Downloads, Hacking Tools, Lockpicking, Offensivesecurity, Physec, Physical Security, Redteam, RedTeam-Physical-Tools, Redteamoperators, Redteamtools

RedTeam-Physical-Tools – Red Team Toolkit – A Curated List Of Tools That Are Commonly Used In The Field For Physical Security, Red Teaming, And Tactical Covert Entry

Commonly used tools for Red Teaming Engagements, Physical Security Assessments, and Tactical Covert Entry.

In this list I decided to share most of the tools I utilize in authorized engagements, along with my personal ranking of their value based on their usage and for you to consider if they should be in your toolkit, including where to find some of them, and in some cases I will also include some other alternatives. My goal with this list is to help fellow Red Teamers with a ‘checklist’, for whenever they might be missing a tool, and use this list as a reference.

ToolPurposeUsageWhere to findAlternative
1. Camera with high zoomReconnaissance. When gathering intel on your target, and for reporting purposes for your client, you will want to use a reliable camera. With a long zoom camera, you may be able to check for cameras surrounding the building of your target, be able to spot the location of security guards, and possible gather info on the locks and perimeter, reducing the odds of being detected.7/10Recommended: Panasonic Lumix FZ-80 60x CameraAlternative: If not the Panasonic, you can use others. There are many other good cameras in the market. Try to get one with a decent zoom, any camera with over 30x Optical Zoom should work just fine.
1.1 Polarized Camera FiltersReconnaissance. These are a camera’s best friend when doing recon. A polarized filter helps removing glare and reflection from things in view, such as windows or vehicle windshield, allowing the camera to see clearly through them.10/10Recommended: Any polarized filter that fits the lens of your camera.Alternatives: N/A.
2. Body Worn Action CameraReconnaissance as well as for your own security purpose, in case something happens to you. With all engagements, you need to report everything to your clients. This is where the bodycam helps, by viewing and be able to replay the engagement and infiltration, as well as allowing you to demonstrate to your clients how the infiltration was performed.10/10Recommended: GoPro cameras or the DJI Osmo Action cameraAlternatives: There are other cheaper alternative action cameras that can be used, however the videos may not have the highest quality or best image stabilization, which can make the footage seem wobbly or too dark.
3. Drone with CameraMostly reconnaissance. It can be used for scoping the perimeter of a building, see its surrounding area, check for cameras, blind spots, and possible fire escape areas that could be potentially used as an entry point.1/10 – Its not a “must have”, but can really come in handy sometimes. It may be of further use if you utilize a “dropping mechanism” to drom malicious USBs or other devices into the targets premises without having to set foot on site.Recommended: DJI Mavic Mini 2 or any other drone that fits your budget.N/A
4. Two-Way Radios or Walkie TalkiesCommunication and Intel Gathering. You need to be able to communicate efficiently with other members of your team when performing an engagement, plus using a radio it gives you the possibility of listening into any channels being used by staff or security on the premises, and listen for any valuable information or if any of your team members has been spotted.9/10Recommended: BaoFeng UV-5RAlternatives would be to just use cellphones and bluetooth headsets and a live call, however with this option you will not be able to listen to local radio chatter. A cell phone serves the purpose of being able to communicate with the client in case of emergency.
5. Reliable flashlightSelf explanatory.8/10Amazon, Ebay, local hardware storeIf you want to save some money, you can always use the flashlight of your cellphone, however some phones cant decrease the brightness intensity.
6. Borescope / EndoscopeTo perform reconnaissance from under or over the door, take a peek inside and see what is on the other side of the door. It helps to prevent spending time trying to open a door which has nothing important on the other side, or to check for any security measures in place, and avoid tripping any of them by accident.7/10Recommended: USB Endoscope CameraThere are a few other alternatives, varying in price, size, and connectivity.
7. RFID Frequency DetectorThis tool is utilized for recon, to determine the frequency of RFID badge readers, and determine what your target is using. By knowing if its high or low frequency, it can help you configure your proxmark to scan and clone badges. Another benefit of these tools is that they do not trigger any alerts.6/10Recommended: One good benefit of the Dangerous Things RFID Diagnostics Card is that its the size of a credit card, so it fits perfectly in your wallet for EDC use.Alternative: The RFID LF / HF Detector can be used as a keychain.
8. A reliable ScrewDriver with changeable bitsIn some scenarios you may need to modify some of your tools, fix something, or disassemble something.8/10Recommended: Wera KraftformAlternative: Any other screwdriver set will work just fine. Ideally a kit which can be portable and with different bits
9. A reliable plier multitoolSame as with the screwdriver set, in some scenarios you may need to modify a tool or fix something.8/10Recommended: Gerber Plier MultitoolAlternatives: any reliable multitool of your preference
10. Gaffer TapeSelf explanatory. You never know when you need to modify a tool on the spot.8/10Recommended because of its portability: Red Team Tools Gaffer TapeAlternatives: There are many other options on Amazon, but they are all larger in size.
11. A reliable set of 0.025 thin lockpick setSelf explanatory. Cant pick locks without a lockpick set.10/10Recommended to get a well known brand with good reputation and quality products. Some of those are: TOOOL, Sparrows, Southord, Covert InstrumentsN/A. You do not want a pick breaking inside of a client’s lock. Avoid sets that are of unknown brands from ebay.
12. A reliable set of 0.018 thin lockpick setThis is very similar to the 0.025 set, but you may also want to carry a thinner 0.018 or 0.015 thin lockpick set, for those locks that have a very narrow or thinner keyways, and be able to insert the picks.8/10Recommended to get a well known brand with good reputation and quality products. Some of those are: TOOOL, Sparrows, Southord, Covert InstrumentsN/A.
13. Tension barsOne of the most important things for a lockpicker. A good picker knows the value of using good and comfortable tension bars.10/10Recommended: Covert Instruments Ergo Turner Set or Sparrows FlatbarsThere are many other alternatives, varying in sizes and lengths. I strongly recommend having them in varying widths.
14. Warded picksThese are used for picking warded locks.5/10Recommended: Red Team Tools Warded Lock PicksAlternative: Sparrows Warded Pick Set
15. Comb picksThese are very useful to open many different Master Locks, as if you were using the key itself.5/10Recommended: Sparrows Comb .45Alternative options: Red Team Tools Comb Picks and the Covert Instruments Quad Comb Set
16. Wafer picksSelf explanatory. These are used to commonly pick or rake open wafer locks, which are often seen in office environments.6/10Recommended: Red Team Tools Wafer PicksAlternatives: Sparrows Wafer Picks
17. JigglersSelf explanatory. Jigglers can be used to “jiggle” your way into opening a variety of pin tumblers and wafer locks.6/10Recommended: Red Team Tools JigglerAlternatives: Sparrows Coffin Keys
18. Dimple lockpicksSelf explanatory. For picking Dimple locks.5/10Recommended: Sparrows Black FlagAlternatives: There are other cheaper lower quality brands that can get the job done. Search online for ‘klom’ or ‘goso’ dimple picks.
19. Tubular lockpicksSelf explanatory. Its for picking tubular locks.4/10Recommended: Red Team Tools Tubular LockpickAlternative: If you are very skilled at picking, you can go the manual route of tensioning and single pin picking, but it will take a lot longer to open the lock. With the Sparrows Goat Wrench you are able to do so.
20. Disk PickSelf explanatory. For picking disk locks.4/10Recommended: Sparrows Disk PickN/A
21. Lock LubricantSometimes you will encounter locks that are a bit difficult to manipulate due to weather and age. Nothing some lock lube couldnt help with.9/10Some powdered Graphite gets the job done.N/A
22. Plug spinnerThis is used in those scenarios where you try to pick open a lock, but you had to spin the core in the opposite direction. This avoids the need of having to pick the lock all over again.4/10You can find a plug spinner on Red Team Tools Plug SpinnerThere are other alternatives from some other brands, which you can find with a few online searches
23. Hinge Pin Removal ToolWell, with some locks its just easier to remove the door.3/10Recommended: Red Team Tools Hammerless Hinge Pin ToolHere are some other alternatives: Covert Instruments Hinge Pin Removal Tools
24. PadLock ShimsUsed for shimming padlocks.6/10Recommended: Red Team Tools Padlock Shims 5-PackAlternative: Sparrows padlock shims 20-pack
25. Combination lock decodersThese are used for decoding combination locks.7/10Recommended: Covert Instruments Decoder BundleAlternative: Sparrows Ultra Decoder
26. Commercial door hook or Adams RiteThese tools are used to bypass commercial door locks.4/10Recommended: Covert Instruments Commercial Door HookAlternative: Red Team Tools Adams Rite or the Sparrows Adams Rite Tool
27. Lishi PicksIYKYK.10/10N/AN/A
28. American Lock Bypass DriverSelf explanatory. For Bypassing American Padlocks.4/10Recommended: Red Team Tools American Lock BypassN/A
29. Abus Lock Bypass DriverSelf explanatory. For Bypassing Abus Padlocks.4/10Recommended: Sparrows Abus Lock BypassN/A
30. Alfa AWUS036ACS 802.11acOne of the smallest USB wifi adapters which allows packet injection.10/10Recommended: Alfa AWUS036ACSN/A
41. CANtennaAntenna made out of cans for long range WiFi hacking.3/10N/AYagi Antennas also work the same way.
31. Travelers hookThese handy tools are used to manipulate the latches of unproperly installed locks on doors.10/10Both Red Team Tools Travelers Hook and Covert Instruments Travelers Hook have it available.N/A
32. Under Door Tool “UDT”One of the best tools for quick covert entry. This is used by slipping it under the door, and pulling down on the locked lever from the inside and opening the door.10/10Recommended: Sparrows UDTAlternative: Red Team Tools UDT
33. Camera filmSometimes you dont have enough gap under the door to use a UDT, but you have enough gap over the door.10/10Recommended: Red Team Tools Film CanisterN/A
34. Loider toolThis is similar to the Traveler’s Hook tool, but will usually fit in more narrow gaps.10/10Recommended: Sparrows Quick JimAlternative: Red Team Tools Rescue Jim
35. Crash bar tool “DDT”Self explanatory. Fire exits. Crash bar. You know.7/10Recommended: Sparrows DDTAlternative: Serepick DDT
36. Deadbolt Thumb Turn toolTool for turning thumb locks.7/10Recommended: Both Covert Instruments J tool and Red Team Tools have it available.N/A
37. Door Latch shimsSimilar to the Travelers Hook, and the Jim, but for even narrower gaps.10/10Recommended: Red Team Tools Door ShimsAlternative: Covert Instruments Door Shims
38. Strong MagnetIf you’ve seen the videos of LPL using Magnets, you know what I’m talking about.6/10Recommended: Sparrows The MagnetoThere is also the MagSwitches. Quick search online and you will find them.
39. Bump KeysSelf explanatory. (I gave it a lower rating than others would, since bumping locks is very loud and I prefer picking)3/10Recommended: Sparrows Bump KeysN/A
40. Seattle RAT “SEA-RAT”This is quite heavy, and intended for first responders, and used to break things, but the long blade works as a loider tool for those doors that have a large cover plate.8/10Recommended: Seattle Rapid Access ToolAlternative: I’ve heard of the use of piano wire in these cases, but I have not used it myself.
41. Air WedgeIts used for assistance with creating gap space in door frames, to use with the Travelers hook.7/10Recommended: Covert Instruments Air WedgeN/A
42. Can of Compressed AirUsed to bypass ‘Request To Exit’ sensors10/10These can be picked up in many local places.N/A
43. Proxmark3 RDV4One of the best tools to clone and attack RFID.8/10Recommended: Red Team Tools Proxmark RDV4Alternative: Hacker Warehouse Proxmark3 RDV4
44. Devious, Troublesome, Hooligan!This is a set of ‘keyed alike’ keys, which are used in many things that we encounter on a daily basis.10/10Recommended: Hooligan Keys – Devious, Troublesome, Hooligan!N/A
45. Alarm, Panel, other keysSelf explanatory.10/10Recommended: Ebay – PenTesting KeysN/A
46. Elevator KeysAvoid these unless you know what you are doing.10/10Recommended: Sparrows Fire Service Elevator Key SetN/A
47. Rubber Ducky or Bash BunnyThese USB devices are used for keystroke injection and payload delivery.9/10Recommended: HAK5 USB Rubber Ducky and the HAK5 Bash BunnyAlternatives: The Digispark.
48. DigiSparkIts a cheaper alternative to the Rubber Ducky or the Bash Bunny.Read more.9/10No recommended links at the moment, but often found on overseas online sellers.N/A
49. Lan TurtleUSB/Ethernet device used for stealth remote attacks.9/10HAK5 Lan TurtleN/A
50. Shark JackFound a Ethernet jack in the wall? Quick Portscan? No problem.6/10Recommended: HAK5 Shark JackN/A
51. Key CrocOne of the best keyloggers in the market.10/10Recommended: HAK5 Key CrocN/A
52. Wi-Fi PineappleTool used for WiFi security assessments and attacks.10/10Recommended: HAK5 WiFi PineappleN/A
53. O.MG PlugUSB implant for attacks over WiFi9/10Recommended: HAK5 O.MG PlugN/A
54. ESPKeyUsed as an RFID implant, for RFID cloning and WiFi attacks.7/10Recommended: Red Team Tools ESPKeyN/A
55. PwnagotchiYour EDC WiFi hacking friend.5/10Recommended to build. Pwnagotchi Website.N/A
56. Covert BeltThis is useful to conceal an extra lockpick set.6/10Recommended: Security Travel Money BeltN/A
57. Bogota LockPicksWho hasn’t heard of Bogota picks?10/10Recommended for EDC: Bogota PIN/A
58. Dog Tag Entry Tool setEDC Bogota dog tag.1/10Recommended: Black Scout Survival Dog TagN/A
59. Sparrows Wallet EDC KitThis is a combination of multiple Sparrows EDC wallet items.4/10Recommended: Sparrows Chaos Card; Sparrows Chaos Card: Wary Edition; Sparrows Shimmy Card; Sparrows Flex Pass; Sparrows Orion CardN/A
60. Southord JackknifeKeychain lockpick set.5/10Recommended: Southord JackknifeAlternative: The Covert Instruments – Covert Companion
61. Covert CompanionA comprehensive kit with multiple tools for multiple needs.10/10Recommended: Covert Instruments – Covert CompanionN/A
62. Covert Companion Turning ToolsGreat addition to your Covert Companion, so you do not have to carry or improvise with other tension wrenches.10/10Recommended: Covert Instruments – Turning ToolsN/A

Source : KitPloit – PenTest Tools!

Previous ArticleNext Article
Send this to a friend