Ethical Hacking: Social Engineering

Introduction

• Defining social engineering
• What you should know
• Hacking ethically

1. Grasping Social Engineering

• Hacking the human
• Visualizing the victim
• Skills of a social engineer
• Recognize an attack

2. Social Engineering Mechanisms

• Using charm, power, and influence
• Employing browsers for social engineering
• Evaluating add-ons and extensions
• Deploying mobile-based attacks
• Manipulating with social media
• Disclosing private information
• Challenge: Avoiding online dating scams
• Solution: Avoiding online dating scams

3. Misusing Trust

• Disgruntled employees
• Steal an identity
• Challenge: Monitoring your employees
• Solution: Monitoring your employees

4. Penetration Testing with Social Engineering

• Using email and websites in social engineering
• In person and on the phone
• Exploring the social engineering toolkit
• Going phishing
• Using the social engineering toolkit

5. Avoiding Social Engineering

• Defending against social engineering
• Understanding spam
• Preventing spoofed email
• Preventing insider attacks
• Properly disposing of data and media

Conclusion

• Next steps