Field Diaries

Social Engineering: The New Guy Isn't Bald

Most security awareness training is focused on external threats. But what happens when the threat seemingly comes from within?

Social Engineering: Vishing for Whales

Social Engineering: Is it Okay to be Rude?

The story of how a fellow analyst and I exploited peoples’ kindness, and how it could have ruined a financial institution with billions in assets.

Passwords and Accounts with Admin Access

In this pentest diary, I will discuss the importance of passwords for network devices, why it is critical to ensure that all devices utilize complex passwords, and show the potential impact of using default passwords.

The Importance of Escort Policies

Social engineering at work - is that really a Fiber Network Technician?

Social Engineering: We Aren't Really Expanding the Building!