<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
---
name: performing-physical-social-engineering
description: >-
  Plan and execute physical SE assessments including tailgating, badge cloning, and facility penetration testing.
domain: cybersecurity
subdomain: social-engineering
tags:
  - physical-security
  - social-engineering
  - red-team
  - facility-testing
version: "1.0"
author: defconxt
license: AGPL-3.0
metadata:
  mitre-attack: ["T1200"]
---

# Performing Physical Social Engineering

## Overview

Plan and execute physical SE assessments including tailgating, badge cloning, and facility penetration testing.

## Prerequisites

| Requirement | Install |
|---|---|
| Badge cloning tools | Proxmark3 |
| Authorization letter | Written scope |
| Python 3.10+ | For agent tooling |

## Key Concepts

Physical SE tests facility access controls through tailgating,
impersonation, dumpster diving, and badge cloning. Requires
scoping, legal authorization, and safety protocols.

## Quick Reference

```bash
node agent.js plan --facility hq-building --vectors tailgate,badge,dumpster
node agent.js log --attempt tailgate --location lobby --outcome success
node agent.js badge --action clone --reader proxmark3
node agent.js report --engagement PHYS-2026-001
```

## Workflow

1. Obtain written authorization
2. Conduct external recon
3. Identify entry points
4. Develop pretext
5. Execute entry attempts
6. Document evidence
7. Report with recommendations

## Verification

- Verify authorization covers activities
- Confirm evidence has timestamps
- Validate safety protocols
- Check report documents attempts
- Verify recs address weaknesses

## References

- OWASP Testing Guide — https://owasp.org/www-project-web-security-testing-guide/
- MITRE ATT&CK — https://attack.mitre.org/
- NIST SP 800-53 — https://csf.tools/reference/nist-sp-800-53/
