Social engineering pentesting. - How it is done, and what you should think about
summary
A physical social‑engineering pentest shows how open sources and small props get real access: the tester uses printed blueprints, a fake email pretext with a coworker’s phone number, a local contractor logo and casual workwear to persuade a janitor to hand over keys, enters the server room and could have planted a USB; the finding is a policy collision (key‑card custody vs. escort) and no immediate harm, but the post‑test debriefing, HR coordination and anonymized reporting prove essential to avoid distress, blame and contractual fallout.
AI-written summary · about
chapters (7)
- 0:00Social engineering pentesting intro
- 15:49Planning pen tests
- 22:32Server room breach case
- 32:05Ethical testing concerns
- 45:27Psychology of testing impact
- 55:04Key takeaways
- 57:31Q&A
related talks
34mThe Aftermath of a Social Engineering Pentest - Are We Being Ethically Responsible?
46mSocial Engineering Attacks in Practice
16mSocial Engineering: Tactics and Techniques
55mSocial Engineering Overview-How To Prevent Your Co. from Getting Hacked
58mSocial Engineering: Hacking Humans
30mSecurity Starts With You: Social Engineering
44mHacking Humans: Social Engineering Techniques
51mSocial Engineering: Hacking People