Unauthorised Access: Physical Penetration Testing For IT Security Teams

8.10. Summary

In this chapter I've covered some of the equipment I feel is essential for the execution of a successful physical penetration test. What you take with you is going to vary from test to test depending upon the rules of engagement and your goals. Therefore this chapter should not be considered exhaustive and you should remember that technologies go out of date quickly and better solutions are emerging all the time. In this chapter the following has been covered:

• The Get out of Jail free card – This is the most essential piece of 'equipment' you will carry and certainly the only mandatory item for every test. This is a document that shows you are authorized to be on site testing. Always carry at least two copies.

• Photographic Equipment – A camera is an essential piece of kit for both surveillance and recording progress. It should be modern and powerful but discrete. You should also know how to use it.

• Laptops – Portable computers are essential for any physical penetration tests that involve an element of computer intrusion (i.e. almost all of them). Laptops should be modern and capable of virtualization.

• Wireless Equipment – Not all wireless equipment is created equal – particularly not from the perspective of a security test. Make sure the gear you take with you allows you to execute the attacks described in Chapter 7.

• GPS Equipment – With GPS you always know where you are, where you're going and (for the purposing of reporting) where you've been. GPS can make planning ...