Introduction: In this presentation we will be covering methods of exploiting the human element of security and how to continue the manipulation during social engineering and Red Team engagements. We will be sharing stories and experiences that illustrate the subject and focuses on starting with covert parking lot reconnaissance and peeling away security until the tester reaches the server room. Abstract: Pretending to be an employee is one thing, but owning layers of identities is what leads to owning the data center. In this presentation you will listen to real world scenarios that led to armed guards opening biometric access controlled server rooms for the hacker to secretaries handing over an executive’s laptop. All of this and more, from parking lot to pwnage.” Tim and Brent are currently Offensive Security Consultants within Solutionary, and have recently spoken at Def Con 22 and the ISSA International conferences. Their experience includes Internal and External Penetration Assessments, Social Engineering and Physical Security Assessments, Wireless and Application Vulnerability Assessments and more. Tim has held information and physical security and management roles across multiple industries including healthcare and government. He has conducted highly successful Red Team Assessments. Brent has held the role of Web/Project Manager and IT Security Director at the headquarters of a global franchise company. His specialty is in Application, Social Engineering and Wireless Assessments.