Episode
04 October 2022 Official episode · Official transcript
penetration test social engineering
Jeremiah Roe describes a physical and network penetration test of a government contractor’s satellite office, including physical access bypasses, kiosk takeover, Ethernet access, NAC bypass, tailgating, and exposed unlocked workstations.
Topics: Physical penetration testing, Internal red team operations, Network and web application penetration testing, Physical access control weaknesses, Tailgating, Unattended and unlocked workstations, Kiosk escape to the underlying operating system, USB keyboard emulation with Bash Bunny, Exposed Ethernet ports, Network Access Control (NAC), MAC address-based access control, MAC address spoofing, Open-source intelligence and site reconnaissance, Network enumeration, Sensitive information exposure in offices
Links published on the Darknet Diaries episode page. Not LLM output.
Qualified statements from this episode, not graph facts.
Jeremiah Roe MEMBER_OF Geek Squad
Jeremiah previously got a job at Geek Squad troubleshooting customers' computer problems.
Explicit Confidence 99% · Jack Rhysider EP 125 Details
“He went into the military and then got a job at Geek Squad troubleshooting customers’ computer problems”
Jeremiah Roe MEMBER_OF Synack
Jeremiah identifies himself as a solutions architect for Synack; Jack later says he moved to Synack to conduct offensive operations.
Explicit Confidence 99% · Jeremiah Roe EP 125 Details
“my name is Jeremiah Roe and I’m a solutions architect for Synack”
Jeremiah Roe ASSOCIATED_WITH OSCP
Jeremiah took and passed the OSCP certification, which the episode describes as testing hacking tools and exploitation techniques.
Explicit Confidence 98% · Jack Rhysider EP 125 Details
“eventually he took the OSCP certification”
Jeremiah Roe USES network-level penetration testing
Jeremiah says his government contracting work primarily focused on network-level penetration testing.
Explicit Confidence 99% · Jeremiah Roe EP 125 Details
“we really primarily focused on conducting network-level penetration testing”
Jeremiah Roe USES web application penetration testing
Jeremiah says his government contracting work included web application penetration testing.
Explicit Confidence 99% · Jeremiah Roe EP 125 Details
“web application penetration testing”
Jeremiah Roe USES red team operations
Jeremiah says he was part of the organization's internal red team operations.
Explicit Confidence 99% · Jeremiah Roe EP 125 Details
“We were both the internal pen test team and the internal red team operations”
Jeremiah Roe USES physical penetration testing
Jeremiah and his team conducted a physical penetration test against a satellite location.
Explicit Confidence 98% · Jeremiah Roe EP 125 Details
“we wanted to take it upon ourselves to go ahead and conduct one towards this satellite location”
Jeremiah Roe USES nation state style of an attack
The planned physical assessment was intended to imitate a nation-state-style attack.
Explicit Confidence 99% · Jeremiah Roe EP 125 Details
“we wanted to conduct a nation state style of an attack from a physical perspective”
Jeremiah Roe USES Google Maps
Jeremiah used Google Maps to gather information about the target location, its surroundings, entry points, and schedules.
Explicit Confidence 99% · Jack Rhysider EP 125 Details
“he started by simply Googling the location. Of course, this landed him on Google Maps”
Jeremiah Roe ASSOCIATED_WITH BC
Jeremiah worked collaboratively with BC during the physical penetration test.
Explicit Confidence 99% · Jeremiah Roe EP 125 Details
“I was working with another individual. Call him BC. I was working with BC”
Jeremiah Roe USES lockpick set
Jeremiah brought a lockpick set as part of his physical red-team equipment.
Explicit Confidence 99% · Jeremiah Roe EP 125 Details
“I had a lockpick set and a Raspberry Pi as well as a Bash Bunny”
Jeremiah Roe USES Raspberry Pi
Jeremiah brought a Raspberry Pi for the physical red-team operation.
Explicit Confidence 99% · Jeremiah Roe EP 125 Details
“I had a lockpick set and a Raspberry Pi as well as a Bash Bunny”
Jeremiah Roe USES Bash Bunny
Jeremiah brought and used a Bash Bunny to execute a pre-written script on an unattended kiosk computer.
Explicit Confidence 99% · Jeremiah Roe EP 125 Details
“we were able to plug in a Bash Bunny to execute the previously-written script”
Jeremiah Roe USES LANstar
Jeremiah brought a Lanstar to potentially tap network connections.
Explicit Confidence 98% · Jeremiah Roe EP 125 Details
“I had a Lanstar just in case I wanted to tap something in there”
Jeremiah Roe USES Kali Linux
Jeremiah had a mobile version of Kali Linux installed on a burner phone for the operation.
Explicit Confidence 99% · Jeremiah Roe EP 125 Details
“I had actually a mobile version of Kali Linux installed on my ... burner phone”
Jeremiah Roe USES Tailgating
Jeremiah deliberately followed an employee through a badge-controlled door to test whether the employee would challenge him.
Explicit Confidence 99% · Jeremiah Roe EP 125 Details
“I decided I was gonna impromptu follow this person and try to see if I can do tailgating”
Jeremiah Roe USES MAC address spoofing
Jeremiah changed his computer's MAC address to resemble an allowed printer address in order to bypass network access restrictions.
Explicit Confidence 99% · Jeremiah Roe EP 125 Details
“Being able to conduct network access bypass with something so simple as changing your MAC”
Network Access Control USES MAC address
The episode explains that Network Access Control checks a computer's MAC address to determine what network access it receives.
Explicit Confidence 99% · Jack Rhysider EP 125 Details
“the router takes a look at your MAC address of your computer to see if that computer should have special access”
unlocked workstation DISCOVERED_BY Jeremiah Roe
Jeremiah and his team found laptops left unlocked and open at employees' desks during the assessment.
Explicit Confidence 99% · Jeremiah Roe EP 125 Details
“individuals who had just kinda walked away from their laptops and left them unlocked and open at their desks”
time-based malware RELATED_TO time-based backdoor
Jeremiah presents time-based malware and a time-based backdoor as analogous possible consequences of malicious code being introduced into a software development lifecycle.
Uncertain Confidence 82% · Jeremiah Roe EP 125 Details
“that could be almost like a time-based malware or a time-based backdoor”
Works mentioned in the transcript. Distinct from show-note sources.
Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19 · 2026-09-13T07:44:53.107717+00:00