.

[Article]-Top 5 Tips To Make Social Engineering Your Career

<<

don

User avatar

Administrator
Administrator

Posts: 4226

Joined: Sun Aug 28, 2005 10:47 pm

Location: Chicago

Post Wed Jan 25, 2012 5:27 pm

[Article]-Top 5 Tips To Make Social Engineering Your Career

The first of many news items for EH-Net in 2012 is that we have a brand new columnist. You all know him from his work at OffSec and then in the field of SE with his site and book. We're excited to have Chris as part of the EH-Net family. Hope you agree. Either side you fall on, let us know what you think.

Permanent link: [Article]-Top 5 Tips To Make Social Engineering Your Career


Image


Chris Hadnagy

Over the last year social engineering has gotten a lot of press.  From the attacks on companies like Sony, HB Gary, PBS, Citibank et al to contests like the Social Engineering CTF at Defcon, it seems that social engineering has taken the front page. And rightfully so, as it is still the easiest and often most effective vector of attack.  With that in mind, many people are interested in learning what it will take to either add social engineering skills to their tool chest (either personally or as part of their red team) or even become a full-time, professional social engineer.

And that was the impetus behind Chris Hadnagy's new monthly column exclusively at The Ethical Hacker Network, how to become a professional social engineer. So to get the ball rolling, I compiled this Top 5 List to help each person make this a career path or at least add it to their present security practices. As we move through the coming months, we’ll explore the history, methodologies and practical experiments in attacking the human. It will not only be educational but eventually lucrative for you and your organizations.



Feedback is always welcomed,
Don
CISSP, MCSE, CSTA, Security+ SME
<<

lorddicranius

User avatar

Sr. Member
Sr. Member

Posts: 448

Joined: Thu Mar 03, 2011 3:54 am

Post Wed Jan 25, 2012 5:53 pm

Re: [Article]-Top 5 Tips To Make Social Engineering Your Career

Great first article!  I really enjoy listening to the Social-Engineer podcast and look forward to future articles from Chris.

As for free courses on psychology, there's a few over at Academic Earth from Yale, Berkeley, and UCLA:

http://www.academicearth.org/subjects/psychology
GSEC, eCPPT, Sec+
<<

Dark_Knight

User avatar

Sr. Member
Sr. Member

Posts: 294

Joined: Mon Aug 11, 2008 7:03 pm

Post Wed Jan 25, 2012 8:18 pm

Re: [Article]-Top 5 Tips To Make Social Engineering Your Career

Niceeeee....as for books here is my list:

http://www.amazon.com/Its-Not-All-About ... 531&sr=8-1

http://www.amazon.com/Social-Engineerin ... 603&sr=1-1

This I have not read but I hear it is very good:

http://www.amazon.com/Ghost-Wires-Adven ... 644&sr=1-1

I am looking forward to this series.
CEH, OSCP, GPEN, GWAPT, GCIA
http://sector876.blogspot.com
<<

alan

User avatar

Newbie
Newbie

Posts: 48

Joined: Sat Dec 27, 2008 11:55 pm

Post Thu Jan 26, 2012 5:02 pm

Re: [Article]-Top 5 Tips To Make Social Engineering Your Career

Thanks for this article. Interesting to see so much interest in Bristol, UK, not far from me!


Here's a couple of links to some more material

Open University: http://www.open.edu/openlearn/body-mind/psychology

MIT Opencourseware: http://ocw.mit.edu/courses/brain-and-cognitive-sciences/


I'll also be interested in seeing the reviews for this book - Human Compromise by Mike Murr http://www.syngress.com/hacking-and-penetration-testing/Human-Compromise/ (when it comes out in a few months), but obviously, buy Chris' book/course first :)
<<

don

User avatar

Administrator
Administrator

Posts: 4226

Joined: Sun Aug 28, 2005 10:47 pm

Location: Chicago

Post Tue Jan 31, 2012 5:31 pm

Re: [Article]-Top 5 Tips To Make Social Engineering Your Career

Thanks for completing the homework assignment. ;-)

Anyone have questions of Chris or other resources for further study?

Don
CISSP, MCSE, CSTA, Security+ SME
<<

lorddicranius

User avatar

Sr. Member
Sr. Member

Posts: 448

Joined: Thu Mar 03, 2011 3:54 am

Post Tue Jan 31, 2012 6:08 pm

Re: [Article]-Top 5 Tips To Make Social Engineering Your Career

I thought of a quick question for Chris.  I wanted to verify some info from his site first, but it looks like they're (.org/.com) are down at the moment :P  I'll check again later.
GSEC, eCPPT, Sec+
<<

millwalll

Post Wed Feb 01, 2012 4:39 am

Re: [Article]-Top 5 Tips To Make Social Engineering Your Career

Cool some really good tips I recently done my first SE test for work and have written abit about it for anyone who interested.

http://jamierougive.co.uk/social-engineering-my-first-trip-out/
<<

lorddicranius

User avatar

Sr. Member
Sr. Member

Posts: 448

Joined: Thu Mar 03, 2011 3:54 am

Post Thu Feb 02, 2012 2:01 am

Re: [Article]-Top 5 Tips To Make Social Engineering Your Career

Question for Chris: I've been the SE Framework posted on the social-engineer.org website, very comprehensive.  How closely does the live class relate to it?
GSEC, eCPPT, Sec+
<<

loganWHD

Newbie
Newbie

Posts: 4

Joined: Sat Aug 25, 2007 2:13 pm

Post Thu Feb 02, 2012 1:30 pm

Re: [Article]-Top 5 Tips To Make Social Engineering Your Career

Thank you for the great question.  The Framework is the basis for SE in my opinion.  The course follows the book more closely but with practical skills throughout the 5 days.

The Framework is closely related too, but it is not an outline for the course.

Does this help?

Are you coming to the class in Seattle?
<<

lorddicranius

User avatar

Sr. Member
Sr. Member

Posts: 448

Joined: Thu Mar 03, 2011 3:54 am

Post Thu Feb 02, 2012 2:21 pm

Re: [Article]-Top 5 Tips To Make Social Engineering Your Career

Yep, answers my question!

As for the Seattle class: I wish!  Seeing as how I'm only 3hrs away, it's a great location, just bad timing.  Funds are short at the moment :(  I really do hope that enough interest is shown from us west coasters for you to bring it back this way!
GSEC, eCPPT, Sec+
<<

Solinus

Newbie
Newbie

Posts: 31

Joined: Mon Sep 03, 2007 6:33 pm

Location: Cape Cod

Post Wed Feb 29, 2012 9:55 am

Re: [Article]-Top 5 Tips To Make Social Engineering Your Career

Great article! Glad to see the writer added to the list of excellence here at EH Network. I look forward to reading future columns.
I purchased his book as soon as it hit the market. Truly one of a kind; an excellent read! I dream of taking a course like his someday, but we in the northeast are on the forgotten list when it comes to great speakers and courses. Will glean what I can from these columns.
Last edited by Solinus on Wed Feb 29, 2012 9:59 am, edited 1 time in total.
Kerry
MCITP:EA | MCTS(x5) | MCSA+ | MCSE+ | Security + | CCNA | WCSP |
DSCE | PCT |CIW Security Analyst | CSSA
<<

loganWHD

Newbie
Newbie

Posts: 4

Joined: Sat Aug 25, 2007 2:13 pm

Post Fri Jun 01, 2012 8:49 pm

Re: [Article]-Top 5 Tips To Make Social Engineering Your Career

Where in the NE are you?
<<

Triban

User avatar

Hero Member
Hero Member

Posts: 620

Joined: Fri Feb 19, 2010 4:17 pm

Post Sat Jun 02, 2012 9:40 pm

Re: [Article]-Top 5 Tips To Make Social Engineering Your Career

Solinus, depending on where you are, there are a few Bsides events that take place not to mention SchmooCon in DC.  We had a BSides in Meriden, CT last year as well as a 2nd event that followed the Bsides event - ExCon.  One of those will be coming back next year.  There is also Rochester Bsides and every so often Boston BSides.  I made the trip down to Delaware for their BSides 2 years in a row.  For a free Con, it is worth the gas money to travel.

We definitely have our events on this side of the country, you just need to keep an eye out.  I think there can always be more though :D
Certs: GCWN
(@)Dewser
<<

loganWHD

Newbie
Newbie

Posts: 4

Joined: Sat Aug 25, 2007 2:13 pm

Post Sat Jun 02, 2012 9:42 pm

Re: [Article]-Top 5 Tips To Make Social Engineering Your Career

I plan on running one of my courses in DC/MD area.  Prolly not till 2013, but it will happen.

Return to Hadnagy

Who is online

Users browsing this forum: No registered users and 1 guest

.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software