I'll Let Myself In: Tactics of Physical Pen Testers
Vložit
- čas přidán 10. 12. 2017
- Join us at the annual information security conference in Deadwood, SD (in-person and virtually) - Wild West Hackin' Fest: wildwesthackinfest.com/
Wild West Hackin' Fest 2017
Presented by Deviant Ollam: enterthecore.net/
Description: Many organizations are accustomed to being scared at the results of their network scans and digital penetration tests, but seldom do these tests yield outright "surprise" across an entire enterprise. Some servers are unpatched, some software is vulnerable, and networks are often not properly segmented. No huge shocks there. As head of a Physical Penetration team, however, my deliverable day tends to be quite different. With faces agog, executives routinely watch me describe (or show video) of their doors and cabinets popping open in seconds. This presentation will highlight some of the most exciting and shocking methods by which my team and I routinely let ourselves in on physical jobs.
________________________________________________________________
While paying the bills as a security auditor and penetration testing consultant with The CORE Group, Deviant Ollam is also a member of the Board of Directors of the US division of TOOOL, The Open Organisation Of Lockpickers. His books Practical Lock Picking and Keys to the Kingdom are among Syngress Publishing's best-selling pen testing titles. In addition to being a lockpicker, Deviant is also a GSA certified safe and vault technician and inspector. At multiple annual security conferences Deviant runs the Lockpick Village workshop area, and he has conducted physical security training sessions for Black Hat, DeepSec, ToorCon, HackCon, ShakaCon, HackInTheBox, ekoparty, AusCERT, GovCERT, CONFidence, the FBI, the NSA, DARPA, the National Defense University, the United States Naval Academy at Annapolis, and the United States Military Academy at West Point.
His favorite Amendments to the US Constitution are, in no particular order, the 1st, 2nd, 9th, & 10th.
Deviant's first and strongest love has always been teaching. A graduate of the New Jersey Institute of Technology's Science, Technology, & Society program, he is always fascinated by the interplay that connects human values and social trends to developments in the technical world. While earning his BS degree at NJIT, Deviant also completed the History degree program at Rutgers University.
Wild West Hackin' Fest Socials
Twitter: / wwhackinfest
LinkedIn: / wild-west-hackin-fest
Wild West Hackin' Fest Shirts & Hoodies
spearphish-general-store.mysh...
Backdoors & Breaches - Incident Response Card Game
Backdoors & Breaches: www.backdoorsandbreaches.com/
Play B&B Online: play.backdoorsandbreaches.com/
Antisyphon Training
Pay What You Can: www.antisyphontraining.com/pa...
Live Training: www.antisyphontraining.com/co...
On Demand Training: www.antisyphontraining.com/on...
Educational Infosec Content
Wild West Hackin' Fest CZcams: / wildwesthackinfest
Active Countermeasures CZcams: / activecountermeasures
Antisyphon Training CZcams: / antisyphontraining
Lockpicking Lawyer: This is how I defeated the lock.
Deviant Ollam: This is how I defeated the door.
"I mean, I'm a fairly good picker..."
top comment and the votes stay at 420. I love all of you.
Click outta 1, 2 is binding.
Deviant Ollam: "This shit is how I defeated the fucking door."
I believe LPL did make a video about similar ways to defeat doors, but he just loves locks. That is his hobby. He prefers blowing them up to just beating doors. Heck, he might blow up the door so might want him to stick to locks :P
Sometimes you click on a video on a whim, not sure if you'll find it interesting, and then 40 minutes later you're disappointed that it's over and wish for more.
This is one of those videos.
Deviant is an extremely gifted speaker. He reminds me a lot of Michael Malice. Malice isn't a hacker, he's a Twitter troll (on par with Trump) who writes really good books. His "unauthorized biography of Kim Jong il" is a good start
If you liked him try Jayson Street from DefCon 19
I only wasted 22 minutes. Put it on double speed and turn on the captions, boom you're done in half the time, with virtually no loss of retention. The digital equivalent of speed reading.
..And sometimes you'll wonder if you haven't just accidentally put yourself on six separate government watchlists.
And sometimes you're just disappointed...
I work as a HVAC service tec, I get into everywhere. Bank vaults, operating rooms, server rooms, roof tops, back rooms of police stations, very little questions. People just trust service people and never question all the tools.
I remember in Shadowrun: Dragonfall, there's many missions where you infiltrate a corporate skyscraper, and pretending to be an HVAC tech is always the best option lmao. Guess they know why.
Chinese food delivery.
I once worked at a computer company and we were told to make sure that no one goes in the back that is an authorized.
One time a guy came in he started to walk in the back and I said excuse me who are you and he went off on me that he was from corporate. Later that day my manager went off on me for stopping somebody from corporate who had no credentials on them from entering the back.
After that I never bothered to stop anybody from going anywhere they wanted.
@@CliftonPhotographer sounds like my repeating situations with my company. I guess I had hope and thought I could do the right things......repeat the response of the company. :/
So true.. confidence is everything.. I was a lift (elevator for our USA cousins) engineer. You walk into a building you never been to before and ask for the Motor room keys. If you don't know where the motor room is they take you there! I also worked at the Bank of England. On normal service scheduled days they would give you the third degree, phone your company etc.. UNLESS the lift was out of service in which case they never checked anything and nearly dragged you inside to o and fix it!
Funny thing... I don't, and never have worked security of any sort, but have employed several of these tricks. I work building maintenance, mostly for office buildings. You'd be surprised (or maybe not) how often people will lock themselves out of something, and request that I defeat their lock in order to get them in without calling a locksmith or similar professional.
The irony, of course, is that they fail to grasp that if I can get in without a key, that anyone else can as well... The cognitive dissonance is strong.
Janitors and building maintenance. The lowest paid guys and with keys to nearly everything.
I worked as a janitor, and there were keys they did not issue us, BUT there was a box that had all the keys for the building, and I had a key to that.
Why? Because the office staff would lock themselves out, and SOMEBODY had to have a key to get the backups.
A lock only performs the duty of keeping a determined person from entering. The issue is less about the lock, and more about why the person wants to enter. Have I missed a point?
@@UndergroundHouseAndTechno that's circular thinking. The existence of a lock, presupposes that there is something valuable to the owner to be protected. For every valuable thing, there is somebody that would take it. Thus, the existence of a lock is a sort of catalyst to the desire to bypass it.
In fact, the existence of something like a wall safe hidden behind something addresses this head-on. The best lock isn't the strongest, but one that nobody knows exists. As soon as it is known, there is the motive to bypass it.
You haven't been doing building maintenance for long. You never ever let people know you can "defeat" their lock unless you destroy it to enter. If there is any kind of entry without destroying the lock the first person they will blame is you. Regardless of how many keys or fobs they have given out. It's not worth your job or reputation. Remember in their eyes you are one step above the janitor. In other words you aren't shit to them. I don't care how much they smile in your face.
@@mathiso01 100% agree with the ending, but you have to know the conditions to know why it's worth doing. I don't need to go into details, but it is. Sometimes. Rarely.
I'd never do it for a retail tenant. Those guys are as shady as they come. Realtors are a half step above that. Ironically, the tenants that are the lowest risk, are the ones who wield real power.
The most worthwhile random CZcams click for a long time.
Thanks.
The slightly odd thing is that I've had this video recommended to me by CZcams's algorithm, and missed it until I clicked away to something else, multiple times.
I don't work in security at all, I don't even have an interest in lockpicking or anything like that. But now I know a bunch of ways to get access to all kinds of buildings around me.
Or prevent others from doing so.
Agreed
I clicked this video to stop it from being recommended.
I stayed because your comment. Thank you Staninjapan07
Ever.
As a career choice, this would open a great many doors.
Noice!
I see what you did there! ha ha ha !
calm the fk down dad
Noice
Especially if you're a deviant.
Number 1, look like you belong there. Couldn't tell you how many times I've walked around a secured facility (as an actual vetted service tech with temporary credentials and either an escort or temp keycard) and nobody asks any questions. I have a shirt that matches the name on the truck, generally normal looking for a service electrician (shirt, bluejeans, workboots, safety glasses) and I know I'm supposed to be there.
Without fail nobody will ever give me a second glance except to wonder what I'm working on. The people having issues are more than happy to let me into any room I ask for when I give them an explanation that they don't understand.
Only places I've worked with real security were military.
Kind of places where I needed to explain to the guards and inspectors what I was doing, why I was doing it, what exact tools I needed, and they would let me wait for however long it took them to decide if it was legit or tell me nope, not going to happen right now. Toolbelt would be inspected, sometimes not allowed. Metal detector, no phone, no anything. Walk into rooms with 100% blacked out monitors with everyone in there waiting for me to leave so they could resume operations. All while having guards with m4's supervising.
Fake
@@user-gz1nv6nw3q which part?
@@jeremytan739 Yes
@@user-gz1nv6nw3q I believe it, seen it myself.
@@jeremytan739 lmao he's writing Fake because he's a 16-19 year old Australian kid looking to rustle some feathers. Don't pay him any mind.
This seems like one of the most interesting and fun lines of work I've ever heard of. I just can't imagine someone ever going to work thinking "ahh, just another boring day of circumventing security measures to get into a building"...
came for ink pens ended up on a government list somewhere.
exactly!
At this point, I think that anyone with an I.Q. above 105 is on that list.
Isn't it interesting that people in the land of free are all afraid of ending up on government "lists"?
@@Ryan-wx8of
We're just more aware of it.
The rest of the world is either so fucked that they're more worried about getting raped killed and displayed in pieces on the road side...
Or they're delusional and think they're free, even though they can't even have a detachable mag on their rifle.
At least we know somebody cares!
Okay I've followed your instructions to the letter. infiltrated company heaquaters, bypassed security systems, but my pen still doesn't work and needs testing. Please help.
the next step is to find a working pen with a compatible ink cartridge, remove cartridge and insert it into your pen.
alternativeley just replace pen
have you tried licking the end?
alternatively you can heat it up with a lighter to loosen the dried ink, however be forewarned this may result in said pen 'exploding'
Try making it so that your pen is vertical.
While you're there steal a pencil......
The problem with a pencil is that someone might think you're there to kill three guys.
a few years ago my gf broke her key inside her U-shaped lock for her bycicle. THe bycicle was attached in a crowed public place (marché Jean-Talon , Montreal).
i wen there with my grinder. It was a total mess, heavy grinding noise and sparks, but only one guy asked me "hey it is your bike ?" i just answered "yes, my key is broken inside". and then, without checking the lock, he actually HELPED me lol.
by the time we finished, about 5-10 people were gathered, and they applauded when i released the bike.
I left and laughed real hard internally, because really, I could have stolen it with people applauding me in the end.
It's just like if you act like you own stuff, people believe you naturally.
I did pretty much the same thing. My girlfriend lost her key, so I rented a generator and fired up an angle grinder to cut a lock off a bike, on a street corner in a major city. It made a huge noise, a 3' shower of sparks, and no one even looked. I guess I was following the rule about looking like you are supposed to be doing it. Dude has power tools, he must be legit.
I used to break into a car i had weekly, i had habit of using central locking button on drivers arm rest instead of locking car with key.Never once got asked if it was my car when people say me doing it on many occasions in all kinds of places.
@@dunxy you must be a caucasian
@@VideoTendency Also with that much noise the "real" owner should have shown up to contest it.
@@VideoTendency You could walk into a place with a ladder and people will open the door for you, facts.
i learned the whole thing at around 7:00 about dead latch etc as a kid when i was 8, or so, breaking into my brothers room (he's basically a decade older than me) when he wasn't home using a spoon's handle. eventually he got a new locking doorknob with the dead latch or whatever, and i learned within like 10 minuites that if i pulled the door with some force towards me, there would be a noticeable click, and suddenly i could go to town and shimmy the door again. after i got in i spent like 2 minuites playing around with the bolt and the latch and noticed how it all worked. i also noticed the strikeplate for the latch was new, it just wasn't adjusted
and people protect server rooms with this stuff, that a curious and boredom-motivated 8 year old with a spoon can defeat.
...and now that you're 9 you're really dangerous!
Your brother must have really wanted you out of his room if he went through the trouble of replacing the locks
@@archygrey9093 yeah I was an awful gremlin as a kid, not proud of what I did. To be fair I was also often bored out of my mind and had nothing better to do. But wasn't all that acceptable.
@@clankplusm At least that curiosity and boredom set you up for some useful or potentially life saving skills, just imagine for example that a drunk friend has fallen or passed out in the locked bathroom, and you need to check they aren't choking on their own vomit, or maybe that house across the street has a really nice tv that you've always wanted
@@archygrey9093 not really, the fact i was devoid of contact / stimulation means I never properly developed any interests and now I'm a pretty pathetic talentless excuse of a human being. But oh well.
We used to break into our school to have LAN parties in the computer rooms. They only had motion sensor alarms, so we taped white paper on the motion sensors, so that they wouldn't work but still look untampered with. Then we'd just use a thin metal rod to force open the emergency exit's latch and simply walk in. We'd play Red Alert 2 or form gank squads in Runescape. Good times.
damn that is so sick. that would be so much fun
Red Alert rocks.
Why hasn't there been anything after C&C 4?
EA killed westwood studios.
How did you tape the motion sensors without setting them off?
During the day, when the alarms aren't active.
Sheesh. I watch this video on a whim, and now I need to spend $60 on keys I'll probably never use!
Dont buy them then! You obviously are not cut out to own such things.
Worse, now you have to worry about bad actors getting through to you on a whim...
Nobody like me you sound like an asshole
Ikr
Instead buy a 300$ 3D printer and print the keys for a total of 1$ and it's like you got the 3D printer for 59$ off!
When I was a homeless teenager I would throw my belt through the top ventilation slits of windows to hook the lower window latches with the buckle & pull it open so I could climb into vacant buildings to sleep. Only got caught once but, cops were confused because they found me just asleep there. Weird thing is, people don't really want to lock you up for very long when they think they're doing you a favor. "Jail? You mean, three meals a day, in the warmth, with a blankie? You fuckin' legends."
I worked as a janitor at a big government contracting company. A huge government super secret contract, was to be demonstrated to some Generals, Admirals, Senators, etc.
A secure room was erected, with plush carpeting, nice paneling, etc. Armed guards were posted at the 4 corners, two at the locked door. No one was allowed near the secret room. One of the other janitors said something about wonder what it is. I said grab a vacuum, I got a spray bottle and a bundle of paper towels. We walked up to the door with janitor tools and the freaking armed guard held the door open for us. We vacuumed and wiped as long as we wanted. We had just examined, up close and personal a new secret weapons system.
Janitors and cleaning people are generally invisible to most people, especially if they are Black or Hispanic.
Was there not the smallest sense of fear that this would end you up dead? Curiosity killed the cat...
I mean you at that point became a security risk.
Imagine there was something you were even less supposed to see in that room, but of course you wouldn't know that beforehand...
Still, cool story
@@konstantinwiedemann7351 The worst that would happen would've been an arrest, investigation, dismissal, and forced signing of a non-disclosure agreement. The government isn't going to throw you into a black site prison just because you saw some classified material that you have no way of understanding or selling..
There is this anti-trump guy that makes videos here that just walked into to trump rally site the evening before, poked around everything, pissed in the 'special' lavatory set up for the President and could have painted LSD25 on all the knobs and handles and changed US history.
Nice Story Dude, but the real deal, you would Have Never gotten within spitting distance period if that.
@@HighSpeedNoDrag no they have janitors in secure buildings but the janitors all have clearences to be in the buildings. For a room that needed extra compartmented security clearence, no they shouldnt have access. Its not hard for a cleared person to run a vacuum once or twice a week in a small room, but its possible a cleared person was unaware that the janitorial staff was not allowed in that room.
I clicked expecting to learn about how ink pens work.....I stayed to learn how to infiltrate corporations :3
It's allways fun to see normies's first times
As a normie looking for ink pen advice, I feel exactly how I did the first time I saw JJBA: a mix of awe, intrigue, and just a little bit violated :)
same rofl, it was an awesome talk above anything else.
fucken same
you never know if you may need it, or you jsut need something todo saturnday afternoon
Sometimes you don't even have to look like you belong. Once I was able to get all the way into a "secured" server room during the day wearing shorts and a t-shirt with no special tools and it was a network admin who just let me in, no questions. I told them one of the problems was that they had too many people on the allowed list and didn't know everyone. Generally all the people on the list should know each other or it's too many. The number of people who told me after that one that "Well you look trustworthy" just about made me cry.
@@rice83101 i mean he looks kinda twisted
@sarcastic. He looks a bit off center and into the right field.
I wish I had it that easy.
Go to a club? I get turned inside out by a bouncer, only one out of the entire group.
Go to a festival? Get frisked 2 times and they call an extra guy over to hold my arms as one does it.
Go to a bar? Guy is wary of me and refuses to let me in at all.
Any issue at a trainstation? Cops randomly hold me and arrest me. Over 100m away.
It must be my friendly looks and disposition. Never be a gymrat when you had your face mangled I guess.
"wearing shorts and a t-shirt" - so... you looked the part, that's the cliché "IT guy look"
Key list
FEO-K1 Elevator Key
C415A Filing cabinet key
CH751 Filing Cabinet key
1284X Cop Car / Taxi Car keys
Jigglers
Wire Loop (Paper clip with burned insulation of tips)
16120 Door King Key
222343 Linear Key (A126)
Cuff Key
Build yourself a master key ring!
I've been a hobby lock picker (for fun and profit) for more than 35 years, and have seen this vid popping up for several days now. but I didn't want to watch a 45 min vid. OMG the massive level of information within this vid is amaze-balls. The way its presented makes the vid move FAST. Like others have said. I now need to spend about $60 on a new keychain.
Look for his video of "This is your key"...
Well you gotta get more used to conference style video lol that's where the real knowledge is.
I started lockpicking for fun too, it is amazingly easy to learn for 95% of locks out there, same with combination locks too
Hey dude watch this: *vapes door open*
Wow
Hahahaha!
we get it, you vapesmith
Friend: you can't open this door.
Me: hold my drink, pass my vape pen
Door: bursts wide open.
That shit blew me.away
My security skill increased +10 after watching this
Elder Scrolls?
-5 to Dex for sitting on your butt watching vids. :)
@@danm3188 I also get +10 strength because I lifted weights while watching this.
@@bench3885
-5 to Personality
What the lockpicking Books teach you when you read it.
There probably are keys for every dungeon-chest out there but it's a good thing the Dovahkin can help open it.
I mean really. The Bandit leaders don't have keys to their loot-chests on them. What kind of dumb fucks locks all their loot in their chests & YEETs the key away? They're also the special kind of retards as to NOT use the enchanted weapons & armor they so store away in a locked chest.
Why doesn't the mages & necromancers use the super powerful potions they probably made & just shelfed? Like, everyone could save themselves if they just take & drink the super-potent health potion just laying around.
Why does giants have a loot-chest at the center of their camp? Do they occasionally chop off their toes & sever the mammoth's tusks & snouts to make the potions in the loot-chests? Why is their a loot-chest there in the first place? It's not like someone can drag some yellow, huge-ass chest past the giants. (The only offerings people make are cows with blue lines painted on them)
I don't understand. -_-
From watching a story about Ted Gowdy leaving the senate, to a lecture on why talking to the police is bad, to a lecture about how to break into.... well... everything.
The YT algorithm is sending me some really strange messages.
I didn't start at Ted Gowdy, don't know who that bloke is. But I did also find this video after watching the "Don't talk to the police" one. The CZcams algorithm found what works, I guess
@Addict If I hadn't seen that video I would have two DUI convictions instead of zero. (Yes I was a piece of shit for driving drunk - it was ten years ago, I don't do it anymore!)
You can get in almost any manned door in the world with a High Vis vest and a clipboard.
As an electrical laborer this is fact. I can get into any room in a school or business as long as I say I'm looking for a junction box lmfao
@@bubbly6379
Thnx for the info ;)
An obscure tenet
That "look like you belong" is something I learned at community college, I worked part time for IT and they ran out of student-worker badges. By that time I was familiar with my job and unconcerned, it blew my mind that nobody would care or question someone rolling a cart piled with dozens of computers in and out off buildings and the parkinglot.
That's why it's a confidence game ;)
if u take the right ones, nobody would care, unless their neighbour maybe is there and days wtf
Used to carry a hard hat and a clipboard to get in to Union work sites in Chicago. If you wear khakis and a dress shirt, work boots, hard hat, people think you're a "manager". Never stopped once...
this concept works for getting out of tickets too. be co-operative and pretend you are innocent of any wrongdoing and insist that while you understand that ignorance of the law is no excuse but if given the chance you wont make that mistake again. note that this only works for minor traffic stuff, you wont get out of something major but the pretense of being authorized is usefull in most situations.
@@jefranke I work in construction and you're right about that. There are so many people who walk through job sites that we have no idea who they all are. They could be with any of the contractors, the general contractor, the owner, or maybe the safety company for the site. We also don't care unless we see you in our stuff, then you're getting questioned because anyone with a clipboard and khakis shouldn't be in our stuff.
30:40 Keyring
FEO-K1
C415A
CH751
1284X
Wire loop
16120
222343
Thanks Deviant!
Thanks!
Appreciate it, but you can just take a screenshot
FEO-K1 is a fire service key for Kone units. It is NOT universal as every company had their own different key (and every once in awhile it changes for some reason) I know this because I've been repairing elevators for 33 years and carry several giant rings of keys (maybe 75- 100 keys in all) just to do my daily job
Available on eBay shortly
dude, available on ebay last year
I was looking up ways to relocate an upright piano. Not sure how I ended up here, but this video was worth all 45 minutes. Thank you CZcams algorithm.
So the big question is... has the piano been successfully relocated?
@@MatthijsvanDuin Yes it has! Had to build a heavy-duty 6-wheel dolly & used a box trailer. Total success. We navigated 4 steps & moved it in with no damage to the hardwood floors!
@@jlb3737 awesome!
My (ex) wife got a "free" upright from the neighbors. She spent $500 to move it up a flight flight of stairs and next door, then learned that it needed $1,000 in repairs to make it worth $1,000.
Holy hell, are those things heavy, and they are very resistant to sledge hammers! I would definitely use a Sawzall to move a piano next time.
*me trying to tie this video to pianos:* Why do most upright pianos' pianokey-cover have a lock on it?
As a BASE jumper...this is invaluable stuff ;)
Can break into a server room but can’t figure out how to turn up volume on a remote.
He was hoping the sound guy would walk on stage to fix it so he could get close enough to steal his credentials.
One of those arseholes that want everything on a silver platter because he is a speaker at some random event!
Such equipment can be really badly designed sometimes. When I was in college it was practically custom that the first fifteen minutes of each guest lecture be wasted on setting things up.
it was at max volume on the unit he had control over. someone in the sound room needed to increase the volume of the amp.
If you don’t do a sound check and cue to cue, then there is only so much your sound guy can do.
Hey that rhymes.
I remember a Dr. Who episode wherein the Doctor said' "The more sophisticated the technology, the more vulnerable it is to primitive attack."
I don't watch the show but that's a good line. Sometimes low-tech is the best way to go.
This guy is trying to not only get in, but not make it look like he'd broken in, which is a little more complicated.
The simple way in, if you don't care about covering your tracks, involves the appropriate application of a sledgehammer.
thexalon Some thieves prefer to use a stolen car as a more powerful sledgehammer. They steal a car, ram it through whatever, leave the wreck for the victim and cops to waste time handling.
@@thexalon Yea, but if you get in with out doing any damage you have more time to grab what you want. Or even to get out with out being caught. Then instead of the cops catching you at the scene or with a road block, you're sitting on the beach drinking maragaritas and reading in the paper about a "Mysterious break in" that they didn't discover till the next day, if not later.
Alonzo Branson
Try throwing a rock at an F-22 Raptor
I love this, "We know cops, doorkickers and we're like: Want to make a better salary and not be evil?"
The profundity of that statement is so deep.
@@rusosure7 haha
If you own or manage a commercial building then you should definitely listen to this guys.
...
As a former security guard I used to walk around my site cataloging in my mind all the vulnerabilities of the site. Hinge pins were always on the forefront of my mind. Whenever I walked by external perimeter doors I would just stare at them.
Its so basic, but I am so excited that I am not the only person to think of stuff like this.
Though I love it that it was the social engineering that got you the guard card at the end. Hah!
im a delivery guy in new york city, linear and door king make shit systems that take forever to navigate. the information in this video has saved me many minutes so far and for that i thank you.
Damn, delivery people are allowed everywhere. You have those secured facilities and anyone claiming to be a delivery person usually just gets waved through and the security personnel does not bother to fact check their authorization.
@@NetAndyCz Yeah, i remember when i was a courier being given door codes for huge department stores because staff too lazy to escort me.
Jordan Fischer sounds good, oh- take care during prison. And don’t forget to write.
@@recipehacker9752 im sorry but entering somewhere you are supposed to be is not a crime. Like if my friend asks me to watch the her dog and i lose the key so i pick the lock. As long as my friend says i was supposed to be there its all good.
@@Luminosity47 I believe you because I did a similar stint with an online delivery only company. It was surprising how easy it was getting into gated communities and uber expensive apartments around Texas. They seldom checked my credentials. I was shocked that my boss told me all I needed was my company uniform but I kept my employee badge in case I ran into guards who took their jobs seriously. Once past the guard house, I was able to go anywhere without being questioned. I never could do it, was always on a bit of a tight schedule so i had to drop off the delivery and zoom past the guard house to my next assignment. On a busy day, I could easily rake in $30-40 an hour but the boredom was too much. I would find myself sitting in my car, waiting for a text from headquarters to pick up an item for delivery. Funny thing is, you HAVE to be chummy with all the managers at all the restaurants in town and maybe the neighboring towns or else you'll have tough time sticking to your schedule. And one co-worker kept tons of $1 bills purely for bribery. I'm serious. Slap about $5 or 6 in their hands and you can grab the client's stuff instead of stand around waiting 5-10 minutes.
Dear NSA, CIA, FBI, sorry, but I honestly thought this was going to be about ink pens!
Why would you click on a 40 minute video of pens Mr Barry? Why?
I don't know man... I don't know (sweats profusely)
How sad that people are afraid of gaining knowledge because of what big brother might think or suspect, or infringe! There is no shame in curiosity. I learned physical pen means penetration, lol. I am used to being suspect, I watch The Lockpicking Lawyer channel all the time. And I used to know Dave Hahn, The Radioactive Boy Scout, so there's that, too.
@@jamesahern9864 You knew the radioactive boyscout??
@@joshfixall7938 yep. David Hahn. We went to Chippewa Valley High School together. I saw him at lunch quite a bit, I sat at a lunch table of misfits, a few of which were his friends. We called him "Glow Boy." He was collecting "all the elements" and joked about making the ones he couldn't find. He wasn't joking! He sometimes had radium dials and smoke detectors with him. A few of this friends were lab aides and would sneak him items from the labs.
@@jamesahern9864 that's amazing I read up on him quite a bit! it sucks, some of the things that happened though
@@joshfixall7938 last I ran into him was when we were in our late twenties, a dozen years ago or so. He was hairless and full of cancer. He remembered me and we spoke for a few minutes, he told me about the military and asked about some trouble I had gotten into. Didn't know about the BBC documentary at the time, didn't see it on CZcams until I found out on Facebook that he died. How did you find out about him?
It is 2019 now and I bet that most of this is still applicable in 90% of the buildings around us
Maintenance keys and codes basically cannot be upgraded... Either they would have to go back to all clients and rekey... Or the maintenance guys have to carry several keys or codes. The door handle things, hinges, and basic locks in many cases are a legal requirement. So yeah... 90% or more.
It takes ages for this type of stuff to be updated and if you have access before you can case the place and prep windows doors so you can break in when nobodys around
99.9%
Oh, I immediately recognized the infrared sensor at my church and the DoorKing box at my grandmother's apartment building. Yeah, this stuff is out there.
When I was 19 to 20 years old I worked as an over night security guard in a hospital. I never wanted to be a cop, but I took the job because it allowed me to study.
I had to get up from time to time and do a walk though just to make sure everything was secured, but most of the time I just sat at a desk.
One night I was doing a walk through when O heard a knock. It was a youngish clean looking black guy wearing a white coat standing outside a locked door.
During the day this door was used by hospital staff to go outside to take a smoke break. I assumed the guy was a doctor, perhaps a resident, working his first graveyard shift. He'd gone out for a smoke and din't know the door was locked.
Now EVERYONE was meant to use the emergency room entrance at night. but the ER was way on the other side of the hospital. I should have told the guy to come in through the ER, but this would have caused him a long walk, so, not wanting to be an asshole I opened the the door to let the guy in, planing to just tell him to use the ER next time.
Turns out he wasn't a doctor, or if he had been he was no longer practicing. Turns out he was homeless and quite badly out to lunch.
The guy started telling me a bunch of crazy shit I can't even remember and I realized I'd made a huge mistake. Thank god the guy wasn't violent or I would really have been in trouble.
It took some doing but I finally got him back out the door.
If you want security, hire only assholes. There is no point to a security guard who just lets random homeless people in!
I like this story as you just essentially threw yourself under the bus in it to make the point.
What I did was wrong. But it was 28 years ago. Shit, I was just thinking, "No it wasn't 28 years ago." then I did the math.... It was. Now I'm sad.
@@erictaylor5462 Well, you learned from your mistake which is more than a lot of people can say.
Exactly. Don't judge people by the way they look.
lol I've known loads of people who took security jobs the exact same reason as you; night roles that allowed them to study & work. Often foreign students who were full-paying (no loan) and had to work full time hours as well as study full time hours, so they'd take night shift roles and security roles in corporate gigs usually allowed them to basically sleep through the shift (more or less).
I was the touring lighting director for a band for over 20 years and the whole _”look like you belong”_ thing is so true. For some reason we *_never_* brought in enough gaff tape so we’d have to run out to the truck to get more... hundreds (prolly thousands now that I think about it) of times I could walk right past venue security as long as I had some badges around my neck, a roll of gaff tape in one hand and a nasty expression on my face...
Well to be fair you *don't* mess with someone who is running by you for the 3rd time, each time carrying a roll of gaff tape.
motorbiker46 - thing is, I’d go by security I *_know_* hadn’t seen me and it’s _possible_ I may have used the trick to get into shows other than the ones I ran...
I'm an audio-visual/automation contractor (Australian) who has done work for the NSW Attorney General's Department, I've been in most of the local/district/supreme court buildings in Sydney, also worked in some metro/regional NSW Police and Correctional facilities, and in military facilities a couple of times. Hi-vis, steel caps, mostly empty tool bag and any kind of "visitor" or "contractor" badge will get you in most places short of true secure sites e.g. military bases. Local court buildings in country towns are amusingly relaxed about security, usually. :)
I've done fair bit of live event work too. A milk crate full of gaff was considered essential equipment, and woe betide the careless tech who leaves it back at the warehouse forcing the whole crew on a scavenger hunt through the trucks and road cases for all the crusty nearly-finished leftover rolls. Yes... I may have been the one that did this... once.
Inbetween real jobs, I had to work at a grocery store. My next real job was a good hundred miles away, so I convinced a friend to go in to pick up my last check for me. All he needed was the right polo shirt and khakis to fit right in. He didn't even need to forge my name - just a scribble sufficed. He went in all nervous, realized how well it worked, and even stopped to give a manager some advice before leaving.
I'm sure this would work at any store with standardized dress codes and reasonable turnover. A permanent "we're hiring" sign is saying they're vulnerable.
So true. In my line of work, if you have a badge on your belt and look like you belong, you can walk in anywhere through the shipping door. No one will ask a thing.
"Look like you belong" - yeah that. A few years ago I was working as a dev for a software consultancy at a regional office, a couple of guys in ware house coats came in with a flat cart, the receptionist let them in - no questions asked and they took a couple of dozen pcs and some laser-jet printers. This was late on a Friday afternoon. And the best bit - nobody realised until sometime next Monday. Unfortunately it WAS theft, not a test.
What is a "dev"...
@@rimckd825 a "dev" is a (software) developer i.e. programmer
I don't remember putting this in my watch later playlist but it definitely is worthy of being watched later
Most commercial/industrial security is VERY effective at excluding ONLY those people who will give up if a door doesn't immediately open when they try the handle. Everyone else is on the honor system.
And that's why I don't have a lock on my basement door. Then again, everything I have in there is worth less than combined a decent padlock anyway so...
@@Atlessa but... does your basement connect unsecured to the rest of your house? aka let them walk into your entire house
@@richardpike8748 You seem to have the wrong idea about our house's layout. There's one main entry door, 7 storage units in the basement and 7 apartments across five floors. Many of my neighbors have really expensive and heavy looking looks on their basement doors, but most of them would do absolutely NOTHING to keep me out of their basement units. In fact, I can probably open most of them quicker without than they can with their keys.
The Genius Physicist that was Richard Feynman while working on the Manhattan Project got into every Confidential Atomic safe and filling cabinet at Los Alamos. What a bloody great man! Cheers from the UK. Where's me Pint.
I feel like I feel like I should retire from being the guy in the server room and become the guy that breaks into the server room. This was awesome.
Maybe you can work to make his work harder >:)
Then do it! Good companies for this are RSM, PwC, BlackWing..
"steal toilet paper," didn't age well
You don't understand how hard I laughed at this lmao
When lockpicking equipment is easier to acquire than toilet paper....
Because Americans don't use bidets xDDD
@@Albanez39 Who uses bidets?
@@ihatetrainyards4859 Most of the *Mediterranean countries (Italy and Portugal, where installation has been mandatory since 1975, Spain, Albania, Greece, Montenegro, Croatia, Bosnia etc.), and also many South American* countries where Italian and Spaniard immigrants spread its use. While most *African, Middle Eastern and Asian countries* have only started using bidets lately, they have always considered anal hygiene to be important, and *mostly used a small basin (or used the bathtub) to wash their genitals and buttocks* after urinating and defecating.
*Nordic countries, especially the Finnish, predominantly use a bidet shower;* basically a shower head installed right beside the toilet. And you should have heard about the *hi-tech toilets produced and used in Japan and South Korea*...which are slowly being adopted also by Americans, Canadians and the British (some of the most known, and few nations to only use toilet paper). I personally don't like these add-on bidet sprays; No matter how powerful the pressure, they are not capable of cleaning your anus properly. It's important to use liquid soap and your hand to rub your anus before rinsing...
In Europe, we first use toilet paper to wipe out most of it, and then sit on the bidet to wash our buttocks. This makes things practical, but as long as you use enough soap and water, you don't need toilet paper.
I realize you might be ignorant to how common bidets and other forms of anal hygiene are around the world. I have often criticized Americans for their lack of hygiene...and I cringe everytime I see characters in movies defecating and wearing their pants after only wiping once with toilet paper. I have to assume this is how most American do it, even though many women are careful about hygiene and I'm certain they have been washing their private parts for decades.
It might seem strange to you, but bidets are important to maintain proper hygiene. If you always defecate in the morning and take a shower afterwards (and wash your buttocks in there), there's no problem...but all of us end up defecating in the afternoon or evening someday or the other. If you can afford it, I really recommend installing a bidet or bidet shower in your bathroom. Can't imagine having sex with a girl one day while your anus is covered in dried flakes of shit...it's disgusting.
Sorry for the long comment. Hope you understand and consider my advice. Take care :)
I've collected pens for 20 years, always wanted to be a tester, now i'm a lock entry expert :o Thanks Random CZcams
what is a "pen"?
It's an instrument for writing with ! @@chrisw5150
@@maxmixer ha!!! you got me you peckerhead!😂
@@chrisw5150 , pen ; short for Penitentiary . just maybe ???
@577AllWell They could have thought of a better name
I'm happy I'm not the only one that thought this was about a writing implement..
Honestly I just clicked because I wanted to know why youtube would recommend a video about testing pens.
@@2MeterLP I wanted to know how you could use a pen to get into buildings. Misleading title
Security hinges are the most simple yet effective security upgrade I've seen. I've always assumed that the only way to prevent a hinge attack is to have the hinges on the secure side, and sometimes that not allowed per code so you're stuck.
Wow i never realised how easy it was to break in to doors, all i needed was the intricate knowledge of exactly how all the different types work and their weakness.
As a guy who works in security, it helps to have peripheral attention. One time I was walking away from my house down the sidewalk, and a man just walked into my house behind me. He was so confident that the only reason I noticed him was because I instinctively keep an eye out all around myself. Well, I ran back to my house and just walked in the door. I saw the guy standing there in the foyer and my whole family in the other room sitting there in their pajamas. I politely asked how I could help and he very nervously said, "Isn't this a flower shop?" When he said that, everyone in the house had their hair stand up because they had not noticed he was in the house, and he had been terrified of being accused of breaking and entering, so I guess he was frozen or something. Well, I told him it used to be a flower shop but we were converting it to a private home and I told him where the flower shop had moved to and so he left. My family came into the foyer with their eyes wider than cats eyes and I said, "from now on, this door stays locked at all times. Don't even check the mail without a house key." And that's what they did.
It takes a while to develop this skill. If you are good at focusing on what you are doing, you may not be very good at keeping a complete picture of your surroundings. Practice being sure at all times about every single access point that you are responsible for. If you were working a security desk and someone asked, "what is the status of the back door right now?" You should be able to rattle off an answer from a few seconds ago. You should be able to describe the security measures for that door. What sort of lock is it? Is it vulnerable? Is there a camera? Does the camera record or just monitor? Is the door secluded? Who has the key? Even when you are sleeping, you should have some way to be awoken if someone tampers with your shit. There are many effective ways of doing this. You could keep dogs or set up glass bottles or put wind chimes on door knobs. There are countless options. Never stop being 360 aware. Never play music. Never read a book. Never watch TV. Yeah, it sucks.
"Who is in the building right now?" "Where is the accountant?" If a person who belongs in the building is in a room they don't belong in, you should know it, and you should find out why right away. If something strange happens anywhere you should file a report about it, even if your boss didn't tell you to. If you notice a lapse in security you should create a written memo about it. These are the sorts of skills that will get you a very good job in security. Any moron can wear a uniform and sit in a chair. You see all these common keys he's talking about? Well, did you know you can replace a lock on your own? You can just buy a lock to replace the existing lock and swap it out yourself. Boom. Now you own that lock. Did you know most security guards don't have most of the keys? The keys they do have are not labeled; they bunch 1000s of keys together and the keychain is useless. I have spoken to site managers who have no idea where the keys are for critical access points. That's absurd. ANYONE could have those keys, including the security guard you fired last week that I'm replacing. First thing you do on a job is take ownership of all the locks and I do mean ALL the locks. Nobody who just hired a security guard is going to be angry when you present them with an invoice for those expenses. You just do it. If you don't have the key to it, the lock needs to be replaced and new keys issued. If the boss is angry about that, you say you didn't have the key to it, therefore it wasn't secure.
Have you ever walked into a bank and see 8 cameras behind the teller? Those are fake. Nobody installs redundant cameras. If the camera sticks out like a sore thumb, it's fake. If the camera is old, almost certainly it isn't working. Cameras wear out just like anything else. All cameras are fully zoomed out and almost none can be controlled remotely. I worked in a new prison with broken cameras and nobody fixes those. Even if you create a disturbance your face isn't likely to be recorded. Only the most expensive cameras are useful for active monitoring. Use your eyes and ears. Be a walking radar station.
Another skill is to become good at faces. This isn't as difficult as you think. If you notice someone slightly suspicious make a mental note of his face. If you see him again, make another note. If you see him a third time, it's time to confront that guy. He says he's a groundskeeper, but you still demand an ID. He does present an ID, so you verify the picture. You'd be surprised how many security guards don't even check the picture; all they look for is a logo. You need to make sure 1) the ID is current, 2) the picture matches, 3) the employee is currently employed; call HR and verify the individual's employment status, 4) the name on the ID matches on a state ID, 5) the ID is not expired, 6) the employee belongs in that area, 7) the employee is actually supposed to be on-duty. It is your responsibility to verify all this information when you are new. And when the employee walks away make another mental note of his face. If you see him after hours you need to confront him again and find out why he's there. People from outside companies walk on site all the time just like the elevator guy he was talking about. Every single time you see someone from the outside, you run an ID check. You don't give the ID back until you can call that company and verify the employee by his number and also call management and verify that he should be in your building at that time. Everyone understands it is your job to do this. Anyone who gets uppity about it will just have to wait. "I've been coming here for 32 years everyone knows me." That's great. Stand right there until I verify this. The manager will show up and say, "Oh we know this person." That's great. I'm just verifying with his company also. They will laugh at you, but you just smile and keep checking. Even after you've seen a guy many times you should occasionally call his employer to check.
A lot of people don't want to cause friction. Don't worry if you disrupt the flow of work a little at first. After a couple of weeks you learn the workflow and everything is running smoothly again. A place will hire a security guard without providing him with much information about schedules and workflows. You need to get this information and keep it current. If something happens on the site and you don't know what it is, you should find out what is happening, even if you think you will be embarrassed. "We're making paper. This is a paper mill." Okay, but YOU don't make paper, and you have no idea why things are done a certain way. You need to know why paper mill employees are in the mill area. You need to know who is managing the work. One exceptionally useful thing to do is to simply ask the manager if everyone there is supposed to be there. It's amazing how rarely this happens. If someone is there who doesn't belong the manager probably knows about it; there often is an intruder, and everyone knows about it except you; then you can confront the individual who doesn't belong and escort him away.
Don't count on management to keep things secure. Make a round every hour and check every lock by LOOKING into the keyhole. Check for bits of broken metal and actually pull on the door to make sure it's locked. You will be amazed how often you find unlocked doors. Lock them immediately and keep locking them. Eventually you will be told to leave a certain door unlocked. This is where you refuse. Then management will say certain employees have to get in and out of certain doors quickly. Then you will ask why those employees don't have keys to those doors. They will say there aren't enough keys or nobody knows where the extra keys are. Then you will make copies of those keys and issue them to the employees who need them and send a memo about that to HR for the employees' files. Then keep locking that door. Check every hour. Because I'm telling you right now, word gets around that this or that door is always unlocked and then there is a break-in and then who is going to be held responsible? That's right. The guy they hired to check the locks. Keep the doors locked.
When I worked in a prison the inmates called me "real police." When I walked into a cell pod with one other officer, the inmates would yell out, "Man in the block, times 2, REAL POLICE." It was my first security job and this was the worst insult the inmates could think of. I earned that name after two weeks because I would run my fingers under every crevasse and yank every padlock. The inmates assumed I had years of experience and noticed everything. In fact, I had no idea what I was doing and they could have pulled almost anything on me and gotten away with it. But because I put on airs when I walked into the block, gangsters would shout, "Tighten up! Real police!" They never missed an opportunity to hurl this insult. You can be two different kinds of security guard. Be the real kind.
@@johnpetrov6602 - Amen, sir! 😉
What city was this in? I can't imagine this happening in my college town but I don't want to be oblivious to the world around me.
Are you Odo from DS9?
@@johnpetrov6602 you must be great at parties
45 minutes later I now know the perfect job for chaotic neutral. Where do I sign up?
right like with the bank i love how he opened the door and then jus walked off
Also good for neutral evil and chaotic evil
Til I'm chaotic neutral
Dragon, indeed. Always been a tech head, military tech then civ. tech. now I teach Science at an international school here in Bangkok. When I was a younger guy, my retired grandpap took a locksmith course, and gave me the books after he'd gone through them, showed me the tools, got them when he passed on. First job out of the Army was installing security systems. Company had a contract with a couple vending machine companies, I wound up with a ring of keys that would open almost any vending machine in the city, and of course, I had the keys for the alarms as well. (This was back when the machines were more mechanical and not digital.) Love these vids. This one made me DL all of Deviant's plus a few more. Just for shits n' giggles.
As you said just act like you know that your are doing. I used to have an office inside a former employer and traveled quite a bit. Was in and out quite a bit at night. Knew most of the guards and they knew me. One Friday night I was going on a long trip and need to take a bunch of my computer equipment with me.
Went in to the building and signed their signing sheet, noticed the guard was someone that I had never seen before. Went to the mail room and got a hand cart, loaded up all of my computer equipment and get to the front door. Guard immediately gets up and holds the door open for me. I load the computers into my vehicle, carry the cart back to the mail room, sign out and leave. Not once did the guard ask me anything, no ID no questions about what I was taking.
33:28 There's a great story from back in the late 90s, early 00s of a guy who saw the armored car guy come and pick up the deposits from a grocery store in Dallas. He noticed the girl behind the counter didn't even pay attention. She just threw the bank bag up on the counter. The guy followed the armored car around to various stores and noticed the same thing. He went to a uniform store and got a similar uniform. He then went around the stores and picked up deposits and cash totaling high 5 figures. Started moving around the U.S. doing the same thing. Stole close to a million dollars. When he finally got arrested, he ended up being so devious he broke out of jail and prison 3 times before they finally put him in 24 hour lockdown.
I mean at that point I can't imagine why he couldn't have just escaped.
So they are torturing and killing this man for stealing some money ?...tell me about human rights...
Someone pulled the same scheme more recently than that. A man walked in to a Oklahoma Walmart dressed as a fake Loomis driver in 2015. He walked out with $75,000 cash.
@@hzzlrp10 did they catch him?
The latest article that I can find about it says that the police had identified a suspect. He was still at large as of 2016. The store manager, the manager's wife, and manager's step-daughter were also arrested for being in on the robbery, destroying evidence, and driving the getaway car respectively. Charges against the manager were dropped after he had a stroke and was declared medically unfit to to stand trial.
Never publicly humiliate the sound guy...
Disgusting Behaviour. - Should learn to test his own stuff - Prior to people in the room.,
Blaming other people for your own problems is a no no.
@@ianjukseyjukes4358 Yeah. The sound guy could have at least turned off his mic for a couple of seconds in retaliation. The whole place would have laughed.
Everytime he tried to sound tough berating the sound guy his voice cracked
A lot of the time with Shure sm58 with the switch the person talking will blame the sound guy for the mic not working, but they just didn't turn on the switch even though they were told about it.
@@profquad I noticed that as well. That can threaten the job for that sound man as well. Other things this talented "Deviant" might want to remember;
1.) Guys like my brother are sound men, and he looks and sounds like the nicest guy you'll ever meet, yet he has his own bag of technical tricks that can make someone's life a nightmare.... especially if they are saying anything they don't want others to hear. Legal? Maybe not. Can it happen? You bet your ass.
2.) If it WAS my brother doing sound and he was insulting him, he might end up having to deal with my primitive set of skills. I wrestled since I was six years old, helped coach at one of the earlier Jiu-jitsu schools in Vegas for three different professional fighters, and I my timing is good for finding people where there are no cameras. Mr. voice-cracking severely out-of-shape narcissist might find it odd waking up in a different town than the last place he remembers, but a clue in the shape of a note pinned to his forehead about berating sound guys might help.
I appreciate the info on this video, but at times he reeks of "rare profession smugness". They are so used to a high number of casual citizens knowing nothing about their work, they start to feel superior instead of simply different. There are times when he downplays the work and sounds normal as well, hard to tell where he stands.... but there are hints of the ass holishness.
Fast food place I worked at long ago had a big security flaw with the door that everyone knew about. This was the FRONT DOOR mind you. Basically it had a little slot for the mailman to stick mail in without opening the door, but the hole was big enough for one to stick their arm in and push on the bar to open the door, which would open it even when it was locked from the inside.
One day someone mentioned it (mocking it) in front of the wrong person and the place got robbed that night. They was dumb af so they got caught though, and they sealed the little hole on the door afterward.
At 50 yrs old, the light bulb finally clicks on and I think "Oh that's what I was supposed to do with my life but never could quite figure it out" I've never been so fascinated
Not too late! Start now!
I tested a Bic biro on the back of an envelope, and I'm happy to report it is definitely a pen.
@@duncanrobords6626 At the Festival of Writing UK 2019, where I hope to perform extensive pen testing.
Did you write your name or did you write "Hello"? Did you just randomly draw curvy lines? I need to know more!
Instructions unclear
Stuck in a server room after vaping
You forgot one: Check all the doors that lead to a place. People tried to break into my parents place and we have this really heavy front door and they tried everything and after a crowbar didn´t work they gave up. The door at the back of the building would have been unlocked, because the cleaning lady forgot to lock it on that day. If they would have just tried, the other door, they would have gotten in.
I'll tell them next time.
That falls in line with the old adage - What is the use if you secure the doors when you do not lock the windows.
30 years ago my boyfriend at the time had his car window smashed one night while parked in his driveway and a bunch of cassette tapes were taken. It was the driver's side window they broke with a brick. The passenger side window was down. o.O
Either a dumb or a mean thief... Probably just busted the closed window to really fuck with the car owner... repairing a windows, pullingglas shards out of the seat and your ass and moreover not having music to listen to... Only taking the tapes would have been less fun.
AH, that's _your_ place? THANKS! I'll come again~~
I've been wanting to learn lockpicking for ages and the other day I learned what physical pentesting was and decided that it's something I would love to get into and I ordered some picks and practice locks. This showed up on autoplay for one of the lockpicking videos and now I want to be a physical pentester even more, this is so cool!
CZcams has been recommending this video sporadically for over a year now. You win, CZcams
Recommended videos from youtube are often shite, but when it hits gold it hits gooold. Loved it
When life closes one door, you open it and all the rest of the doors and file cabinets and copy key cards and then send life the report on how they did and suggest improvements.
Nice ‘Look Around You’ reference. One of my favourite shows!
👩🔬🧑🔬🔬
This kept popping up in my recommended videos and I finally gave in and watched it. Glad I did.
I did not expect to be watching this whole video considering I had no idea what it was about.
This was very informative and actually pretty fun for what it is. Thank you for posting!
A friend of mine, when we were teenagers, stole a huge gumball machine. One of those ones with a huge globe on top and a looping pathway to deliver the gumball down to the bottom. Its fricken huge. Security held the door.......because they had coveralls and a clipboard, and a dolly to cart it away. Made the local paper the next day for being the cheeky theirs who stole the 'big Bertha' gumball machine from the mall.
Nice effort but i think the guys who went around steeling ENTIRE BLUESTONE laneways (stones worth heaps for landscaping)here take the cake! Not much hi vis and some witches hats wont let you get away with including operating loud heavy machinery (they had front end loaders,jack hammers and trucks to remove the stone)all through the night.Years ago guys were walking out of big department stores here with white goods,they just walked in with a trolley and never got contested.
Conveniently, leaving out the most important part: Their arrest, and ruined lives after getting caught! A couple friends of mine, worked at Mcdonalds in HS. Manager left the keys in the door one night. Geniuses decided to take the keys, and watch the safe combination, as she was entering it. Called me, and asked if I wanted in on their "master heist"...."No Thanks, Have at um"...Tried for 3 nights, and eventually cracked the safe, with 25K inside. Caught the very next week, after buying crap they couldn't afford, and bragging about their "master heist"... Point of the story: No one could care less about their security, when they can just identify you afterwards, and send the cops to your moms house to pick you up! Kicker is: The Mcdonalds actually made $, from the robbery. They claimed the theft on their insurance, received back some of the stolen $, AND got restitution from the thieves...Now THAT is what I call a successful "master heist"...lmaol
Burt Burt What a couple moronic hamburglars. Now they serving their apple pies to cell mates.
Sophia Chen: Actually, not really. They were all minors at the time, and just got house arrest( 1 went to juvie). All three went straight after paying off their fines. The one I kind of keep in touch with, went on to get his masters in business.
@@burtburt2263 three can keep a secret …
43:26
"You can sniff the back end of this"
-Deviante Ollom
Udon Nomi He’s called deviant for a reason
"That's what she said!" - Michael Scott, 2009 (colorized)
I love the part where you're in the elevator and you say "Dude like I got a metal clipboard what am I gonna do?" You're the best
"shrouds for protecting the door handle" did it for me. genius
We have a DoorKing/proxcard 2 system on the apartment building. Office wants $200 for a second keycard. $35 on ebay got me a cloner and 5 tags. Took me all of 10 seconds to have 5 copies made.
I think that he wanted multiple copies for himself, not other people
It probably came as a 5 pack. Or he has a family and he can now give everyone their own card. Who cares? As long as they can all access the building, and they didn't have to pay the building's extortion fee.
Yes, but now each key is the same, so access logs show only him coming and going. Smarter systems will see he already entered and not allow entry via the same key again until an exit event is logged.
There is a reason they use diufferent cards per person. Mostly for knowing who is where, but sometimes a smart system will actually be impleemneted.
We call that Dorking in trade.
@@BestLittleStudio if they were 'smarter' every person entering or leaving would have to use their key. This gets impractical quite fast if you want to leave or enter as a group...
9:05 The way Robert moved through that doorway all sneakily and suspiciously had me genuinely worried about his possibly malicious intentions as to why he would get through there. Literally comparable to a horror scene
Remember, a lock just keeps the honest man honest. You want in, you'll get in
@Det Nine Well, I meant to quell temptation so, yes, it keeps the honest man honest because a truly honest person who's drunk, high, etc....... will think twice and the lock reminds him that it's private property. He reminds himself that he is not a crook. So, like I said, keeps the honest man an honest man. We essentially both said the same thing, cheers, bro :)
Det Nine You just had to throw your two cents in.
In the jail, that is. Once in, there are security systems which keep you in.
It's funny. I was going to come make a comment telling you that I worked in the Video Arcade industry. That I had 3 keys that would get me into 90% of all video games. Then watching your video one of the keys you listed is actually one of the 3 keys. Also I wanted to tell you my experience with pad locks. This mechanic was working on my truck and he took it home to spend more hours working on it. He got behind on his rent and the landlord evicted him and pad locked my truck in the garage. He (the landlord) demanded I pay the back rent to get my truck out. I went by the house and the garage had a padlock on it. I looked at it and thought. That padlock is so long I could use it to break the ring it is locked through (if that makes sense) and sure enough it snapped it in seconds. I opened the garage , started my truck and off I went. I even had the mechanics tools in the bed of the truck so I ended up getting his labor for free. It's amazing how little effort it is to get into anything with just a little thought into it. Also the part about acting like you belong. It's amazing , if you don't look nervous or panicked you can go anywhere. In fact that how I never had a break in on any machine at an arcade I worked. I would look for the guys watching me. I then would follow them. In 20 years I never had 1 machine broke into while I was on duty.
What's funny is I use the same metal clipboard at work at my water plant, and I use it basically for the same thing, it holds my snacks, calculator, pens and stuff lol
Two true stories with the same point:
1) I was walking someplace I shouldn't have in New York City, I was the only human in sight at this point and I walked past a beautiful custom motorcycle with a paint job of skulls. Keys are in the ignition. I was nervous about what would happen to me just pausing to admire the bike. Anybody could have taken it, but what would happen to them as a result?
2) I saw a cow run straight through 5 strands of barbed wire. I knew the fence was there. I heard the wire make the same sound as the opening of the Loony Tunes cartoons theme. But, just looking at the cow, you wouldn't know the fence was there at all.
Bottom line: security is really just about controlling psychological states. The owner of the motorcycle controlled my mind. The farmer failed to control the mind of the cow.
I grew up on a cattle station and can tell you that cattle have very thick tough skin, barbed wire will absolutely shred human skin and flesh but hardly scratch cow hide, if a cow really wants to get out they can, but often they have little reason too, sometimes some naughty ones will break out and have a little adventure but even they just end up breaking back into the paddock again to rejoin the mob.
This is a pure gem of a youtube video. I've learned so much useful information in such a small amount of time. Thank you!
I worked at the company that made the GE sensor before it was sold to GE. It's called RGR or Range Gated RADAR (acronym on top of acronym? lol). A spin of a NASA patent or something that allowed us to dual-tech to increase pet immunity but most importantly the service providers would nail us for too many false trips (you'd think that was fine, but they hate spending money/resource when there's not really intruder or it's a pack of squirrels near the sensor or whatever) so we could bracket the humans on two vectors - it also makes a very defined field of view/detection, where you would get a trip off the pyros (that's where the differential comes from, a two element uh....element?) but need to discriminate better or you'll end up getting tripped not only like the random wildlife coming up on the sensor but by every semi that drives by the detector. Particularly white andor shiny ones. If your pulse length tuning somehow falls off sync or whatever you will still get trip, so there's also still the Hail Mary and if nothing else you'll see upon inspection that the unit needs R/R. I actually devised a method that allowed us to somewhat ballpark sensitivity and fields of detection footprint in a 75ft deep room by basically building a dolly that was transparent to IR and had slim enough bones to be invisible to the RGR then slapping some nice heat tape all over it to drag it around like a dog on a leash or something. Hell, you should have seen glassbreak detector testing. Talk about fixing a bad day at the office, while at the office, busting a ton of glass and beating on trash cans with golf clubs and baseball bats trying to get it to false trigger. So you'd say. :-) Log your test time and standard methods applied, and it's all good.
russell zauner that's really cool. Thanks for sharing . How did you make sure it's not tripped by dogs but little people / children can get it though ?
I used to work in a building that had radar sensors to turn the lights on and off in the hallway. They were super-clever, and would automatically adjust their operating frequency so they didn't interfere with each other. Unfortunately, since they were in the 2.4GHz band, they automatically spread to cover the entire band and utterly curb-stomp any attempt to use WiFi, in the computer science building on campus. One of my co-workers resorted to putting an EMF shielding bag over the lights during tests that needed networking.
"Who's pwning my laptop?" - Deviant 2017
As an older guy the thought of a pen test was intriguing - but now i know how to break into a stationary shop and test those fountain pens out in my own time!
15:35 I'm just amazed at how good that "balloon sound" he made was. It sound EXACTLY like a balloon deflate-flying xD
I was actually visiting a corporate headquarters once (to remain nameless), as another company (who will also remain nameless). Their building has badging systems all over. You can't access special rooms, meeting rooms, or even certain floors (once out of the elevator, you're locked inside the lobby area). We went to another meeting downstairs, and I left my backpack with my laptop upstairs behind a locked floor. I said I needed to get it and would be back shortly. Our rep for their company asked if I needed her to come with me, and I said I'll be alright.
Sure enough, I went upstairs, lurked in the lobby, and just waited for the doors to be opened by someone else before entering the floor. It wasn't like I wasn't allowed in there, and I wasn't doing anything wrong either. I just needed to re-acquire my personal/work belongings from an area I was previously in.
Just wanted to share how easy it is to blend in without people questioning you. Even if they noticed I wasn't a usual/employee, I still must be allowed in if I was able to gain access, right?? Nobody asked any questions, even though I wasn't with someone from there. Granted, I was just on that floor and they probably remembered me, so that could also be why.
I had a friend who does IT security that was part of a team like this that infiltrated a bank branch, hooked up a computer to an atm, made it spit out cash, then _stole a van from the property_ and left with the spoils. When he told me that story my mind was blown. Now watching this, you make it seem very accessible for a self-motivated and intelligent person to get into the industry. Fantastic.
I once was on the path to becoming an architect, now I'm a self-taught front-end engineer, but someday maybe I'll try to pivot into security auditing. Fascinating shit. Thanks for the video.
I can't recall how this video ended up in my Watch Later but I'm glad it did.
Looks like I'm going to need a new -lock- -door- -house- Batcave.
In case you missed it... The guy leaving with the giant backpack in the last 5 seconds of the video... you know, the guy with the slight grin on his face... just cloned everyone's phone and scanned everyone's badges.
Stratomacaster what, really?
@@ghost_ship_supreme no..
ohhhh… that's sooo cute... he gets hugzzzz
@@Sheridan2LT k
It's fine, no one goes to a DefCon or other security con without making sure they only carry burner kit without anything sensitive on it. Then they either wipe the heck out of it later, or put it in a sandbox to play around with and try tease apart any sneaky things they might've picked up.
Let me in. LET ME INNNNNNNNNNNNNN
Beautiful.
Who put a thumblock on the frameless glass door? Let me in
I've been knocking, let me in
Who installed the jamb pins?
I can't hear you speak
I've been knocking and knocking
Let me in
@@JennyTheNerdBat this is the niche youtube comment content i come here for
@@maxadam2447 True, but maybe OP was quoting Poltergeist 2?
I'LL LET MYSELF INNNNNNNN
The lanier and doorking story reminded me of a Soviet criminal who just... bought a big bunch of keys and went around robbing everything by just matching the door keys
Brings back memories of my teenage years. Good job, buddy...
I used to love finding ways to get into locked doors, windows and vehicles when I was a teenager. It was always me or someone I know locked out or somebody that had locked there keys in there car. Never really thought about a company that tests for faults in security. I thought locksmith or criminal where the only two options... I would have loved to have a career in this field.
It's still locksmithing, it's just a different aspect of it.
This is way less than a 1/4th of what a penetration tester does. These guys physically break into companies/corporations so they can get to the server room, and install their sniffers and other tools so they can infiltrate the network and test for other vulnerabilities. Another method is by social engineering their way into the network without ever stepping foot into the building or perimeter of the building. Another aspect is incident response and other things that usually end up being written into, what some would consider, a lengthy college final project report. This is in turn handed to the client's IT department to fix the vulnerabilities found by the pen tester. They are then hired again, some months later, to see if the company/corporation actually followed through with the implementation of the outlined solutions. So any doors, door locking mechanisms, that need to be replaced with a higher security standard; train employees to be more curious about people they do not recognize coming to a fro in the building; all maintenance people directed to the proper handling person (usually the security guard at the front desk or receptionist); etc.
Getting into locked doors, windows and vehicles is never a huge problem, given time and a few basic tools.
If all you want to do is get in, it usually takes about four seconds. And then about 45 minutes to clean up the mess.
The clever part is not totally ruining whatever it is you're trying to break into. :)
When you're better at picking locks than remembering that they're there lol.
OH, PENETRATION, NOT PEN
@@pwntwtf Penetration that change yo location
I was like... Wild West... pen? Like a bull pen?
Heh. Bull-point pen.
I clicked on this video because I couldn't imagine what a physical "pen" tester was. Still didn't get it till I read your comment.
Testing pens on a daily basis sounds like a boring job to do.
That's a different field ;)
One of the most enjoyable and practical presentations ever
This is not at ALL what I thought this video was about and ended up here in confusion only to be wholly drawn into this. So GOOD!
"where do you work?"
"Door king Company"
"what do you do?"
"dorkin all day,hence name..."
"Hi, I'm the meme king, and these are my associates, the spaz king, the nerd king, and the fucking idiot over there. We've come to repair your computers..."
[I realise there's no pun in this post, and I'm glad of that]
yes
The security won't let us in the cafeteria if it isn't our lunch period which is numbered on our ID cards.
Long story short I just hold up my ID and walk past the security when it's not my lunch period and they don't even notice.
Do you work around classified information?
"Weatherstripping is not a security device"
"Mayonnaise is not an instrument."
Thanks for the information and upload
Good security is a combination of Something you have (ID Badge), Something you know (PIN), and Something you are (biometrics) - and truly secure facilities use those three elements... But they also hemorrhage money to get to that point - and unfortunately deterrence isn't measurable and security is often the first place they look when it's time to "save" money.
for the love of god... you guys made a video, then shrunk it down to 25% size, and then tossed it in the corner. wtf
bloodshedhero hey mAn they do break ins, not video editing, guy didn’t even know what a remote was
@@MrJypsye best comment ever.
This is a funny comment but I actually like the format of this video.
Yea seriously..
That's common for conference talks. The slides are usually more prominent than the speaker him-/herself.
27:07 "Oh no! Oh laptop. Dont do things that laptops sometimes do? You're killing me! Who's p0wning my laptop...?" Best part of the vid hands down🤣
Considering he's at a hackfest of all places that would be a legit concern
These kind of videos always get me so interested in pentesting it's insane