Breaching The Perimeter: The Forgotten Attack Vector That Always Works

No ratings

Presented at OrangeCon 2026 by

Jiri Vanek

tatramaco

If you can open the server room door, you don’t need exploits. In this talk, we demonstrate nine real-world ways attackers bypass a server room door and achieve full compromise—no malware, no zero-days, no phishing required. Firewalls, EDR, and IAM become irrelevant the moment physical access is gained. This is not theory. These are techniques used in actual red team engagements across Europe. We show how attackers exploit trust, abuse operational gaps, and chain physical access into full compromise. These techniques go beyond tailgating. We also cover how modern attackers accelerate these intrusions using AI—automating OSINT to map targets and using deepfake voice pretexting to convincingly talk their way through restricted access points. If your threat model stops at the network edge, this talk will break it.