Picture a house you have to get inside and someone has locked every door against you. You really only have three moves, and a child playing tag already knows all of them. You can go over — up the drainpipe, across the roof, in through the attic. You can go under — through the cellar hatch, the crawlspace, the storm drain that runs beneath the back wall. Or you can go through — pick the lock, break a pane, or knock on the door wearing the gas-meter man's coat so they let you in themselves.1 Haha Lung's Knights of Darkness compresses every method of beating a barrier into exactly that list. "When avoiding such perimeter obstacles is not an option," he writes, "you must find ways to go over, under, or through those obstacles."2 A castle wall, a barbed-wire fence wired to a motion sensor, a guarded national border — the menu never grows. There are three ways of going, and the whole skill is choosing the one the people inside forgot to watch.
The discipline isn't athletic. It's attentional. Every defended place has a budget of attention, and that budget gets spent unevenly. The guards stare at the gate. The cameras face the road. The dogs patrol the fence line. Almost nothing watches the roof, because the roof is dark and high and nobody climbs roofs. Almost nothing watches the sewer, because the sewer is filthy and nobody goes there willingly. The three ways of going is really a map of where defenders aren't looking, sorted into three boxes so you never freeze in front of a wall wondering what to do.
The three ways of going is a complete taxonomy of barrier penetration: every perimeter, no matter how it is built, is beaten by going over it, under it, or through it. There is no fourth option, and that closure is the point — it turns a paralyzing wall into a three-item checklist.2
Over means crossing above the obstacle. Lung's range runs from the crude to the exotic: climbing a fence or wall, shimming up between two close buildings by bracing your back on one wall and your feet on the other, jumping from a tall building onto a lower roof, throwing or shooting a grappling hook across a gap and walking a traverse line, hang-gliding in, or dropping out of the sky on a HALO parachute — high altitude, low opening — so the canopy never shows against the moon.3 He notes the cleanest version exploits a fact defenders forget: "the tops of most buildings are shrouded in darkness, since they are above the lightline."4 The floodlights point down and out. They leave the roof black.
Under means passing beneath the obstacle. This is "as simple as wiggling under a fence or as complicated as spending months digging a tunnel through dirt and rock."5 Tunneling is ancient — used to undermine castle walls and to escape POW camps — and stubbornly modern: the Vietcong ran tunnel complexes so vast an American base was once built directly on top of one, letting sappers "appear and disappear at will" inside the wire; the North Koreans dig tunnels under the 38th Parallel; criminals have tunneled into banks, the Bank of England among them.6 And every installation needs water, electricity, sewerage — so the maintenance tunnels and access conduits that run under the walls "can be slithered through."7
Through means passing directly across the plane of the obstacle. Walls get broken, fences get cut or pried off their posts.8 But the elegant version doesn't damage anything: you walk through the front gate. "If a man built the lock, then another man can build the key."9 Construct a convincing disguise — proper uniform, arms, identification if needed — and "pass unchallenged."10 Or ride in concealed: the Trojan-horse ploy, hitching on the side, top, or undercarriage of a vehicle entering the target, or hiding inside a pallet of boxes each individually too small to hold a person but arranged to leave a man-sized hollow, moved en masse by a forklift past a cursory inspection.11
The reason the taxonomy works is that it isn't really about geometry. Over, under, and through are three different bets about where a defender's attention has gone soft, and each bet exploits a different blind spot.
Over bets on the vertical. Human attention is built for the horizontal plane — we scan the eye-level world where threats walked toward us for a few million years. Roofs, upper-storey windows, the dark band above the lightline: these are the parts of a perimeter that cost real money and real discomfort to watch, so they get watched least. Lung's roof crossing is less a feat of climbing than a wager that nobody bought the second camera, the one that points up.
Under bets on disgust and inconvenience. The sewer, the waste drain, the soft sand at the foot of a fence — these are guarded lightly not because they're invisible but because going there is miserable. Defenders assume the misery itself is a deterrent. The tunneler simply decides to be miserable for as long as it takes, and the months of digging that look like a weakness are exactly what nobody plans for. The Bank of England trusted its vault door and forgot its floor.6
Through bets on the social. This is the strangest leg, because it doesn't sneak past the guard — it walks straight up to him. It works by handing the guard a story he already wants to believe: the man in the uniform belongs, the forklift carries cargo, the vehicle is on the schedule. The disguise and the Trojan box don't defeat the guard's eyes; they defeat his expectations. He sees what he was set up to see and waves it through. Of the three ways, this is the one that is purely a behavioral move — the wall is breached entirely inside the defender's head.
This page hands the vault a sorting frame it can reuse far past physical infiltration. The over/under/through trichotomy is a general theory of how any closed system is entered when the front door is denied — and the vault already holds the pieces it connects to.
It gives the Haha Lung corpus its physical-layer companion to the psychological breach. The vault's manipulation-doctrine pages describe getting inside a person; this page describes getting inside a place, and the structural rhyme between them is exploitable.
It supplies a diagnostic vocabulary for defenders. Once you can name the three ways, you can audit any perimeter — physical, organizational, informational — by asking which of the three is least watched, and the answer is almost always the one nobody wants to think about.
And it anchors the batch's other infiltration pages: the "under/utility" special case and the doctrine of what kind of perimeter you are facing both depend on this trichotomy as their parent frame.
Lung's centerpiece for the "under" route is a story he calls true, from medieval Japan: the tale of the Littlest Ninja.12 A certain shogun had survived repeated assassination attempts. The clan he had offended threw its best warriors at his castle and failed every time — the fortress was, in the phrase, "seemingly impenetrable." Then the smallest member of the clan, a warrior so undersized he was almost never picked for missions, volunteered. His size was the disqualification that became the qualification.
His first move was not athletic but social — and worth pausing on, because it shows the three ways braiding together. Before he went under, he went through, in the figurative sense: he found the master builder who had constructed the shogun's fortress and, "through one form of persuasion or another," secured the architect's plans.13 The wall fell to a conversation before it fell to a body. Knowing the structure from the inside, he found the line of approach a full-sized man could never use.
Within a fortnight he was "poised under the waste hole in the shogun's toilet, having slithered through several claustrophobic yards of shitty drain."14 The route was beneath contempt — literally the line that carried the castle's filth out under its walls — and so it was beneath suspicion. No motion sensor, no sentry, no dog watches the sewage. The shogun's impenetrability was a story about his gate and his walls; it had a hole in its floor the width of a small man, and the hole was made of the one substance no defender wants to imagine an enemy choosing to crawl through.
The ending is a single brutal sentence. The moment the shogun "lowered his ass over the toilet," the ninja drove his long dirk up into the body. Mission accomplished.15 The case study is grim, but its lesson is exact: the most heavily defended target had concentrated all its attention at eye level and above, and an attacker small enough and willing enough to use the route everyone found disgusting simply walked in underneath the whole defense. The defender's strength — a fortress so strong it bred contempt for the small and the dirty — was the precise shape of his death.
You crouch in the tree line a hundred meters out, and the floodlit fence runs left to right across your whole field of view, and the first thing you feel is the wall in your stomach — the it's-impossible that every barrier hands you on first sight. You let it pass. You have a checklist for exactly this feeling, and it has three boxes.
You start with the eyes up. The lights along the fence throw a hard cone downward and outward, and you trace the cone with your gaze until you find where it dies. There — above the lightline, the building tops go to black, the band of roof the floodlights never reach.16 You note the gap between the warehouse and the office block: close enough to brace and shim, back on one wall, feet on the other. Over is live. You file it.
You drop your eyes to the ground line. You watch the soft sand raked at the foot of the fence — meant to take your tracks and make you stumble noisily, which tells you the defender thinks about people coming at fence height.17 You let your attention sink lower than that, to where the storm drain culvert tunnels under the road and beneath the wire, to the rivulet that runs under the fixed fence and could be waded silently.18 Under is live too, and it's wet and slow and nobody is watching it, because nobody wants to be in it.
Then the gate. You count the seconds between vehicles, watch the guard glance at a clipboard and wave a delivery truck through on the strength of a logo and a schedule.19 You picture yourself riding the undercarriage in the truck's moving shadow, or stacked into a false-bottom pallet a forklift will carry past his bored glance.20 Through is live — and it's the one that needs no rope, no shovel, only a story he already wants to believe.
Three boxes, three bets, all checked in ninety seconds of patient looking. Now you pick the one the guards forgot — and the impossible wall has become a door you simply hadn't noticed yet.
The penetration fails before it starts when the operator treats the wall as a single problem instead of three questions. The diagnostic signs are recognizable.
Tunnel vision on one route. The climber who only ever climbs, the digger who only ever digs — they stop reading the perimeter and start performing their favorite trick. Lung's whole frame is a corrective: the route is chosen by where the defense is soft, not by what the attacker likes doing. When you notice yourself reaching for the grappling hook before you've looked at the sewer, you've stopped thinking.
Contempt for the dirty route. The mission that fails the way the shogun's defenders failed — sending tall, proud warriors at the wall again and again — has an allergy to the undignified line of approach. If the team rules out the drain, the crawlspace, the waste conduit because they're beneath the operator, the team has handed the defender exactly the blind spot the smallest, most willing attacker will use.
The signature left behind. Lung is emphatic: "Never leave anything behind that will betray your breach to a passing sentry."21 The cloak still draped over the barbed wire, the pried fence not pressed back to its post, the cut link swinging — each is a clock now ticking against you. A clean entry that announces itself is a failed entry on delay.
Believing your own "impenetrable." The most dangerous sign is on the defending side, and it's the shogun's disease: a perimeter so strong on two of the three ways that everyone stops auditing the third. Strength breeds the blind spot. The fortress with the best gate and the highest walls is the one whose floor nobody has crawled.
The trichotomy itself is robust — over/under/through is genuinely exhaustive for a physical plane, and that's why it survives translation to other kinds of barriers. The tension is in Lung's evidence, not his frame.
The Littlest Ninja is offered as "the true story," but it has the shape of clan legend — the undersized hero, the impossible castle, the poetically just death on the toilet — and Lung supplies no source, no name, no date.22 It teaches the principle perfectly, which is exactly what a didactic legend is built to do; that doesn't make it documentary. The same caution applies to his attribution of the false-pallet trick to the moshuh nanren (his Chinese "night warriors"), "believed to have been invented by" them — believed by whom is unstated.23
The modern claims are sturdier and partly checkable: Vietcong tunnel complexes, North Korean tunnels under the 38th Parallel, and bank tunneling jobs are all documented elsewhere, though Lung cites none of them directly. Open question: does the "through" leg — the disguise, the Trojan box — really belong in the same taxonomy as the two physical routes, or is it a fundamentally different (social, not spatial) operation wearing the same label? The page argues it's the trichotomy's most interesting member precisely because it isn't spatial at all.
Only one source genuinely sits behind this page — Lung's Knights of Darkness — so the tension worth naming is internal to his own framing. Lung writes the three ways of going as a flat, value-neutral menu: over, under, through, pick one. But his own material quietly ranks them. He calls walking through the front gate in disguise "always preferable," and he reserves his single longest, most vivid story — the Littlest Ninja — for the under route.24 The flat menu hides a real hierarchy: the routes that need no force and leave no trace (the disguise, the slithered drain) are the ones he lingers on and praises, while the over route, full of grappling hooks and HALO drops, gets the most gear and the least love. The convergence across his corpus is consistent on this point — Lung always prefers the breach that the defender never registers as a breach, whether the target is a wall or a mind. The tension he never resolves is that his cleanest examples are also his least documented, so the reader has to take the most elegant lessons most on faith.
Here's the plain version: this page is about getting into a guarded place, and the vault already holds pages about getting into a guarded person and about what kind of guarding you're up against — and the three connect into one theory of breaching.
Handshake to The Littlest Ninja (Utility Access) (this batch). That page takes the "under" leg's special case — the sewer, the maintenance conduit, the waste drain that no defender wants to imagine an enemy choosing — and develops it on its own terms. This page is the parent frame; that page is the sharpest single instance of it. The structural parallel is exact: both turn on the route that is lightly guarded not because it's hidden but because it's disgusting or inconvenient, so the defender's revulsion does the attacker's camouflage for free. The insight that lives only in the pairing: the utility-access route isn't merely "the under option" — it's the proof that a defender's emotions (contempt, disgust, the wish not to think about the toilet) carve predictable holes in a perimeter, which means an attacker can locate the gap by asking not "what's weak?" but "what's beneath them to consider?"
Handshake to Flexible vs. Fixed Perimeter Doctrine (this batch). That page is the other half of the same chapter: it classifies what you are penetrating — a fixed perimeter (walls, fences, a static line) versus a flexible, moving one (a marching column, a roving patrol). This page tells you the three ways in; that page tells you that the right way in changes with the kind of wall. The tension between them is productive: Lung's own text shows the under route splitting along this seam — against a fixed perimeter you tunnel under a static wall, but against a flexible perimeter you dig the bolt-hole ahead of time where you anticipate the column will halt.25 So "going under" isn't one technique; it's two opposite ones depending on whether the wall stays put. The insight neither page reaches alone: the trichotomy (over/under/through) and the perimeter-type (fixed/flexible) form a grid, and the operator's real skill is reading both axes at once — picking not just a direction but a direction matched to whether the barrier holds still.
Handshake to The Black Science (Generic Manipulation Doctrine). This is the cross-layer rhyme that earns its keep. The Black Science is Lung's doctrine for breaching a person's defenses to get inside their thinking; this page is his doctrine for breaching a place's defenses to get inside its walls. Map the three ways onto the mind and they hold uncannily: going over is the appeal that flies above someone's rational guard (flattery, awe, the emotional HALO drop past the part of them that's watching for arguments); going under is the subliminal, the route beneath conscious attention that nobody thinks to defend because they don't know it's a door; going through is the open persuasion that walks up wearing a uniform the target already trusts and gets waved past their judgment. The insight that only the cross-domain view produces: a person and a fortress have the same three-box vulnerability map, which means the defensive lesson transfers both ways — harden a mind the way you'd audit a perimeter (which of the three ways is least watched?), and audit a perimeter the way you'd inoculate a mind (assume the attacker will choose the route your pride refuses to imagine). The breach is never really about the wall; it's about where the defender stopped looking, whether the defender is a building or a brain.
The Sharpest Implication. Every defense has a budget of attention, and that budget is spent on the routes the defender finds dignified, visible, and likely. The three ways of going is a tool for finding the route that's left — and the route that's left is almost always the one the defender's own pride, disgust, or imagination ruled out in advance. You don't beat a strong perimeter by being stronger. You beat it by being willing to use the way they found beneath them to watch.
Generative Questions.