Badge cloning typically involves copying the data from access control badges, which frequently utilize the following technologies:
* NFC (Near-Field Communication):
* NFC is a subset of RFID technology that operates at short ranges (up to 10 cm). It is commonly used in modern access control systems, payment systems, and badge technologies. NFC cloning tools can intercept and copy badge data.
* RFID (Radio-Frequency Identification):
* RFID operates over a broader range of frequencies and distances than NFC. Many legacy access systems use RFID badges, which are susceptible to cloning attacks using RFID readers and cloning devices.
Exclusions:
* Bluetooth, Modbus, Zigbee, CAN bus are not typically used in badge-based access control systems and are unrelated to badge cloning.
CompTIA Pentest+ References:
* Domain 3.0 (Attacks and Exploits)
* Domain 4.0 (Penetration Testing Tools)

https://www.asc.ohio-state.edu/lewis.239/Class/Perl/perl.html
Example script:
#!/usr/bin/perl
$ip=$argv[1];
attack($ip);
sub attack {
print("x");
}

A peer review process ensures that a penetration test report is accurate, unbiased, and free from errors.
* Peer review (Option B):
* Senior security professionals verify findings, risk levels, and remediation recommendations.
* Reduces the risk of misinterpretation or incorrect data in reports.

Since the ICS is air-gapped (not connected to external networks), the best approach is manual assessment, which involves on-site testing, physical access, and reviewing configurations to identify vulnerabilities.
Option A (Channel scanning) #: This is used for wireless networks, not for isolated ICS systems.
Option B (Stealth scans) #: A stealth scan is a method to avoid detection while scanning, but it still requires network connectivity.
Option C (Source code analysis) #: If the ICS is a proprietary system, source code might not be available.
Also, vulnerabilities could exist outside the code, such as misconfigurations.
Option D (Manual assessment) #: Correct. The ICS is offline, so a manual review of system settings, firmware, and configurations is the best approach.
# Reference: CompTIA PenTest+ PT0-003 Official Guide - ICS & SCADA Testing