conducting-social-engineering-penetration-test - Conduct social engineering penetration tests.
Execute social engineering tests combining OSINT target profiling with phishing, vishing, and physical pretexting campaigns to measure human resilience.
Tags
Updated: 2026-09-24Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Perform OSINT target profiling
- Configure GoPhish phishing campaigns
- Execute vishing scenario calls
- Conduct physical pretexting tests
- Analyze campaign metrics and risks
Inputs
- Written management authorization
- Target employee lists
- Phishing domains and infrastructure
- OSINT reconnaissance tools
Outputs
- Phishing and vishing metrics
- Harvested target credentials
- Campaign risk score matrix
Requirements
- Senior management written authorization
- Legal compliance review
- GoPhish server and attack domain
- OSINT and Evilginx toolsets