"Whether you think you can, or you think you can't – you're right"
– Henry Ford
Social engineering is the art of extracting information from humans. This can be more effective when combined with physical access to the target system. It is the single most successful attack vector used for penetration testing or an actual attack. The success of social engineering attacks relies on two key factors:
- The knowledge that is gained during the reconnaissance phase. The attacker must know the names and usernames associated with the target; more importantly, the attacker must understand the concerns of the users on the network.
- Understanding how to apply this knowledge to convince potential...
