Qualified triples from the transcripts. Origin, speaker, and evidence stay attached. These are not independently verified facts.
JekHyde and Carl physical penetration engagement INVOLVES lookalike domain
The engagement involved a lookalike domain used in the targeted phishing email.
Explicit Confidence 99% · JekHyde EP 41 Details
“Instead of targetcompany.com it was targetcompany-communityresources.com.”
JekHyde and Carl physical penetration engagement INVOLVES RFID visitor badge
The team was issued RFID visitor badges after being admitted to the headquarters.
Explicit Confidence 99% · JekHyde EP 41 Details
“we were given visitor badges which were RFID visitor badges”
JekHyde and Carl physical penetration engagement INVOLVES social engineering
The engagement used social engineering to obtain trusted access to the facility.
Explicit Confidence 99% · Jack Rhysider EP 41 Details
“A Red Team assessment.”
“we exploited the human factor”
JekHyde and Carl physical penetration engagement INVOLVES domain administrator access
The engagement resulted in the team obtaining domain administrator access to the network.
Explicit Confidence 98% · Jack Rhysider EP 41 Details
“this team successfully got in, put the rogue device in, and gained full access to the network”
JekHyde and Carl physical penetration engagement INVOLVES rogue device
The engagement involved planting a rogue device in the company's network.
Explicit Confidence 99% · Jack Rhysider EP 41 Details
“The objective is to break into this manufacturing plant in a Spanish-speaking country, plant a rogue device”
JekHyde and Carl physical penetration engagement INVOLVES physical penetration testing
The engagement was a permitted physical penetration test of a manufacturing facility.
Explicit Confidence 98% · Jack Rhysider EP 41 Details
“The objective is to break into this manufacturing plant”
JekHyde and Carl physical penetration engagement INVOLVES JekHyde
The engagement involved JekHyde as the physical penetration tester and social engineer.
Explicit Confidence 99% · Jack Rhysider EP 41 Details
“The team consists of JekHyde and Carl. Jek is a physical penetration tester.”
JekHyde and Carl physical penetration engagement INVOLVES pretext
The engagement involved impersonating corporate employees and constructing a charitable-work pretext.
Explicit Confidence 99% · Jack Rhysider EP 41 Details
“This is just to build up the pretext.”
JekHyde and Carl physical penetration engagement INVOLVES Carl
The engagement involved Carl as the hardware and rogue-device specialist.
Explicit Confidence 99% · Jack Rhysider EP 41 Details
“The team consists of JekHyde and Carl.”
JekHyde and Carl physical penetration engagement LEADS_TO domain administrator access
Monitoring recovered credentials that enabled pivots into multiple systems and eventual escalation to domain administrator access.
Explicit Confidence 99% · Carl EP 41 Details
“credentials were recovered that allowed us to pivot into multiple systems and then we eventually escalated up to DA”
JekHyde says she works with a Red Team of technical hackers.
Explicit Confidence 99% · JekHyde EP 41 Details
“I work with a Red Team of technical hackers”
Googleplex PART_OF Google
The Googleplex is described as Google's main headquarters.
Explicit Confidence 98% · Jack Rhysider EP 41 Details
“There it was, the main headquarters for Google. Actually, they call it the Googleplex”
JekHyde USES physical reconnaissance
JekHyde conducted on-site reconnaissance of the facility after arriving in-country.
Explicit Confidence 99% · JekHyde EP 41 Details
“we performed on-site reconnaissance”
Carl USES passive packet capture
Carl initially performed passive listening at layers 2 and 3 rather than assigning the device an IP address.
Explicit Confidence 96% · Carl EP 41 Details
“It’s kind of a gamble based on within that one or two minutes. I’m looking at the traffic”
JekHyde and Carl sent a targeted phishing email to the employee they selected as a mark.
Explicit Confidence 99% · JekHyde EP 41 Details
“we put a phish together, a phishing e-mail”
Jack Rhysider USES Google Maps
Jack and a co-worker used Google Maps to locate Google's headquarters during an unscheduled visit.
Explicit Confidence 99% · Jack Rhysider EP 41 Details
“A co-worker and I used Google Maps and found it.”
JekHyde USES lookalike domain
The phishing email used a domain resembling the target company's domain.
Explicit Confidence 99% · JekHyde EP 41 Details
“with a domain that looked a lot like our target company’s domain”
JekHyde USES social engineering
JekHyde identifies herself as a social engineer and uses social engineering during physical access engagements.
Explicit Confidence 99% · JekHyde EP 41 Details
“I am a physical penetration tester and social engineer.”
Carl USES TTL manipulation
Carl changed the TTL so the device would appear to be a Windows workstation rather than Linux.
Explicit Confidence 99% · Carl EP 41 Details
“Then I’ll also change the TTL so if I’m pinged, I’ll also look like a Windows workstation”
rogue device USES ODROID-C2
The rogue device used in the engagement was an ODROID-C2 mini-computer.
Explicit Confidence 99% · Jack Rhysider EP 41 Details
“The rogue device that Carl pulls out is an ODROID-C2.”
JekHyde USES physical penetration testing
JekHyde identifies herself as a physical penetration tester and performs physical penetration testing.
Explicit Confidence 99% · JekHyde EP 41 Details
“I am a physical penetration tester and social engineer.”
JekHyde USES social media reconnaissance
JekHyde researched LinkedIn, Facebook, Instagram, and other online sources to identify a suitable mark.
Explicit Confidence 99% · JekHyde EP 41 Details
“I looked at LinkedIn, and Facebook, and Instagram’s a big one”
Carl used tcpdump to observe traffic on candidate network ports.
Explicit Confidence 99% · Jack Rhysider EP 41 Details
“Carl is using a program called tcpdump to watch what traffic is being broadcast”
Carl USES rogue device
Carl carried, connected, and planted the rogue device during the engagement.
Explicit Confidence 99% · Jack Rhysider EP 41 Details
“Carl had a rogue device and a laptop”
The ODROID-C2 was described as running Linux.
Explicit Confidence 99% · Jack Rhysider EP 41 Details
“runs Linux. It’s kind of like a Raspberry Pi.”