Ed Skoudis MEMBER_OF SANS Institute
Ed Skoudis says he is an instructor with the SANS Institute.
Explicit Confidence 99% · Ed Skoudis EP 121 Details
“I am an instructor with the SANS Institute.”
Episode
26 July 2022 Official episode · Official transcript
penetration test cons
Jack Rhysider interviews Ed Skoudis about penetration testing, medical-device security, connected toys, replay vulnerabilities, and the real-world safety implications of cybersecurity work. Beau Woods discusses I Am The Cavalry and collaborative medical-device security research.
Topics: Phishing and spoofed-email social engineering, Authorized penetration testing and rules of engagement, Attack-surface enumeration with Nmap, HTTP/HTTPS web attack surfaces, Cross-site scripting and SQL injection testing, Internal-network assessment through VPN access, Low-and-slow scanning and detection evasion, Medical-device patch management and asset inventory, Safety implications of compromising surgical systems, Medical-device security research and coordinated collaboration, Connected-toy security across device, wireless protocol, mobile app, cloud service, API, and web interface, Replay vulnerabilities and replay attacks, Risk communication in penetration-test reports
Links published on the Darknet Diaries episode page. Not LLM output.
No Sources heading on this episode page.
Qualified statements from this episode, not graph facts.
Ed Skoudis MEMBER_OF SANS Institute
Ed Skoudis says he is an instructor with the SANS Institute.
Explicit Confidence 99% · Ed Skoudis EP 121 Details
“I am an instructor with the SANS Institute.”
Counter Hack DEVELOPED_BY Ed Skoudis
Ed Skoudis identifies himself as the founder of Counter Hack.
Explicit Confidence 99% · Ed Skoudis EP 121 Details
“founder of Counter Hack”
Ed Skoudis MEMBER_OF Bell Labs
Jack says Ed went to work at Bell Labs; this indicates an employment relationship.
Explicit Confidence 97% · Jack Rhysider EP 121 Details
“he went to work at Bell Labs”
Ed Skoudis USES penetration testing
Ed identifies himself as a penetration tester and describes performing penetration tests.
Explicit Confidence 99% · Ed Skoudis EP 121 Details
“I am a penetration tester”
Ed Skoudis USES Nmap
Ed says his team uses NMAP to discover available systems and open ports during attack-surface mapping.
Explicit Confidence 99% · Ed Skoudis EP 121 Details
“you’re using various tools, NMAP is a very popular one”
Ed Skoudis USES Vulnerability scanning
Ed describes scanning systems to identify potential vulnerabilities during a penetration test.
Explicit Confidence 95% · Ed Skoudis EP 121 Details
“moving on to finding a list of potential vulnerabilities with them”
Ed Skoudis USES cross-site scripting
Jack says Ed's team tested websites for cross-site scripting vulnerabilities.
Derived Confidence 94% · Jack Rhysider EP 121 Details
“see if those websites were vulnerable to cross-site scripting attacks”
Ed Skoudis USES SQL injection
Jack says Ed's team tested websites for SQL injection vulnerabilities.
Derived Confidence 94% · Jack Rhysider EP 121 Details
“or SQL injection attacks”
Ed Skoudis USES Virtual private network
Ed describes conducting internal testing while connected through a VPN as a low-privilege employee.
Explicit Confidence 98% · Ed Skoudis EP 121 Details
“We just want to be on the internal network, VPN’d in.”
Ed Skoudis EXPLOITS Replay vulnerability
Ed's team found and demonstrated exploitation of a replay vulnerability in the toy's wireless messaging.
Explicit Confidence 98% · Ed Skoudis EP 121 Details
“we found a replay vulnerability”
Ed Skoudis USES Replay attack
Ed explains that his team captured wireless packets and replayed them to make the toy speak.
Explicit Confidence 99% · Ed Skoudis EP 121 Details
“we could sniff that packet and capture it”
“In a replay attack, you simply replay the packet that you capture.”
Beau Woods MEMBER_OF I Am The Cavalry
Beau Woods says he is a volunteer with I Am The Cavalry.
Explicit Confidence 99% · Beau Woods EP 121 Details
“I’m a volunteer with a grassroots initiative called I Am The Cavalry”
Biohacking Village Device Lab PART_OF Defcon
Jack describes the Biohacking Village Device Lab as an activity at Defcon.
Explicit Confidence 98% · Jack Rhysider EP 121 Details
“What Beau helps organize is the Biohacking Village Device Lab”
“This year at Defcon at the Biohacking Village, we have a Device Lab.”
Biohacking Village Device Lab ASSOCIATED_WITH Food and Drug Administration
Beau says the FDA participates in the Device Lab through Suzanne Schwartz and Seth Carmody.
Explicit Confidence 99% · Beau Woods EP 121 Details
“We’ve got – the FDA is participating.”
Biohacking Village Device Lab ASSOCIATED_WITH Mayo Clinic
Beau says the Mayo Clinic built a Capture the Flag exercise for the Device Lab.
Explicit Confidence 99% · Beau Woods EP 121 Details
“We’ve also got a Capture the Flag that the Mayo Clinic built”
Capture the Flag DEVELOPED_BY Mayo Clinic
Beau attributes construction of a Capture the Flag exercise to the Mayo Clinic.
Explicit Confidence 98% · Beau Woods EP 121 Details
“a Capture the Flag that the Mayo Clinic built”
Windows 7 ASSOCIATED_WITH Surgical laser
Ed says a surgical laser he encountered was controlled by a Windows 7 machine.
Explicit Confidence 99% · Ed Skoudis EP 121 Details
“the laser was controlled by a Windows 7 machine”
Mark Rasch MEMBER_OF Department of Justice
Ed describes Mark Rasch as one of the chief prosecutors of Kevin Mitnick from the Department of Justice.
Explicit Confidence 96% · Ed Skoudis EP 121 Details
“one of the chief prosecutors of Kevin Mitnick back in the day from the Department of Justice”
Ed Skoudis ASSOCIATED_WITH Defcon
Ed says he spoke at Defcon as part of his cybersecurity-industry work.
Explicit Confidence 99% · Ed Skoudis EP 121 Details
“I spoke at Defcon”
Works mentioned in the transcript. Distinct from show-note sources.
Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19 · 2026-09-13T07:40:55.772588+00:00