Wow this blew up. Any ideas for other movies/shows that depict physical pentesting? Darknet Diaries (podcast) has some great stories about this kind of thing. (Subscribe!)
well, it might not be a very good movie in that regards, but "Who am I?" might have something for that. It's more about social hacking/ social engineering. "Mr. Robot" also has a good scene where Elliot breaks into the servervault by posing as a tech millionaire.
Not actual pentesting but Girl With the Dragon Tattoo sort of has that but I don't know if pentesting was the motive, Escape Plan has sort of a reverse pentesting of the prison in the first scene. Stallone gives an assessment similar to Mike's but with much more cordiality.
Why does everyone always suggest these stupid spin off shows. BCS was a spin off of Jimmy, Mike, and the Salamancas, and they were almost equally treated. Mikes entire story has been told already.
Eh... I don't know about the ethical part given his kill count but dude is effing surgical at anything he applies himself to. Would definitely be a valuable member of any red, or blue team op.
I love how methodical and cautious Mike is towards every act he performs. He understands exactly what he's doing and does not act without exploring all potential outcomes of those acts. Lydia and Walt not acting rationally were his undoing. Johnathan Banks got to do some amazing work with Mike. There is a reason Mike and Gus are my favorites.
@@andreasberger4 how about a prequel on mikes life as a cop back when matt was still in highschool . With a good young actor and all . And we can explore what he had to go through to survive in that h3ll hole of a police department he was in and how he became a dirty cop . There's potential there for sure .
Imagine a reality show where people contact the corporate for a place of business and do these tests and film themselves doing them with hidden cams. I'd watch the f outta that.
I absolutely love this scene because its realistic, you can watch actual pentest videos and this isn't far off how it actually goes except IRL its even worse. People have gotten into all kinds of places by just wearing a high vis jacket and looking like they belong.
as Security I can confirm. No one wants to be inconvenienced, management will force us to be less and less intrusive to make things easier on them, then complain when they fail reviews like these. Construction sites are the worst for this but I've dealt with it almost everywhere.
You don't even have to do that. Guy walked onto a high security US base and no one called him out till a single airman wondered. Hey that guy out of uniform in mickey mouse ears. Why is he on a plane?
i hated it when people with chronic back pain told me how to do things. no one asks first about your fitness, your back or your routines. trying to get me to do the same thing that killed your back. should be asking the only guy without a back ache what to do. smelly, poorly sized belts are helping nobody. a real mobility and strengthening routine and actually stretching before work instead of pretending to and taking enough time to stretch and eating well and being active outside of work saves backs.
ill say it a million times. Mike is "yes country for old men." he's a comic superhero whose power is being old. he's cool and powerful not in spite of, but owing to his age and experience.
It is kind of weird that he can do everything, but I just may be Odette to being a millennial myself, and not having been taught a lot of practical skills, but I do think that by better call Saul. He is a ridiculous, super practical superhero who can do construction assassinations, sniping, security, testing policework basically everything in the crime genre.
@@MaLLinz289 i think that's really a part of his character. he's from a bygone age where people had to work multiple different jobs in different fields. where poor workers were fired; where smart workers were promoted and given more direction, which helped develop their skills. he seems almost alien in his ability to do anything, because we're not used to having skills outside of our subset of individual knowledge. my grandfather was a railroad worker, but he could pull apart a small watch and put it back together as easily as he could an engine. he knew how to dismember an entire pig, a vocabulary that is still, to me, bar none, (when i acted up he would make me write words out of the dictionary or encyclopedia) was as good with a sewing machine as my grandmother was, and had a red room where he developed family photos. there's plenty more he was capable of, and he never complained.. maybe drank a bit excessively sometimes. . but tried his best, to teach us the value of hard work and knowledge. i've tried over the years to amass a ton of different skills in all kinds of areas, but it's hard.. we get pigeonholed into one job for our entire lives, and on the side we have a little hobby we enjoy. a lot of the younger generations are pretty useless unless it comes to working a computer, but that's part of the age we're in.
@@MaLLinz289 Well he was a Marine Sniper in Vietnam and a cop for like 20 years, that'll give you more than enough insight into how people think and how to survive hostile environments.
@@Gannoh I've met veterans, people who've been in some form of the military or police for decades and they're nowhere near as efficient as Mike. ofc he's a fictional character but his experience alone doesn't make him special, its careful observation and intelligence as well.
The title No Country For Old Men isn't referring to old men not being able to keep up in the world, its referring to their misremembering the past as better than the present when in reality the world has always had its problems. Their imaginary perfect country doesn't exist, thus the title No Country for Old Men.
Mike used psychology perfectly. As long as you walk with the authority and confidence of someone who belongs there, nobody is going to question you unless they check twice.
In his case he actually has a good reason to ask for the manager. It's not Karen behavior if you have proven all day long that someone is clearly not doing their job.
"Hi corporate? Yes. Did you send some security consultant to my plant?" = Unsure if someone else did = "Well that all depends...what happened?" "He's discussing all of these issues with the plant, but I have no idea who he is." ".....what kind of issues?" "......you know what? I got this taken care of. Thank you." "Wait I want to know what securit-" =hung up=
I thought his passion was pimento cheese sandwiches, the "caviar of the south". He even mentions that there is a correct amount to use in his instructions video.
It's all he has. He lost his son. Only sees his granddaughter on occasion. His home is small and boring. His work is his life. I've worked with plenty of people who have no life outside of their job.
I accidentally pen tested a hospital once. Big hospital - went in for blood tests. Had no clue where to go. So I just followed the signs saying "blood" something. Turns out that the guy I was walking behind who was kind enough to hold the door for me, was going into a high security blood laboratory. I just followed him in there. Confused I sat down in what looked like a waiting room. When a woman asked me who I was and what I was doing I told her, and first she got angry asking how I got in there, but then she turned nice and politely showed me where I was supposed to have gone. Maybe the shift in mood was because she didn't want any trouble in that I had literally just walked into a high sec area. Hospital architects. Please design big hospitals less like giant labyrinths please.
One time I snuck a pocket knife past security for a concert by complete accident. It was in my pocket. They had metal detectors and somehow didn't catch it lol
I don't know that I'd call that a "pen test." Hospital security is trivially simple to penetrate. You can get pretty much anywhere by following someone through a secured door. Employees will tell you the codes to combination-locked doors if you ask -- I mean, as long as there's not, like, morphine or something on the other side.
In many cases, hospitals that have been around for a long time are built in stages, with each stage designed without much forethought about the need for future stages a decade down the road
The yellow vest is the best tool there is for physical pen testing, put one on and walk like you are doing something and you are invisible, ignored by all.
A friend's brother used to do that at a K-Mart in town back in the mid 90's. He'd wear a blaze orange vest from his job doing road construction, a hard hat, and a clipboard, and just walk into the back room. Grab whatever he could easily carry, leave out the employee exit in the rear and into back lot where my friend was waiting with the car.
You should see how people pilfir construction sites, we had a building in cleveland get ransacked once. So we have these "job boxes" whoch are essentially giant metal coffins on wheels we keep our tools locked up in. Someone waltzed into the job site, broke all the locks, pulled a uhaul up to the entrance and stole a total of 15 boxes with two trips. The dude was waved off as a company sending their guy in to pick up tools, and walked away with probably $100-200k in tools, let alone the fact that each job box pribably costs ~$500-800 each
@@Dilllonm That's about the extent of it. If you it at like 8am on a weekend, you can get in and out and nobody will bother you. The risk is in being picked up on CCTV or something, but since nowadays people walking around with masks on is normal (and in many cases, enforced), it's never been easier.
4:58-5:03 I love how the guy’s face completely falls into terror as soon as Mike says he needs to talk to the manager. Mf had the fear of god put into him lmao.
@@grez8379 I don’t see laws stopping people from doing prohibited things, so yes, I would abolish even those that have something to do with murder. I think it is necessary to find the root cause of why people murder other people or cause disturbances to them in other ways. If one wants to commit a crime, be it a murder or domestic abuse, then they would find a way do that, and even if they are caught (unfortunately, many people are still afraid to turn their abusive partners in due to various reasons), then their victim won’t rise from the dead or somehow forget the abuse. Besides, awful conditions in prison don’t really make one less willing to commit crimes again and again, partly due to additional traumatisation they experience while incarcerated. This has to be solved in other ways than punishing or even judging anti-social behaviour; I think it may be helpful to look into why this particular person is hungry for violence, why do they find it necessary to beat their spouse or exploit them mentally and why does someone else refuse to address their colleague in a certain manner. Punishing and judging just helps the endless circle of pain go, and I believe there could be some ways to make the world better than ‘bombing for peace’, figuratively speaking.
@@mydpRu most governments are skewed towards supporting the wealthy through lobbying or direct donations to political parties. Just saying oh well that's life is a bit defeatist though. What bias could a government have to corrupt its intentions when telling people to not murder?
Mike shows something very important here. He has the advantage of age and life experience. Just knowing a lot of things, having experienced a lot of scenarios, and being a quick thinker, Mike manages to be on top of most situations.
And is why the western world especially here in the UK is in such a mess, nothing works and no one knows their job, because once you get to 45 and have such experience you rightly deserve the pay and seniority for putting your time in. But, some new 30-year-old ex Uni appointed manager see's you as a threat and you find you are no longer required, plus they can get a much younger person to do your job at half the rate. This is what happened to me effectively and I often come across guys my age where exactly the same happened to them. The cultural 'youth' movement that I as a baby boomer so much promoted and thought would be a good idea to get rid of, that thousands of years of mankind having a structure where age, wisdom and guidance was respected, we just swept away and lo and behold, being young we had no concept of the 'consequences' in doing so. As such, your very valid and intelligent point continues to be the case ie being young is worship, being old is not, and why this scene is plausible I often on the phone, dealing with banks, administrators especially young doctors, in no way as Mike does, but by acting in a very confident manner (i.e. ex military, deputy head, senior IT Trainer to CEOs) can take control of the situation to get what I want or let rip with how bad they are.
Although, to be fair, they really didn't tell Mike what his real job actually entailed. "You're hired." "Great, what position?" "I don't know. Eh, just show up and get to work."
There wasn’t meant to be any real job. It’s only supposed to exist on-paper as a way for Mike to launder the money he stole from Hector. Lydia even gets angry enough at him showing up (plus intending to do the same at other facilities) that Gus has to strongarm on his behalf
@@Itosalix It was understood. Mike just had a differing opinion on the correct way to accomplish it. He tells them by showing up and making a scene he made the "no-show/on-paper" job more legit so that there would be proof in case anyone looked into it. He always tries to cover his bases.
@@NeoStoicism There's also the added benefit of actually improving security, it's not like they didn't have a few mexican cartels sniffing around them.
Lydia got mad at Mike for doing this, which sounds stupid at first: who would object to their company's security holes being probed and fixed? Well, the answer is, someone who makes use of at least some of those security holes. Mike doesn't know all the schemes Lydia is running, and he probably threw a wrench into some of them. A Madrigal where people are checking badges carefully all the time is a Madrigal where it's difficult to get away with schemes.
It's so damn good. It takes very talented writers to make scenes like this work. It's kinda like the episode "Fly" in Breaking Bad. Kinda pointless as far as the story goes as a whole but it somehow works so damn well.
1:36 I love the argument these two are having, and Mike's answer to it. He's 100% right, there is a reason that fighting is broken into weight classes. A welterweight against a heavyweight, the heavyweight wins 10 times outta 10. Cause there's a lot more muscle on that frame.
Bruce Lee actually did own a gun for protection, simply because fights have no rules and while he recognized his skill as a martial artist, size and weapons are massive factors that require their own responses. So yeah, Bruce Lee probably has a gun.
My father did security checks for military bases, basically looking at it from the other side and figuring where the flaws were. Went all around the world and shared a few of the stories. My favorite was the one with lines of defense and bunkers in case of attack . . . with no walkie talkies or any lines of communication between the bunkers.
I have literally walked onto a movie set with the people who work behind the scenes, no word or check of any sort. Sat with them and watched business, walked around the entire set. Some big old house in the old money part of town. I'm from Winnipeg, we film movies there. Anyways, everyone I met thought I was working there, until I asked one dude for a smoke and a lighter, lit it up in front of them all looking dumbfounded, and said "I dont even work here" and left LOL. Fuckin hilarious.
@@thebadaids The fact that you needed to type that, and the fact you posted your profile pic with your biceps in front of your shirted chest, tells me you arent really like that. Not to mention your poor hair genetics. Stop bruh, before you embarrass yourself further.
I work at a lot of places just like this every day and man it's true how easy it would be to get in these warehouses. Even the super fancy ones like unfi or home Depot. Amazon ones have crazy security but if you have a badge anywhere then you're clear
Getting into a amazon facility is definitely the hardest part but yeah as long as you got a high visibility no one would stop you probably ever out on the floor
Interesting. When that happened at the AZDC I worked at, the guy was stopped at the gate (by security), caught sneaking onto the shipping dock (by me), and reported as suspicious in the parking lot (by a vendor). He never got into the warehouse for more than 3 minutes. Jackass told me he was with corporate..... Really? Then why are you sneaking in through the dock? Yea... escorted him to security, who kicked him out.
@@davidbeppler3032 I think that's a good example of someone doing it badly though. I mean if you have a legit stolen badge you can just walk in, but other than that it's all about attitude. You don't behave suspiciously, you go in with confidence acting like you're supposed to be there and you'll get in anywhere.
2 things Mike did wrong: He didn't stop at the intersection of the main aisle/side aisles and honk before crossing. The second thing was not turning on a dock light into the trailer he was inspecting.
5:29 In the scene where Mike Rants at the employee, you can see the word "Madrigal" on the back wall is being covered by the pillar so it just says "MAD". This is is a subtle clue that Mike is Mad. Bravo Vince
In an earlier episode, Lydia’s office is next to the windows with the MADRIGAL logo on it. Her windows have the three letters “GAL” This subtly alludes to the fact that Lydia is a woman.
as someone who works in security at a storage+ datacenter, i can tell you, if you call in that your badge door pass has been lost, they will right away temporarily dissable the pass, then you will recive a temporary pass like you see the last guy have in the storage. this will also assign your id to that temp pass. reason for this is so people like mike wont be able to access doors no problems like shown here. especially when a temp pass has been handed out.
@tarael86 They may be inside, but they are gonna have a hell of a time getting into another room. At companies that take sec seriously, every room is badge protected. People may not open protected rooms for each other, one swipe one entry, if they catch you, you'll be in hot water. Security does regular rounds, and it is very unlikely you'd get in in the first place. Disks and sensitive data are shredded in camera view with a witness, and it is logged. We did have one vendor take a disk home once. He has been banned from our datacenters permanently, though he did return the disk.
@@tarael86 though they would get into the building, the problem is getting out once the call is done, as i said, the badge will be immidiently deactivated. so that means you are stuck in a building , and the only way to get out is to follow the emergency escape route that is meant for fires. if you pull that, every door that you pass through will be sound the alarm and there will be some form of security sitting at a desk to look at the cameras and dispatch security. if some1 got a hold of your badge pass and they used it without you knowing , you wont get into trubble , but if you borrowed it for your coworker to get something , you will likly be banned from ever entering the building again
If you know what you're doing anymore you wouldn't need a pass. How hard is it to just copy that magnetic junk anymore? Have an ID that looks enough like you and anywhere without trained security will ignore you.
I brought this up awhile ago, how this was essentially Social Engineering at its absolute highest and most pure form. He was a master of the craft. A lot of my fellow students don't think the physical and psychological pentesting is important but I know better, and it's also what interests me the most.
@@NaptownClassic how in the world is physical pen testing "under the umbrella" of social engineer pen testing? Social engineering is all about playing the man and manipulating them into giving you something willingly by gaining their trust or making them believe you're something you're not. He stole someone's badge, broke it, told people to wear safety equipment, made some other observations and then just point blank told everyone what the issues were. He didn't social engineer anybody or into anything, and surely not in the "highest and most pure form"
I once went to a military base in the morning for an interview. Nobody guarded the entrance so I just went in. Turns out I was at the wrong military base. Then I got lost and started walking around looking for the exit, even went into a locker room and casually greeted some guys. I was 18.
This is one of the best scenes in entire show even with assumedly no real purpose or context, until later when Gus picks up on this behaviour and has Mike lead the construction project for the Laboratory.
he'll never admit it but Mike was having more fun in that buggy than Jesse was with the inflatable hazmat suit, he was doing a little 60's jig in his imagination
Clipboard + "where's your server room?" is enough to get access to the crown jewels in many cases. People don't like confrontation. These days, just drop a handful of USB sticks with malware installed on them outside an office. You're pretty much guaranteed that someone will pick one up and plug it into an office PC.
The manager's reaction to having all the points of improvement handed to him on a silver platter was to question the authority of the person giving him the information. Sadly this is very realistic. If over night all managers magically got competent I have no doubt we could make a 3 day work week a reality, without any loss in gdp compared to today.
True security is inconvenient, slows things down, and costs money. In the real world as well as on the computer. Nobody wants that, but at the same time wants to be safe. That contradicts itself. In the end, cheap, fast and convenient always wins over safety.
Having a high vis is one thing but I love the clipboard being the ultimate "I belong here" move. Works in both the office AND the warehouse setting, the one with a clipboard is clearly doing something important so best not bug them.
I tried this at a casino near me. managed to get through all the kitchens. behind one of the bars on the floor. and I even made it all the way upstairs into the managers office. some places really need to step up their game
