Jack Rhysider USES Google Maps
Jack and a co-worker used Google Maps to locate Google's headquarters during an unscheduled visit.
Explicit Confidence 99% · Jack Rhysider EP 41 Details
“A co-worker and I used Google Maps and found it.”
Episode
25 June 2019 Official episode · Official transcript
penetration test social engineering
The episode features physical penetration testers JekHyde and Carl describing a social-engineering engagement in which they used a targeted phishing pretext, visitor badges, and an ODROID-C2 rogue device to obtain network access.
Topics: Physical penetration testing, Social engineering and exploitation of the human factor, Targeted phishing and lookalike domains, Open-source and on-site reconnaissance, Tailgating and access-control bypass, Rogue network devices and remote access, Passive layer-2/layer-3 traffic monitoring, MAC-address and TTL spoofing, Credential interception and network pivoting, Domain administrator privilege escalation, RFID visitor badges and physical access control
Links published on the Darknet Diaries episode page. Not LLM output.
No Sources heading on this episode page.
Qualified statements from this episode, not graph facts.
Jack Rhysider USES Google Maps
Jack and a co-worker used Google Maps to locate Google's headquarters during an unscheduled visit.
Explicit Confidence 99% · Jack Rhysider EP 41 Details
“A co-worker and I used Google Maps and found it.”
Googleplex PART_OF Google
The Googleplex is described as Google's main headquarters.
Explicit Confidence 98% · Jack Rhysider EP 41 Details
“There it was, the main headquarters for Google. Actually, they call it the Googleplex”
JekHyde says she works with a Red Team of technical hackers.
Explicit Confidence 99% · JekHyde EP 41 Details
“I work with a Red Team of technical hackers”
JekHyde USES physical penetration testing
JekHyde identifies herself as a physical penetration tester and performs physical penetration testing.
Explicit Confidence 99% · JekHyde EP 41 Details
“I am a physical penetration tester and social engineer.”
JekHyde USES social engineering
JekHyde identifies herself as a social engineer and uses social engineering during physical access engagements.
Explicit Confidence 99% · JekHyde EP 41 Details
“I am a physical penetration tester and social engineer.”
JekHyde and Carl physical penetration engagement INVOLVES JekHyde
The engagement involved JekHyde as the physical penetration tester and social engineer.
Explicit Confidence 99% · Jack Rhysider EP 41 Details
“The team consists of JekHyde and Carl. Jek is a physical penetration tester.”
JekHyde and Carl physical penetration engagement INVOLVES Carl
The engagement involved Carl as the hardware and rogue-device specialist.
Explicit Confidence 99% · Jack Rhysider EP 41 Details
“The team consists of JekHyde and Carl.”
JekHyde and Carl physical penetration engagement INVOLVES physical penetration testing
The engagement was a permitted physical penetration test of a manufacturing facility.
Explicit Confidence 98% · Jack Rhysider EP 41 Details
“The objective is to break into this manufacturing plant”
JekHyde and Carl physical penetration engagement INVOLVES social engineering
The engagement used social engineering to obtain trusted access to the facility.
Explicit Confidence 99% · Jack Rhysider EP 41 Details
“A Red Team assessment.”
“we exploited the human factor”
JekHyde USES physical reconnaissance
JekHyde conducted on-site reconnaissance of the facility after arriving in-country.
Explicit Confidence 99% · JekHyde EP 41 Details
“we performed on-site reconnaissance”
JekHyde USES social media reconnaissance
JekHyde researched LinkedIn, Facebook, Instagram, and other online sources to identify a suitable mark.
Explicit Confidence 99% · JekHyde EP 41 Details
“I looked at LinkedIn, and Facebook, and Instagram’s a big one”
JekHyde and Carl created the identities Bridget and Ted as a believable cover story.
Explicit Confidence 99% · JekHyde EP 41 Details
“We built up this pretext that I was a woman named Bridget and Carl was this guy named Ted”
JekHyde and Carl sent a targeted phishing email to the employee they selected as a mark.
Explicit Confidence 99% · JekHyde EP 41 Details
“we put a phish together, a phishing e-mail”
JekHyde USES lookalike domain
The phishing email used a domain resembling the target company's domain.
Explicit Confidence 99% · JekHyde EP 41 Details
“with a domain that looked a lot like our target company’s domain”
JekHyde and Carl physical penetration engagement INITIAL_ACCESS_VIA phishing
The team obtained initial physical access through a targeted phishing and pretexting campaign that prompted an employee to invite them to the facility.
Derived Confidence 97% · Jack Rhysider EP 41 Details
“they’ve got someone inside inviting them in”
JekHyde and Carl physical penetration engagement INVOLVES pretext
The engagement involved impersonating corporate employees and constructing a charitable-work pretext.
Explicit Confidence 99% · Jack Rhysider EP 41 Details
“This is just to build up the pretext.”
JekHyde and Carl physical penetration engagement INVOLVES lookalike domain
The engagement involved a lookalike domain used in the targeted phishing email.
Explicit Confidence 99% · JekHyde EP 41 Details
“Instead of targetcompany.com it was targetcompany-communityresources.com.”
JekHyde and Carl physical penetration engagement INVOLVES RFID visitor badge
The team was issued RFID visitor badges after being admitted to the headquarters.
Explicit Confidence 99% · JekHyde EP 41 Details
“we were given visitor badges which were RFID visitor badges”
JekHyde and Carl physical penetration engagement INVOLVES rogue device
The engagement involved planting a rogue device in the company's network.
Explicit Confidence 99% · Jack Rhysider EP 41 Details
“The objective is to break into this manufacturing plant in a Spanish-speaking country, plant a rogue device”
Carl USES rogue device
Carl carried, connected, and planted the rogue device during the engagement.
Explicit Confidence 99% · Jack Rhysider EP 41 Details
“Carl had a rogue device and a laptop”
rogue device USES ODROID-C2
The rogue device used in the engagement was an ODROID-C2 mini-computer.
Explicit Confidence 99% · Jack Rhysider EP 41 Details
“The rogue device that Carl pulls out is an ODROID-C2.”
The ODROID-C2 was described as running Linux.
Explicit Confidence 99% · Jack Rhysider EP 41 Details
“runs Linux. It’s kind of like a Raspberry Pi.”
Carl used tcpdump to observe traffic on candidate network ports.
Explicit Confidence 99% · Jack Rhysider EP 41 Details
“Carl is using a program called tcpdump to watch what traffic is being broadcast”
Carl USES passive packet capture
Carl initially performed passive listening at layers 2 and 3 rather than assigning the device an IP address.
Explicit Confidence 96% · Carl EP 41 Details
“It’s kind of a gamble based on within that one or two minutes. I’m looking at the traffic”
Carl USES MAC address spoofing
Carl changed the rogue device's MAC address to resemble observed workstations.
Explicit Confidence 99% · Carl EP 41 Details
“then change the MAC address to make myself look like the workstations I’ve been observing”
Carl USES TTL manipulation
Carl changed the TTL so the device would appear to be a Windows workstation rather than Linux.
Explicit Confidence 99% · Carl EP 41 Details
“Then I’ll also change the TTL so if I’m pinged, I’ll also look like a Windows workstation”
JekHyde and Carl physical penetration engagement INVOLVES credential interception
The team recovered unencrypted credentials by monitoring traffic on the network and used them to pivot into multiple systems.
Explicit Confidence 99% · Carl EP 41 Details
“With sufficient amount of monitoring on the wire, credentials were recovered”
JekHyde and Carl physical penetration engagement INVOLVES domain administrator access
The engagement resulted in the team obtaining domain administrator access to the network.
Explicit Confidence 98% · Jack Rhysider EP 41 Details
“this team successfully got in, put the rogue device in, and gained full access to the network”
JekHyde and Carl physical penetration engagement LEADS_TO domain administrator access
Monitoring recovered credentials that enabled pivots into multiple systems and eventual escalation to domain administrator access.
Explicit Confidence 99% · Carl EP 41 Details
“credentials were recovered that allowed us to pivot into multiple systems and then we eventually escalated up to DA”
Works mentioned in the transcript. Distinct from show-note sources.
Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19 · 2026-09-13T05:55:48.391599+00:00