Another common part to a red team assessment is the
use of phishing emails and messages.
These can be sent against targets that you have
identified through some of your recon work.
Maybe you saw email addresses or mobile numbers through
windows on your physical recon or perhaps via digital, open
source intelligence techniques.
You can craft phishes to gain access to digital resources or you could craft
messages that arrange for you to access physical locations.
You need to ensure that you stick within the agreed scope of work here,
as well as remaining ethical in the bait that you use.