Social-Engineering attacks are on the rise from hackers across the world, and we are still failing as security professionals to use these in penetration tests. With the increased security around web applications, firewalls, HIPS, and everything else trying to prevent us, Social-Engineering allows an effective way for us to bypass security mechanisms and compromise the network. This talk will go over the different attack methods to consider when performing social-engineering attacks during a penetration test and how to drastically increase the success rate of compromise during an attack. In addition, a new version of the Social-Engineering Toolkit (SET) will be dropping at the same time. If your not familiar with SET, its a social-engineers swiss army knife for performing multiple methods of Social-Engineering attacks. This is the largest release of SET yet, and you don't want to miss it!
David Kennedy (ReL1K) is a security ninja that likes to write code, break things, and develop exploits when he has spare time. Heavily involved with BackTrack and the Social-Engineer Framework, David continues (and strives) to contribute to a variety of open-source projects. David had the privilege in speaking at some of the nations largest conferences including Defcon and Shmoocon. David is the creator of the Social-Engineer Toolkit (SET), Fast-Track, modules/attacks for Metasploit, and has (responsibly) released a number of public exploits, including attacks that affect some of the largest software vendors in the world. David heavily co-authored the Metasploit Unleashed course available online and has a number of security related white-papers in the field of exploitation. Currently David is a Director and Regional Security for an international multi-billion dollar Fortune 1000 organization and is in charge of ensuring that security is maintained in over 77 different countries.