If you're going to get close enough to the machine to interface with it I would rather use PoisonTap[1] which tricks the machine to route everything through the

If you're going to get close enough to the machine to interface with it I would rather use PoisonTap[1] which tricks the machine to route everything through the poisontap and add in semi-persistence with the use of cached backdoors. Some will say 'Well what if the corporation uses a webproxy like bluecoat.' There is a simple work around you go buy a domain that is already categorized as something like 'Business/Economy' which most corporations allow. [1]https://samy.pl/poisontap/ https://samy.pl/poisontap/