4 ms·

Ask HN: How to get work as a physical pen tester?

(Throwaway to not associate this with my day job) By day I'm a senior engineer in the UK. By night I have a hobby, which involves a lot of trespassing. In the UK this isn't illegal as a criminal matter and is just a civil matter. The use of entry tools complicates the legality (hence the throwaway) but that's usual when theft and/or damage is the intent, which is never the case. Over the years I feel like I've become quite adept at covert entry and enjoy the process of research and final implementation as much as my hobby. I have a passing interesting in digital security but the physical side is what really gets me going. I know there's still a lot to learn but I feel I have a very good base set of skills. This led me to wondering if it's possible to turn this into a career. I know physical pen testing jobs exist but don't see them advertised. Does anyone here work in this area? Have any advice or contacts I could chat to?

newprint 2y ago
why not go work for .gov on contract basis if you want to break into things ?
- wannabepentest 2y ago
  Same question applies I guess. Advice on going about getting those jobs?
deleted 2y ago
[deleted]
markus_zhang 2y ago
Just curious: did you do a lot of lockpicking? Considering the owl side, I guess you don't need a lot of social engineering?
- wannabepentest 2y ago
  I originally thought I'd be doing a lot of picking so learnt enough to be effective. In reality, there's usually security gaps or ways to bypass locked routes before you go down the time consuming picking road. Things like high-viz vests, food delivery uniforms or hanging out in smoking areas to clone badges works pretty well - some of which you could say involves social engineering.
  - markus_zhang 2y ago
    Oh I see what you meant, thank you! Sounds interesting, but it is a criminal case in Canada for night trespassings so it's a bit tricky...
ffhhj 2y ago
Cold call security companies and offer services.
- wannabepentest 2y ago
  It's looking like this will have to be the way to go.
HenryBemis 2y ago
From experience in Border Control and Military, it's a double-edge-knife. You can cold-call/email HR, etc. and keep in mind, that at the very same time you will be added to the 'sus' list (I think this is how younger people would call it). Every country's Military has storage(s) all over (from fuel to weapons), mega-big corporations also hire physical pen-testers (which companies provide this service - look it up and send them a CV). Since you are in the UK, I remember one time I lost my keys and I had to pay 200 pounds for someone to come over, break-in and open my door. How about you do this as a side-gig? 200 pounds for 30mins of work is not a bad idea (assuming you work in your area and won't have to spend hours traveling to other towns)
- wannabepentest 2y ago
  Not quite as exciting but working towards the locksmith route isn't a bad idea. I didn't think of that, thank you!

newprint 2y ago

why not go work for .gov on contract basis if you want to break into things ?

wannabepentest 2y ago
Same question applies I guess. Advice on going about getting those jobs?

deleted 2y ago

[deleted]

markus_zhang 2y ago

Just curious: did you do a lot of lockpicking? Considering the owl side, I guess you don't need a lot of social engineering?

wannabepentest 2y ago
I originally thought I'd be doing a lot of picking so learnt enough to be effective. In reality, there's usually security gaps or ways to bypass locked routes before you go down the time consuming picking road. Things like high-viz vests, food delivery uniforms or hanging out in smoking areas to clone badges works pretty well - some of which you could say involves social engineering.
- markus_zhang 2y ago
  Oh I see what you meant, thank you! Sounds interesting, but it is a criminal case in Canada for night trespassings so it's a bit tricky...

ffhhj 2y ago

Cold call security companies and offer services.

wannabepentest 2y ago
It's looking like this will have to be the way to go.

HenryBemis 2y ago

From experience in Border Control and Military, it's a double-edge-knife. You can cold-call/email HR, etc. and keep in mind, that at the very same time you will be added to the 'sus' list (I think this is how younger people would call it). Every country's Military has storage(s) all over (from fuel to weapons), mega-big corporations also hire physical pen-testers (which companies provide this service - look it up and send them a CV). Since you are in the UK, I remember one time I lost my keys and I had to pay 200 pounds for someone to come over, break-in and open my door. How about you do this as a side-gig? 200 pounds for 30mins of work is not a bad idea (assuming you work in your area and won't have to spend hours traveling to other towns)

wannabepentest 2y ago
Not quite as exciting but working towards the locksmith route isn't a bad idea. I didn't think of that, thank you!