Physical Penetration Testing Checklist

Physical Penetration Testing Checklist

Complete methodology for authorized physical security assessments:

• Reconnaissance — Building layout analysis, employee schedule patterns, entry/exit points, camera placement mapping, guard rotation timing.
• Access Methods — Tailgating techniques, badge cloning with Proxmark3, lock picking progression (pin tumbler, wafer, tubular), door sensor bypass.
• Technical Implants — Deploying network taps, rogue access points, USB Rubber Ducky drops, Raspberry Pi implants in server rooms.
• Evidence Collection — Photography protocols, timestamp documentation, chain of custody for physical evidence.
• Reporting Templates — Physical assessment report format with risk ratings, photographic evidence, remediation recommendations, and executive summary.