Social Engineering Overview-How To Prevent Your Co. from Getting Hacked
summary
Step-by-step OSINT to physical playbook: gathers ~75% of target data from public sources (website, LinkedIn, job postings), automates collection with Maltego and FOCA, harvests emails and timing via Twitter/traffic cams, crafts a spear‑phish run of 3–4 highly targeted emails, registers look‑alike domain, buys certs and serves a signed Java applet payload, and shortcuts defenses by cloning RFID badges with a Proxmark rig and planting pone‑plugs or using duplicated cards — real campaigns that consistently succeed.
AI-written summary · about
chapters (14)
- 0:00Introduction and speaker background
- 2:49What is social engineering
- 7:00Why social engineering works
- 8:46Target selection for attacks
- 10:52Reconnaissance and data gathering
- 15:31Building the attack plan
- 25:32Cyber attack execution
- 31:07Physical security vulnerabilities
- 38:58RFID and card cloning risks
- 45:17Case study walkthrough
- 46:19Legal and ethical considerations
- 51:00Security recommendations
- 52:27Career in security consulting
- 53:29Can you ever be fully secure
related talks
16mSocial Engineering: Tactics and Techniques
44mHacking Humans: Social Engineering Techniques
51mSocial Engineering: Hacking People
50mHacking Humans : Social Engineering Techniques and How to Protect Against Them
58mSocial Engineering: Hacking Humans
56mHacking your Mind and Emotions
55mHacking Humans
41mHacking Humans : Social Engineering Techniques and How to Protect Against Them