Longlining … The 2013 Social Engineering Threat

Posted May 10, 2013 by Dale Pearson

I came across another great InfoGraph today from proofpoint on “Longlining” and I thought I would share it. This approach uses more targeted phishing emails along with various techniques in an attempt to avoid detection.

Full Story »

Why Social Engineering Works … Infograph by Veracode

Posted March 11, 2013 by Dale Pearson

I came across this great infograph from Veracode today on “Why Social Engineering Works”. Wish I had the time and the skill to put these infographs together, but here you go. (Its a relatively large file so please be patient while it loads)

Full Story »

OSINT Tools … Recommendations List

Posted December 27, 2012 by Dale Pearson

Free OSINT Tools. With the New Year fast approaching I thought now would be a great time to post the first draft of some recommended Open Source Intelligence (OSINT) gathering tools and resources. I will look to maintain this list overtime and have it grow, so if you come across something you think should be [...]

Full Story »

Derren Brown Apocalypse … Fake or Real … My Opinion

Posted November 1, 2012 by Dale Pearson

I should start this post by saying that I am a huge Derren Brown fan, so I am probably commenting from a biased / rose tinted view but I am certainly trying not to when I share my views on Derren’s latest TV offering Apocalypse. So the reason for this quick post is a few [...]

Full Story »

The Risks of Posting in Social Networks … By Trend Micro

Posted October 17, 2012 by Dale Pearson

I found this awesome Infograph put together by Trend Micro on the Risks o Posting in Social Networks. I cant remember exactly where I found it now but I saved the image so I am posting it here. If you know where it came from feel free to post in the comments.

Full Story »

Attention Manipulation Techniques … Natural Buffer Overflows

A key part of being a Social Engineer is being able to create yourself windows of opportunity. These may be to distract peoples attention whilst you slip past a door, pull some keys from a key cabinet, acquire an access card ...

Facebook Graph … Social Engineering OSINT gets Graphical

So Facebook currently have a new offering in beta form, and its called ‘Facebook Graph’. Woopie Doo I hear you cry, but it may actually be something to sauce up your Social Networking OSINT a little more if you are ...

How To Integrate Metasploit with BeEF … Browser Exploitation Framework

So the Browser Exploitation Exploitation Framework (BeEF) has some awesome exploitation modules of its own, but when you combine it with the added awesome sauce that is Metasploit you get to have even more fun. Its like a Socia...

How To Autorun Modules in BeEF … Browser Exploitation Framework

Unless you are the Social Engineer with the fastest fingers in the west, you are going to have a challenge on your hands trying to initiate the various BeEF modules of interest when you initially hook a compromised host. So to ...

How To Install BeEF … Browser Exploitation Framework

The Browser Exploitation Framework (BeEF) is an excellent tool for Social Engineers and Pentesters. This video provides a quick How To on installing it under Linux. The install from start to finish takes around 10 minutes, but ...