

Ep 42: Mini-Stories: Vol 2
15 snips Jul 9, 2019
Dave Kennedy, a prominent figure in InfoSec and founder of TrustedSec, shares the nerve-wracking tale of a penetration test gone wrong at a datacenter. Dan Tentler, from Phobos Group, recounts an outrageous client engagement filled with unexpected twists. The conversation dives into the intricacies of hacking methodologies, the significance of security assessments, and the challenges of managing emerging threats, offering a thrilling glimpse into the world of cybersecurity and the real-life stakes involved.
AI Snips
Chapters
Transcript
Episode notes
Early Hacking Days
- Dave Kennedy's interest in hacking began with programming MUDs (multi-user dungeons), leading him to learn C and C++.
- He joined the Marines, specializing in signals intelligence, which furthered his hacking skills.
Retail Store Heist
- During a penetration test, Dave Kennedy and his team stole merchandise, iPads, and even a cash register from a retail store.
- They also gained access to the store's network and back-end infrastructure.
Social Engineering and Data Center Breach
- Dave Kennedy successfully social-engineered his way into a corporate office by piggybacking and impersonating an IT employee.
- However, his attempt to access the data center was thwarted when he impersonated someone the data center employee knew personally.