Advanced Offensive Security
Social Engineering & Phishing
The human attack surface — pretexting, phishing, and awareness testing.
The most reliable way into an organisation is often the people, not the firewall. Social engineering manipulates humans into revealing information or taking unsafe actions. In authorized engagements it's tightly scoped and consent-based.
- Phishing — deceptive emails harvesting credentials or delivering payloads.
- Spear phishing — highly targeted, using OSINT about the specific victim.
- Pretexting — inventing a believable scenario (IT support, vendor) to build trust.
- Vishing / smishing — voice and SMS variants.
- Physical — tailgating, badge cloning, rogue USB drops.