Claims

Qualified triples from the transcripts. Origin, speaker, and evidence stay attached. These are not independently verified facts.

Cygenta ASSOCIATED_WITH UK

Cygenta is described as a cyber-security company located in the UK.

Explicit Confidence 96% · FC EP 66 Details

“a cyber-security company here in the UK”

FC · offsets 196–235

FC MEMBER_OF Cygenta

FC identifies himself as co-founder and co-CEO of Cygenta.

Explicit Confidence 99% · FC EP 66 Details

“I’m known for being the co-founder and co-CEO of Cygenta”

FC · offsets 138–194

FC MEMBER_OF Raytheon

FC joined Raytheon's team and served as head of offensive cyber-research.

Explicit Confidence 98% · Jack Rhysider EP 66 Details

“FC joined their team. His job was…”

Jack Rhysider · offsets 18892–18927

“Head of offensive cyber-research.”

FC · offsets 18932–18965

FC SAME_AS Freaky Clown

FC states that Freaky Clown is his hacker alias.

Explicit Confidence 99% · FC EP 66 Details

“My hacker alias is Freaky Clown.”

FC · offsets 104–136

FC USES SE toolkit

FC describes using the SE toolkit to demonstrate a spear-phishing attack.

Explicit Confidence 98% · FC EP 66 Details

“a spear phishing attack using the SE toolkit”

FC · offsets 24102–24146

Cygenta USES cross-site scripting

FC says cross-site scripting is among the techniques used to get into banks over the internet.

Explicit Confidence 94% · FC EP 66 Details

“A lot of cross-site scripting”

FC · offsets 46485–46514

FC USES social engineering

FC performs social engineering as part of his security work and penetration tests.

Explicit Confidence 99% · FC EP 66 Details

“I’ve done a lot of hacking, a lot of social engineering”

FC · offsets 292–347

FC USES spear phishing

FC demonstrates spear phishing as part of his outreach and security presentations.

Explicit Confidence 97% · FC EP 66 Details

“we’ll get people up to show them how spear phishing works”

FC · offsets 23599–23656

FC USES physical penetration testing

FC says he has performed physical assessments and later works as a physical penetration tester.

Explicit Confidence 99% · FC EP 66 Details

“I’ve done a lot of hacking, a lot of social engineering, physical assessments”

FC · offsets 292–369

“he became a full-on penetration tester”

Jack Rhysider · offsets 4780–4822

Cygenta USES implanting a physical device

FC describes creating and implanting a physical device in a bank to gain network access, framing this as part of Cygenta's approach.

Derived Confidence 91% · FC EP 66 Details

“created a physical device, break into the bank itself, implant that physical device”

FC · offsets 46716–46799

“This really comes back to the whole core of Cygenta”

FC · offsets 46839–46890

FC USES Tailgating

FC uses tailgating to enter restricted areas during physical assessments.

Explicit Confidence 99% · FC EP 66 Details

“then you can tailgate people into the areas that you probably shouldn’t”

FC · offsets 13297–13368

Cygenta USES SQL injection

FC says SQL injection is among the techniques used to get into banks over the internet.

Explicit Confidence 94% · FC EP 66 Details

“a lot of SQL injection”

FC · offsets 46516–46538

FC USES Reconnaissance

FC conducts reconnaissance before physical penetration tests.

Explicit Confidence 98% · FC EP 66 Details

“I go to this hospital. I spend like, one-night recon”

FC · offsets 12265–12318

FC USES Raspberry Pi

FC implants and configures a Raspberry Pi on an internal network for remote access.

Explicit Confidence 99% · FC EP 66 Details

“I put in a Raspberry Pi into the network. I just plugged it in, configured it, and then just left it there”

FC · offsets 34975–35082

Darknet Diaries DEVELOPED_BY Jack Rhysider

Jack states that he created the Darknet Diaries show.

Explicit Confidence 99% · Jack Rhysider EP 67 Details

“This show was created by me, the ULA violator, Jack Rhysider.”

Jack Rhysider · offsets 39438–39499

Black Hills Information Security DEVELOPED_BY John Strand

John says he started Black Hills Information Security as a penetration-testing company.

Explicit Confidence 99% · John Strand EP 67 Details

“It’s time to start a pen testing company.”

John Strand · offsets 5918–5959

“John called his pen testing company Black Hills Information Security.”

Jack Rhysider · offsets 5974–6043

John Strand MEMBER_OF Black Hills Information Security

John is the founder and operator of Black Hills Information Security, describing it as his company.

Derived Confidence 90% · Jack Rhysider EP 67 Details

“John called his pen testing company Black Hills Information Security.”

Jack Rhysider · offsets 5974–6043

John Strand MEMBER_OF SANS

John became a SANS instructor and taught penetration testing and hacking techniques.

Explicit Confidence 90% · Jack Rhysider EP 67 Details

“he became a SANS instructor and actually taught hacking techniques”

Jack Rhysider · offsets 5622–5688

John Strand USES phishing

John uses a document-based phishing method to induce a suspect to open a document that beacons back.

Explicit Confidence 96% · Jack Rhysider EP 67 Details

“use social engineering and phishing methods for good”

Jack Rhysider · offsets 23558–23610

John Strand USES social engineering

John describes using social-engineering tactics to help law enforcement locate a kidnapping suspect.

Explicit Confidence 98% · Jack Rhysider EP 67 Details

“what a gnarly way to use social engineering and phishing methods for good”

Jack Rhysider · offsets 23537–23610

John Strand USES Google Street View

John uses Google Street View to inspect a target building and identify an open window.

Explicit Confidence 99% · John Strand EP 67 Details

“I used Google Street View to go around the building.”

John Strand · offsets 14125–14177

Benjamin Donnelly USES command and control server

Ben connects to and monitors the command-and-control server with John during the prison penetration test.

Explicit Confidence 99% · Jack Rhysider EP 67 Details

“John and Ben are in this coffee shop. They open up their computers and connect to their command and control server.”

Jack Rhysider · offsets 31337–31453

Black Hills Information Security USES penetration testing

Black Hills Information Security performs penetration testing for customers to test whether hackers could access buildings, networks, or computers.

Explicit Confidence 99% · Jack Rhysider EP 67 Details

“Black Hills started doing penetration testing for customers”

Jack Rhysider · offsets 6128–6187

implant USES command and control server

The implant dropped by the USB executable is intended to create a remote connection monitored through John's command-and-control server.

Derived Confidence 88% · Jack Rhysider EP 67 Details

“the executable program on that USB drive tries to open a connection to John’s server.”

Jack Rhysider · offsets 27708–27793

John Strand USES Kon-Boot

John uses or demonstrates Kon-Boot during a physical penetration test to take over computer systems.

Uncertain Confidence 84% · John Strand EP 67 Details

“I’m using, I don’t know, it was like, I think it was Kon-Boot.”

John Strand · offsets 19767–19829