[rockbreath]

Hi guys,

How would you go about social engineering your way into a tech-company with about 150 workers? It’s on the 3rd floor of an office building. We also found the entrance (of this company’s office, not the main building) has a keycard entry system.

These are my current ideas:
- Pretending to work there;
- Showing up with a toolbox/ladder and hi-vis vest and pretend to be a maintenance worker;
- Pretending to be tech support to fix a broken printer or another device;
- Waiting at the door, wait for someone to go in and follow them in;
- Waiting at the door, wait for someone and tell them I have a job interview;
- Somehow copy an access card with an NFC-enabled smartphone.

Some ideas are riskier than others, but I can’t tell which one would work the best. What would you guys do?

[CyberStrike]

All those work, bring coffee if you plan on having someone hold the door. Scope out the place before hand get an idea of dress stuff like that.. target smokers they tend to be door holders btw. The interview might be something if you are challenged as to why you are there, saying that right off the bat you may get in but then again some employees are super employees and will escort you to the security desk. Part of the physical recon I would see if there is any maintenance work going on usually employees don't ask questions of some outside worker doing work, that is rare so the ladder, toolbox could work once inside well. I would try to target when employees are not all around too, it'd make your life easier for sure, this way if you find an open box you can do stuff no one will really ask.

Oh yeah make sure that they understand that physical access is part of the docket check your scope I just seen this go poorly for a couple of gentlemen.