Kyle says he is on the Red Team at McKesson.
Explicit Confidence 99% · Kyle EP 40 Details
“Right now, I’m on the Red Team at McKesson.”
Episode
11 June 2019 Official episode · Official transcript
penetration test social engineering
A physical red-team engagement tests a utility conglomerate by combining building intrusion, badge cloning, network dropboxes, social engineering, and network access testing across several facilities.
Topics: Physical red-team operations, Physical penetration testing, Open-source intelligence and passive reconnaissance, Social engineering and pretexting, RFID badge cloning, HID access-control readers, Network dropboxes, Raspberry Pi-based covert network access, 802.1X and network access control, Domain administrator compromise, VLAN discovery, Server-room physical security, Suspended-ceiling bypass, Lock picking, SCADA-site access, Network-port authentication, Security guard and camera monitoring failures
Links published on the Darknet Diaries episode page. Not LLM output.
No Sources heading on this episode page.
Qualified statements from this episode, not graph facts.
Kyle says he is on the Red Team at McKesson.
Explicit Confidence 99% · Kyle EP 40 Details
“Right now, I’m on the Red Team at McKesson.”
Kyle works as part of a Red Team conducting simulated offensive security tests.
Explicit Confidence 96% · Kyle EP 40 Details
“I’m on the Red Team at McKesson.”
Kyle USES physical penetration testing
Kyle and his coworkers perform physical penetration tests by breaking into buildings to test security.
Explicit Confidence 98% · Kyle EP 40 Details
“The point was to gain access to headquarters by way of anything we could do at any of the previous sites”
Kyle USES passive reconnaissance
Kyle and his team use social media, Google Maps, and related public information to profile target locations and employees.
Explicit Confidence 99% · Kyle EP 40 Details
“I get on my browser and I just go to Facebook; I go to LinkedIn; I go to Twitter.”
“You also look at what Google Maps has to offer.”
Kyle USES social engineering
Kyle and his team use disguises, cover stories, employee branding, and fabricated explanations to appear authorized.
Explicit Confidence 98% · Kyle EP 40 Details
“Typically, you want to dress for the part”
“we’re here dealing with some incident response stuff. We’re with information security.”
Kyle USES network dropbox
Kyle repeatedly deploys a portable network dropbox inside target facilities to provide remote access to the internal network.
Explicit Confidence 99% · Jack Rhysider EP 40 Details
“Kyle takes his backpack off and pulls out a dropbox.”
“We get the dropbox plugged in in between the copier and the wall.”
network dropbox USES Raspberry Pi
The dropbox is assembled using a Raspberry Pi.
Explicit Confidence 99% · Kyle EP 40 Details
“attached to a Raspberry Pi attached to a wireless card”
network dropbox USES mobile hotspot
The dropbox uses a mobile hotspot to establish an external connection.
Explicit Confidence 98% · Kyle EP 40 Details
“mobile hotspot enabled, attached to a Raspberry Pi”
network dropbox USES Linux
Jack explains that the Raspberry Pi used in the dropbox is a small Linux computer.
Explicit Confidence 99% · Jack Rhysider EP 40 Details
“this is a Raspberry Pi and it’s like a tiny little Linux computer”
Kyle USES firewall bypass
Kyle says the team bypassed the firewall while deploying the dropbox.
Explicit Confidence 99% · Kyle EP 40 Details
“We bypassed the firewall.”
Kyle USES lock picking
Kyle and his colleague use lock-picking tools to open a locked office door.
Explicit Confidence 99% · Jack Rhysider EP 40 Details
“We pull out some lock picks and begin trying to pick the lock.”
“We clone it with a Proxmark right on the spot and then we leave.”
Kyle USES badge cloning
Kyle clones a headquarters badge to obtain access to the target building.
Explicit Confidence 99% · Kyle EP 40 Details
“We clone it with a Proxmark right on the spot”
“I had taken their badge design, put my photo on it, and printed it on this cloned badge.”
Kyle uses a Proxmark to clone an RFID badge.
Explicit Confidence 99% · Kyle EP 40 Details
“We clone it with a Proxmark right on the spot”
Jack describes the badge-cloning device as scanning RFID badge data.
Explicit Confidence 99% · Jack Rhysider EP 40 Details
“This is a device that can scan an RFID badge and take the data from it”
Kyle USES drop ceiling bypass
Kyle's colleague enters the server room through the drop ceiling rather than using its door.
Explicit Confidence 99% · Kyle EP 40 Details
“Then he slid the other tile out of the way, dropped down on the other side”
Darknet Diaries MENTIONS JDLR
The episode discusses JDLR, described as a mall security-awareness campaign meaning Just Doesn’t Look Right.
Explicit Confidence 98% · Jack Rhysider EP 40 Details
“JDLR was a security awareness campaign that the mall cops put up”
Works mentioned in the transcript. Distinct from show-note sources.
Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19 · 2026-09-13T05:54:24.944614+00:00