
It's a terrible idea is maybe go with social engineering but we don't have a good story or pretext to use for that. And then they said okay you only had one day for observation which is very very short amount of time. If you had had one more day you would have found that every other day there's an external cleaning staff coming to the facility to clean. So maybe you can impersonate them. We told them h you know sounds like a super easy pretext. Let's do that. So we can deploy we can develop a super simple story and persona for that. was during COVID. We would just say uh let's grab some some supplies, some cleaning
supplies. Uh tell that the original team fell ill, got COVID, we are the replacements. Sound like a super simple execution. Question is, will it be good enough? And the white team said, hey, let's go for it. So, we decided to do that. What do you want to do here? We told them, hey, we are the cleaning staff. The original team fell ill. We the replacements. And without any further questions, they told us, hey, you know, proceed inwards. After doing that and taking some pictures as evidence, we left. And one hour later, the uh inevitable happens and of course the original cleaning staff turned up. We're like, "Hey, we're here to do our job and the guys were like, "Dude, you
were already here. What's what's the issue?" So, uh, turns out, you know, um, it worked pretty well. So, social engineering super successful. They had heavy primitive security that didn't work at all for them in that case because their staff was just severely lacking security awareness.