Joe, a penetration tester, is asked to assess a company's physical security by gaining access to its corporate office. Joe ism looking for a method that will enable him to enter the building during…

Badge cloning involves reading and duplicating the RF signal from a proximity or smart card using tools like a Proxmark or ACR122U, producing a functional copy of an access credential. Because the cloned badge is a valid credential recognized by the access control system, it grants entry at any time regardless of whether employees are on-site. This makes it superior to people-dependent techniques for scenarios requiring after-hours access.

Lock picking defeats mechanical locks but is ineffective against electronic access control systems that require a valid badge credential, and many corporate doors use both.

Tailgating requires following an employee through a secured door and only works when employees are physically present and moving through access points.

Piggybacking is similar to tailgating but implies the employee knowingly holds the door, which also requires employees to be on-site and cooperative.