Episode

EP 95 — Jon & Brian's Big Adventure

22 June 2021 Official episode · Official transcript

penetration test social engineering

Brian Halbach and Jonathan Studebaker describe a covert physical penetration test involving reconnaissance, badge-cloning attempts, facility entry, surveillance evasion, and testing of five locations.

Topics: Physical penetration testing and red-team operations, Open-source intelligence and facility reconnaissance, Security camera evasion and surveillance detection, RFID access-card reading and cloning, Badge and access-control security, Raspberry Pi implants and network access, USB drop testing, Network taps and packet sniffing, Door and lock bypass techniques, DoorKing gate-control security, Security Operations Center monitoring, Physical perimeter security and barbed-wire fencing, Alarm sensors and false-positive handling, Social engineering and impersonation, Operational safety, authorization, and law-enforcement coordination

Official episode-page sources

Links published on the Darknet Diaries episode page. Not LLM output.

Entities (33)

Claims (25)

Qualified statements from this episode, not graph facts.

Brian Halbach MEMBER_OF RedTeam Security

Brian says he is one of the red-teamers at RedTeam Security.

Explicit Confidence 99% · Brian Halbach EP 95 Details

“I’m one of the red-teamers here at RedTeam Security.”

Brian Halbach · offsets 4725–4777

Jonathan Studebaker MEMBER_OF RedTeam Security

Jack says Jonathan is on the same team as Brian and that both work at RedTeam Security.

Explicit Confidence 99% · Jack Rhysider EP 95 Details

“They both work at RedTeam Security.”

Jack Rhysider · offsets 5358–5393

Brian Halbach USES physical penetration testing

Brian identifies physical penetration testing as one of his activities.

Explicit Confidence 99% · Brian Halbach EP 95 Details

“Physical pen testing, red-teaming, regular old pen testing.”

Brian Halbach · offsets 5146–5205

Brian Halbach USES Red teaming

Brian says he performs red-teaming as part of his work.

Explicit Confidence 99% · Brian Halbach EP 95 Details

“Physical pen testing, red-teaming, regular old pen testing.”

Brian Halbach · offsets 5146–5205

Brian Halbach USES social engineering

Brian says he performs social engineering over the phone and in person.

Explicit Confidence 99% · Brian Halbach EP 95 Details

“I also really love social engineering over the phone and in person.”

Brian Halbach · offsets 5207–5274

Jonathan Studebaker USES physical penetration testing

Jonathan says his work includes physical security testing.

Explicit Confidence 96% · Jonathan Studebaker EP 95 Details

“but also the physicals, the social engineering, phishing, stuff like that.”

Jonathan Studebaker · offsets 5539–5613

Jonathan Studebaker USES social engineering

Jonathan explicitly lists social engineering among the activities he performs.

Explicit Confidence 99% · Jonathan Studebaker EP 95 Details

“but also the physicals, the social engineering, phishing, stuff like that.”

Jonathan Studebaker · offsets 5539–5613

Jonathan Studebaker USES phishing

Jonathan explicitly lists phishing among his activities.

Explicit Confidence 99% · Jonathan Studebaker EP 95 Details

“the social engineering, phishing, stuff like that.”

Jonathan Studebaker · offsets 5563–5613

Brian Halbach USES Google Maps

Brian says they used Google Maps to map the facilities and locations during preparation.

Explicit Confidence 99% · Brian Halbach EP 95 Details

“using the advanced hacking tool Google Maps”

Brian Halbach · offsets 10518–10561

Brian Halbach USES OSINT

Brian says they conducted OSINT while mapping the facilities.

Explicit Confidence 99% · Brian Halbach EP 95 Details

“Yeah, we did a bunch of OSINT”

Brian Halbach · offsets 10564–10593

Jonathan Studebaker USES OSINT

Jonathan describes OSINT as a major part of their reconnaissance, including reviewing employee social media and company websites.

Explicit Confidence 99% · Jonathan Studebaker EP 95 Details

“You know, so, OSINT is a huge piece”

Jonathan Studebaker · offsets 11240–11275

Brian Halbach USES Raspberry Pi

Brian says they brought Raspberry Pis to plug into network ports during the physical tests.

Explicit Confidence 99% · Brian Halbach EP 95 Details

“we had a bag full of Raspberry Pis that we were able to plug in”

Brian Halbach · offsets 8458–8521

Jonathan Studebaker USES Proxmark III

Jonathan says they brought a Proxmark III for cloning RFID cards.

Explicit Confidence 99% · Jonathan Studebaker EP 95 Details

“we packed a Proxmark III for cloning RFID cards”

Jonathan Studebaker · offsets 19376–19423

Jonathan Studebaker USES LANstar

Jonathan says they packed a LANstar as part of their equipment.

Explicit Confidence 99% · Jonathan Studebaker EP 95 Details

“we packed a LANstar”

Jonathan Studebaker · offsets 19355–19374

Jonathan Studebaker USES RFID badge cloning

Jonathan says their equipment included long-range RFID readers for cloning entry badges.

Explicit Confidence 99% · Jonathan Studebaker EP 95 Details

“long-range RFID readers for cloning badges like entry-access badges”

Jonathan Studebaker · offsets 19286–19353

Brian Halbach USES RFID badge cloning

Brian and Jon attempted to clone employees’ RFID badges during the engagement.

Explicit Confidence 99% · Brian Halbach EP 95 Details

“we waited for their employees to drive off for lunch or drive off for – to other locations throughout the city that they’d have to go to do their jobs. We would follow them in our car and then we would bump into them around town because, yeah, we don’t want to tip our hand yet and try to just – well, everybody knew everybody at the headquarters, so we didn’t want to tip our hand there. So, we followed the employees as they would go around town and then clone their badges”

Brian Halbach · offsets 27408–27885

Jonathan Studebaker USES USB drop

Jonathan says he dropped a USB near a locked door as part of the test.

Explicit Confidence 99% · Jonathan Studebaker EP 95 Details

“I dropped a USB drop near it. I took pictures and evidence.”

Jonathan Studebaker · offsets 63936–63996

Brian Halbach USES USB sticks

Brian says he dropped malicious USB sticks during the building test.

Explicit Confidence 99% · Brian Halbach EP 95 Details

“I did the same thing Jon did and just dropped a couple of malicious USBs.”

Brian Halbach · offsets 66525–66598

Brian Halbach USES network tap

Brian says he hoped to attach the LANstar network tap to a computer in the lobby.

Explicit Confidence 99% · Brian Halbach EP 95 Details

“I could attach that LANstar, that network tap that we had talked about”

Brian Halbach · offsets 66242–66312

Jonathan Studebaker EXPLOITS DoorKing gate-control vulnerability

Jonathan and Brian used the DoorKing system’s wiring weakness to hot-wire and open the gate.

Explicit Confidence 98% · Jonathan Studebaker EP 95 Details

“we basically just hot-wired the gate, and it popped right open”

Jonathan Studebaker · offsets 67962–68024

DoorKing gate-control vulnerability AFFECTS DoorKing

The described vulnerability concerns the DoorKing gate-control system, including its accessible faceplate and wiring terminals.

Explicit Confidence 98% · Jack Rhysider EP 95 Details

“The model was DoorKing. There’s a certain vulnerability they knew about with this type of gate control system.”

Jack Rhysider · offsets 67376–67487

Brian Halbach USES Raspberry Pi

Brian says the team used Raspberry Pis as concealed computers that could phone home when connected to a network.

Explicit Confidence 90% · Jack Rhysider EP 95 Details

“They’ve got these things pre-configured to phone home as soon as they’re plugged in.”

Jack Rhysider · offsets 20457–20541

Brian Halbach USES under-door bypass

Brian and Jon used under-door tools as part of their physical entry toolkit.

Explicit Confidence 99% · Jonathan Studebaker EP 95 Details

“we brought some under-the-door tools”

Jonathan Studebaker · offsets 20784–20820

Jonathan Studebaker USES Quick Jim

Jonathan says they used a Quick Jim, also called a mini jim, to bypass a door.

Explicit Confidence 99% · Jonathan Studebaker EP 95 Details

“we used a mini jim or a Quick Jim tool for it”

Jonathan Studebaker · offsets 36498–36543

Nightline ASSOCIATED_WITH ABC News

Jack says Brian and Jon appeared on ABC News and demonstrated the activity for the Nightline camera crew.

Explicit Confidence 99% · Jonathan Studebaker EP 95 Details

“they were both on ABC News where they showed the Nightline camera crew”

Jonathan Studebaker · offsets 71240–71310

Transcript references

Works mentioned in the transcript. Distinct from show-note sources.

Extraction provenance

Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19 · 2026-09-13T07:07:37.907764+00:00