Tactics of a Trash Panda
Where
Ground Floor
BSides Las Vegas
Duration
42 min
Shows how one tester can build their own physical entry tools from everyday retail and craft materials.
Summary
The talk asks how far a single physical tester can get by making their own entry tools instead of buying specialized kits. The speaker points out the drawbacks of commercial tooling: it costs money, can look like obvious red team gear that undermines a pretext, and may be restricted by local law. The proposed alternative is resourcefulness, using materials from pleasure-focused retailers, craft stores and hardware shops. Preparation comes first, including reading fire and accessibility standards, scoping the site, building several pretexts with matching props and clothing, and packing a kit that is legal to carry and plausible to explain.
The middle of the talk covers homemade versions of common tools. These include under-the-door tools made from copper tubing, framing wire or Kevlar cord, shims cut from stencil sheets, and a titanium J-tool for crash bars. Lock picks were made from bobby pins and windshield wiper internals. Bump keys were used with a 3D printed bump hammer, and the speaker explained how material stiffness changes the result. He also demonstrated casting a key in a low-melting alloy using a polymer clay mold. Other techniques included dusting keypads for fingerprints with a cheap powder and highlighter traps under UV light, magnetic bypass of a door alarm, and low-cost hardware such as Raspberry Pi based HID implants, passive network taps and a wireless setup.
The closing advice is to practice each technique with minimal supplies and under pressure, and to plan for failure so a bad outcome can be talked through. The speaker stresses legal limits and authorization, and points to resources and practice environments for building these skills.
Related talks
Radio Frequency Village·37 min
hamspiced
Walks a self-described non-expert through building resonant NFC repeater antennas, from LC tank circuits and VNA tuning to parasitic-capacitance PCB designs.
Talks·46 min
Michael Dierkes
Walks through how a continuous glucose monitor senses blood sugar, from enzyme chemistry to circuit boards and wireless links.
Talks·18 min
w1nd_w4lk3r
Shows how an older UFED Touch forensic unit can still recover phone data, and what to check before buying one.

