Some People Think Technology Has

We Have Problems With Our Physical Security, Operational Security Through To Management.

There Is No Patch For Stupidity.

I Can Go Into Linkedin And Search For Network Engineers And Come Up With A List Of Great Spear-phishing Targets Because They Usually Have Administrator Rights Over The Network. Then I Go Onto Twitter Or Facebook And Trick Them Into Doing Something, And I Have Privileged Access.

Of Course I'm Sure Half The People There Hate Me And Half The People Like Me

Both Social Engineering And Technical Attacks Played A Big Part In What I Was Able To Do. It Was A Hybrid. I Used Social Engineering When It Was Appropriate, And Exploited Technical Vulnerabilities When It Was Appropriate.