Practical Social Engineering

A Primer for the Ethical Hacker

AvJoe Gray

Häftad, Engelska, 2022

340 kr

Beställningsvara. Skickas inom 3-6 vardagar. Fri frakt över 249 kr.

Fler format och utgåvor

E-bok

315 kr

Beskrivning

Readers learn how to leverage human psychology and publicly available information to attack a target. The book includes sections on how to evade detection, spear phish, generate reports, and protect victims to ensure their well-being. Readers learn how to collect information about a target and how to exploit that information to make their attacks more effective. They also learn how to defend themselves or their workplace against social engineering attacks.

Produktinformation

Utgivningsdatum:2022-06-14
Mått:177 x 234 x 20 mm
Vikt:438 g
Format:Häftad
Språk:Engelska
Antal sidor:230
Förlag:No Starch Press,US
ISBN:9781718500983

Utforska kategorier

IT-säkerhet inom Data och IT

Mer om författaren

Joe Gray is a veteran of the U.S. Navy. He is the Founder/Principal Instructor of The OSINTion, the Founder/Principal Investigator of Transparent Intelligence Services, and the inaugural winner of the DerbyCon Social Engineering CTF. A member of the Password Inspection Agency, he also won the TraceLabs OSINT Search Party at DEFCON 28, and recently authored the OSINT and OPSEC tools - DECEPTICON Bot and WikiLeaker.

Recensioner i media

"Gray provides a very accessible look at social engineering that should be essential reading for pentesters and ethical hackers." -Ian Barker, BetaNews"I really liked the way that [Joe] lays out tools to use, including walking through where to download them from and install them . . . as beginner-friendly and as easy to use as possible."-Patrick Laverty, Layer 8 Podcast

Innehållsförteckning

IntroductionPart 1: The BasicsChapter 1: What is Social Engineering?Chapter 2: Ethical Considerations in Social EngineeringPart 2: Offensive Social EngineeringChapter 3: Preparing for an AttackChapter 4: Gathering Business OSINTChapter 5: Social Media and Public DocumentsChapter 6: Gathering OSINT About PeopleChapter 7: PhishingChapter 8: Cloning a Landing PageChapter 9: Detection, Measurement, and ReportingPart 3: Defending Against Social EngineeringChapter 10: Proactive Defense TechniquesChapter 11: Technical Email ControlsChapter 12: Producing Threat IntelligenceAppendix A: Scoping WorksheetAppendix B: Reporting TemplateAppendix C: Information Gathering WorksheetAppendix D: Pretexting SamplesAppendix E: Exercises to Improve Your Social Engineering