Hey Chris, Good luck with your talk tonight at DerbyCon.
Permanent link: [Article]-Social Engineering as a Technical Tool
By Chris Hadnagy
When we speak about social engineering the normal conversation steers away from the technical and more to the psychological. This month we are going to change it up a bit and steer head on into the technical arena for a discussion about penetration testing.
There seems to always be a debate online about pentesting, what it is and what it isn’t. How to do it right, how to do it “real world,” how to do it hardcore and even l33t. But at the end of the day what each and every pentester wants (or should want) is to uncover the holes in the clients network, so they can be mitigated before the bad guys use those very same holes for malicious purposes.
That desire should drive each “real world” pentester to use every tool - technical or not - at his disposal for the benefit of his clients. This is where our discussion about how to use social engineering as a technical tool or as a tool to get technical details.
Share your thoughts and your own stories,