When conducting a physical penetration test, gaining access to a building is often only half the battle. Once inside, there may be opportunities to collect valuable information or tools that can aid in future access. One such tool is a physical key. If a tester encounters a key during their assessment, duplicating it through molding and casting can be a useful step in obtaining persistence. This technique allows the tester to create a working replica of the key, which can be used later to bypass locks without raising suspicion.
Testers should always be looking for methods of persistence, as without them you will be required to accomplish every objective in a single breach, which is often not feasible. In this blog we are discussing creating a physical duplicate key from the original via casting. Certainly not a new technique, this has been around forever, but I wanted to give my opinions on two of the top products for this procedure on the market today.
Quick Notes & Overview On Casting
The high level procedure for casting a key are:
Keep reading with a 7-day free trial
Subscribe to Covert Access Team to keep reading this post and get 7 days of free access to the full post archives.