Claims

Qualified triples from the transcripts. Origin, speaker, and evidence stay attached. These are not independently verified facts.

Daniel Beckwitt USES key-logger

Daniel allegedly placed a physical key-logger on a professor’s computer and used it to obtain access to the professor’s email.

Uncertain Confidence 93% · Jack Rhysider EP 39 Details

“He put a key-logger on the professor’s computer”

Jack Rhysider · offsets 15454–15501

key-logger USES keylogging

The key-logger recorded every keystroke and stored the results for later retrieval.

Explicit Confidence 99% · Jack Rhysider EP 39 Details

“it records every keystroke that computer makes”

Jack Rhysider · offsets 15595–15641

Daniel Beckwitt USES VPN

Daniel configured the tunnel Wi-Fi through a VPN so Askia would believe he was in Virginia.

Explicit Confidence 99% · Jack Rhysider EP 39 Details

“Daniel provided WiFi but he set the WiFi up with a VPN”

Jack Rhysider · offsets 35145–35199

Daniel Beckwitt USES Bitcoin mining

Daniel mined Bitcoin while he was at university.

Explicit Confidence 99% · Jack Rhysider EP 39 Details

“Daniel started mining Bitcoin”

Jack Rhysider · offsets 2331–2360

Shane Lawson USES Hard-drive destruction

Shane and the other presenters pursued a method to remotely and physically destroy a hard drive.

Explicit Confidence 99% · Shane Lawson EP 39 Details

“What we’d really like to do is have a way to remotely destroy a drive”

Shane Lawson · offsets 4849–4918

Daniel Beckwitt USES thermite

Daniel used thermite in repeated experiments to destroy hard drives.

Explicit Confidence 99% · Jack Rhysider EP 39 Details

“he placed the hard drive in the dug-out pit, added the thermite on top of it”

Jack Rhysider · offsets 11328–11404

Daniel Beckwitt USES phone phreaking

As a teenager, Daniel played with phone phreaking, described as hacking phones.

Explicit Confidence 99% · Jack Rhysider EP 39 Details

“as a teenager he loved to play with phone phreaking”

Jack Rhysider · offsets 1993–2044

Kyle MEMBER_OF McKesson

Kyle says he is on the Red Team at McKesson.

Explicit Confidence 99% · Kyle EP 40 Details

“Right now, I’m on the Red Team at McKesson.”

Kyle · offsets 1901–1944

Darknet Diaries MENTIONS JDLR

The episode discusses JDLR, described as a mall security-awareness campaign meaning Just Doesn’t Look Right.

Explicit Confidence 98% · Jack Rhysider EP 40 Details

“JDLR was a security awareness campaign that the mall cops put up”

Jack Rhysider · offsets 1053–1117

Kyle USES drop ceiling bypass

Kyle's colleague enters the server room through the drop ceiling rather than using its door.

Explicit Confidence 99% · Kyle EP 40 Details

“Then he slid the other tile out of the way, dropped down on the other side”

Kyle · offsets 31758–31832

network dropbox USES Linux

Jack explains that the Raspberry Pi used in the dropbox is a small Linux computer.

Explicit Confidence 99% · Jack Rhysider EP 40 Details

“this is a Raspberry Pi and it’s like a tiny little Linux computer”

Jack Rhysider · offsets 12608–12673

Kyle USES Red Team

Kyle works as part of a Red Team conducting simulated offensive security tests.

Explicit Confidence 96% · Kyle EP 40 Details

“I’m on the Red Team at McKesson.”

Kyle · offsets 1912–1944

Kyle USES social engineering

Kyle and his team use disguises, cover stories, employee branding, and fabricated explanations to appear authorized.

Explicit Confidence 98% · Kyle EP 40 Details

“Typically, you want to dress for the part”

Kyle · offsets 7475–7516

“we’re here dealing with some incident response stuff. We’re with information security.”

Kyle · offsets 54232–54319

Kyle USES lock picking

Kyle and his colleague use lock-picking tools to open a locked office door.

Explicit Confidence 99% · Jack Rhysider EP 40 Details

“We pull out some lock picks and begin trying to pick the lock.”

Jack Rhysider · offsets 38800–38870

“We clone it with a Proxmark right on the spot and then we leave.”

Kyle · offsets 41892–41956

Kyle USES badge cloning

Kyle clones a headquarters badge to obtain access to the target building.

Explicit Confidence 99% · Kyle EP 40 Details

“We clone it with a Proxmark right on the spot”

Kyle · offsets 41892–41937

“I had taken their badge design, put my photo on it, and printed it on this cloned badge.”

Kyle · offsets 54423–54511

network dropbox USES mobile hotspot

The dropbox uses a mobile hotspot to establish an external connection.

Explicit Confidence 98% · Kyle EP 40 Details

“mobile hotspot enabled, attached to a Raspberry Pi”

Kyle · offsets 11936–11986

network dropbox USES Raspberry Pi

The dropbox is assembled using a Raspberry Pi.

Explicit Confidence 99% · Kyle EP 40 Details

“attached to a Raspberry Pi attached to a wireless card”

Kyle · offsets 11960–12014

Kyle USES Proxmark

Kyle uses a Proxmark to clone an RFID badge.

Explicit Confidence 99% · Kyle EP 40 Details

“We clone it with a Proxmark right on the spot”

Kyle · offsets 41892–41937

Proxmark USES RFID

Jack describes the badge-cloning device as scanning RFID badge data.

Explicit Confidence 99% · Jack Rhysider EP 40 Details

“This is a device that can scan an RFID badge and take the data from it”

Jack Rhysider · offsets 42214–42284

Kyle USES passive reconnaissance

Kyle and his team use social media, Google Maps, and related public information to profile target locations and employees.

Explicit Confidence 99% · Kyle EP 40 Details

“I get on my browser and I just go to Facebook; I go to LinkedIn; I go to Twitter.”

Kyle · offsets 4250–4331

“You also look at what Google Maps has to offer.”

Kyle · offsets 23800–23845

Kyle USES network dropbox

Kyle repeatedly deploys a portable network dropbox inside target facilities to provide remote access to the internal network.

Explicit Confidence 99% · Jack Rhysider EP 40 Details

“Kyle takes his backpack off and pulls out a dropbox.”

Jack Rhysider · offsets 11673–11725

“We get the dropbox plugged in in between the copier and the wall.”

Kyle · offsets 47922–47987

Kyle USES physical penetration testing

Kyle and his coworkers perform physical penetration tests by breaking into buildings to test security.

Explicit Confidence 98% · Kyle EP 40 Details

“The point was to gain access to headquarters by way of anything we could do at any of the previous sites”

Kyle · offsets 3182–3286

Kyle USES firewall bypass

Kyle says the team bypassed the firewall while deploying the dropbox.

Explicit Confidence 99% · Kyle EP 40 Details

“We bypassed the firewall.”

Kyle · offsets 12129–12154

JekHyde and Carl physical penetration engagement INITIAL_ACCESS_VIA phishing

The team obtained initial physical access through a targeted phishing and pretexting campaign that prompted an employee to invite them to the facility.

Derived Confidence 97% · Jack Rhysider EP 41 Details

“they’ve got someone inside inviting them in”

Jack Rhysider · offsets 23872–23915

JekHyde and Carl physical penetration engagement INVOLVES credential interception

The team recovered unencrypted credentials by monitoring traffic on the network and used them to pivot into multiple systems.

Explicit Confidence 99% · Carl EP 41 Details

“With sufficient amount of monitoring on the wire, credentials were recovered”

Carl · offsets 41473–41549