Red team hacker on how she breaks into buildings and pretends to be the bad guy

Re:Red team hacker on how she breaks into buildings and pret... by ratg13 on Tuesday October 01, 2024 @04:17AM (#41705857)

At a previous job I worked with a really good contract pen-tester.

He would literally just walk into facilities and ask people to give them their passwords and they would give them.

The people working would also help him open wiring cabinets so he could do whatever he wanted.

[ Parent | on HN ]

Re:Red team hacker on how she breaks into buildings and pret... by lostlogin on Tuesday October 01, 2024 @04:23AM (#41705897)

You aren’t wrong.

I called a vendor once, wanting a server setting tweaked. I asked for the present state and when it came back completely different to what I was expecting I backtracked.

I’d queued changed on a competitors live environment. I don’t think you need an elaborate charade, just blaze in with confidence.

[ Parent | on HN ]

Re:Red team hacker on how she breaks into buildings and pret... by FearNotDaniel on Tuesday October 01, 2024 @06:12AM (#41706539)

Or walk past the boss's PA's desk, note if s/he has a photo of a cat/dog/boyfriend/girlfriend, ask someone the name of that companion and boom, there's your password.

[ Parent | on HN ]