Deviant Ollam - I'll Let Myself In Tactics of Physical Pentesters B-sides Orlando 2017

[@cjamweg7579]

The part about loiding the latch got me thinking ... on the building I work in, they just replaced all the doors to the office area with electronic badge readers and motorized strike plates. I was remembering how the hole in the strike plate looked huge when they were putting it in. Sure enough, this morning I get there and not only is there about 0.5" of space between the door and the jamb, but the deadlatch engagement button is clearly nowhere near the plate. I get the guy who was in charge of the retrofit and show him that they don't latch properly. I whipped out a debit card and popped it, first try. He said, "I'm glad you showed me that because the one on the server room is just like that!" I explained about how it's supposed to work, and now he's going to have the contractors come back and fix them. Win-win!

[@JC-11111]

Fuckin right! That's why you watch this kind of stuff.

[@replytothisifyouhavedumb7250]

That’s literally what a pen. tester does so yeah

[@Wolverina92]

I've been binge watching Deviant's stuff and taking notes on how to improve my home security. I think I've learned enough to attempt to break into my own house, then go through and fix the problems.

[@zvelivis]

Thanks for all of the great info. I'm a firemen and we use some of these techniques to enter buildings on low priority calls.

[@lawnmowerchoke_9038]

I saw those water treatment examples at your presentation at WaterPro in Orlando. Great stuff.

[@wires99]

Pen tester? I was just looking for information on the evaluation of writing implements. Now I'm all paranoid about a break-in!

[@jamesfair9751]

Pen as in penetration testing lol

[@richardmillhousenixon]

@@jamesfair9751 OH REALLY YOU DONT SAY

[@jamesfair9751]

Tribe of the Iron Flame yes, yes I do say. If you would notice the comment I responded to was talking about ink pens and writing implements.

[@kdawson020279]

When your cold open is, "I'm Deviant, a professional physical penetration expert," it makes sense to make it sound like you're comparing Cross to Mont Blanc. 🤣 Seriously, though, the best overall ball point pen made is the black retractable ball point with the silver tip, band, clip, and plunger made by Skilcraft. We don't get them as reliably as we used to, but I have developed a love for the U.S. Government pen because I always had at least 2 in my pocket for the first 12 years of my career working for the U.S. Government. Just never ever ever wash one.

[@SLLabsKamilion]

That poor wireless microphone... Alone, bitter, and constantly disconnecting...

[@replytothisifyouhavedumb7250]

So uh, why your profile pic like that

[@SLLabsKamilion]

Because I find it amusing to troll people on youtube. Same reason you chose a foolish name. "Hurr hurr, made you jump" / "Hurr hurr, you're an idiot for replying because I can make an arrangement of words you're forced to have included in your post"... The usual. Why, what did you expect? "This one time, at band camp, I stuck a spider up my" maybe "I LIKE TRAAAAAINNNNNNNNNS"? Perhaps even, "Never gonna give you up, never gonna HA HA MADE YOU CLICK READ MORE."

[@KarRuptAssassin]

Man this is what i wanna go into. Already in school for IT Security.

[@KellyAlwood]

another excellent talk

[@MarkH10]

Another motion hack for REX sensors, is to take a clothes hanger, straighten it out, attach a small section of cardboard about the size of a sheet of paper or half that, insert it about 18 inches, and spin, SNAP! instant entry.

[@MageAtYou]

why did they cut the audio around 31:40 ?? what info did they censor .

[@danwalter1119]

I'm guessing they're not trying to censor anything, more so the recording's a bit shitty

[@XDRosenheim]

Just a poor microphone. This exact talk has been done in a lot of places. Search for "Deviant Ollam"

[@adamh6507]

I've seen this a few times and I can't help but notice the whiskey at the bank trick... There's an ATM in that entrance and another door just in front. It's not unusual for banks to have 24/7 access to that ATM just inside.

[@Jaewing]

I don't normally comment on months-old comments, but in that case, it does look like he checked that the door was locked before showing the trick by pulling on the door. Honestly not 100% sure however because all the videos I've watched have been low quality.

[@harrisp584]

Saw this too, he has enough legitimate examples of “getting in” that I would trust him to not put in a false example just for the sake of lying about it working in this one specific location.

[@Portmore78]

How can a person of color, like myself, even attempt to go in this line of business? I feel like a blinking red light wherever I go, even the mall when I'm going shopping.

[@robertquint6893]

Dress like maintenance. A black man dressed in Dickies and carrying a plumber's tool bag can go anywhere. Alternatively, dress in a three piece suit, be clean shaven, and use your best job interview speaking and people will go for it. Instead of feeling like you are limited by other people's views of black men, exploit it.

[@XDRosenheim]

Actually sounds like you are the perfect candidate for the job. If you can go around (While feeling like a blinking red light) and still remain "undetected", you win.

[@Portmore78]

I'll take that into consideration.

[@ashscott6068]

Yeah, people judge. If it's not your colour, it's your build, your clothes..everything. Just gotta use that. An overweight guy is not gonna pass for a labourer. A guy with facial tattoos is not gonna pass for a lawyer, an old guy is unlikely to pass for an IT specialist. White people are happy to accept a black person as someone in power. They just expect him to have a certain level of determination and maybe a bit of an attitude over having to work much harder to get there. That's just the stereotype certain white people in certain countries have. It's only a snap judgement. We all do it, but once the person starts talking, we start re-shaping our initial judgement, based on how they speak and carry themselves. A clean cut white guy in a suit gets judged too - by people of any colour. But if he opens his mouth and reveals rotten teeth and a stench of whiskey, that judgement changes. People have seen people of all colours in all jobs, so whatever their initial judgement, they're all relatively flexible when it comes to accepting it.

[@rogerwilco2]

I am always surprised at how poor the locks are in the USA when I visit or see talks like this. A lot of security measures have been a standard of the building code here for decades. I don't think there has been a house built in the last 30 years without things like security hinges.

[@MarkH10]

I have never seen a security hinge installed in a house. I have been living in 3 states, and several cities and they are not used. They would not apply for residential doors swinging in, which is the norm. The TH I live in was purchased by the owner in '13, and the hinge side of the door frame shows a massive crack from a kickin burglary before he bought it. When I showed him, and explained what evidence it was, he was shocked. Then I saw the strike plate area is merely rebuilt and painted putty, and the door actually is the same, with a massive crack glued shut and repainted as well.

[@weckar]

The mere idea of having the lock be on the handle abhors me. Separate those functions and nearly none of this works.