The BHIS physical kit can be requested by sending an email to systems@blackhillsinfosec.com. The kit can be sent to your residence or the hotel where you plan to stay during your onsite engagement.
BHIS maintains two physical testing kits. The physical kits are identical and include the following components for use during testing:
Foam Layer 1 - The first foam layer of the physical kit primarily consists of physical entry tools. The exceptions include an endoscope for peeking behind doors, a Bluetooth photo printer for making visual badge facsimiles, and X-Acto knives to trim the badges. The list of included components follows:
| Item No | Qty | Description |
|---|---|---|
| 1 | 1 | Crash bar tool |
| 2 | 1 | Deadbolt Thumb Turn tool |
| 3 | 2 | Long traveler hook |
| 4 | 1 | Short traveler hook |
| 5 | 1 | Mini jim tool |
| 6 | 1 | Basic bump key set |
| 7 | 1 | Tuxedo lock pick set |
| 8 | 1 | Covert Companion |
| 9 | 2 | Mica door shim set |
| 10 | 40 | Padlock shims |
| 11 | 2 | Common office keys |
| 12 | 1 | High resolution endoscope |
| 13 | 1 | Door jamb crowbar |
| 14 | 1 | HP Sprocket Select printer |
| 15 | 2 | X-Acto razor knife |
A graphic depiction of the item location, using the item number in the table above, is shown below.
Foam Layer 2 - The second layer of foam includes a low-frequency long-range RFID reader.
| Item No | Qty | Description | ||
|---|---|---|---|---|
| 1 | 1 | Low-frequency long-range RFID reader | ||
 |
Foam Layer 3 - The third layer of foam includes tools used for badge cloning, including a battery pack for operating the long-range RFID readers. Upon arriving onsite, all battery powered electronic components in the kit should be charged (battery pack, iCopy-X, and photo printer).
| Item No | Qty | Description | ||
|---|---|---|---|---|
| 1 | 1 | High-frequency long-range RFID reader | ||
| 2 | 1 | Proxmark3 RDV4 RFID tool | ||
| 3 | 1 | iCopy-X iClass reader | ||
| 4 | 1 | 5/12v Battery pack | ||
| 5 | 1 | iCopy-X RFID tool | ||
| 6 | 1 | 12v Battery pack transformer | ||
A graphic depiction of the item location, using the item number in the table above, is shown below.
Case Lid Foam - The case lid includes various Radio Frequency ID (RFID) card types and formats for use in gaining physical access to an organization’s facilities. The cards without quantities are considered consumables. At the end of an engagement, a customer may ask for your cloned badges and providing them is fine. However, if the kit has low stock of a specific card type, please email systems@blackhillsinfosec.com to replenish that specific card type.
| Item No | Qty | Description |
|---|---|---|
| 1 | N/A | T5577 clamshell cards |
| 2 | N/A | T5577 flat cards |
| 3 | N/A | HID iClass classic clamshell cards |
| 4 | N/A | HID iClass DY flat cards |
| 5 | N/A | HID Prox II Clamshell cards |
| 6 | N/A | MiFare Classic flat cards |
| 7 | N/A | MiFare Ultralight fobs |
| 8 | N/A | MiFare Classic fobs |
| 9 | 1 | RFID Diagnostic Card |
| 10 | 16 | iCopy-X cloning card set |
| 11 | 2 | ProxGrind cloning card set (T5577 and MiFare 1k S50) |
A graphic depiction of the item location, using the item number in the table above, is shown below. Please arrange items in this position when packing up the physical kit for return to the BHIS office.
Small cases - On the interior of the kit are two small cases, these cases contain additional items that may be of use during testing. One case contains items for displaying forged badges and the other case contains various electronic devices that can be used to demonstrate impact after successfully gaining access to the facility.
Badge case items - None of the items below includes a quantity because they are all consumable devices. If needed, replacement items can be purchased and expensed during onsite testing.
| Item No | Qty | Description |
|---|---|---|
| 1 | N/A | Retractable lanyards |
| 2 | N/A | Breakaway lanyards |
| 3 | N/A | Badge sleeves |
Electronic case items - If possible, the devices in the electronic case should be retrieved after testing. If an item is lost as a consequence of testing activity, please email systems@blackhillsinfosec.com to have a replacement purchased.
| Item No | Qty | Description | |
|---|---|---|---|
| 1 | 1 | LAN Turtle | |
| 2 | 1 | USB Rubber Ducky, Micro USB adapter, and MicroSD card reader | |
| 3 | 1 | OMG Cable programmer | |
| 4 | 3 | OMG Cables (USB-C, Lightning, Micro-USB) | |
| 5 | 1 | Bash Bunny |
Free floating items - The remaining items included in the kit are not secured in foam or a case. These items are:
| Item No | Qty | Description | |
|---|---|---|---|
| 1 | 1 | Nylon door wedge | |
| 2 | 1 | Air wedge | |
| 3 | 2 | High visibility vests | |
| 4 | 1 | Under the Door Tool | Under the bottom foam layer |
Images of the two free floating kit items are shown below.
