Parking barriers and gate remotes are one of the most reliable Sub-GHz wins in physical pentesting. Most systems are fixed-code or use weak rolling codes, and the Flipper handles them cleanly. Here's a guide on hacking parking barriers & gates with the Flipper Zero.

Here's a guide on how to get managed into monitor mode across different network cards and operating systems.

Rogue APs are the most reliable wireless attack vector in corporate pentesting. Clients trust what they know, and they'll connect to an AP broadcasting the SSID they're looking for. Here's the full operational guide on hacking with rogue access points (APs).