Advanced Social Engineering and OSINT for Penetration Testing
Joe Gray
BSides Tampa 2018

Abstract: Today, we keep hearing about massive data breaches and companies being hacked. While some of the bigger breaches do not have a Social Engineering angle, many do and do not even know it! The presentation will provide attendees with advanced tools and techniques to use in penetration testing to help save them plenty of time in data gathering and increase the success rate of phishing and pretexting. The goal of a penetration test is to gain access, the techniques in this presentation and demonstration will help take your penetration tests to the next level. Also discussed are the ethical considerations of OSINT and Social Engineering as well as how to train users to prevent these attacks from happening.

Bio: Joe Gray joined the U.S. Navy directly out of High School and served for 7 years as a Submarine Navigation Electronics Technician. Joe maintains his own blog and podcast called Advanced Persistent Security. In his spare time, Joe enjoys attending information security conferences, contributing blogs to various outlets, training in Brazilian Jiu Jitsu (spoken taps out A LOT!), and flying his drone. Joe is in the inaugural winner of the DerbyCon Social Engineering Capture the Flag (SECTF) and was awarded a DerbyCon Black Badge. Joe has contributed material for the likes of AlienVault, ITSP Magazine, CSO Online, and Dark Reading.

Back to BSides Tampa 2018 video list