A Peek Inside the Pelicans (a.k.a. "Deviant's Pelican Brief") 😉
ฝัง
- เผยแพร่เมื่อ 11 ก.ค. 2021
- This is a talk I presented back at BSides Seattle during the Pandemic. For those who have ever been curious what a covert entry team has in their equipment cases when we roll into town and take down targets, this is your chance to find out!
Here's their version, if you want to give them a play-through click, as well, just to help boost their channel!...
• Bsides Seattle 2020 - ...
No links below to the gear I'm showing off because, frankly, there's FAR too much to list. But if you want to ask me specific questions about anything, I'll do my best to respond either in the comments or (more reliably) on Twitter.
Enjoy!
- -- ----- ----------
Sign up for give-away drawings here...
deviating.net/contests/give-a...
I'm on Twitter. I mostly use it for swearing...
/ deviantollam
I'm also on Instagram. I mostly use it for liking my friends' photos...
/ deviantollam
This is my GitHub. I don't use it much at all, but I do post my design files there...
github.com/deviantollam
This is my personal web site. Most things i create wind up online...
deviating.net
This is my company. We're good at stuff...
enterthecore.net
This is where i train. Come and learn badass skills...
redteamalliance.com
- -- ----- ----------
![You’re Probably Not Red Teaming... And Usually I’m Not, Either [SANS ICS 2018]](http://i.ytimg.com/vi/mj2iSdBw4-0/mqdefault.jpg)
![[TH] VCT Masters Shanghai Swiss Stage DAY 5 // FPX vs TH | FUT vs LEV](http://i.ytimg.com/vi/r61uDZTmu44/mqdefault.jpg)
Oh you missed an opportunity... The Pelican Brief ;)
OMG i fail at internet comedy!
@@DeviantOllam it's fine, your talking head videos are less dry than any of Grisham's writing. Hardly comparable :P
I guess I missed the bit where he said he kept underwear in those cases.
@@adammorris8112 @4:20 you can see it under there
I came in thinking The Pelican Brief. This is sooooooo over my head lol
I love how so much of your "covert entry" is built around being so overt that you are obviously supposed to be there.
Yeah, someone sneaky would NEVER use a door stop, whoever left that door open is obviously supposed to be there
They're still Covert..... the C just stands for Charisma 😂
"I should be asleep right now" , hence the blazed half open eyes
A more topic related comment: One thing I've used often with social enginering is being the person you don't want to get too close too or stay in a closed room with. Eating a raw onion before talking to somebody so that you get that cartoony cloud spelling Halitosis when you breath out, having a ziplocked bag with a unwashed shirt for that unmistakable body odor cologne and if all else fails the nuclear option of fart spray. Most people aren't paid enough to deal with all that so will leave you be.
That is wild and I can totally see how it might work, as well. :-)
In Through the Eyes of the Thief Deviant talked about the hobo disguise as well. Bonus points for using the back of the cardboard sign or whatever to write down relevant info.
It's 2021. Fake a cough and hide it poorly. Wheeze a little afterwards.
Even if you're wearing a mask people won't want to be around you.
@@p_serdiuk Wow! Bonus points indeed!!
Tech support for an access control manufacturer here. Can confirm "bit of wire" is one of the most useful tools a field tech can have when troubleshooting
Glad to know that I am not telling lies. :-)
the four dislikes are from salesmen trying to sell you non-pelican cases. :D
hey if I had a choice Id own a TARDIS, just for storage
The most interesting takeaway from this video for me was learning that yellow or mixed hi viz predominates in the US. In the UK, yellow is falling out of favour (in our industries, anyway) over orange due to its propensity to attract bugs in the summer.
Former construction worker here, the thing about hi-vis is that the orange was traditionally used during daylight work and the yellow at night (specifically for road crews). The company I worked for issued the two-tone vests which seems to be the way a lot of companies went. You still see orange (which I always preferred to be honest) in utility work and warehousing.
Also your bit about the amber strobe light is absolutely 100% correct. We had them on our trucks and I even have one on my personal truck from jobs where I occasionally drove my own vehicle, and we called the "do whatever the fuck you want lights." We'd block traffic to move equipment into place, we'd close off certain access routes, we even did this one job in a parking lot where we didn't want people parking in certain areas so we'd patrol around with our lights on asking if they could park elsewhere. With hi-vis, a metal storage clipboard, and an amber strobe on your vehicle, you can get just about anywhere. I do admire your attention to detail to play the part, even with the hardhat. You want that shit as dirty as you can get it. Throw it on the ground a few times to get some gouges in the plastic as well. There's only two people with a clean hard hat on any given jobsite, the new guy and management. Same thing with your hi-vis vest.
I’ve bought that exact dremel, glad I’m not crazy for thinking the batteries drained way too quickly. Coincidentally, I also bought the same plug-in dremel to replace the battery powered one, and it’s been great.
Some things lend themselves better to battery power than other things. It's certainly an easy mistake to make!
Consumer grade batteries, even expensive ones _(that wouldn't ever come with a Dremmel)_ just aren't good enough to power something like a rotary tool for even a short length of time. Todays batteries just aren't really as _'advanced'_ as the rest of our technology.
The next jump in battery technology will hopefully be something incredible!
@@bensons999 so many of us have gone down this path, it would seem. :-) Great minds think alike... or are mistaken alike. :-)
If you use a rotary tool on a regular basis, I've found it better to use an off-brand rotary tool for day to day work, them save the branded Dremel tool for use in jigs or adapters, like router/drill press adapters.
@@feudiable The advice I got about cordless angle grinders is don't use a battery that's less then 5A/hrs
Always enjoy the talks, but getting a peek inside the actual toolkit was fun. Might be difficult to do due to confidentiality, convenience, etc., but it would be amazing to see some of these items in use on an actual job sometime.
We do our best to document when things are going well and sanitize footage in order to be able to share it later. But, yes, you're right that nothing quite takes the place of being right there on a job when it's all going down.
@@DeviantOllam Maybe a mock job, penetrating something with nothing to hide, like a place about to shut down permanently, making the revelations worthless to adversaries. For example a plant or secure facility being shut down in favor of a better one. With the added precaution of not sharing procedures or other safety with the continuing facilities.
I thought this looked familiar. One thing to add this time: Get you a pair or three of Knipex Pliers Wrenches. You'll never, ever, EVER reach for a crescent wrench again, and probably not for channel locks, either! They're a bit pricey (at least to me) at around 50 bucks a pop, but... I don't regret them. The two I bought paid for themselves each on the first use, and if you buy a set they come with a nice heavy bag to toss them in. You can also get an assortment of jaw protectors made specifically for them, which go nice in that bag, too.
Dev,
In the Army we called that roll up foam pad a puss pad, because it protects your puss from the cold ground... puss being us guys using it when it's cold. Thanks for the talk, appreciate you taking the time to do that.
When you threw the dremel and said this can f right off 😂
If you want something that isn't going to make the terrible whirring noise of the Dremels, I can recommend the Proxxon rotary tools. They are super-duper quiet and can go a lot slower than my experience with Dremels. No ear-pro needed. (Idea stolen from Adam Savage)
Oh, nice. I will have to check on them.
Think this the same brand that Adam savage swears by as well.
It could be possible to use a USB Power Delivery board and a PD powerbank to power them in the field as well, they accept 12V and normally need an external PSU.
"The 80s are back baby" [Cue me, born in 2003, looking at that exact CD case in my room]
I don't use the CDs or DVDs in it, but it's there.
I use rewritable CDs and DVDs regularly. Pretty useful when setting up PCs / booting live media and not wanting to deal with weird issues that installer images may or may not have on USB flash drives or hard drives.
I have one with Wii games on it.
Obviously not burned games..
@@bodgemaster7946 hey! Might want to look into using Ventoy, it doesn't work with every os iso, but it might just work good enough to be useful for you.
@@bodgemaster7946 Hmm, I've only installed common Linux distros. I've never had any issues with USB thumbdrives.
@@remty516 same I have two for wii games and two for xbox360 games
The equivalent to a "Traveler's Hook" can be found in a (4-pc)
"mini hook & pick set" for $1.79
Item #3706 at Harbor Freight.
So many non destructive entry tools can be acquired or easily fabricated from items found at H.F. . . .
That actually works well & lasts.
What an ending. "Lie constantly" as his wife is next to him. :-)
Have you thought of replacing your magnets with a Magswitch or two? They allow you to turn on and off the magnetic field. That way you can have high strength magnets, 400+ lbs, but withouts the risks of it attaching permanently to a steel door.
They are also available in multiple sizes, even one designed for keychains. I used the 165 pound pull one to open a few cheep electronic safes, excuse me, residential security containers. Look for MagJig for some of MagSwitch’s smaller pocket size magnets.
@@psxbleem Woodworkers use those to make jigs etc. Very easy to hit the switch to get the jig to stick firmly to a cast iron or steel table on a table saw, drill press, etc.
@@jayschafer1760 yup, used magswitch’s stuff a lot in wood working. Very good products.
I used to use kevlar junkyard gloves for cut resistance, but you're right, they don't protect against pokes. But Hexarmor does. You should look into it.
Also, use the OBD port for your dash cam power. It has both ignition relay controlled as well as constant power pins available.
I remember seening this one before. I'm still watching it again, though. Lot's of great insights.
Has the change up with companies switching to allow more employees to work (mostly) also changed some of your approaches to doing physical pen testing? Has this made things harder/easier for you?
That is a very cool question and the genuine answer is we can't yet be certain. During the pandemic much of our onsite work either reduced or was modified in execution.
In a previous life, my job required me to get into places I was not necessarily supposed to be. A polo shirt, a grim expression, and, most importantly, a metal clipboard was my ticket in again and again. I always looked like I was supposed to be there, and was grouchy that I had to be there.
And gaming, as in pen and paper RPG's, can be a great way to learn the sort of on-the-spot exposition needed to create details on the fly for social engineering.
In the UK, Ofcom has a list of telephone numbers for drama use, they are basically the same as 555 numbers in the states and will never connect ever. Memorise them, or your country's equivalent, and use them to lie to people that want your phone number, then you can practice lying without bothering a real person.
Brilliant DNN overlay graphics!
I'm all about that OBS fun. That was part of the live stream that we superimposed for the broadcast at the time on zoom. Not edited in post just for this video or anything. 😁👍
"Lying is a skill like any other, and if you want to maintain a level of excellence you have to practice constantly." - Elim Garak
"Even the lies?"
"ESPECIALLY the lies."
"late model luminas" i cracked up at that
Nice wall sconces. 😉 Drives me cray-cray you're giving the _laptop-class_ & the Dubbaya generation all my favorite slippery jim degriz skills.
Honestly, I'm not sure what I enjoy more. The content you teach and share or just watching you and your lady be yourselves. Way cool! (And yea! Tarah is her own kind of amazing.) Keep at it!
"Keith Coffman, manager". I LOLed.
You and the Ms. stay safe too, Dev!😉❤
And what an excellent video/talk concept. Love your regular EDC etc. ones, this is bound to be exciting!😁
Thank you so much and we will and I appreciate that. :-)
I really enjoyed your talks over the years; but the video here is the best ever... Keep up the great work!
Like all your demos, watched it twice, once on the other link aswell.
Fantastic and quite comprehensive.
Cool kits Deviant. Gives me some ideas for pieces to fill out my residential/commerical service kit with.
Always love to see the Pak-a-punches too. Such cool and handy devices. Still looking forward to hearing more about your pak-related secret project! 😏
Driving to Midland today. So glad I downloaded this to listen. You rock. Thanks for letting us in your cases today.
Hey, thanks for watching and learning! :-)
At 38 minutes in, what you encountered is called Retained Accessory Power (RAP) in vehicles.
That's so just to know the proper term!
@@DeviantOllam having the proper terminology is a good time saver when you are searching for information.
Thanks for sharing your knowledge and experience with the world. I would love to meet you sometime and discuss your business with relationships to the automotive industry.
Always love your work man. And the Wera; think I've got the 28, it's absolutely awesome. Changed my life!
Always love to hear when people who have good stuff like that stuff. :-)
FYI, if you think a good battery dremel would be useful, milwaukee makes a 12v one that is excellent., although about twice the size of the one you threw out. Put one of the 4 or 6ah batteries in it and it runs for a really long time (although it can hit a thermal shutdown if you work it really hard). Their 12v soldering iron is surprisingly good too, and uses the same batteries.
Well this was a fun one, thanks as always for the humor and information!
You're most welcome And I'm so glad you enjoyed it 👍
Absolutely brilliant. Greetings from Belgium.
Fascinating look at what you do for a living.
how to learn social engineering: Play TTT or among us with your friends
i mean your not wrong but what if i dont have friends
@@edfl497 aquire some friends and instantly betray them
@@edfl497 Lie to yourself until you believe you have some.
Thank you for cross posting I just watched your elevator hack again, enjoyable as always
"Fabri-cobble" Love it!
Ol' Uncle Bumblefu*k's influence spreads far and wide. I particularly enjoyed the subtle "Saskatchewan nut rounder" reference :-D
@@MultiVogon absolutely, brother. The bumblefuckery must continue!
@@MultiVogon as opposed to the thumb detecting nut fucker which is a different tool.
Great video. Cool to see all of your gear like this. I would love to see a video covering more of the social engineering side of things.
If you want a really good cordless rotary tool like that dremel, but actually usable check out the milwaukee m12 rotary tool. Slap a 4.0 battery on that thing and it'll run like a scalded cat.
Scaling fences on a budget, get a few rope hooks and a bit of sturdy tube or plastic and some rope. Thread the rope through the tubing and tie it together at the top with the rope hook creating a drop like triangular shape. Move it along as you climb.
“Lie constantly” great advice Dev 😂
22:10 When I was a boy we had a cassette tape briefcase for road trips
"And that's my advice: Lie constantly."
Bro, if you don't take a moment now and again to reflect on how lucky of a man you are to have YOUR wife... I've never seen her, mind. No idea who she is, what she does, wouldn't know her from Eve if I talked to her in the grocery checkout line. But to have a woman that's not only down with our particular brand of sickness, but who understands and supports you (and is willing to white-knuckle through some of the hinkier activities certain gigs demand?)... that there's a keeper.
Love your work m'man. Big fan.
when he said "lets grab the other pelican case"... I got so happy, you don't even know :D
The audio was a little choppy which is rare, your channel is always top notch. I even switched earbuds.
Love the talk great content thx!
Nice candle/light holders at your wall.
The Milwaukee rotary tool is great. Dremel just sucks at batteries.
So it would seem. :-)
Good one
For smaller groupings of items, I love to use Shure mic pouches like the 95A2313 or 95B2313 which can be found used in large lots on eBay. These are especially great in backpacks. Other generic ones would be fine too.
Yes, I really like the audiotechnica ones. Any old money pouch will do, preferably one with a zipper.
ahaha, the lock bypass tool or whatever he called it at around 24:15 is the exact same thing I used to have to help tighten the laces on my hockey skates when I was younger.
Brilliant ! Greetings from Belgium :)
dude at my work i see and Otis elevator van like every week and every time i see it i just think about your videos
service belt with multiple key backs make a solid utility belt.
might I recommend the Milwaukee m12 Fuel Electric die grinder? You can probably modify a collet to accept dremmel bits but also it's heavier duty, had larger batteries, and is amazing for cutting and grinding. Almost completely replaced my need for dremels, and when I do need one I usually use a foredom flex shaft.
Good to see that you still have the TrioVing bumpkey! :-D
Always! And I remember where I got it, too! ;-D
@@DeviantOllam
A place I worked had multiple colour HiVis on site, one colour was general employees, one was supervisors and management, and another colour for off-site contractors. I think there was a fourth that was a combo for temps.
Oh, I was also curious about that messenger bag at 23 minutes in? I've been looking for a bag like that for my EDC.
@@TheInsaneTD The brand is Maxpedition. The line is Versipack. I believe that one is the Jumbo: www.maxpedition.com/products/jumbo-versipack?variant=39172607569
@@djericjames Awesome! Thank you.
Step 1: Hoard lanyards, keys, tools, wire, elevator company shirts.
Step 2: Break into secure facilities, legally
Step 3: Profit
Wonderful occupation. Thanks for the insights!
Aww I've seen this one! Heck, guess a review is in order
I bought a battery powered "Dremel" (aka not Dremel, but Parkside) from Lidl. It's way way more powerful than the crappy battery Dremel, and it lasts a significant amount of time on just the battery.
As soon as I saw the CD Case...I knew it was a Case Logic case...I admonished myself for know it so quickly...They really are great for storing things. I use a bigger one for my Pineapple and other mid-sized "tools"
Make sure you switch the suspension on the hard hat, construction workers almost never wear the brim in the front lol
thanks deviant !
You should also get different colors of hardhats as the color can mean different things ( White hats are generally only worn by management and if you are trying to pass as a worker you'll stand out like a sore thumb)
good stuff
You mentioned go pros, then reaching out & touching something with a camera.
An idea you might've not seen comes from torey pines logic/sector optics. They make a 20x telephoto zoom case for the gopros.
25:49 isn't that the pick that Bosnian Bill and LPL designed?
Yes it is. He's mentioning that indirectly.
T
Your ebook which I downloaded, is great...
Pen testing is way outside my usual interests, but ideas for cyberpunk games is always fun.
Fun random bit with the beating up hard hats advice, this is advice given even to legit job site workers, because nothing will get you hazed faster than showing up on a job site with a shiny new hat. Doesn't matter if you have to tether that thing to the bumper of your truck on the way to the job site, you want it to be beat up, or you will have a bad day.
I can believe it. What kind of jobs have you worked and what industries, may I ask?
@@DeviantOllam Me personally, I haven't, I'm just a union brat. My father has spent his career as an union electrician, mostly working larger jobs grocery stores airfields, a little bit of everything, he's currently on a highschool football field build.
i was a bricklayer for 20 years and yes turn up onsite with a new hardhat you would get half bricks thrown at your head all day along with trowels full of mud in your new boots
I can agree that down in Australia this is also 100% true, people think you're an apprentice. AND you lose all of your different induction stickers from the other sites you've been on, which are the equivalent of those campaign ribbons the military wear. You'll look at a guy's hat and end up in a conversation about a nightmare of a job you were both on a couple of years ago, even though you never met.
And now you've each got someone in one of the other trades who's a mate, which is helpful if they are one of your trades traditional rivals ... Electricians vs Gyprockers, Plumbers vs Bricklayers, HVAC vs the roofers, and EVERYONE vs the guys doing the internal T-bar ceilings.
That tiny little LED -> POM fiber adapter is just what I need for a project, here's hoping someone put it on thingiverse.
Flying with magnets always gets me into further scrutiny: Last time I flew with a strong magnet, they took it to the back to check it. I think they probably use a mass spectrometer on it.
Being light an athletic. I just walk up chain link like it was a 30 digree incline. Might slow me slightly but chain link alone is not a barrier to me.
Best thing I heard about learning this stuff is "you don't learn to hack, you hack to learn"
love it great video though i drank my movie time wine good thing i have some spare (always prepared)
Re orange HiVis, oddly enough UK/Aus railway's have a hard on for the stuff (Uk more so with full orange overalls). To the point it's generally a requirment to be on site.
I think community acting classes could be a good way to practice social engineering, with some pressure added by being judged (even if it is only in your own head).
Oh, yeah that makes a lot of sense. I've been told that improv is also a great discipline for people to learn. I would agree with that.
I thoroughly enjoyed watching this video. Question: where do you keep your gear while out on the job? Do you leave these at the hotel and only take whatever you know you'll use (advanced planning) or do you store them in the trunk of a vehicle that you have access to at all times? Basically, how do you plan your logistics?
Cool!
42:50 maybe break in your Hi-Viz vests, new vests always stand out, from a construction perspective
I’m a late watcher lol thinking you have stole my stuff 😂😂great video/brief overview 👍🏻
36:40 I use this for springs on a trampoline.
great video! i will work on my lying i so i get good at it ! lol
Dang I've been in retail for far too long. I wish I knew how to get into this occupation. It's so fascinating! What kind of person or company would I even contact about getting started in this? Is this field a "have to know someone" field? How do I begin? Thanks!
Saskatchewan nut rounder?? That's a new one.
The Milwaukee m12 "dremel" style rotary tool is equivalent power to corded and even slimmer than the larger corded dremels 👍 also the Milwaukee m12 right angle die grinder with a 3"- 4 1/2" cutoff wheel is basically like a pocket size angle grinder 🤯 definitely not the same power as an 18/20 volt angle grinder, but will easily cut hardened steel locks/chains/latches, also you can do some incredible things with a quality 1/4"- 3/8" diameter rounded end carbide bit in that baby 😉 that setup basically becomes a pocket size equivalent to a drill with high quality cobalt/titanium coated bits for boring out cylinders or anything else that needs hacking, it will quickly eat brass, mild steel, and even thin stainless or hardened steel pins (above mild steel expect to trash that $40 carbide burr when you're finished 😒) you can literally route out the entire lock from a standard residential or janky commercial steel door 🤣 Thankfully common criminals don't invest in quality cordless tools... for now 🙄
Also telescoping aluminum extension ladders are now becoming lighter and smaller 👍 (not any cheaper though) a 36" tall x 4" thick ladder will extend to 16'
I like the social engineering case. Also the budwiser Hat.
Got to look like a local if you are pretending to be a local walking through the fields near a rural power distribution substation. :-)
Wow i just read up on the coalfire situation. Dang, the moment they said they where charging them with a felony I was thinking rip clearances. Its crazy how local politics can really mess stuff up. Be safe out there!
It wasn't about local politics. I lived in Dallas County when this happened. The State of Iowa hired them to pen test buildings that were not owned by the state of Iowa, nor did they have the legal authority to authorize those pen tests.
The State literally hired a company to B&E someone else's property. I for one was glad my Sheriff made sure the State understood they screwed up by overstepping their authority. Unfortunate that the Coalfire employees were caught in the middle, but glad it was worked out and charges eventually dropped.
That camera bag kit is 100% my man purse. Unfortunately, mine is not loaded with pen tools, just everyday things that could come in handy (pens, phone charger, first aid, Leatherman, etc.).
The better battery powered dremel is pretty good. I have the Bosch branded one (Bosch owns Dremel)
A set of fence climbers would be the ideal way to not tear open all my pairs of jeans.
I know a number of photographers and videographers who, in the past, checked their bags with firearms specifically because they can use their own locks and keep the TSOs away from their valuables.
Haven't travelled for a while; this still viable? I've heard the TSA has changed some of the lock requirements for firearms.
FWIW a lot of them will just toss a $40 polymer lower into a camera case. It's a firearm, after all.
The Milwaukee 12v rotary tool is quite good, but its a lot bigger than that POS Dremel.
You can get smaller diameter Endoscopes that use Wi-Fi connectivity to your mobile device, and with a 50ft flexible neck.