That was the case a few weeks ago. After almost 3 months of fine, carefully performed recon, digital penetration and information extraction, we needed to test the physical security surrounding the backup room.
After some information gathering we discovered that this server farm room needed a proximity card to open the elevator and once inside a key, an actual key, to set the elevator on “go” mode. After some debate we concluded we didn’t have time to wait to have a duplicate of either the key or the card or both so we used brute force. We spent a couple of days on the “phone” wandering around the company’s parking lot and on the second day we found it: someone forgot a card on his car. We opened the car (don’t ask, that’s one of Mikey’s things) and took the card. We walked into the building pretending we worked there, still on the phone. We used the card and called the elevator. Once inside I tried to pick the lock that would allow the elevator to go up. After a few moments I realized it would take a bit longer that I thought and we were risking someone calling the elevator, so I grabbed my knife, shove it into the lock, played with it a bit using force and voila! On to the “Run” mode.
Brute force… sometimes finesse has nothing to do with it.