Social Engineering
What - Types - Reports - With Pen Testing - With Security Consulting
Social Engineering to Support Penetration Testing
Social engineering is often integrated into our penetration testing engagements, to support information gathering procedures, and expose additional security vulnerabilities of the target organization.
Depending on the findings of the social engineering engagements, the information collected can stand on its own, or be leveraged in support of the penetration testing engagement. Often, our security engineers gather important pieces of information from employees of the target organization that allow access to sensitive systems, often by supplying innocuous pieces of information to the security engineers that is joined to information gathered during passive reconnaissance or technical penetration testing activities.
Social engineering in combination with penetration testing is a very powerful tool to expose vulnerabilities that otherwise would not have been identified during the penetration testing engagement.