This is the story of a physical penetration test I did a few months back. The client has given permission for me to tell it.
-
-
Pokaż ten wątek
-
This is both the test I am most proud and most ashamed of. You’ll see why soonpic.twitter.com/3hhYrvlRX7
Pokaż ten wątek -
The client had hired me to test 2 of their facilities. A manufacturing plant, plus data center & office building nearby
Pokaż ten wątek -
First step: OSINT. I look at maps, satellite images, study what I can of their delivery and supply schedules. Etc.pic.twitter.com/slRmvqcF8z
Pokaż ten wątek -
The manufacturing facility looked like a prison. No windows, heavy iron gates, no landscaping. A monstrosity of architecture
Pokaż ten wątek -
This facility had armed guards, badge readers, biometric security controls and turnstiles at every entrance.
Pokaż ten wątek -
I remember thinking, “It’s got to be hell to work in there. I wonder if I can use that…”pic.twitter.com/UJKFs1DUXF
Pokaż ten wątek -
One thing was for sure… The chances of tailgating into this building were non-existent.pic.twitter.com/IPreWJIFVU
Pokaż ten wątek -
I was going to have to get down and dirty with my social engineering.
Pokaż ten wątek -
First stop: LinkedIn. Your LinkedIn is my best friend. The more information you have on your LinkedIn, the more options I have
Pokaż ten wątek -
I have several fake LinkedIn profiles that you are probably connected to. *Just leaving this here*pic.twitter.com/R1KM6Drml2
Pokaż ten wątek -
I scour profiles of employees who work at these facilities, and cross-reference them to other social media sites
Pokaż ten wątek -
-
Mary was a brand-new hire working as an assistant at the manufacturing facility. Mary had a public Facebook account too
Pokaż ten wątek -
On Mary’s public Facebook account, she documented all of her family’s adventures.pic.twitter.com/U1t76SrrCP
Pokaż ten wątek -
Side note: Now I know where Mary went to high school, her mother’s maiden name, the names of her pets, etc.pic.twitter.com/fxnaDB9eSH
Pokaż ten wątek -
Answers to those “security questions” you use to reset your passwords are very easy to find if you aren’t careful with that information.pic.twitter.com/i2ZhnU1kQV
Pokaż ten wątek -
Not to mention that now I know where Mary works, where her kids go to school, where they vacation… I could go on. Scary stuff
Pokaż ten wątek -
This is not an advanced investigation. I’m not a PI & I don’t have the resources of the NSA. One can do a lot of damage with simple methods
Pokaż ten wątek -
Most notably to me, were photos Mary posted of her time volunteering with a certain maternity support center
Pokaż ten wątek -
Her passion for children and caring new moms was very plain. So of course, I took advantage of it.pic.twitter.com/xKg99kPnKO
Pokaż ten wątek -
For this assessment I played two roles. For the first, I spoofed my phone number to make it look like it was coming from headquarterspic.twitter.com/UtY2x5C8q4
Pokaż ten wątek -
I called the front desk of the manufacturing facility and was transferred to Mary. “Hi Mary!” I said, “My name is Barbra.”
Pokaż ten wątek -
“I am a project coordinator with facilities management. We are renovating a few of our facilities.”
Pokaż ten wątek -
“We are sending an interior designer out to you tomorrow so she can put together proposals to update your space!”pic.twitter.com/utr2Sqr5as
Pokaż ten wątek -
Mary replied, “Well that’s great! But why the short notice?” I could feel her getting suspicious, so I pulled out my trump card…
Pokaż ten wątek -
*Sigh* “Well Mary… You really should have heard from me sooner. I’ve just been so overloaded at work…”pic.twitter.com/AJu1q9cW1T
Pokaż ten wątek -
“I feel like I can’t catch up, and to top it off the baby is due in 6 weeks. If my boss finds out I messed this up he’s going to flip.”pic.twitter.com/sjPwDQ64iR
Pokaż ten wątek -
I was really getting into this, voice shaking. (Yes, I know, I’m a terrible human being.)
Pokaż ten wątek -
She cut me off, “Oh hunny hunny it’s ok. We will work this out! Tell me about the baby! Is it your first? Boy or girl?!”pic.twitter.com/1hf2W7T873
Pokaż ten wątek - Pokaż odpowiedzi
Nowa rozmowa -
Wydaje się, że ładowanie zajmuje dużo czasu.
Twitter jest przeciążony lub wystąpił chwilowy problem. Spróbuj ponownie lub sprawdź status Twittera, aby uzyskać więcej informacji.
Mother
Wife
Nefarious Character
Thief
Social Engineer
Let's be bad guys!
jek@hydesecurity.com