Master the art of
Physical Penetration Testing

Attending the Practical Physical Exploitation course was an exceptional experience. The hands-on, immersive training, delivered by highly knowledgeable instructors with extensive real-world expertise, provided invaluable insights into physical security vulnerabilities and adversarial methodologies. The curriculum covered a broad range of security concepts, from bypassing access controls to executing real-world intrusion scenarios, all reinforced through realistic, scenario-based exercises. This approach not only deepened my understanding but also built my confidence in applying these techniques under pressure. The impact of this training extended beyond the classroom. It directly contributed to a significant career opportunity. Shortly after completing the course, I was personally selected by senior leadership to lead a physical penetration team for critical infrastructure, an opportunity that would not have been possible without the skills I gained here. For security professionals, red teamers, and anyone serious about advancing their expertise in physical exploitation, I highly recommend this course.

What a blast! One of the most fun, informative, and practically challenging courses I've ever taken. The instructors have put something together here that is quite special. Instead of just guiding you through the "how," they also teach you the "why" of every single thing you might do (or not do) to go from casing a target site and security personnel from miles away to popping open a CEO's office door in the middle of the night, with just enough support to not feel stranded but plenty of freedom and autonomy to take risks and make mistakes. They strike the ideal balance between the tactics and tools of intrusion, the theory and creativity behind understanding human behavior, and running a professional service that delivers beyond expectations, from scoping call to report delivery. If you've ever wanted to even just dip your toes into physical intrusion, this is the best way to do it. Don't wait.

As I've stated in other forums, I've been through a lot of training during my lengthy military career but this is without doubt some of the best that I've ever attended. Travis and Ralph are phenomenal professionals and this three-day course provides a comprehensive, end-to-end examination of the physical penetration testing lifecycle. Extremely impactful, this training is an immersion into the realities of physical penetration testing. Each module is reinforced through hands-on application in safe, controlled environments that closely replicate real-world conditions. Anyone interested in developing, refreshing, or advancing their physical penetration testing skills must attend this course.

This 3 day training course touches on every big and small detail there is when it comes to physical penetration testing. If you are contemplating learning more about this field or going into it and want a one stop shop to give you everything you need to know, then buy this course ASAP. This class is much different than any other physical penetration testing class, as many others your only in a classroom environment, this class you will be in the class one hour and then outside the classroom doing reconnaissance, badge cloning, ethically breaking into a real building and much more! Even if you know extremely basic physical security, you will walk away at the end of this class feeling like you've been doing this as your profession!

This is one of the few courses that actually delivers on what most physical security training only talks about. It is built around doing, not watching. Minimal fluff, heavy hands on. You are running recon, building a plan, executing, and adapting through real friction with limited knowledge of the target. What sets it apart is how closely it follows a full assessment lifecycle. You are not just learning techniques, you are learning how to think. When to push, when to pivot, and how to stay aligned with objectives instead of chasing a win. The instructors know the work and how to teach it. The focus is on decision making, not tricks. It also covers what most courses skip: how to operate safely, scope properly, and communicate results in a way that matters. This is not a comfortable training. That is the point. The realism is where the value is. If you are serious about physical penetration testing, this is one of the highest quality trainings you can take. It will show you whether you can do this work and still teach experienced operators something new.

I had a little background in pentesting and had delivered on a few physical pentests by the time I took this course so I actually thought this would be more about having fun and doubling down on skills I already had, and I was so, so wrong. I learned so many new skills in every category from lock picking and decoding, badge cloning and replicating, and the latest in how to actually get close enough to do either of those. The instructors were awesome at laying out exactly why we do what we do and for how long we do it since they're pulling from years in the pentesting field and the military, so every lesson they teach has this multifaceted approach that I found super helpful. Complete level up. If you're just starting out or you are your team's current red team lead and do physicals all the time, I promise you, you will benefit.

The Practical Physical Exploitation course by Travis Weathers and Ralph May is an absolute must for anyone looking to break into physical penetration testing. The hands-on approach, focused on the practical application of tools and techniques, builds both skill and confidence through multiple real-world exercises. One of the biggest highlights was learning to clone and create security badges, an invaluable skill in the field. But what truly set this course apart was the deep dive into the business side of physical security assessments, including scoping, pricing, and selling engagements. That insight alone was icing on the cake. I highly recommend this course to security professionals looking to level up their physical exploitation expertise!

The Practical Physical Exploitation course is unparalleled in its depth and realism, fully preparing participants for all aspects of physical penetration engagements. Conducted in real-world environments around Tampa, the training introduces an element of unpredictability with public interactions, making it one of the most immersive and practical experiences available. The level of detail, efficiency, and value in this course truly sets the bar for physical penetration testing training. I'm incredibly grateful to Travis, Ralph, the Mayweather Group, Practical Physical Exploitation, Antisyphon Training, and Black Hills Information Security for making this opportunity possible. I look forward to sharing a more detailed review soon, but for now, I highly recommend this course to anyone serious about mastering physical security assessments!

This course provided a strong introduction to the intersection of physical security and cybersecurity. One of the most valuable takeaways was understanding how physical access can directly impact system security, including demonstrations of authentication bypass techniques and weaknesses in access control systems. Coming from an Active-Duty military IT background with over 20 years of experience, I found the course to be a solid bridge between traditional infrastructure knowledge and modern cybersecurity concepts. It reinforced the idea that security is layered, and that physical vulnerabilities can often be the weakest link if not properly addressed. The class environment included students from primarily civilian and academic backgrounds, which offered a different perspective on problem-solving and exposure to tools and techniques that are more commonly seen in the private sector. While some of the material was introductory, it highlighted areas where continued learning, especially in cyber defense and adversarial thinking, can enhance overall effectiveness as an IT professional. Overall, I would recommend this course to ANYONE transitioning into cybersecurity or looking to better understand how physical and digital security overlap. It serves as a great foundation and reinforces the importance of thinking like both a defender and an attacker when securing systems.

Truly an exceptional training course. A great balance of classroom and hands on activities. The team here really know their stuff and were very willing to share based on their knowledge and experience. Regardless of your level of knowledge starting out, you will absolutely learn something.

The PPE team has put together a course that brings a curated balance of classroom and hands-on training, for the entire lifecycle of a Physical Security engagement. Whether you're a consultant, practice leader, or internal red teamer you will find value in this course.

Highly recommended. Travis and Ralph are a wealth of knowledge and their hands on approach is top notch.

Great for anyone who is interested in physical penetration testing and needs a controlled environment to learn.

The Practical Physical Exploitation course is well worth the time, money, and effort. The instructors have built an excellent offering that is a true 'zero to hero' style course that not only new pentesters, but seasoned professionals would both gain value from attending.

This is the new gold standard for physical red teaming and adversarial engagements. The PEAK Full Bundle is a force multiplier, housing a complete, field-tested operational system in a single Pelican case. It fundamentally elevates our operators, transforming difficult engagements into assured successes. Assembled by operators, for operators. The PEAK provides the hardware for every phase of a mature engagement. It's not an expense; it's an investment in success.

I've been doing physical pentests since 2019, and the PEAK kit has been a game changer. Before I had it, I didn't have a reliable way to clone RFID without removing a badge from site, which was both disruptive and slow. After taking the PPE training and adding the PEAK kit to my toolbox, my workflow transformed. The kit is dependable and has dramatically reduced the time I spend cloning RFID. It has improved the quality of my engagements and made it far easier to demonstrate real world risk to clients. If you do physical penetration testing, the PEAK kit is worth it and it has already paid for itself in time saved and repeat clients!

Everything in here is time tested and immediately useful. I take it in every physical engagement, and on cloning engagements it is absolutely indispensable. Get one. You'll never look back.

I purchased two of these boards to help ease the burden of building my own long-range HID Prox and iCLASS readers, and man, did they deliver. These boards are truly plug-and-play; no electrical experience necessary. Even better was the service: Travis and the team had them in my hands just two days after ordering, which gives me confidence that if I ever run into issues onsite during an engagement, they could overnight a replacement and keep my client's experience from suffering due to downed equipment. This isn't a review of the Doppelganger UI itself, but it's everything it's meant to be, and more. If you're looking to build your own long-range cloner, this is the ONLY choice.

This dev board is well thought out and extremely functional to get up and running quickly and easily for your pen-testing or Red teaming environments. The plug and play integration with the Doppelganger assistant makes things almost seamless and very easy to integrate. If you like to have preassembled tools or like building your own, you can't go wrong with any of the PPE Doppelganger/Stealth tools. I would highly recommend having this device in your tool kit and dev environments!

I used to dread badge cloning on assessments and now its my favorite part of the whole engagement. The doppelganger documentation is fantastic and could get anyone up to speed enough to set it up and use it. Love this thing.

The Stealth Wiegand Data Interpreter (WDI) by Practical Physical Exploitation is a powerful tool for testing access control systems discreetly. Its detailed documentation ensures ease of use, while broad compatibility with credentials like iCLASS SE, SEOS, HID Prox, EM, and AWID makes it highly versatile. The device's Stealth Mode enhances efficiency by toggling WiFi to avoid detection, extending battery life, and supporting covert operations. Its wall-mountable design allows for strategic placement near access points, simplifying testing without long-range operations. In summary, the Stealth Wiegand Data Interpreter is a robust and versatile tool that combines comprehensive documentation, broad credential compatibility, and stealth capabilities. It is an invaluable asset for professionals conducting authorized physical security assessments.

This thing opens up so many more possibilities for physical facility testing and is so simple to use. This has definitely risen to the level of table stakes for a proper physical test kit. You just have to have one or you're missing attack surface.