Social Engineering

• Experience with information systems

Audience

• Information system analysts

Social engineering is a method of divulging sensitive information through psychological manipulation. Social engineering relies on human error, making it harder to predict and prevent more than malware-based intrusion.

This instructor-led, live training (online or onsite) is aimed at information analysts who wish to learn the techniques and processes behind social engineering to protect sensitive company information.

By the end of this training, participants will be able to:

• Set up the necessary development environment to start creating custom malware.
• Backdoor legitimate web applications undetected.
• Deliver evil files as normal file types.
• Use social engineering techniques to lead targets into a fake website.

Format of the Course

• Interactive lecture and discussion.
• Lots of exercises and practice.
• Hands-on implementation in a live-lab environment.

Course Customization Options

• To request a customized training for this course, please contact us to arrange.

Introduction

What is Social Engineering

• Types of malware
• The evolution of malware

Overview of Malware Attacks

• Propagating
• Non-propagating

Information Gathering

• Domain information
• Networking accounts
• Maltego overview

Preparing the Penetration Testing Laboratory

• Installing and configuring a virtual machine
• Installing and configuring Maltego (information gathering tool)

Generating Evil Files

• Installing and configuring BeeLogger
• Implementing command lines scripts to access an operating system that uses bash
• Creating an advanced backdoor
• Creating a custom remote keylogger
• Logging saved passwords
• Executing payload
• Reporting payload

Delivery Options

• Initiating an SMTP server
• Spoofing emails
• Replicating any legitimate login page
• Directing targets to access an evil URL

Social Engineering Prevention

• Recognizing spoofed emails
• Protecting against browser exploits
• Detecting malware manually or using a sandbox

Summary and Conclusion