Test human-factor security through authorized social engineering campaigns.
Techniques
- Phishing - Email campaigns, spear phishing, credential harvesting
- Pretexting - Scenario-based manipulation, impersonation
- Vishing - Voice-based social engineering
- Physical - Tailgating, badge cloning, dumpster diving
Workflow
- Define campaign scope and authorization
- Develop pretexts and materials
- Execute campaign with tracking
- Measure success rates and capture evidence
- Report findings with awareness recommendations
Reference
reference/social-engineering.md- Social engineering techniques and methodologies