Physical Penetration Testing and Safe Cracking with Deviant Ollam

Understanding Physical Penetration Testing

• 💡 Physical penetration testing involves breaking into facilities to assess their security, often described as "adversarial emulation."
• 🎯 A common technique is social engineering, where testers blend in and appear to belong, sometimes as simply as carrying a clipboard.
• 🔑 The goal is to identify vulnerabilities in physical security systems, including locks, alarms, and access controls, to advise clients on mitigation steps.

From Hobbyist to Professional Expert

• 🌱 Deviant Ollam's journey began with a healthy curiosity and exploring abandoned buildings, leading to an understanding of access control systems.
• 🚀 The transition to professional work was facilitated by Defcon and Black Hat conferences, where initial lockpicking talks led to training courses and client engagements.
• 🤝 Early clients often came from training attendees who then hired the team to test their own buildings, spreading reputation through word-of-mouth.

The Evolution of Safes and Entry Techniques

• 🔬 Historically, safes relied on brute force resistance, but World War II spurred the development of manipulation-resistant and multi-custody locks to counter espionage.
• 🔍 Safe cracking involves understanding the internal mechanism and identifying "contact points" through precise dialing and visual observation, rather than just listening.
• ⚠️ Intelligence services developed clandestine entry methods, including radiographic techniques using radioactive isotopes, to access safes without leaving detectable evidence.

Modern Security Challenges

• ⚡ While electronic locks offer convenience, they are often less secure than mechanical ones, with tools like the Phoenix or "little black box" capable of quick bypasses.
• 🛠️ Improper installation and the use of disparate, untested systems frequently undermine security, even for components designed to be robust.
• 🚨 Ubiquitous electronic monitoring, such as cameras and shake sensors, significantly increases the difficulty of covert physical penetration, making it harder to operate unnoticed.

Career Insights and Essential Gear

• ✅ Training and certifications are crucial for aspiring professionals, demonstrating not just skills but also the ability to complete tasks and be a reliable employee.
• 🚫 Overrated tools include pin pad hacking with UV powder or thermal cameras for general access doors, as they are often ineffective in complex environments.
• 🔑 Essential tools for physical entry include the traveler hook for manipulating door latches and the underdoor tool for activating internal door handles.