Inxhinieri Sociale Fizike

Not all social engineering happens online; physical social engineering uses the same psychological principles to gain in-person access.

Tailgating is the most common: an attacker walks closely behind an authorized person through a badge-controlled door, relying on basic courtesy and fear of seeming rude. Dressed appropriately and carrying a box or laptop, an attacker can walk into many corporate offices without ever being challenged. Once inside, targets include unattended workstations, printers with stored credentials, server rooms, unlocked filing cabinets and network jacks. USB drops exploit curiosity: attackers scatter labeled USB drives ("Salaries 2024", "Project X") in parking lots and common areas. Studies by researchers like Matt Bloss and by CMU have shown that a significant fraction of drives are plugged in, and a fraction of those lead to code execution (via HID attacks from devices like Rubber Ducky, or Autorun exploits on older Windows). Modern endpoint security blocks unknown USB HIDs by default, but the attack is still effective in underconfigured environments. Badge cloning attacks low-frequency 125 kHz RFID badges — still shockingly common — using a cheap reader like a Proxmark3 to capture a badge from within a meter and write it to a blank. The defense is upgrading to high-security badges (iCLASS SE, DESFire EV3), mandatory badge challenge culture, and physical access tests as part of any penetration test. Physical and cyber security are the same problem from different angles.

Mjete:

• Proxmark3, Flipper Zero — RFID/NFC cloning.
• LAN Turtle, Rubber Ducky, OMG Cable.
• Lock pick set + bump keys (me leje!).

Skenar tailgating në një zyrë:

1. Arrije në hyrje me kuti/laptop në duar.
2. Vishet business casual + ID që duket zyrtare (nga larg).
3. Kur një punonjës hap derën, "kësaj ore u kujtova që harrova ID-në në makinë — mund të më lejosh?".

Klonimi i një karte 125 kHz me Proxmark3:

lf search
lf hid read
lf hid clone -w H10301 --fc 123 --cn 4567

1. Krijo një checklist për red team fizik: rrobat, pajisjet, pretext, exit strategy.
2. Shkruaj politikë organizative kundër tailgating.

• Jayson E. Street — "Dissecting the Hack".
• TOOOL — The Open Organisation Of Lockpickers.