Qualified triples from the transcripts. Origin, speaker, and evidence stay attached. These are not independently verified facts.
Jonathan Studebaker EXPLOITS DoorKing gate-control vulnerability
Jonathan and Brian used the DoorKing system’s wiring weakness to hot-wire and open the gate.
Explicit Confidence 98% · Jonathan Studebaker EP 95 Details
“we basically just hot-wired the gate, and it popped right open”
Jonathan Studebaker MEMBER_OF RedTeam Security
Jack says Jonathan is on the same team as Brian and that both work at RedTeam Security.
Explicit Confidence 99% · Jack Rhysider EP 95 Details
“They both work at RedTeam Security.”
Brian Halbach MEMBER_OF RedTeam Security
Brian says he is one of the red-teamers at RedTeam Security.
Explicit Confidence 99% · Brian Halbach EP 95 Details
“I’m one of the red-teamers here at RedTeam Security.”
Brian Halbach USES physical penetration testing
Brian identifies physical penetration testing as one of his activities.
Explicit Confidence 99% · Brian Halbach EP 95 Details
“Physical pen testing, red-teaming, regular old pen testing.”
Brian Halbach USES Raspberry Pi
Brian says they brought Raspberry Pis to plug into network ports during the physical tests.
Explicit Confidence 99% · Brian Halbach EP 95 Details
“we had a bag full of Raspberry Pis that we were able to plug in”
Brian Halbach USES social engineering
Brian says he performs social engineering over the phone and in person.
Explicit Confidence 99% · Brian Halbach EP 95 Details
“I also really love social engineering over the phone and in person.”
Brian Halbach USES Raspberry Pi
Brian says the team used Raspberry Pis as concealed computers that could phone home when connected to a network.
Explicit Confidence 90% · Jack Rhysider EP 95 Details
“They’ve got these things pre-configured to phone home as soon as they’re plugged in.”
Jonathan Studebaker USES OSINT
Jonathan describes OSINT as a major part of their reconnaissance, including reviewing employee social media and company websites.
Explicit Confidence 99% · Jonathan Studebaker EP 95 Details
“You know, so, OSINT is a huge piece”
Brian Halbach USES USB sticks
Brian says he dropped malicious USB sticks during the building test.
Explicit Confidence 99% · Brian Halbach EP 95 Details
“I did the same thing Jon did and just dropped a couple of malicious USBs.”
Jonathan Studebaker USES social engineering
Jonathan explicitly lists social engineering among the activities he performs.
Explicit Confidence 99% · Jonathan Studebaker EP 95 Details
“but also the physicals, the social engineering, phishing, stuff like that.”
Jonathan Studebaker USES physical penetration testing
Jonathan says his work includes physical security testing.
Explicit Confidence 96% · Jonathan Studebaker EP 95 Details
“but also the physicals, the social engineering, phishing, stuff like that.”
Brian Halbach USES Google Maps
Brian says they used Google Maps to map the facilities and locations during preparation.
Explicit Confidence 99% · Brian Halbach EP 95 Details
“using the advanced hacking tool Google Maps”
Jonathan Studebaker USES RFID badge cloning
Jonathan says their equipment included long-range RFID readers for cloning entry badges.
Explicit Confidence 99% · Jonathan Studebaker EP 95 Details
“long-range RFID readers for cloning badges like entry-access badges”
Brian Halbach USES OSINT
Brian says they conducted OSINT while mapping the facilities.
Explicit Confidence 99% · Brian Halbach EP 95 Details
“Yeah, we did a bunch of OSINT”
Jonathan Studebaker USES Quick Jim
Jonathan says they used a Quick Jim, also called a mini jim, to bypass a door.
Explicit Confidence 99% · Jonathan Studebaker EP 95 Details
“we used a mini jim or a Quick Jim tool for it”
Brian Halbach USES Red teaming
Brian says he performs red-teaming as part of his work.
Explicit Confidence 99% · Brian Halbach EP 95 Details
“Physical pen testing, red-teaming, regular old pen testing.”
Jonathan Studebaker USES Proxmark III
Jonathan says they brought a Proxmark III for cloning RFID cards.
Explicit Confidence 99% · Jonathan Studebaker EP 95 Details
“we packed a Proxmark III for cloning RFID cards”
Jonathan Studebaker USES phishing
Jonathan explicitly lists phishing among his activities.
Explicit Confidence 99% · Jonathan Studebaker EP 95 Details
“the social engineering, phishing, stuff like that.”
Jonathan Studebaker USES USB drop
Jonathan says he dropped a USB near a locked door as part of the test.
Explicit Confidence 99% · Jonathan Studebaker EP 95 Details
“I dropped a USB drop near it. I took pictures and evidence.”
Brian Halbach USES under-door bypass
Brian and Jon used under-door tools as part of their physical entry toolkit.
Explicit Confidence 99% · Jonathan Studebaker EP 95 Details
“we brought some under-the-door tools”
Brian Halbach USES RFID badge cloning
Brian and Jon attempted to clone employees’ RFID badges during the engagement.
Explicit Confidence 99% · Brian Halbach EP 95 Details
“we waited for their employees to drive off for lunch or drive off for – to other locations throughout the city that they’d have to go to do their jobs. We would follow them in our car and then we would bump into them around town because, yeah, we don’t want to tip our hand yet and try to just – well, everybody knew everybody at the headquarters, so we didn’t want to tip our hand there. So, we followed the employees as they would go around town and then clone their badges”
Brian Halbach USES network tap
Brian says he hoped to attach the LANstar network tap to a computer in the lobby.
Explicit Confidence 99% · Brian Halbach EP 95 Details
“I could attach that LANstar, that network tap that we had talked about”
Jonathan Studebaker USES LANstar
Jonathan says they packed a LANstar as part of their equipment.
Explicit Confidence 99% · Jonathan Studebaker EP 95 Details
“we packed a LANstar”
Remote Desktop exposure AFFECTS Remote Desktop
The vulnerability is the exposure of Remote Desktop directly to the public internet.
Explicit Confidence 99% · Jack Rhysider EP 96 Details
“accessible from the internet over Remote Desktop”
Jack Rhysider AUTHORED Darknet Diaries
Jack states that he made the Darknet Diaries show.
Explicit Confidence 98% · Jack Rhysider EP 96 Details
“This show is made by me”