Chapter 1
Engagement Management
Course: Comptia Pentest Pt0 003
Subject: Comptia Pentest Plus
Chapter: Vulnerability Discovery And Analysis
Physical security is an important aspect of cybersecurity, as attackers often exploit physical access to bypass digital security controls. Threat actors use social engineering, hardware attacks, and intrusion techniques to gain unauthorized entry into secure environments. Cybersecurity assessments often include physical penetration testing to evaluate an organization's security posture and identify vulnerabilities that could be exploited.
1. Tailgating (Piggybacking)
Definition
Tailgating occurs when an unauthorized person follows an authorized individual into a restricted area without proper authentication. This is a social engineering attack that takes advantage of human behavior, particularly trust and politeness, to gain access to secure buildings, data centers, or office spaces without credentials. Unlike traditional hacking methods, tailgating relies on manipulating people rather than exploiting technical vulnerabilities.
How It Happens
- Attackers pretend to be delivery personnel, maintenance workers, or employees who "forgot their badge" to gain sympathy and access.
- Employees hold doors open for unauthorized persons out of courtesy or fear of confrontation.
- Attackers closely follow an authorized person entering a secured area, bypassing security checkpoints unnoticed.
- Malicious insiders may allow external individuals to enter along with them without logging their access.