · Chris Rock EP 151 Details
“If anyone knows anything about LDAP, you can just query that.”
Chris Rock USES VirusTotal
Chris says he uploaded custom PDFs to VirusTotal to check whether antivirus products detected them.
Explicit Confidence 98% · Chris Rock EP 151 Details
“we would upload it against VirusTotal to make sure nothing picked it up.”
Pump.fun token-graduation vulnerability AFFECTS Pump.fun
The vulnerability affected Pump.fun's process for graduating tokens to Raydium.
Derived Confidence 95% · Jack Rhysider EP 152 Details
“for it to graduate out of Pump.fun and into the DEX, Pump.fun sends a bunch of Solana”
Solana February 2023 outage ASSOCIATED_WITH Jarett Dunn
Jack says he cannot confirm that Jarett caused the outage, but guesses that Jarett contributed to the problems.
Uncertain Confidence 91% · Jack Rhysider EP 152 Details
“I can’t exactly confirm it was Jarett who took down Solana during that time. My guess is he contributed”
Pump.fun ASSOCIATED_WITH 4Chan
Jack says Pump.fun's site layout looks a lot like 4chan and later describes it as having a strong resemblance to 4chan.
Explicit Confidence 98% · Jack Rhysider EP 152 Details
“The site looks a lot like 4chan”
Pump.fun robbery ATTRIBUTED_TO Jarett Dunn
Jack attributes the Pump.fun robbery to Jarett, who also describes executing the program that redirected funds.
Explicit Confidence 99% · Jack Rhysider EP 152 Details
“Jarett, AKA Stacc, executed a wild and astonishing robbery. He stole millions of dollars in cryptocurrency”
Pump.fun token-graduation vulnerability DISCOVERED_BY Jarett Dunn
Jarett says he reported the vulnerability a couple of weeks before exploiting it, but it was not patched or fixed.
Explicit Confidence 96% · Jarett Dunn EP 152 Details
“I did report it a couple weeks before that. There was just no action to patch it or fix it.”
Flash-loan exploitation EXPLOITS Pump.fun token-graduation vulnerability
The flash-loan attack exploited the Pump.fun token-graduation vulnerability by redirecting the liquidity funds during graduation.
Derived Confidence 96% · Jack Rhysider EP 152 Details
“using his insider access, he redirected where the Solana was supposed to go”
Pump.fun robbery INVOLVES Solana
The robbery redirected Solana that was intended to fund liquidity on a decentralized exchange.
Explicit Confidence 99% · Jack Rhysider EP 152 Details
“he redirected where the Solana was supposed to go”
Pump.fun robbery INVOLVES Flash-loan exploitation
The robbery involved repeatedly taking flash loans, buying tokens, and selling them to repay the loans.
Explicit Confidence 99% · Jack Rhysider EP 152 Details
“he took out a flash loan and bought all the tokens needed to graduate the meme coin”
Solana February 2023 outage INVOLVES Clockwork
The outage occurred in the context of validators running Clockwork and after Clockwork came back up.
Explicit Confidence 97% · Jarett Dunn EP 152 Details
“the entire Solana network went down when clockwork came back up”
Pump.fun robbery INVOLVES Automated transaction attack
The incident involved an automated program that repeatedly attempted the attack against many tokens.
Explicit Confidence 99% · Jack Rhysider EP 152 Details
“once triggered, it would just automatically try to hit as many meme coins as possible on Pump.fun”