Coursera Flash Sale
40% Off Coursera Plus for 3 Months!
Grab it
Explore strategic social engineering techniques for physical penetration testing assignments in this 32-minute conference talk from NorthSec 2025. Learn how to conduct reconnaissance and gather intelligence on company structures, employee behaviors, and security vulnerabilities to gain covert access to restricted areas like server rooms. Master effective social engineering tactics including pretexting, tailgating, baiting, and phishing designed to manipulate human behavior and bypass physical security measures. Discover how to craft believable pretexts using fake work orders, props such as ID badges and uniforms, and other deceptive materials to gain unauthorized access. Understand techniques for navigating target environments while avoiding detection and successfully planting symbolic flags during engagements. Examine post-engagement reporting procedures, vulnerability identification methods, and recommendations for strengthening organizational defenses against social engineering attacks. The presentation emphasizes ethical considerations and the critical importance of careful planning, confidence, and adaptability throughout physical penetration testing operations, providing practical insights for cybersecurity professionals looking to enhance their physical security assessment capabilities.
