JekHyde and Carl created the identities Bridget and Ted as a believable cover story.
Explicit Confidence 99% · JekHyde EP 41 Details
“We built up this pretext that I was a woman named Bridget and Carl was this guy named Ted”
Qualified triples from the transcripts. Origin, speaker, and evidence stay attached. These are not independently verified facts.
JekHyde and Carl created the identities Bridget and Ted as a believable cover story.
Explicit Confidence 99% · JekHyde EP 41 Details
“We built up this pretext that I was a woman named Bridget and Carl was this guy named Ted”
Carl USES MAC address spoofing
Carl changed the rogue device's MAC address to resemble observed workstations.
Explicit Confidence 99% · Carl EP 41 Details
“then change the MAC address to make myself look like the workstations I’ve been observing”
Phobos Group DEVELOPED_BY Viss
Viss says he started Phobos Group after leaving a company that stopped paying its employees.
Explicit Confidence 96% · Jack Rhysider EP 42 Details
“So, he started his own company which was pretty much the same company but since the people were all looking for jobs, Viss just scooped them up and took the talent with him, including his co-founder, Ali. They called it the Phobos Group.”
TrustedSec DEVELOPED_BY Dave Kennedy
Dave says he started TrustedSec, initially in the basement of his house.
Explicit Confidence 99% · Dave Kennedy EP 42 Details
“I started it literally in the basement of my house”
Phobos Group DEVELOPED_BY Ali
Ali is identified as a co-founder of Phobos Group.
Explicit Confidence 98% · Jack Rhysider EP 42 Details
“including his co-founder, Ali. They called it the Phobos Group.”
Binary Defense DEVELOPED_BY Dave Kennedy
Dave says he started Binary Defense as a separate company from TrustedSec.
Explicit Confidence 99% · Dave Kennedy EP 42 Details
“I started Binary Defense and they’re both two different companies”
SQL injection DISCOVERED_BY Clay
Clay isolated the web application's vulnerability to pages affected by SQL injection.
Explicit Confidence 96% · Clay EP 42 Details
“I was able to isolate it to one of two pages that had this vulnerability.”
Viss MEMBER_OF Phobos Group
Viss says he runs Phobos Group.
Explicit Confidence 99% · Viss EP 42 Details
“I run Phobos Group.”
Dave Kennedy MEMBER_OF Diebold
Dave became Chief Security Officer at Diebold.
Explicit Confidence 98% · Dave Kennedy EP 42 Details
“be the Chief Security Officer over at Diebold”
Clay MEMBER_OF WOPR Summit
Clay is described as an organizer for the WOPR Summit.
Explicit Confidence 99% · Jack Rhysider EP 42 Details
“Clay also is an organizer [00:40:00] for the WOPR Summit.”
Mr. Robot MENTIONS Dave Kennedy
A clip from Mr. Robot uses Dave Kennedy's name as Elliot's fake identity.
Explicit Confidence 96% · Jack Rhysider EP 42 Details
“Elliot uses Dave Kenney as his fake name”
Active Directory USES Group Policy
The episode explains that Active Directory can use Group Policy to perform surveillance on workstations.
Explicit Confidence 98% · Viss EP 42 Details
“You can configure Windows Active Directory to use GPO”
Dave Kennedy USES social engineering
Dave's security testing work used social engineering, including impersonation and diversion tactics.
Explicit Confidence 99% · Jack Rhysider EP 42 Details
“This is one of Dave’s specialties; social engineering”
Jack Rhysider USES Intrusion Detection System
Jack deployed an intrusion detection system to detect attempted attacks against his website.
Explicit Confidence 98% · Jack Rhysider EP 42 Details
“I set up all my best sensors I had at home; a firewall, an intrusion detection system”
Dave Kennedy USES TAP device
During a retail security engagement, Dave's team used cellular TAP devices to obtain direct network access.
Explicit Confidence 99% · Dave Kennedy EP 42 Details
“We have these little devices that we call TAP devices”
Clay USES John the Ripper
Clay used John the Ripper to crack the root password hash during incident response.
Explicit Confidence 99% · Clay EP 42 Details
“That’s when I started to run John the Ripper on it.”
Jack Rhysider USES Raspberry Pi
Jack set up a file-sharing website on a Raspberry Pi at home.
Explicit Confidence 99% · Jack Rhysider EP 42 Details
“I set up a file-sharing website at home on a Raspberry Pi.”
Clay USES Intrusion Detection System
Clay's environment uses an IDS to alert on cryptomining activity.
Explicit Confidence 99% · Clay EP 42 Details
“We have an IDS in place. That’s typically how we’ll be notified”
Dave Kennedy USES badge cloning
Dave's team cloned an employee's badge to gain access to the data center.
Explicit Confidence 99% · Dave Kennedy EP 42 Details
“We cloned his badge at the same time.”
Jack Rhysider USES Security Onion
Jack used Security Onion for full packet captures while monitoring the website.
Explicit Confidence 98% · Jack Rhysider EP 42 Details
“full packet captures using Security Onion”
Elliot USES social engineering
In the described Mr. Robot clip, Elliot attempts to social engineer his way into a meeting.
Explicit Confidence 98% · Jack Rhysider EP 42 Details
“tries to social engineer his way into a meeting”
Clay works in an environment with many Linux machines and investigates Linux servers.
Explicit Confidence 97% · Clay EP 42 Details
“we have a lot of Linux machines”
Dave Kennedy USES RFID
Dave's badge-cloning operation targeted RFID proximity badges.
Explicit Confidence 98% · Jack Rhysider EP 42 Details
“We noticed to get into the data center, you need an RFID badge.”
Plaid Parliament of Pwning ASSOCIATED_WITH ICTF
Tyler says PPP also played in ICTF.
Explicit Confidence 98% · Tyler EP 43 Details
“there was ICTF which is run by the University of California Santa Barbara”
“We played in that”
Plaid Parliament of Pwning ASSOCIATED_WITH Defcon CTF
PPP repeatedly competed in the Defcon CTF and ultimately won it four times.
Explicit Confidence 99% · Jack Rhysider EP 43 Details
“The team at PPP decided to give it a try.”
“At this point PPP has won the Defcon CTF four times.”