Let's wrap up this course with a summary of what we have covered.
We will also look at additional resources and where you can continue your
journey into social engineering and physical attacks.
Your job as a specialized attacker is to help the client understand
their baseline security posture of their company,
whether it's digital,
physical or human. The human factor cannot be emphasized enough.
None of the attacks could have taken place without an untrained
individual either installing security devices incorrectly or helping
you circumvent them without questioning you.
Before we wrap up this course,
I want to assign you some homework to take away. Whether you live in a
city or a large town or are using Google Maps Street View, I want you
to look around and try to spot some of the security issues we've been
discussing today. For example, check out how many CCTV cameras there are.
Are they covering each other?
Are they covering the right things?
Are they even accessible?
Do they look old or broken?
Can you see in through windows to potentially sensitive
information written on walls or computer screens?
Are people walking out on the street wearing ID badges?
Have a look around your office as well.
See if people are doing these types of things.
I hope you've enjoyed this short course, Specialized Attacks: Physical and
Social Engineering. Please do take care with the information you've learned in
this course and understand that without permission, almost everything contained
in this course could land you in a lot of trouble. If you want to find out more
about social engineering or physical attacks, please feel free to look at the
following resources.
In summary,
this course has hopefully helped you understand that
contracts and scopes are necessary, the letter of authority
and what not to do, recon, badges, windows, CCTV, locks,
maps, control systems, tailgating, dressing the part,
pretexting, infiltration and exfiltration,
phishing, social engineering, observation,
waste materials, and giving you some additional resources to look at as well.
I hope you can join me again for another course soon.
Thank you for watching and learning with Pluralsight.