Master Splinter’s Initial Physical Access Dojo
Presents a comic-style narrative of a complex red team engagement achieving physical datacenter access entirely through social engineering.
Summary
Narrative Breakdown of Physical Red Teaming
Executing complex physical intrusions without relying on lockpicking or exploit kits requires structured social engineering tradecraft and precise operational execution.
Pretexting, Reconnaissance, and Role Allocation
From initial client scoping to on-site surveillance, specialized social engineering teams coordinate personas, deceptive pretexts, and intelligence gathering.
Infiltrating Corporate Datacenters
Case studies demonstrate gaining physical entry into high-security corporate facilities and server rooms within three weeks by leveraging psychological manipulation and trust heuristics.
Methodological Lessons for Human Layer Defense
Building resilience against social engineering demands continuous staff training, strict visitor verification protocols, and reducing single points of human failure.
Related talks
Daniel Isler
Applying photojournalism principles and invisible theater to seize decisive moments in physical social engineering.
Main Stage·21 min
Russell Phillips
Details physical red team tradecraft for analyzing, cloning, and counterfeiting event security badges, holograms, and laminated credentials.
War Stories·47 min
Jayson E. Street
Demonstrates how generative AI tools enhance phishing and vishing operations and outlines strategies to build organizational situational awareness.