Doors, Cameras, & Mantraps Oh My!
Covers fundamental techniques for evaluating physical security controls including doors, cameras, and mantraps during client assessments.
Summary
Security consultant "The Magician" provides an entry-level masterclass on the practical aspects of physical security assessments and client communication at the DEF CON 32 Creator Stage.
[03:38] The speaker breaks down the common physical vulnerabilities encountered during facility assessments, detailing bypasses for improperly installed commercial doors, latch slipping, under-door tools, and manipulating insecure window latches.
[07:12] The talk explores RFID badge cloning using portable devices like the Flipper Zero, discussing why card cloning is only one component of a comprehensive physical assessment. The Magician emphasizes the human and consultative side of physical penetration testing [10:38], explaining how to deliver constructive, empathetic client reports that focus on positive risk remediation rather than embarrassing security guards or facilities managers [14:07].
(AI summary — Gemini Flash)
Related talks
Creator Stage·56 min
Shawn
Walks through the full physical penetration testing lifecycle, from breach-focused reconnaissance to delivering actionable security upgrades for clients.
Main Stage·21 min
Russell Phillips
Details physical red team tradecraft for analyzing, cloning, and counterfeiting event security badges, holograms, and laminated credentials.
Creator Stage·57 min
Karen Ng · Matthew Cancilla
Explores non-destructive entry techniques that bypass doors and access control hardware without picking locks, alongside defensive hardening measures.