The time a deployment to collect IT equipment accidentally led to the infiltration of a high-security facility
Posted by roflcopter-pilot@reddit | talesfromtechsupport | View on Reddit | 29 comments
I've told this story on r/ActLikeYouBelong long before and just now realized y'all over here might enjoy it, too - so here is the tale of how I accidentially infiltrated a high security site:
This story is from my early years in the workforce. I was around 20, working in IT as a system administrator, when the company I worked for still had a tiny branch office on the huge factory grounds of a very successfull industrial company. This branch office only existed for reasons of a historical partnership between said company and another one we merged with years ago.
On the day this story takes place, this branch office had been officially closed for good. I was tasked with dismantling the network infrastructure installed there, holding a quick debriefing talk with the other company's sysadmin team, taking inventory of all our devices and bring them back to HQ. A facilities coworker who was sent with me had the task of collecting the remaining furniture.
Said coworker and me planned our trip, rented a van and made the 2 hour trip there. For context, the rental van we got was a white Fiat Ducato, Peugeot Boxer or Citroen Jumper - visually almost identical, all built by the same joint venture, millions of them are on the road and used by companies of all trades. They are the default work van you can find in Europe. My coworker and I were both dressed in high quality worker's cargo pants with some tools in it and a hoodie - pretty much the unofficial uniform of the European tradesman. In short, we accidentially had the perfect infiltration disguise.
Here's where the unexpected fun begins... at the gate of the factory grounds where our tiny branch office was on. Security was very tight there, as this industrial company manufactured goods there that were world class and they had caught spionage attempts before. I knew the security measures from my former on-site job visits and had prepared all required paperwork and IDs earlier, neatly packed in the glovebox.
Unbeknownst to us, at the last traffic intersection we had ran into a convoy of three similar work vans, who also all happened to be headed for the industrial company's grounds... So we found ourselves stuck between them 2nd in row in a neat line at the front gate. The security guard checked the van in front of us before opening the gate. When I attempted to stop in order to show security my paperwork, the van behind us - belonging to the same electrical company as the first and last one - violently began to honk. The guard glanced to him, back to us, and just impatiently waved us all on! Our van was the same type, just brand new and therefore probably looked to him like it just hadn't received its corporate branding yet. Alright then, so I pulled through the gate and played part of the convoy. Soon we reached an intersection on the huge factory grounds where I had to take a left turn to head to the side building where our tiny office was located. When I switched on my indicators accordingly, the security guard by this intersection firmly shook his head "no!", demonstratively closed the road I wanted to take, and gestured to follow the other vans. My coworker and I began to feel uncomfortable about this weird situation.
Our convoy came to a stop by a huge manifacturing building. The electricians in the other vans quickly got out, looked confused at us, we looked confused at them. The sparkies shrugged and assumed we were here to perform some other work, fetched their tools and got ready to leave together. My coworker and I had only fetched our paperwork from the glove box, intending to look for some official or guard we could talk to fix the misunderstanding, but nobody was outside the building... So we followed the electricians.
It was several minutes after we were let inside the manufacturing hall that we found a security guard to talk to - and we expliclty had to get his attention. We could've just kept on walking behind the electricians and infiltrated the top secret area beyond all we liked. The guard was surprised, radioed his supervisor and guided us outside back to our van. His supervisor met us there, questioning how we got here and what business we had on the premises in general. Producing our paperwork and explaining the mixup immediately defused the situation. He escorted us to the building of our tiny office using his car, and that was it. We got the job done as planned and left... Still wondering however if gaining access to a high security industrial site could really be as dead simple as looking like tradesmen and piggybacking to a convoy of other work vans heading inside.
MeFolly@reddit
A non-specific uniform, a confident demeanor, and a clipboard will take you far.
bob152637485@reddit
Don't forget the hard hat!
lesethx@reddit
IT in construction. I've gotten into plenty of construction trailers without the hard hat (tho eventually one was issued). I was later told I looked like an inspector and so most workers kept clear of me unless I specifically asked where the trailer was
pjshawaii@reddit
And a walkie-talkie.
Rick_B_9446@reddit
My dad taught me this. The number of times he got into places he shouldn’t have been just because he was dressed the right way and behaved confidently always amazed me. Nothing illegal. Here’s an example.
We were at a Stanford football game when I was a freshman in college. After the game Dad asked me if I wanted to go onto the field and have my picture taken with the cheerleaders (no idea why they would want that, but I figured what the heck).
All the security guys were wearing red windbreaker jackets with ‘Security’ written across the back. Dad was wearing a red windbreaker, although of course, with no letters on it. He took off the windbreaker, rolled it up in his hand and walked right past the security guy, holding the jacket up and nodding, as if to say “Here are my credentials,” and then nodded over to me and said “He’s with me, it’s all right.” The security guy nodded back, we walked right past him, and I went over and got my picture taken with the gorgeous Stanford cheerleaders. Still have those pictures.
He was a hoot. Miss you, Dad.
dunno0019@reddit
Carrying a ladder or toolbox/belt can also help immensely.
Chocolate_Bourbon@reddit
There's a famous incident of three men showing up at a costco or a walmart or something like that. They all had clipboards, uniforms, etc. They presented some kind of paperwork, carefully selected some TV's, and walked out with them. It works more often than most people realize.
fizzlefist@reddit
That’s how you win a physical pentest by asking nicely to be let into the server room and sending their overconfident security guy a selfie next to the exchange server.
OldTimeConGoer@reddit
Turn up to a high-rise office front desk with a bag of plumber's tools and say you're here to fix the toilets. There's ALWAYS a problem with the toilets in such buildings. You'll get no questions, a white-glove escort, access all areas and they'll make you cups of tea and biscuits.
roflcopter-pilot@reddit (OP)
Absolutely! The common "you can get into any place in America with a pickup truck, a high-vis vest, and tools or a clipboard" trope several people posted stories in r/ActLikeYouBelong about was the reason for the first time I posted this story... However in our case there definitely was no confident demeanor whatsoever, we felt utterly confused and insecure about how to proceed basically the whole time until the security supervisor showed up.
Excellent-Hearing407@reddit
Felt like it was really the same mentality with the Louvre break-in.
IamMeanGMAN@reddit
r/ActLikeYouBelong
LetGoPortAnchor@reddit
OP mentions that sub in the very first line...
The_Real_Flatmeat@reddit
I'll be the security guard at the front gate got a bollocking
Horror_Role1008@reddit
Yes.
udsd007@reddit
In the military, carry a clipboard and say you’re there about the lights.
highinthemountains@reddit
E4 mafia🤣
udsd007@reddit
Yep. I was an E4 at the time.
Bcwar@reddit
All you need to get in anywhere is a ladder and confidence that you belong there lolololol
weirdal1968@reddit
Pentest achievement unlocked!
roflcopter-pilot@reddit (OP)
Is there a special achievement for accidential pentests? 🤐
Quadling@reddit
Occasionally bracelets. Occasionally new job opportunities. Ask Jayson Street about robbing the wrong bank. :)
tybbiesniffer@reddit
That's EXACTLY what I thought of too. I never get tired of that story.
weirdal1968@reddit
You had the perfect cover story. Your furniture guy must have been the actual attacker.
djdaedalus42@reddit
Two words: Louvre heist
Karmek@reddit
So basically the reverse of the getaway scene from Batman: The Dark Knight.
NumerableElk@reddit
Ever play Hitman?
roflcopter-pilot@reddit (OP)
Oh yeah, been a player and fan of the series since day one! Definitely felt like low budget 47 tasked with (mercy) killing those old network devices, after that unexpected intro to the job...
theservman@reddit
A clipboard and a lineman's set (clip-on telephone) has gotten me into a lot of places.