Jerrod Baker
Red team operator · Chicago
Perimeter. Personnel. Network. Chaining. Can I go from random walk-in to Admin of Domain Controller?
What I test
Physical Penetration Testing
Doors. Badges. Visitor desks. Escorts. Restricted areas. I test them the way somebody would actually beat them, not the way the binder says they work.
Social Engineering
Your people are the control. I test how they handle a stranger with a good story, on the phone and standing in your lobby.
Network & Infrastructure
Internal. External. Privilege escalation. Lateral movement. What does that badge actually reach?
Identity & Privilege
One foothold. How far does it go? Privilege, persistence, and the walk from a lobby workstation to a domain controller.
Web App & API
Apps, the APIs behind them, and the cloud they run on. Scoped, authorized, documented.
Chaining
A propped door becomes a network drop. The drop becomes credentials. The credentials become operational impact.
Your physical guys stop at the door. Your network guys start after it. Nobody tests the handoff. I do.