Practical Social Engineering A Primer for the Ethical Hacker

by Gray, Joe

• ISBN13: 9781718500983
• ISBN10: 171850098X
• eBook ISBN(s): 9781718500990
• Format: Paperback
• Copyright: 2022-06-14
• Publisher: No Starch Press
• More Book Details

About This Book

Practical Social Engineering: A Primer for the Ethical Hacker

ISBN: 9781718500983

Practical Social Engineering: A Primer for the Ethical Hacker is a comprehensive guide written by Joe Gray, an award-winning expert in social engineering. This book is designed to help readers understand the techniques behind social engineering attacks and how to defend against them. Even the most advanced security teams can struggle to protect against an employee clicking a malicious link, opening an email attachment, or revealing sensitive information in a phone call. This book provides a hands-on look at the cyber attacks that target human nature, offering pentesting templates and tips for defending against them.

Who Uses It?

Primarily, this book is used by ethical hackers, pentesters, and cybersecurity professionals who want to master the fundamentals of social engineering. It is also a valuable resource for anyone interested in understanding the techniques used by cybercriminals and how to thwart their attacks.

History and Editions

The book was published in 2022 by No Starch Press. It has been well-received in the cybersecurity community, with an overall rating of 4.5 stars. The book is designed to be beginner-friendly, with clear instructions on how to use various tools and techniques.

Author and Other Works

Joe Gray is the author of Practical Social Engineering: A Primer for the Ethical Hacker. While this is his primary work in the field, his expertise in social engineering has been recognized through his contributions to various cybersecurity communities.

Key Features

• Hands-on Approach: The book provides practical templates and tools for performing social engineering operations.
• Defensive Strategies: It offers tips and techniques for defending against social engineering attacks.
• Open Source Intelligence (OSINT): The book includes advanced OSINT methods for gathering information about targets.
• Case Studies: Joe Gray shares real-world case studies to illustrate the techniques and their applications.
• Ethically Focused: The book is designed to be ethically focused, making it a valuable resource for both offensive and defensive cybersecurity professionals.

Detailed Information

ISBNs and Formats

• Paperback: ISBN-13: 9781718500983
• Paperback: ISBN-10: 171850098X

Publication Details

• Publisher: No Starch Press
• Publication Date: January 1, 2022
• Number of Pages: 211
• Language: English
• Item Weight: 0.95 lbs
• Dimensions: 9.25" x 0.71" x 7.06"

Other Editions and Formats

None found.

Related ISBNs

None found.

Additional Information

• Price: List price: $34.99
• Availability: Available for purchase or rent from various retailers.
• Shipping: Free shipping on rental returns.

This detailed information section provides a quick reference for all the available formats and sources for Practical Social Engineering: A Primer for the Ethical Hacker, making it easier to find and access the book in the preferred format.

Author Biography

Joe Gray joined the U.S. Navy directly out of High School and served for 7 years as a Submarine Navigation Electronics Technician. Joe is currently a Senior OSINT Specialist at Qomplx, Inc. and previously maintained his own blog and podcast called Advanced Persistent Security. Joe is the inaugural winner of the DerbyCon Social Engineering Capture the Flag (SECTF) and was awarded a DerbyCon Black Badge. As a member of the Password Inspection Agency, Joe has placed 2nd in the HackFest Quebec Missing Persons CTF powered by TraceLabs, 2nd in the BSides Atlanta OSINT CTF, and 3rd Place in the 2018 & 2019 NOLACon OSINT CTFs. Joe has independently placed 2nd in the HackFest Quebec SECTF, 4th Place in the DerbyCon OSINT CTF, and 2nd Place in Hacker Jeopardy at Hack in Paris. Joe has contributed material for the likes of TripWire, AlienVault, ITSP Magazine, CSO Online, Forbes, and Dark Reading as well as his own platforms.

Table of Contents

Introduction

Part 1: The Basics
Chapter 1: What is Social Engineering?
Chapter 2: Ethical Considerations

Part 2: Offensive Social Engineering
Chapter 3: Preparing to Attack
Chapter 4: Business OSINT
Chapter 5: Social Media and Public Documents
Chapter 6: People OSINT
Chapter 7: Phishing
Chapter 8: Building Landing Pages for Phishing
Chapter 9: Detection, Measurement, and Reporting

Part 3: Defending Against Social Engineering
Chapter 10: Proactive Defense Techniques
Chapter 11: Technical Email Controls
Chapter 12: Producing Threat Intelligence

Appendix A: Scoping Worksheet
Appendix B: Reporting Template
Appendix C: Information Gathering Worksheet
Appendix D: Pretexting Samples
Appendix E: Social Engineering Exercises