I cannot reach the teller to make a deposit in under 2 and a half minutes, and this guy can get behind the counter. Without setting off an alarm.

If you cannot dazzle them with brilliance, baffle them with bullsh!t

I recently worked as seasonal labor for a major company, there was NO physical access on site without a badge, security would not budge on that, no door surfing was possible. Obviously, badges have flaws, easily cloned...worse yet I was just a seasonal temp, limited vetting and not even that tough to land the job legitimately. Once past security I had access to systems that just were so flawed it blew my mind...On the same work station I could access my own personal web site and the internal network. I wouldn't even need to bring a USB drive, I could externally import anything I wanted, clone to existing hardware on site, and there were tons of devices laying around I could have used...how hard would it have been to crack their systems? I don't know, but it seemed so crazy they spent SO much effort to make sure employees weren't carrying digital devices, so much effort on the front door security...and then once inside I had unrestricted access to my own web site (as a TEMP)...I am not a "hacker", there is nothing malicious on my web site, just a landing page for my social media...but I understand the concepts...and believe me I'm dying to spill the beans on what I had access to...it's just SO big and so flawed I am concerned about retribution. And the password to the internal network was...no shit..."Welcome" About half the employees had all their passwords written on their badges...even the managers with higher levels of privilege.

This was a good presentation with good information. Here is just a tip from a public speaking point of view. During the question and answer session, when someone asks a question, you need to repeat back the question to make sure the entire audience hears the question. Then answer the question. Someone asks a question then you say "So the question is....etc.", and now answer it. Otherwise this was really informative.

He is playing hitman without the human killing

"They wouldn't let me have fire, that wasn't part of the scope either..." Best got damn line in the whole video!

@30:05, "They don't apologize like that, unless they're in Canada maybe". True story - my motorcycle was once stolen from a hotel I was staying at in Toronto while I was sleeping. I came out to the parking lot the next morning to find it parked halfway across the lot, washed clean and with a full tank of gas, and a piece of paper that said "sorry" taped to the ignition they had punched out. Your comment about Canadian thieves apologizing is made funnier by the fact that it's the honest-to-God truth.

I went to a large store (which will remain nameless) once, and I asked to charge my phone there. They said, and I quote, "Okay, I'll just plug it in to my computer".

next time the rent-a - cop doesn't let you use the bathroom, or wants to call someone to verify you belong somewhere, now, you know.....

I love it. Can't have enuff Jayson Street ever

“People are stupid; given proper motivation, almost anyone will believe almost anything. Because people are stupid, they will believe a lie because they want to believe it's true, or because they are afraid it might be true. People’s heads are full of knowledge, facts, and beliefs, and most of it is false, yet they think it all true. People are stupid; they can only rarely tell the difference between a lie and the truth, and yet they are confident they can, and so are all the easier to fool.” ― Terry Goodkind, Wizard's First Rule

I love how he's in the bank with a DEFCON Jacket at 14:40

Another good way to take laptops is to take their lap top and put a big sticker on it. They will see you with their laptop but not realize its theirs.

I'm 53 minutes into your video. I'm a cyber sec student. This is a great video. Your stories are so interesting I can't look away. Great job!

I understand that they don't want pen testers to take down production or something like that, but if you don't even allow them to talk to people, thats quite dumb.

It was Oregon btw you can see the address at about 22:01

I work for a school district of several thousand employees. Most don't know who I am. I just walk in like I know what I'm doing and only one person has ever questioned me, and once I flashed my badge and said "IT" she dropped it. Parents and students try to go in through doors as I leave all the time too. I always push the door closed if anyone is standing nearby. They can hit the call button near the door. Not gonna be the one cited in their report.

Protip: 99% of rubber ducky scripts can be blocked by setting Windows to require you to enter your password before giving admin access to any program. Since it doesn't know your password it can't do anything that requires admin, so it can't do anything too bad.

"The only thing worse than no security is a false sense of security" yass

I feel like you are as old as the internet Adrian. I Love you man!

Nice SouthPark "underpants gnomes" reference. Step 1: collect underpants Step 2: ..... Step 3: Profit!

Had to perform two hour lecture on hacking, just to hack everything in that building. :D

"A network based network"

"You can see Im making a troll face here in this picture." What a weenie lol.

My mom had an Ex marine quartermaster as an ER tech. He was a master of grabbing a clipboard and looking busy.

I like how he is low tech . and earlier no tech really . makes the approach fun to hear.

A personal favorite was a Security Company. . . . . .I came in 3rd shift and all of our employee's computers actually start shutting off. . . They were overheating as the previous shift was cold and needed their feet elevated so ALL of the towers under the cubicle desks were turned around and upside down and they were warming their feet. Yes, that's right it was "cool" to move your tower so it can warm and elevate your feets. Computers overheated, shut down, started have issues and we had to crawl under the desk and put the towers the correct way.

Actually, there were some old west bandits who were very polite, and even apologized for the inconvenience. (I don't think they apologized for taking the money and jewels, though.)

"I walked out with the CFO's laptop" me: ouch that hurt

I just had a thought. I've read a great deal about how superior it is for companies to have their employees working from home. They're more productive, you save all the huge expenses of having to lease and operate an expensive office complex, there are fewer HR issues to deal with, communication problems are reduced since almost all communication leaves a record, etc. But it would be more secure as well. There would be same level of concern over things like phishing, malware, etc, but if someone shows up at their home asking to be let in, that's probably not going to happen. Yet another reason companies that mainly do office work who don't embrace remote work will find themselves dying off in the coming decades.

When doing missions that needs phone, carry a power bank and charge the phone when you wait in a bathroom.

This was educational for me. LOVED the stranger danger bit.

54:38... I immediately said out loud, "Ghostbusters!". I was then corrected by the video. This guy social engineered good.

"Yea il just take these computers for you for the refurb"

Does anyone know where I can find the Vice video that Jayson mentioned around 40:10? I've searched but have no luck finding it.

I freaking love this guy

This guy sounds like so much fun to work with

Does anyone know if and where the Vice video (filmed in London) is available? I tried googling, but with no luck.

Where I work USB is disabled and I even get told of when I plug something into an electricity port becouse of safety for the electrical grid.

Basic AVOIDABLE destruction

Knowing Jayson is a personal accomplishment

great talk.....Thank you from Tunisia

few of his lines kinda sounded the same as DEFCON 19: Steal Everything, Kill Everyone, Cause Total Financial Ruin! (w speaker) which came out in 2012

Would like too learn how to do this, n this area especially... Back in the day when I was a security guard, before I became a driver, back in the day your only trained for the big stuff after a person is knocked out or held at gun point, God Almighty bless and have a wonderful day today 🙏....

This guy is the best.

1 Lebanese bank manager.

Pentesting sounds like an amazing job. You get to walk in break their shit and tell them they're idiots.

Don't lie to the cleaning crew? Yes I'm sure that if a bad guy is breaking in, he will always tell the truth, because of the code of honour, right? They better prepare to real scenarios, not some BS they made up to try and make things difficult to who's trying to help them!!

Thanks man.

"I'm a bad guy when you pay me" lol

Destroying utterly is quite a loaded statement

My new hero

Jayson Street - The man who always walks like he knows where he's going, but is also always a lost wanderer. Schrodingers hacker.

Its just ridiculous how simple it is i would love to get to a higher level and learn more about things... I've been doing things like and thinking. Of these things like everywhere and its EVERYWHERE i wish i knew how to meet more people and do this but its how to start without people like you're trying to screw me by telling me like no im not if i was i would not be telling you. Love your work and "I'm the worst person" but I'm really not

The thing is, if you cut access to social media for kids, they will 1) have negative social effects and they will be left out 2) grow more private and learn how to get around what you do anyway. Like, if you work in cyber security, you should be the exact person that knows that. You make something more complicated to reach, there will be a method that's more complex that gets around it anyway. And if not, they will go for something else, you cannot block out EVERY social media and if you block where all their friends are, they will talk to ONLY strangers. Putting limits up for your kids on their pc will just come right back at you. I have had way too many friends with these exact issues, both online and IRL.

I hate that in these conventions in the and you can never hear the questions

He didn't actually use the Initech badge did he?

Another brilliant Frank Abagnale.

22:01 Busted state treasury was Oregon lol

This guy isn't lying I can walk right into any building I want during business hours as long as I have a clipboard and tool belt, they will just help me with any questions I have 100%.

Saw a youtube video which was a review of hacking in movies...how realistic it is. The real hacker said that real hackers don't put cat photos everywhere, unlike in the movies. Your first picture is a cat photo. Therefore, you are a not a hacker.

Lol. You were here in Jamaica. Wow.

Plot twist: all his stories are really an advertisement for diet pepsi.

My Twitter was hacked once & i want to take preventative measures any advice 🤔👩🏼‍💻

"I Googled it on the Internet"

Listen to this guy, He is dangerous. Keep him close.

What kind of experience/degrees to get into this line of work? Considering taking CISCO classes again but is it necessary if I can learn on my own?

That dab at sony XD

Annoying that he keeps hitting/scraping the mike. So many DEFCON videos have bad audio,

Honestly, is there a TV show about the people who do these jobs? there needs to be

Im not an US citizen so pleeeeease can someone explain the Boise Idaho reference??? THX 🙂

Oregon!

Gregory D Evans badges, bwahahahahaha

does Appalachian institute of digital evidence exist still havent seen anything since 2018

This guy has Dr Phil mannerisms

49:00 best advice for the whole smash

Seems like I've heard most of this content from Deviant in his talks. Sup with that?

I got an ad for the next season of breaking bad while watching this!

That camera footage is killing me

i live overseas, and i can tell you 100% that pretending to be stupid works in every single situation. they want to believe we are all idiots, because they are shaped more by our media than we are.... and that is how we portray ourselves. it's hilarious and super useful if you want to do stuff you are not supposed to be doing.

Love the video and the stories. Just got a bit confused about the part where the 3rd party tech support came a long and just plugged the USB into their computers, they didnt use a VM image for that, I mean it is a unknown device, even if the device is from a "trusted" source, shouldn't mean anything to tech support.

i want you to hack us but you cant touch any computer of any sort, no talking, no lying, don't enter rooms you aren't allowed to go in (so just the lobby) and you may not walk.

3 year later not much has changed

Never trust the delivery guy. Love it.

Whole stuff printed in "Kevin Mitnick - The Art Of Deception". Great bedtime stories...

4:04 who's playing with the camera frame positions T_T

Yeah, fucking Bob.

As Dick Marcinko said- "A clipboard and a confident wave will get you access to 95% of the buildings in the world"

Badge id: 3"1337". .. I see what you did there ;)

When is the movie coming up? Does the Di Caprio staring in?

Please tell this man to avoid dog tags dangling on the lapel mic. The talk was great but the jingle jangle is distracting.

You gotta explain me the domain access on wine. A VM I would understand however, the most access I think you'd have is to everything in ~/.wine/drive_c

#BEST INFO VIDEO

Angry birds in 2007 ?

Reminds me of 1984 and how real it is. How close this is to the books.

Interesting

Too much Diet Pepsi!

That makes you the bad guy.

in this vid i hear a lot about the peeps that dont have a clue.... honestly i stopped watching 15 min in..... any mention of encounters of peeps that did have a clue(Peeps that tried to shut u down)? I can say without a doubt the company i work for has a fuck ton of loop holes in security..... But i lack the authority to make a difference..... one thing i hate is that there is a point were guests can come out of the stairwell and end up in restricted areas... run into it all the time.... yet it goes ignored. I get safety issues.... But maybe just maybe could they put a button for door access that says in case of emergency exit hit this button? Then maybe ppl would think.... welp not a emg, and im not gonna take a risk on opening the door... btr go back to were i came from.

It's not even spoiler because Mr.White isn't dead.