Name: ハッカーだけど「侵入テスト」について質問ある？| Tech Support | WIRED Japan
Uploaded: 2025-01-20T09:06:00.000Z
Duration: 11 min 53 s
Description: 【看影片學英語】數萬部 YouTube 影片，搭配英漢字典即點即查，輕鬆掌握單字發音與用法，長久累積看電影不必再看字幕。

I'm Jason E Street, a Penetration Tester, and I'm here today to answer your questions from the internet.

Penetration Testing is basically a company hiring a hacker or security professional to test their security by breaking in via the website or the building itself or their internal network devices, just any way they can to validate their security.

At VulcasAU, what's the most underrated physical pen test tool you use a lot?

One of the things that you wanna get when you're doing a physical pen test is you wanna record as much data as you can.

I just need my glasses that has a camera installed in it with a micro SD card to store the data.

I have the newer version of the Microsoft employee badge, but quite frankly, why mess with the good thing?

No one knows what the new employee badge looks like anyway, so I'm still using this one on mostly every engagement I go to.

I'm always carrying a cup of coffee or a clipboard because that way the camera is facing the right way when I'm recording it with my watch, and I have at least one or two video recorder pins that I carry with me.

This is actually what the video camera looks like.

This will, if I get close enough, it will copy the employee badge of an employee going through the door.

I can clone it, and then I can resend that to the gate or the door, and it'll let me in thinking I'm that employee.

This looks like a typical iPhone charger.

That's a microcomputer with wifi and Bluetooth with several different payloads installed on it that I can launch individually from my phone.

A lot of CEOs, a lot of executives have those high-end HDMI monitors.

That's perfect because this screen crab plugs in HDMI from the monitor into here, then back to the computer through here, and records it onto a micro SD card, and also will wirelessly transmit it to you so you're seeing their whole desktop.

I like to wear my cufflinks because this cufflink is a USB wireless adapter, turning any desktop or any device or any server into its own wireless access point into this company's network.

And then this one has the drivers and malware that I can read and copy over onto that drive and use it to launch the attacks with.

Can you walk me through the process of a pivotation test, including the different phases and types of tests that may be performed?

90% of what you're gonna be doing on a penetration test is recon.

Reconnaissance is actually finding out all you can about the target, all the different variables, checking their websites, trying to look to see what technology they have, looking at their location, seeing if you can find blueprints online, seeing if you can see pictures from social media of what the direction of the flows or what people are doing, what their security looks like.

Then with the scanning, what you're doing is usually doing different kinds of scans to see what kind of port responds, which will give you a better way of trying to exploit it, to see if there's vulnerabilities in it.

Then you're going to try to see what you can compromise and what kind of privileges you can escalate or how you can pivot to other parts of the network that can give you more privilege.

And then you do the exploitation phase where you're actually running the code and trying to download the data.

And then you exfiltrate, try to get all that data out, try to show that it can be successfully taken away from the client.

Then the worst part of the penetration test report is the reporting, because the report writing is the boringest and the most important part of the whole engagement.

At Bella Pada Anna, can someone teach me how to rob a bank from my phone?

At Dude Who Code, what's a hacker attire?

If everybody thinks it wants to be a hoodie,

I am way more scarier when I'm dressed up in my suit.

The whole stereotypes are what's going to get you in trouble because when they're not dressed like that stereotype, you're more likely to trust that person or that attacker.

Acorn Back, what documentation should you carry on site for a physical pen test?

And a get-out-of-jail-free card is going to be the letter of engagement that the client gives you.

So when someone catches you, you show it to them and it says, hey, they're supposed to be here.

I create a forged one that says, yes, I'm supposed to be here and do these things.

You're supposed to help me and not report it.

And here's some phone numbers of the people to call.

But those numbers actually goes to my teammates who will then impersonate the voice of the person that gave me the authorization.

I can show you a video of when I was conducting a physical pen test on a bank.

Here you can see me going in and compromising the first machine within 15 seconds.

So I need to look at your computer real quick, okay?

Actually escorting me into the data server to leave me unattended into their vault.

I gave them no documentation, no validation.

All it took was a forged Microsoft employee badge to get me all this access.

If you don't say I'm in, are you really a hacker?

At Tooth and Claw TV, what do you think is on this USB drive that I found on my gate?

I always assume kiddie pictures, but I'll never know because I never plug in devices that I find.

I'm not gonna go plug in stuff that I find lying around.

But you should be worried about this because yes, that is a valid tactic.

I will leave USB drives in company bathrooms, in lobby bathrooms.

And more importantly, when I'm on an engagement,

When I see someone that's not at their desk or in their office, but I see their name plate,

I write their name on the empty envelope.

99.9% success rate because who's not going to open up a sealed envelope in the secured area that they're in and not plug that into their computer?

At Hide and Seek, my fellow physical pen testers, what are some of your go-to resources for doing OSINT to gather info about security measures your targets have in place?

OSINT means open source intelligence, trying to gather information on companies using open information like social media, like Google.

If you wanna know why security professionals drink, go to Instagram and type in a search, hashtag new badge or hashtag new job.

You have employees showing their employee badges.

Sometimes in secured locations, they're taking pictures that they shouldn't take.

But I will tell you this one that's underrated.

Going to LinkedIn, looking at the employees in the IT and security department, and what you see is everybody's listing their skills.

They are telling you what they were hired for.

So that means that's what the company is working with.

And there's no alerts that's gonna go off on the company that you're doing it.

At 5M477, good recon skills, the most important key to being a good penetration tester.

字幕列表影片播放

ハッカーだけど「侵入テスト」について質問ある？| Tech Support | WIRED Japan

assume

bunch

access

compromise