Unauthorised Access: Physical Penetration Testing For IT Security Teams

8.5. Global Positioning Systems

A good Global Positioning System (GPS) receiver is an important piece of kit. It allows you to do the following:

• Mark points of interest on a map or satellite photo prior to the test and navigate to them with ease.

• Mark points of interest in situ, for example to indicate to a client an important location (such as where you may have left something).

• Note the locations of cameras, guard offices so your team can avoid them.

• Mark the presence of wireless networks.

• Let your support staff know exactly where you are.

There are a number of GPS receivers on the market and you can spend a little or as much as you want. Personally, I want the following in a device:

• Integrated mapping, is available in most modern handsets, gives you the capability to show your current location on a digital map. This is useful as you don't need to refer to other media.

• National Marine Electronics Association (NMEA) compatibility for streaming coordinates to a pc (useful for marking down locations of wireless access points in real time).

• The ability to import and export routes and waypoints. Waypoints allow you to plot a predefined set of coordinates prior to the test and follow them. Exporting will allow you to plot the route you took for later inclusion in reporting.

• Google Earth compatibility is useful when writing a report. I like to plot my route with satellite photographs.

My favorite device and one that satisfies all of these requirements is the Magellan eXplorist XL. It is extremely ...