Joe Gray is a veteran of the U.S. Navy. He is the Founder/Principal Instructor of The OSINTion, the Founder/Principal Investigator of Transparent Intelligence Services, and the inaugural winner of the DerbyCon Social Engineering CTF. A member of the Password Inspection Agency, he also won the TraceLabs OSINT Search Party at DEFCON 28, and recently authored the OSINT and OPSEC tools - DECEPTICON Bot and WikiLeaker.

"Gray provides a very accessible look at social engineering that should be essential reading for pentesters and ethical hackers." -Ian Barker, BetaNews"I really liked the way that [Joe] lays out tools to use, including walking through where to download them from and install them . . . as beginner-friendly and as easy to use as possible."-Patrick Laverty, Layer 8 Podcast

• IntroductionPart 1: The BasicsChapter 1: What is Social Engineering?Chapter 2: Ethical Considerations in Social EngineeringPart 2: Offensive Social EngineeringChapter 3: Preparing for an AttackChapter 4: Gathering Business OSINTChapter 5: Social Media and Public DocumentsChapter 6: Gathering OSINT About PeopleChapter 7: PhishingChapter 8: Cloning a Landing PageChapter 9: Detection, Measurement, and ReportingPart 3: Defending Against Social EngineeringChapter 10: Proactive Defense TechniquesChapter 11: Technical Email ControlsChapter 12: Producing Threat IntelligenceAppendix A: Scoping WorksheetAppendix B: Reporting TemplateAppendix C: Information Gathering WorksheetAppendix D: Pretexting SamplesAppendix E: Exercises to Improve Your Social Engineering

Joe Gray is a veteran of the U.S. Navy. He is the Founder/Principal Instructor of The OSINTion, the Founder/Principal Investigator of Transparent Intelligence Services, and the inaugural winner of the DerbyCon Social Engineering CTF. A member of the Password Inspection Agency, he also won the TraceLabs OSINT Search Party at DEFCON 28, and recently authored the OSINT and OPSEC tools - DECEPTICON Bot and WikiLeaker.

"Gray provides a very accessible look at social engineering that should be essential reading for pentesters and ethical hackers." -Ian Barker, BetaNews"I really liked the way that [Joe] lays out tools to use, including walking through where to download them from and install them . . . as beginner-friendly and as easy to use as possible."-Patrick Laverty, Layer 8 Podcast

• IntroductionPart 1: The BasicsChapter 1: What is Social Engineering?Chapter 2: Ethical Considerations in Social EngineeringPart 2: Offensive Social EngineeringChapter 3: Preparing for an AttackChapter 4: Gathering Business OSINTChapter 5: Social Media and Public DocumentsChapter 6: Gathering OSINT About PeopleChapter 7: PhishingChapter 8: Cloning a Landing PageChapter 9: Detection, Measurement, and ReportingPart 3: Defending Against Social EngineeringChapter 10: Proactive Defense TechniquesChapter 11: Technical Email ControlsChapter 12: Producing Threat IntelligenceAppendix A: Scoping WorksheetAppendix B: Reporting TemplateAppendix C: Information Gathering WorksheetAppendix D: Pretexting SamplesAppendix E: Exercises to Improve Your Social Engineering

Joe Gray is a veteran of the U.S. Navy. He is the Founder/Principal Instructor of The OSINTion, the Founder/Principal Investigator of Transparent Intelligence Services, and the inaugural winner of the DerbyCon Social Engineering CTF. A member of the Password Inspection Agency, he also won the TraceLabs OSINT Search Party at DEFCON 28, and recently authored the OSINT and OPSEC tools - DECEPTICON Bot and WikiLeaker.

"Gray provides a very accessible look at social engineering that should be essential reading for pentesters and ethical hackers." -Ian Barker, BetaNews"I really liked the way that [Joe] lays out tools to use, including walking through where to download them from and install them . . . as beginner-friendly and as easy to use as possible."-Patrick Laverty, Layer 8 Podcast

• IntroductionPart 1: The BasicsChapter 1: What is Social Engineering?Chapter 2: Ethical Considerations in Social EngineeringPart 2: Offensive Social EngineeringChapter 3: Preparing for an AttackChapter 4: Gathering Business OSINTChapter 5: Social Media and Public DocumentsChapter 6: Gathering OSINT About PeopleChapter 7: PhishingChapter 8: Cloning a Landing PageChapter 9: Detection, Measurement, and ReportingPart 3: Defending Against Social EngineeringChapter 10: Proactive Defense TechniquesChapter 11: Technical Email ControlsChapter 12: Producing Threat IntelligenceAppendix A: Scoping WorksheetAppendix B: Reporting TemplateAppendix C: Information Gathering WorksheetAppendix D: Pretexting SamplesAppendix E: Exercises to Improve Your Social Engineering