Hacking_and_Penetration_Testing_with_Low_Power_Devices

Installing devices
221
example, wearing blue coveralls and trying to pass yourself off as being with Bell-
South in Atlanta, Georgia, is likely to be much less successful than wearing the same
and claiming to be from British Telecom in London.
Successful pretexts can vary widely. One of the simplest pretexts is to pretend to
be a customer or potential client. This is not likely to get you much access, but in
some cases, it may be enough to plant a drone or two inside the office. If you are
going to plant devices in the middle of the day, you need to be quick and discrete.
If you are going to risk planting things in the office, you might want to focus on wall
or USB-powered devices if your test will run for more than two days (the approximate
run time for a drone on D cell batteries).
On the more sophisticated end of pretexts, you might impersonate a worker or job
applicant. Getting a job with the cleaning subcontractor might take a while and might
be harder than it first appears thanks to bonding issues and government regulations.
Leave getting a job as a cleaner or abducting workers to gain access to the facility
after hours to the movies.
It is unlikely that most companies will perform any sort of background check
prior to interviewing job applicants. Preemployment tests of programming and/or
software design skills are fairly common when applying for software positions.
Applicants are typically left alone during these tests. Take care not to perform too
well on these tests. If you look like a top candidate, it could extend your time in
the office with no benefit to you.
DON’T WASTE YOUR TIME
When being the best isn’t best
I cannot overemphasize the need to be mediocre when taking any tests. You want to be forgettable
and to give the target little reason to waste your time with an interview. If you perform well, they
may well decide to extend the interview and/or bring in more people to the interview.
I once went to an interview over lunch. The company gave me a ridiculously long C++ test.
After spending a good hour and a half on the test, it was time to start the interview. I spent another
half hour answering questions on my impressions of the test. It turns out I was the first to take
the test.
When the interviewer told me two hours into the ordeal that my salary requirements, which had
been clearly stated beforehand, were ridiculous and that nobody made that kind of money (despite
being equal to my current salary at the time), the company’s true motives for bringing me in for an
interview became clear. They were looking for a senior C++ developer with a decade of experience
to validate and give them feedback on their test. They had no problem wasting over two hours of my
time to get a free assessment. Remember to miss some questions on any tests so this doesn’t happen
to you.
While all of the stuff described above might sound like fun, if your target is using
wireless networking, it may be unnecessary. I do not want to discourage you from
trying to plant a few wired drones. Rather, I would hope you realize that wired drones
in the building are not a requirement for a successful penetration test.