Episode

EP 42 — Mini-Stories: Vol 2

09 July 2019 Official episode · Official transcript

penetration test social engineering incident response

Three stories cover a retail penetration test involving physical intrusion and network access, a web-server compromise investigated by a university security engineer, and an insider-surveillance investigation involving physical bugs and administrative abuse.

Topics: Physical penetration testing, Social engineering and impersonation, Retail point-of-sale network access, RFID badge cloning, Cellular network TAP devices, SQL injection, Root compromise and privilege escalation, Incident response and forensic analysis, Password hash cracking, Intrusion detection systems, Cryptomining detection, Windows Active Directory and Group Policy surveillance, Insider threats, Out-of-band communications, Physical surveillance and covert audio devices

Official episode-page sources

Links published on the Darknet Diaries episode page. Not LLM output.

No Sources heading on this episode page.

Entities (32)

Claims (21)

Qualified statements from this episode, not graph facts.

Jack Rhysider USES Raspberry Pi

Jack set up a file-sharing website on a Raspberry Pi at home.

Explicit Confidence 99% · Jack Rhysider EP 42 Details

“I set up a file-sharing website at home on a Raspberry Pi.”

Jack Rhysider · offsets 57–115

Jack Rhysider USES Intrusion Detection System

Jack deployed an intrusion detection system to detect attempted attacks against his website.

Explicit Confidence 98% · Jack Rhysider EP 42 Details

“I set up all my best sensors I had at home; a firewall, an intrusion detection system”

Jack Rhysider · offsets 532–617

Jack Rhysider USES Security Onion

Jack used Security Onion for full packet captures while monitoring the website.

Explicit Confidence 98% · Jack Rhysider EP 42 Details

“full packet captures using Security Onion”

Jack Rhysider · offsets 619–660

Mr. Robot MENTIONS Dave Kennedy

A clip from Mr. Robot uses Dave Kennedy's name as Elliot's fake identity.

Explicit Confidence 96% · Jack Rhysider EP 42 Details

“Elliot uses Dave Kenney as his fake name”

Jack Rhysider · offsets 3638–3678

Elliot USES social engineering

In the described Mr. Robot clip, Elliot attempts to social engineer his way into a meeting.

Explicit Confidence 98% · Jack Rhysider EP 42 Details

“tries to social engineer his way into a meeting”

Jack Rhysider · offsets 3303–3350

Dave Kennedy MEMBER_OF Diebold

Dave became Chief Security Officer at Diebold.

Explicit Confidence 98% · Dave Kennedy EP 42 Details

“be the Chief Security Officer over at Diebold”

Dave Kennedy · offsets 6267–6312

TrustedSec DEVELOPED_BY Dave Kennedy

Dave says he started TrustedSec, initially in the basement of his house.

Explicit Confidence 99% · Dave Kennedy EP 42 Details

“I started it literally in the basement of my house”

Dave Kennedy · offsets 6893–6943

Binary Defense DEVELOPED_BY Dave Kennedy

Dave says he started Binary Defense as a separate company from TrustedSec.

Explicit Confidence 99% · Dave Kennedy EP 42 Details

“I started Binary Defense and they’re both two different companies”

Dave Kennedy · offsets 6974–7039

Dave Kennedy USES social engineering

Dave's security testing work used social engineering, including impersonation and diversion tactics.

Explicit Confidence 99% · Jack Rhysider EP 42 Details

“This is one of Dave’s specialties; social engineering”

Jack Rhysider · offsets 13315–13368

Dave Kennedy USES TAP device

During a retail security engagement, Dave's team used cellular TAP devices to obtain direct network access.

Explicit Confidence 99% · Dave Kennedy EP 42 Details

“We have these little devices that we call TAP devices”

Dave Kennedy · offsets 10973–11026

Dave Kennedy USES badge cloning

Dave's team cloned an employee's badge to gain access to the data center.

Explicit Confidence 99% · Dave Kennedy EP 42 Details

“We cloned his badge at the same time.”

Dave Kennedy · offsets 19562–19599

Dave Kennedy USES RFID

Dave's badge-cloning operation targeted RFID proximity badges.

Explicit Confidence 98% · Jack Rhysider EP 42 Details

“We noticed to get into the data center, you need an RFID badge.”

Jack Rhysider · offsets 17280–17348

Clay USES Linux

Clay works in an environment with many Linux machines and investigates Linux servers.

Explicit Confidence 97% · Clay EP 42 Details

“we have a lot of Linux machines”

Clay · offsets 24149–24180

Clay USES Intrusion Detection System

Clay's environment uses an IDS to alert on cryptomining activity.

Explicit Confidence 99% · Clay EP 42 Details

“We have an IDS in place. That’s typically how we’ll be notified”

Clay · offsets 25768–25832

Clay USES John the Ripper

Clay used John the Ripper to crack the root password hash during incident response.

Explicit Confidence 99% · Clay EP 42 Details

“That’s when I started to run John the Ripper on it.”

Clay · offsets 34618–34669

SQL injection DISCOVERED_BY Clay

Clay isolated the web application's vulnerability to pages affected by SQL injection.

Explicit Confidence 96% · Clay EP 42 Details

“I was able to isolate it to one of two pages that had this vulnerability.”

Clay · offsets 32245–32318

Clay MEMBER_OF WOPR Summit

Clay is described as an organizer for the WOPR Summit.

Explicit Confidence 99% · Jack Rhysider EP 42 Details

“Clay also is an organizer [00:40:00] for the WOPR Summit.”

Jack Rhysider · offsets 40569–40626

Phobos Group DEVELOPED_BY Viss

Viss says he started Phobos Group after leaving a company that stopped paying its employees.

Explicit Confidence 96% · Jack Rhysider EP 42 Details

“So, he started his own company which was pretty much the same company but since the people were all looking for jobs, Viss just scooped them up and took the talent with him, including his co-founder, Ali. They called it the Phobos Group.”

Jack Rhysider · offsets 41452–41690

Phobos Group DEVELOPED_BY Ali

Ali is identified as a co-founder of Phobos Group.

Explicit Confidence 98% · Jack Rhysider EP 42 Details

“including his co-founder, Ali. They called it the Phobos Group.”

Jack Rhysider · offsets 41626–41690

Viss MEMBER_OF Phobos Group

Viss says he runs Phobos Group.

Explicit Confidence 99% · Viss EP 42 Details

“I run Phobos Group.”

Viss · offsets 41173–41192

Active Directory USES Group Policy

The episode explains that Active Directory can use Group Policy to perform surveillance on workstations.

Explicit Confidence 98% · Viss EP 42 Details

“You can configure Windows Active Directory to use GPO”

Viss · offsets 49938–49991

Transcript references

Works mentioned in the transcript. Distinct from show-note sources.

Extraction provenance

Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19 · 2026-09-13T05:57:14.306966+00:00