Overview

Physical intrusion assessment evaluates an organization's physical security controls by attempting to gain unauthorized access to facilities, server rooms, and restricted areas. This includes tailgating employees, cloning RFID access badges, bypassing locks, deploying rogue network devices, and testing security guard procedures. Physical security testing is a critical component of full-scope red team engagements, as it often provides the most direct path to network access. MITRE ATT&CK maps physical access techniques under T1200 (Hardware Additions) and T1091 (Replication Through Removable Media).

When to Use

When conducting security assessments that involve performing physical intrusion assessment
When following incident response procedures for related security events
When performing scheduled security testing or auditing activities
When validating security controls through hands-on testing

Prerequisites

Signed authorization letter (carry at all times during assessment)
Emergency contact for client security team (24/7)

Overview

When to Use

When conducting security assessments that involve performing physical intrusion assessment
When following incident response procedures for related security events
When performing scheduled security testing or auditing activities
When validating security controls through hands-on testing

Prerequisites

Signed authorization letter (carry at all times during assessment)
Emergency contact for client security team (24/7)

Technique ID	Name	Tactic
T1200	Hardware Additions	Initial Access
T1091	Replication Through Removable Media	Initial Access
T1199	Trusted Relationship	Initial Access
T1078	Valid Accounts	Initial Access

Tool	Purpose	Approximate Cost
Proxmark3 RDV4	RFID badge cloning (125kHz/13.56MHz)	$300
Flipper Zero	Multi-protocol RF analysis	$170
Lock pick set (Sparrows)	Mechanical lock bypassing	$35
Under-door tool (UDT)	Bypass door from outside	$30
Shove knife / latch slip	Spring bolt bypass	$15
LAN Turtle	Rogue network implant	$60
WiFi Pineapple	Rogue wireless AP	$100
Rubber Ducky / Bash Bunny	USB keystroke injection	$50-80
Clipboard + hard hat + hi-vis	Social engineering props	$20
Body camera	Evidence documentation	$50

Lock Type	Bypass Method	Difficulty
Pin tumbler (standard)	Pick, rake, or bump key	Easy-Medium
Wafer lock (filing cabinets)	Pick or jiggle	Easy
Tubular lock (vending, server)	Tubular pick tool	Easy
Electronic lock (keypad)	Shoulder surf, thermal camera	Medium
Magnetic lock (mag lock)	Under-door tool, REX sensor bypass	Medium
Smart lock (Bluetooth)	Replay attack, firmware exploit	Hard

Performing Physical Intrusion Assessment

Overview

When to Use

Prerequisites

Performing Physical Intrusion Assessment

Overview

When to Use

Prerequisites

MITRE ATT&CK Mapping

Physical Security Testing Toolkit

Technique 1: Tailgating

Technique 2: Badge Cloning

Technique 3: Lock Bypassing

Technique 4: Rogue Device Deployment

Technique 5: Dumpster Diving

Assessment Methodology

Pre-Assessment Reconnaissance

Execution Phases

Documentation Requirements

Ethical and Safety Considerations

References

1password

Springboot Security

Security Review

Laravel Security

Security Review

Django Security