Social Engineering Penetration Testing

Foreword

I can still remember clearly when I sat down and started writing the framework at social-engineer.org. I searched the Internet for helpful hints on topics I wanted to cover. Nevertheless, Social Engineering was not a hot topic at that time.

I could find videos on getting free food from drive thru’s or picking up girls… but nothing to do with security. Around the same time I was writing the framework, I worked hard to try and include social engineering in any security work I was doing. Most of the time companies would say things like, “Why try? We know we will fail.” or “There is no way anything like that would work on me!”

I even resorted to giving away the services at times, just to prove how dangerous social engineering was. Fast ...