166 terms · 75/46/45
Technique № 008 · class: initial access

Physical Access

Using physical access to a device or space as an attack vector.

Term

description · examples · notes

Using physical access to a device or space as an attack vector.

Description

Includes USB devices, external media boot, or direct network connection.

Can bypass all software security measures if the disk is not encrypted.

Rubber Ducky and BadUSB devices automate the attack upon insertion.

Effective in combination with social engineering (tailgating).

Examples

  • Rubber Ducky inserted into an unlocked computer
  • USB boot to access an unencrypted disk

Notes

  • Technique (how) for threats physical-access and usb-drop.
tags
physical usb hardware
◳Composite

Threats

used by 4

Threats that use it. Select one to open its page.

Defenses

countered by 7

How it is countered. Select one to open its page.