Peek Inside the Pelicans - What Gear Do Covert Entry Teams Take on the Road?

[Music] we're all doing our best during the pandemic aren't we um yeah my wife is way better at presenting from home than i am but hopefully uh hopefully you all will enjoy this at least a little bit this talk is going to be kind of different for me most of the time i am showing you a ton of slides right most of the time i have a bunch of artwork and videos and it's just very polished this is a talk with zero slides this is a talk exclusively about showing you hardware so i figured unlike most most times at cons when i can't travel with as much as i travel with on jobs i am literally home

like all of you i am literally home and i have a bunch of cases with me so let's go ahead and do this right this is the peek inside the pelicans and when if those who don't know uh i am for yeah i don't know if we did intros right i am deviant i have been around many of many of these events oh we even have a live audience clap awesome yes i do a lot of physical side security work i do physical penetration i run a covert entry team i am a safe technician and safe cracker i would love to answer any questions you may have about physical security around your facilities but this talk is about showing you how

we exploit that physical security so when we are on jobs when my team deploys somewhere we get set up we usually rent an airbnb everyone just starts bringing in cases of equipment either hard dig cases or you know storm cases in my case i'm a big fan of pelican gear so right now in my house i have an array of stuff some of it will be at other offices some of we other team members my stuff comes in three main cases we have a case called penetration a case called field gear and a case called social engineering so i'm not sure how long this will take we're going to free form it a little bit

and go through just a list of everything and please for anyone who wants to ask questions the entire time we have a we have a lovely volunteer person who will take a look at your talking as you're typing and we'll go from there so starting off we open this case up and some of you can see there there are things that look like large wires what are they well any one of you who have done a lot of hardware work in the field you can recognize right under door tools for anyone who does not follow not so civil engineer on youtube you're doing it wrong you should follow him so not so civil engineer had some really cool mods to

the under door tool not least of which is the use of a retractable cord right this is a device called a keyback it is used for well janitors and the like who need to always be reaching for their keys this is their big heavy duty one it comes with a very very long kevlar style cord and anything you can do to kind of police up and manage that under door tools cord especially in the field is a really good thing you can kind of also see that on other tools we have made we just have that cord kind of you know wound up and bunched up now that's great when it's in storage but when you actually

deploy it you're in the field you're wrapping up on yourself you're getting all caught and tied this holy crap is this the way to freaking go with under door tools more tools we've got a klein tools bag here we've got a zipper bag let's just start pulling out bags i am a big proponent of containerization inside of things right all right let's see let's let's take this small one that's the heaviest one of all why the hell does it weigh so much well it's because a lot of brass is in here this is key impressioning so you've got a ton of blanks we've got some impressioning handles this is what you've got if you need to try to either try to find

a master key try to work a lock if you're not familiar with an impressioning is ask over in the lock picking chat i see a number of familiar names who are running that for this con but impressioning is an attack that does involve blank keys and you've got to have the right blank key for every lock so we travel with a ton of them many of them are going to be schlage because frankly you run into a ton of schlage equipment in commercial spaces right this feels really light feels incredibly light but i can tell you it contains more keys what does it contain this is called a heavy equipment key set many times when you have large

construction equipment cranes you name it this kind of gear it doesn't they all have unique keys if you've seen howard payne and i give a presentation about key to like equipment this is the case for tons and tons of heavy and we have we just have lists of which you know this is a guide if you have a crane if you have a in a scissor lift we've absolutely borrowed a scissor lift one time to get kind of up into a ceiling area we didn't have to hunt for the key we had the key if you're looking online for this though you want to search for tornado by the way tornado is who makes this quote heavy

equipment key set klein tools bag why is it the lineman's bag well this is a lot of just hand tools and the like right a lot of manual tools little power driver i did a video review about liking to like have you know enjoying having an actual power driver when i'm popping card readers off the wall and such if you watch lock picking lawyer holy crap dude the nut buster the nut splitter you can shear apart i'm not saying we always like to go with this kinetic right but if you have a you know heavy pair of pliers or a saskatchewan nut rounder that you can crescent wrench on the end of this absolutely we have chunked chains apart

we have broken shackles apart when the client has wanted us to go destructive or pliers again this is this is just kind of brutal hand tools kind of sloppy police type entry tools in hotel rooms if you're not familiar with what a lock jockey is many many police and first responders trying to get into hotel rooms are going to use a couple of tools like a slim jim and a lock jockey to pop those night latches apart wire and cord you can never have enough wire and cord uh in fact so much so that there's even you know a giant spool of paracord here in the pelican case right bits and other assorted cutty things

so manual hand tools this is fun this is like i get to do an inventory of my own stuff and see how much i've been keeping around that i do or don't use anymore perhaps the funniest hand tool of all you'll see these appear elsewhere as well long like old person retiree grabbers right like just because a security camera or some sensor is a little bit out of reach you don't have to do the whole ladder routine like oh i'm gonna walk in with a letter we have definitely gotten in places looking like we belong there with a ladder but have like this was a walmart special this was a four dollar walmart special and i used it to actually just change

the direction of a camera that was facing down on a badge reader that we wanted to mess with nobody came out after i changed the direction on the camera we left it for two or three days someone else went up there worked all they wanted to work more bags a little bit more on the precision side of tools this is the bag of stuff that i don't drop and kick around very hard we do have a digital caliper for some key measurements we have some spare parts for what is known as a pack-a-punch we have some spare parts for the electronics side of the house if we're working with our esp keys this is oh this is really nice this was a

gift from someone at lockcon i'm gonna say this must have been seven years ago that somebody made this this is a little you know a little flashlight right somebody it might have been either bobbik who did this maybe maybe holly remembers uh she might have been there so this is a filament just you know fiber optic style filament right this is a 3d printed tip that clicks over the end of this tiny pocket flashlight and now we actually have ourselves an itsy bitsy fiber optic light useful for looking deep down inside of keyways trying to count pins trying to see if you've screwed something up and knocked a master pin out of alignment because you were picking or

manipulating a master keyed system and shouldn't have been doing that not like i would ever be speaking from experience there and accidentally knocked a master pin out of where it shouldn't have been so yeah more sensitive tools and equipment spare parts and electronics to beat the band another punch down tool for our esp keys more esp keys are down here so yeah this is kind of the more small sensitive equipment and we're still in pelican case number one of three i hope this is uh valuable thus far what else is coming on aha the white bag that should have a giant warning label on it this is the dangerous magnet bag in fact you can even see things inside of it are

are packed inside of other boxes designed to give space in between different boxes so just space upon space upon space this is a magnet with well i don't want to imagine the pull strength of this magnet but i do know that because of the inverse square law if we keep it inside of enough containers it won't absolutely kill people when they're near it this magnet is even more heavy duty and let's see this one's still in its professional packaging let me keep it away from all the other magnets yeah if you are transporting magnets definitely honeycomb that stuff up with the packaging that it came with so that you're not going through some kind of

you know not just lifting your your stuff out of your bag and all of a sudden your hammers and your vice grips and everything else are just attached to this block that you're never never going to free it from ever again in the future why would i have heavy duty magnets in this case well if you're familiar with bypassing sensors bypassing alarm sensors or even the attack against the uh simplex lock made by cabba if you're familiar with the kaaba 1000 series uh the magneto attack in fact sparrows tools sparrows sells a device they call the magneto definitely still works occasionally in the field that lock has been revised over the years right it was only

early versions of the kaaba 1000 that worked but if you can get it to work awesome do it right but if you're transporting your magnet around i don't know how sparrows ships the magneto but put a lot of buffer space around it what else we got in here we got a nice big zipper case right what could this possibly be these are the elevator keys elevator keys of the whole collection again if you haven't seen the talk that howard payne and i gave years ago about elevator hacking this is my full key collection uh yes it has been used many many times in the field no you shouldn't use elevator keys in the field if you don't know what you're

doing and we even have a module in our training classes right when we talk to people we show people elevator attacks we show people how elevator systems work and our whole we really want to ram it through people's heads though students who want to learn this from us we say look you don't have to put an elevator on to other modes of operation to demonstrate impact for the client if you have a key and you're like all right this is this and crop elevator i've got the l 206 key i've got the l 203 key couple of things you can do with a client you can walk a client into the elevator to say i would like you to document you could

you could take a picture if you're on a physical job you take a picture of yourself literally in the elevator holding the key that is proof that you had the key in that elevator if the client really wants to know like well how do i know you understand right you can turn a key without turning a key you can turn the key slightly and demonstrate to the client look this this key is turning this is the right key i'm not going to turn it all away and the client if they really they really put you like you like i mean you can turn the key it's your freaking building boss but you don't have to actually mess with

elevators in order to demonstrate them as a vulnerability so when we say we have all these keys being able to just verify with the client we could do this this is feasible this is the working key that's what happens in many instances and it covers your butt speaking also cover your butt and talk to your lawyers spy cables for those who aren't familiar these are audio and gps tracker cables these are eavesdropping cables there are many many like them they are i have i have a few more that are actually in another job case because they all used to be in here but yeah this is not just a regular phone charging cable if you take this

sleeve off you know this will accept a sim card this is a bug this is a bug cable uh now when we do our proper professional surveillance class we have much much better gear and equipment not just sort of you know this is literally an amazon special but again i had to demonstrate once to a client uh the law office said well what could happen if one got in here i didn't even plug this in i just swapped it with a cable that was sitting in a law office that was our client and i said okay so see that cable in a drawer they said yeah i said take it out that's not the cable that was there and

they opened it and they freaked out didn't even have a sim card in it so it's not like it was a real bug but being able to show them oh someone could do that to you that was an incredible value add why did i mention lawyers first though because eavesdropping understand your laws understand one-party consent understand all party consent what state and territory you're operating in don't screw around with eavesdropping if you don't know what you're doing we got another bag what's in this case this is possibly this is going to be a cautionary tale and you'll see this comes this is a this is a callback joke later this is an itsy bitsy battery-powered

dremel the the dremel hand tool line of products you know many times you've got a fabric cobble a new tool this is battery even yeah the reason this doesn't matter to me and i could probably just throw it out i bought this on a job when i was trying to manufacture an under door tool in a hotel room and i said well if i'm going to buy a dremel i might as well get the dremel that i can you know have on the job i can have a job you know i can be what if i get the dremel and i want it in the field maybe i have to fix this tool i should get the battery powered

one keep it in my field bag my field bag that we'll go through in a minute this is without a doubt the worst product ever if you're ever getting like that little screwdriver great screwdrivers low power short usage dremel and rotary cutting tools much more of a long duty cycle you're going to put a lot more energy into that tool the battery tools conk out all the time and they're off like this can [ __ ] right off that is not a tool i want the field frankly anymore i'm glad this is i'm glad we're doing this a couple more things to get through speaking of the spy cables right also in spy territory we've talked about it in class this is a

usb bore scope this is something that we can you know slip through a door so we've actually slipped this inside of a safe before uh because safe have mounting holes right usb is nice because not only modern phones right you don't have to just plug into a laptop if you have an android device that supports what's called otg or on-the-go mode making your port a master port you can actually control usb device i can look on my phone and i can see what this camera is seeing so i'll be able to we usually use these to slip under doors if we're looking to do an underdoor attack we're trying to see where the door handle

is having a little bore scope with you sometimes comes into play and is useful no we're not doing the sort of hostage rescue team thing where you slip it through an air vent and then you you know you're monitoring how many people are still in the room and get the patterns and oh the guard's coming now the guard's going uh no we're not that badass and another bag of electronic spare parts jumper wires a lot of you know jumper bridge cables usable sometimes for elevator demos if we're talking about what someone could do in a controller i wouldn't touch that howard payne could although frankly he wouldn't touch that either you don't mess with the

controller a lot of times the extra wires i have are just for bridging contacts inside of access control cabinets it's one of those funny things too like just literally it's a bit of wire let me go ahead and just pull one out right this is nothing but a bare chunk of freaking wire wire when you wish you had wire is ridiculous it's one we're all electronics and technical people right like just finding a spare bit of wire i've been on jobs where someone had to go and find a phone and i just pulled a piece of silver satin that was you know plugging a convenience phone into a wall i was like well i hope they

don't need that phone right there in the cafeteria for a minute because i need this wire and i was ripping wires out of this piece of you know this little cat three wire that's ridiculous so always have a couple of spare wires on you you never know when you're gonna need to jump a contact if you're doing electronic shorting out another bag i'm going to admit i haven't opened this in a while i don't even know what's in this bag let's have a look alright i know why i haven't opened this in a while this is my i don't use it much anymore but i'm not going to throw it out bag so sort of like old bump keys

we have a multi-lock interactive drilled as a bump key we have a trio thing in case i do you know a bunch of a bunch of work in norway i could bump a lock in norway i guess so obscure bump keys we have an arrow bump key in here we have okay yale depth key these are keys again i've cut on jobs they're useful i don't use screwdriver well i have the power screwdriver now i don't always have the manual screwdriver i also have a much better manual screwdriver for those who have seen my solve a lot of problems kit bag vera oh my god vera tools with not only conventional bits but tamper style bits the thing that's amazing

about where the german company all of their bits have the little hollow in the middle if you come across torques if you come across hex they have the tamper already carved out so approaching something like a tamper installed or a resistant card reader access control box a panel this is your kit i don't work for era very nice german company manufactured in the czech republic now i just love their gear also in the tools that i don't use a lot but haven't gotten rid of if you haven't seen a talk that i've given before about copying keys from clay molds this is a cast and mold kit this is polymer heat set clay this is a burns

torch a little civil war reenactment melt your lead shot kind of cup yeah this is a kit where you actually can take a mold a clay mold impression of a key that you come across leave the key exactly where you found it put it back and then later on using low melting point metal we actually use woods metal and fields metal frankly this is just woods metal because it's cheaper just don't you know don't touch your face it's like covet but with lead poisoning uh yeah we we will make copies of keys uh if you've never seen how to do that i have a talk online about that copying keys from photos molds and more

little release agent powder don't forget to use the powder when you are this is no it's not cocaine to keep yourself going on those long stakeout nights now that is for copying keys from clay molds so right on uh have i used that in the last year no did i like it whenever i've gotten to use it in the field yes that's why this still sticks with me one more from the here let's from the department of old right how many people in the audience know what this is not what's in it just this case the 80s are back baby maybe even the 90s you know this is this is a case for cds remember you'd have one of these

like in your car with all the mix of the hot summer mix 98 that you made on your fork cdr burner uh and i think it's appropriate that this case logic case from best buy is is here and how old it is because what we have in it is something equally old we have tubular lock related tools so this is a tubular pick set this is a tubular key cutter we have tubular depth gauges if you're not familiar you totally tubular keys man tubular keys right they are not as common anymore as they once were very very prominent in the field but if you do encounter a tubular key system it's not like you know we travel

with key machines we travel with hand punch key machines we travel with hpc blitz it's not like you're going to make a tubular key on most punch machines this is a manual grinding style tubular key maker bad ass i i think that is just an absolute who so before we put away the penetration case what is in the actual bag the bag that is typically thrown over someone's shoulder unless they're trying to be super low profile this doesn't look quite like a a tech company bag right if we have just a messenger bag or maybe something who is a peak design that peak design makes the bag really likes and he puts a lot of

gear in his peak design bag because it looks very silicon valley but this bag right here let's let's look inside the the penetration bag that is kind of slung over a shoulder and it's always a little different each time it always depends on what kind of job i was just on but here we go all right quick access what do you think is in the quick access it's the bypass tools and such if you have not ever seen some of this all right we've got some super easy to use field key these are various server cabinet keys that are incredibly common i also have a verizon cabinet key that you see will occasionally open verizon

field gear i have to do a job as a verizon tech we'll show you the shirt later so that's a quick access kind of at the top what's in here one of my favorite tools ever right we've got the traveler hook bypass in those door latches use it constantly right in the top of the bag pre-cut but unfolded padlock shims i have definitely shim some padlocks in the field when necessary give them a try why it's a cheap attack you can try it before you that's for perimeter gates and the like and yeah the if you're not familiar with the hammerless hinge pin tools these hammerless punch tools uh lockpickinglawyer featured them on his channel when we showed them to him

at red team alliance at our headquarters in virginia if you're not familiar with that maybe i'll i'll throw up some links i'll throw up some some things like that later on so you can take a look uh all the stuff like the various attacks and other talks i'm referencing i'll try i'll rewatch this recording i'll put a whole bunch of notes together someone will throw it on a video somewhere or i'm recording this too so if the video eventually is not up if the stream didn't record i'll throw it up one way or another gonna give you some information back to the bag we've got some more exterior pockets what's on this front pocket anything

much yes anybody who works in the culinary industry if you've ever deboned a bunch of fish do you know what these are these are anti-cut gloves they do not prevent stabbing right you don't you don't don't want to do this but you can do this all day long this is just me slashing at my hands here if you are trying to scale a fence if you are trying to get past razor wire you can get it kind of out of your way with gloves like this and work your way around it remember though only works for the splashing parts not the poking bits so don't learn that the hard way also helpful around bushes brambles

uh things of that nature moving on next pouch in the front what's in the front anybody we were talking literally about this on twitter the vera six shooter bits in the handle including a punch down bit for knocking in the uh esp key tools right this is my absolute goddamn favorite personal screwdriver you can again switch the heads out it's quick load quick release bits this this is the tool man to have in your back pocket on a penetration job bigger pouch here what's going on here let's start pulling stuff out ah all the lock pickers in the room just got envious they're like how in the hell did you get a sparrow you know

disc pick uh well because somebody in the tool chat was really kind and said hey do you guys know sparrows is still in some of those impossible to find kit picks so i bought one uh i will look in the tool slack and thank whoever that was later more tamper bits again because i don't have my full suite of tamper bits here i have tamper torques on here tiny screwdrivers a little thumb turn flipper if you're not familiar kind of whoop you ever seen one of those you reach through the door sometimes firemen will call these a j tool you can absolutely operate locks from the other side of the door oh somebody's stuck to all right g what

what could be in here right pull that off of there but we have more you know tamper bits and the like because occasionally you'll come into odd fasteners but definitely another magnet in here bypassing those sensors as needed a couple of wires for shorting out wires some jigglers and other you know bump keys and the like that i've occasionally used i use them less now but i will have a jig set or two on what are you jiggling you're mostly jiggling something like filing cabinet which you can open with a regular pick set and i would have my pick set on me separately plug spinner one of those things you will hate life if you wish you had a

plug spinner and you don't have it in your bag so i just finally started keeping the plug spinner around somebody's down in the front here oh i think i know what these are these are probably going to be assorted bypass tools let's see yes we have an atoms right bypass wire oh we have a second atoms right bypass wire because they break so easily is this going to be the american lock yes and we have an american lock bypass driver if you are curious what bypass driver tools do you could try to ask in the lockpick village we don't always it depends every lockpick village is a little different where you draw the line between lock

picking and lock sport and bypassing bypassing isn't really a lock sport endeavor so you won't always get a lot of discussion about tools like that but if you're curious about them hit me up online if someone needs to tell you about them i can explain them a bit what is this is this a magic marker no this is the world's absolute worst pair of scissors so terrible that you will not wish you bought them if you buy them but they are really nondescript right they they will slip past even sometimes through a magnetometer and if i can't have my multi-tool or other blades which i do have on the outside of my bag not bad to have a pair of scissors

around little electronic guy right here what is it this is known as a search pole this is a magnetic tool that will actually orient a and look for magnetic fields you can even see this little magnet is pivoting and swinging through this field you can use this to find magnetic sensors and door frames and window frames and window sills we use this for bypassing you know doors that we need to jump out the magnets on you need to get around that anything much more buried in here super old timey bump hammer i don't bump a lot of locks open but when i do i definitely use a home brew hammer that was not commercial in any way

pouch on the outside possibly going to have my multi-tool in it unless no my multi-tool is missing because i was using it on a different uh i was using it in the garage or something like that anybody going on over here oh what are you literally folded pieces of plastic these we have this is what is this can anyone tell that's a hotel room key and it's folded and has a small piece of tape and what is on that piece of tape that piece of tape has a magnet on it because this was a piece of tape with the magnet and we slipped it into a door to bypass a door sensor that's what all

of this is this is tape and magnets and folded bits of plastic amazing and that's just about all except one last thing and i will mention it it's not a bad thing to use and to have around and i completely stole this from a hotel kitchen or something where i was breaking into some place doorstop having a crappy little doorstop that you can just jam into a door that you don't want to close and it also kind of looks like someone's working there if somebody props the door open it's one of those things that someone doesn't want that's more supposed to be is it not supposed to be open being able to shove that in

so you can quickly come back as needed it's totally something i have done in the past so that just about does it for the first case the penetration case but we have a lot more here how we doing on time we're doing great on time you have 28 minutes left in the hour that is going to be just about perfect i don't know if we've had any uh commentary from the audience yet or any further questions for what they've been seeing they are doing great right now all right let's grab the next pelican case okay let's see what we have this is the case marked this is the most boring one i'll tell you it's

this is just marked field gear you're like wasn't that a bunch of field gear no that first pelican case was marked penetration field gear is usually in my mind when you're kind of outside of the building let's look at a few important things though that are in here not the least of which a much better freaking dremel that plugs in yeah this is the one you want uh you could tell that was the i'm frustrated of throwing out the old dremel and buying this one kind of gear guys though what are these what what the hell are these weird shapes [Music] these are called fence climbers the idea is you can absolutely pass this through a chain-link fence and

then let it hang down and then now on both sides of the fence you have treads you can actually step all the way up you can get up a 12 foot fence in almost no time putting one at a time as you go and then pulling it out as you come back down fence climbers not the easiest thing to find usually in law enforcement catalog zac tool used to make one z-a-k zac i don't think they make these anymore uh i don't know who these aren't zach's because there are four of them zach was a three-set i will try to look this up though i'll try to find which crazy military catalog or i might have bought these from

somebody whose business card i got at like shot show uh but yeah i have totally used these i've used these to scale fences one more thing about scaling oh yeah another grabber arm quick deploy this is the rapid deployment grab arm with a little weird safety interlock thief there we go uh scaling fences there is literally a ladder in here there is a this is like one of those child safety get out of the bedroom ladders and we spread it out we spray painted the whole damn thing black we covered the treads with uh you know like grip tape these are little stoppers that go like on the bottom of canes or something i don't know what i think i

cleaned out a drugstore and i because i because normally it's just metal right and if you hang this on a fence or a wall metal against the clang clang bang clang i didn't want that so i just covered the whole thing in black paint matte black and i put a little rubber feet on all the treads and we were what we did is we used there are super long extendable poles that you can get that you can use for changing light fixtures we found those at like a hardware store and we got these long extensible poles we kind of attached it to the end and just fished all the way up a wall because remember the top of those escape

ladders are big hooks so we got these hooks way up on top of the wall we could see it was just a flat concrete wall and someone who was you know with eyes remotely looking from a hill they're like oh dude yeah you're super over that wall who's gonna go for it climbed right up the frickin wall there you go and then we threw a different rope ladder on the other side what is this is this is this for soft landings on the other side or is it for i'm going to yoga practice as a you know social engineering no i don't yoga laying down in the dirt with your eyes on a target on really

cold evenings just putting eyes on target dirt is colder than you think having a little foam mat like that is a lifesaver oh my god on really cold kind of stakeout nights speaking of stakeout nights i mean yes of course camo fabric we have got a ton of camouflage gear you'll see things elsewhere having various kinds of knee pads if you are doing any sort of digging tunneling trenching this is why this is called the field gear case right we are doing really filthy horrible beat yourself up kind of work uh getting down into oh dude this is one super props to uh i think matt pointed this out to me i don't know matt's in

the audience right i he needed one i was like oh [ __ ] i don't have one of those tools i should order one of those tools getting down into access tunnels simple look at this tool on this table here super simple tool this is a manhole cover remover four or five dollars or something on amazon and i put a couple of little soft uh you know rubber bits on the handle but oh my god being able to actually not just lift a manhole cover the right way but you look like you belong there right looking like you should do you know what you're doing is a big part of getting into spaces where you don't belong so

having that little hook tool definitely important to me hand warmers not just when you're freezing on cold nights but sometimes trying to set off thermal sensors on the inside of doors yes that goes in the field we wound up using them way more often in the field just that way i even have more of these little rubber feet this must have been um i don't know how many rubber feet i bought but i remember at one point on the job we were setting them up and using them like little bowling pins in the airbnb because we were like waiting for a call from a point of contact and we just had uh tons of eyes out on the

target recording footage and i remember rolling gaff tape and knocking these down in a game of you know 10 pins speaking of eyes on target dash cams dash cams or gopros if you want to get super expensive we have a bunch of gopros in the fleet having these mounted in vehicles we have absolutely parked vehicles near a target and just let a dash cam play just let footage roll as long as you can fill up that memory card understand how this thing will operate with or without power uh we have been in rental cars where the cigarette lighter would be on if the car was on then you'd turn the car off and the cigarette lighter still had power so

like cool sweet this dash cam will work but then five minutes after that it would cut off and then five minutes after that the dash cam would go off and if we go out there every five hours why is there only 15 minutes of freaking footage what is going on test all that at hq or at your airbnb or ever before you go out to the field we wound up just using a you know battery bank like an anchor power supply that worked better uh but yeah test that kind of stuff out man you run into things like this what on earth is even in this case i don't know what's in here but it's was i

trying to protect it is it sensitive yeah it is a little sensitive okay you know what's in here again you don't have to be freaking james bond the spy with all of the expensive gear these are these are amazon specials babe these are usb or in the case of this case you know i have a little c adapter put on my phone but these are crappy little digital telescopes and i have you know a tiny rinky dink tripod whenever you're doing any kind of telescope work your hand is not steady your hand will always weeble wobble get even the crappiest tripod ever put it up on some rocks or you know i have a proper tripod in

here this is something that you can again you can capture proof of concept footage you can show people i was able to be on this hill at the edge of property getting footage and monitoring your security activities now if you need really good footage that is not kind of potato filmed we do of course educate many people on eye and camera equipment we have a surveillance class at red team alliance that is all about high-end like we'll push a camera all the way out to a quarter mile and still read license plates uh that's something that's like our man drew if you don't know who drew is the red team alliance he shows up in some of

our talks drew is our main camera guy and if you ever are really interested in like pushing a camera to the limit if you love photography and want to get even better at it find out if drew is running one of his camera courses because i have learned more from him than i ever thought i would and now i can take artsy fartsy photos that are badass that is the field gear though not the sexiest case but it's the kind of thing on those cold nights or in the long distances that you're covered in filth digging under a wall it's good to have some of that there let's look at the last one and it's a

fun case let's look at the social engineering case

excuse me frankie okay who's ready for this right are we are we still enjoying ourselves we haven't gotten a lot of audience commentary we had any questions as we've been going or anything like that actually we have a wonderful comment from the audience uh drew porter is amazing he's funny yeah yeah is was that comment made by drew porter i have no idea but that would be great though if drew is in there it's gary oh [ __ ] yeah oh right on of course yeah gary and justin i think gary and justin are talking later today uh so yes don't don't miss that so i think after me i think dj ome is probably talking uh

and then i think gary and justin are after that so uh like b-side seattle props to all the talent that they pull in uh i am i'm amazed every time whenever i get to stick my head in social engineering what do we got here well you know it's the kind of stuff you'd expect it is it is humorous it is fun to watch it is fun to see and i'm just i'm here to fix the elevators and stuff right like i've got i've got my employee badge hanging from an otis lanyard and you know yeah i've got uh i got it what you got a problem with the thing yeah i've got to make sure i can let me badge

into that with my badge that doesn't work or maybe it does because i stole your credentials these are these are social engineering outfits yes i do plenty of elevator type work so if i want to be the elevator person or if i want to be the elevator person in cold weather how many of you would be surprised to learn that otis elevator because they're moving people otis elevator has a shop that is public facing so if if you want to go ahead and get yourself some elevator gear i didn't get it through any special industry connections i just you know clicked with my mouse complete the outfit complete the look get some i-viz going on

not all hi-vis is created equal right look at your target facility are they wearing yellow with orange are they wearing just yellow are they crazy old and only wearing orange which is not common anymore unless you're you know hunting um yellow has become the default high vis but again find out what what are the crew what is the crew wearing get the correct high vis if you want to look like you're part of the crew that the employee has seen working in the area similarly if you want to look like you belong in the area you don't just go out and buy a single helmet like oh i got myself a helmet no you want to

let's let's take a look at this on the close cam right you want that helmet to be beat the hell up and you also want to just throw you know get some local sports team stickers get some union stickers on there get get just any kind of crap you can with it just really yeah sell the sell the story right thank you more outfits that we got in here let's see well that was a client we're not going to show them but we we definitely had stolen something from a data center or two thankfully was overseas you might not know uh fire inspector absolutely now be careful with with representing authority right all of you should know you are not a

police officer ever you do not pretend to be law enforcement you cannot be a sworn officer you can let people think that you're somebody official if you are just posture you say well i'm here to i'm inspecting a problem i heard there was a you know whatever you do not present fake credentials you do not claim to be law enforcement another tricky one not as likely to get you in hot water but be careful and that is representing yourself as a lawyer practicing law without a license is a thing i don't think anyone would really call it the practice of law if you said i'm delivering the subpoena but have you ever gotten like a subpoena

or a blue back or anything from a lawyer no you get that from a process server from some guy in a flannel shirt whose whole job is to sit in their car and wait until the subject comes out of the building and then run up to them and be like mr smith this is yours so yeah you don't have to be a lawyer you don't have to be the the fight chief you can just be oh i'm from h k fire service right you can be oh what's your internet in the area oh i'm from comcast there you go i'm here to you know what you don't have to get in a building you can just

walk around the building noticing all the stuff you're going to exploit later who's that guy walking around in the bushes well i don't know he's got a shirt on that says he's from comcast he's he's carrying a metal clipboard and he's got kind of he's got a tool belt all right so that's that guy he must be doing something he's probably from comcast the right apparel have you know a bunch of grody old like work boots that that pair of awful hunting boots that you're thinking about throwing out keep them put them in your bag and the last thing i'll show in addition to again just you see tara and i all we have is like black clothes but in

the social engineering bag yes i've got some old flannels yes i've got a budweiser hat things of that nature and when you really get down to it this is this could be a whole separate talk this is my last gem and then we're going to do uh we're going to do q a the last gem in the ids have as many kinds of lanyards and ribbons and colors as you possibly can because at a distance it's possible to look like you belong there just because oh well that everyone there wears yellow okay so get yourself the yellow lanyard oh everyone there wears green get the green lanyard get something that looks vaguely like the right badge and there

you go so there's a lot more we could talk about there are other things i'm not going to pull out my old man gramps kane do we have any questions from the audience in the minute or two before we have to wrap up this was this was a hoot i haven't done this in a while well we have three questions from the audience and you've got five six seven minutes to answer and it's great we've got the first one is this one my favorite question ever what is the must-have tool for someone just starting on walk by passing the must-have tool for lock bypassing is the traveler hook hands down traveler hook to exploit bad

door latches because that's an actual tool right like that's a tool that's you can't just pick up off the ground having a latch slipping with like a flexible piece of plastic anyone can just source that get the traveler hook it's small it'll fit in your back pocket always have it what's next all right what's next what is the best way to learn these skills and not get arrested justin and gary's style i didn't ask this i think that's going to be their talk right their talk is going to be about what went wrong and most of the things that went wrong for justin and gary were not things they were doing wrong there was a there was a great event that

was called awareness con and john strand and his whole crew ran that and it was all about talking about the right or wrong way to engage with the community and do pen testing and say you know how to how to build bridges i was pretty happy with some of the talks that were given at awareness con i think and i i i know that coal fire had a lot to say on this front as well i would also say big thanks to coal fire there is the protecting ethical hackers initiative that is something that they have started it is a mailing list a working group and a lot of good research is being done there an effort that's going to carry

the industry hopefully very very forward wonderful we have uh well i thought we had one last question we've actually got two or three more we've got another six minutes to go before the end of your talk so cool our question here is what is the strangest piece of gear or clothing you have ever used on a contract and do you have it here oh man i probably do so the strangest piece of gear or clothing that i've ever had on a contract uh let's well here's kind of a fun one right this little orange blinky this is you know plug it in the cigarette lighter mount this onto the roof of your rental car that you have in whatever city

people always will think there's some kind of authority going on if europe again you have the metal blinky the little blinky and you have that metal freaking clipboard and maybe you've ran off a couple of business cards at the printer at the business center at your hotel right you instantly look like and doesn't have to be a business card of you you can run off a business card for the office park like have a business card that says like you know keith kaufman manager of such and such plaza and you're just you're like yeah you've got a clip to your thing here you're like hey what are you doing yeah i'm supposed to meet this guy do you know

who this is and they're like well no we we're we're part of which co we just rent this building that must but that's our management company like yeah i don't know i'm going to keep walking around but i'm just supposed to be doing a survey for the lines and i'm servicing the cable because i'm with you know verizon yeah having that kind of like just this this dumb thing because they saw you get out of a late model chevy lumina with this blinking on the roof like well he must be here doing something that light's blinking speaking of crazy things that you do how do you get your cases through the airport check bags i give a whole talk about flying with

firearms any of this crap can check the magnets are weird do you understand that many airport scanning materials that those are magnet based not just um like a ferrometer right just a magnetometer uses magnetic field sympathetic fields to detect metal your magnets will go bananas in that but also the ones they're essentially almost like mri machines the the through the you know the who the hell makes them uh rapiscan right those machines the um that they will they will get weird results on the screen with a heavy enough magnet in there because it bends the actual fields it bends you know the em fields so you might get some questions but all of this that you've seen and

more is legal in airport check bags thus far speaking of legal as a result of the coal fire incident have you or your teams taken any extra precautions to minimize risk and if so what are they uh yeah are we taking more precautions to minimize risk well i'm a third-party contractor you can see so it's not my job i don't really belong here yes the the true answer though to minimize risk um we are always a little more cognizant now of the language in certain contracts uh the talk about the ultimate i never thought it could happen to me moment was when and justin and gary will talk about this in their talk the point of contact who was on the

letter literally there's more than one point of contact on those authorizing letters and the guy wasn't even there like didn't answer his phone just poofed in the wind uh normally the point of contacts on our letter are our direct point of contact on the job so like we're at this like hey man we're gonna do that thing all right we're checking in with you we're like constantly talking but on bigger jobs government jobs like they were on you might have somebody with a bunch of juice who is the authorizing party but that person is effed off to a conference in dc or they're in another time zone or another state and not just that's a crazy thing but i

would tell everyone check in during daytime hours you're not pissing people off check in with those two numbers on that letter and say hey just verifying are you the person are you there you don't tell them you're like breaking in right now because maybe they're vested in you being caught but have somebody get them on the phone from you know social engineering be like hello this is susie with what verizon wireless are you happy with your plan just make sure someone's answering that phone so that's something i would definitely say but talk watch their talk later today you get a lot more uh data out of them and more advice i'm sure and last question building on social

engineering we have a question or two now social engineering is incredibly difficult um last question how do you get started in learning all of this how do you get started and social engineering is difficult yeah it's so difficult that i gave me a limp i gotta use my cane can you get the door open for me please um yes how do you learn social engineering well there are frankly very good trainers operating in this space i know that someone who we have worked with and talks on she talks on twitter all the time jack hyde is an amazing speaker who has talked about this i know that snow from snow offensive has talked about social engineering the

entire human hacker crew right they run the se village wonderful showmanship in addition to education from that event uh yeah it's a lot of it just comes from do it do it until you're comfortable with it it's flight time right uh it's it's weird to lie to people until lying to people is your job and at that point does it matter like you just all like and because lie when there's no stakes literally you're checking out of a store and they want your home phone number and zip code none of us want to give our real info but don't decline just lie know someone's real info know the white house phone number know the white house zip code just lie

lie all the time and get good at it when there's no stakes involved yeah that's my advice lie constantly it will serve you well i think that's about we that was just about it there i'll be in the discord but this was awesome thank you so much to b-side seattle thank you to tara my beautiful lovely wife i appreciate that i appreciate all of you watch the rest of the talks this one will be online one way or another have a good night