We hired a physical pentester and he got in the first day by convincing the night janitorial staff that he was an employee that left his badge on his desk and just needed to go pick it up. He wore a jacket with our logo to make himself look more legit.

He hid out in a conference room and had unfettered access to the office all night, he left behind a network device plugged in to a spare network jack behind a printer.