Phishy Little Liars - Pretexts That Kill

Dive into the world of advanced social engineering techniques in this 22-minute conference talk from BSidesSF 2020. Explore how specialized pretexts can enhance penetration testing effectiveness, moving beyond the cliché 'IT Guy' approach. Learn to craft custom, target-specific pretexts that remain undetected by leveraging corporate data, social media, and other publicly available information. Discover the importance of empathy in pretext creation, understand why customization matters, and gain insights into creative pretext development. Acquire knowledge on fishing training techniques and time management for successful social engineering attempts. Access free resources to further hone your skills in creating convincing, radar-evading pretexts for more realistic and valuable security assessments.

Introduction
Overview
Disclaimer
Corporate Review Websites
Social Media
Corporate Giving Manager
Facts
Foursquare
Sample pretext format
Notes
Target
Who You Are
Motivations
Elements
Empathy pretext
Why custom pretexts are important
Creative pretexts
Fishing training
How much time do you need
Free resources