Friday, March 14, 2025

Red Team - Over My Shoulder Shadowing Assessing Door Access Control Systems

In this video we access the security of a door I found while out in the field.. 

  • We cover how to review the access control on a door for issues
  • How to review if our assumptions are true
  • How to bypass the controls that are verified
  • And what tools we would use to do that. 

 

We also discuss this doors roll in penetration testing scenarios inside shared facilities and off the street in various setups and attack paths.  




Thursday, March 13, 2025

Red Team - Over My Shoulder Shadowing while performing Embedded Recon and Opportunistic Attacks

 Want to learn Black Teaming / Physical Pentesting?    

Need Physical Pentest?

This is a live over my shoulder shadowing of Embedded Recon portion of a physical pentest you would perform for black/red teaming engagements.  Enjoy.. 

I cover analyzing your target

  • Points of entry, attacks on the inside etc
  • Janitors, 
  • High Frequency cards
  • Elevators
  • Door attacks
  • Alarms
  • Finding unrestricted paths for later entry 
  • Opportunistic Attacks 
  • keyed Alike Systems
  • And more


 

Tuesday, March 4, 2025

Layer 8 Social Engineering Podcast Interview

 Recently hopped on the layer 8 podcast to talk about hacking and social engineering.. 

Blog Posted in both locations but also residing to its new home at: 

https://www.consolecowboys.com/console-cowboys


Monday, March 3, 2025

Attacking MFA Pin Code Readers - Social Engineering Physical & Electronic

 Twitter:   / ficti0n   

Blog Posted in both locations but also residing to its new home at: 

https://www.consolecowboys.com/console-cowboys

This video goes over a ton of options and demos on how to attack Pin Code MFA based RFID readers during a physical penetration test. Social Engineering attacks, Physical attacks and Electronic Attacks.


NEW Stealth Reader Design - Field notes and use cases covering updated hardware and functionality

  Significant changes to the new Stealth Readers that add to performance in the field.. Full overview of the last few generations of readers...