conducting-social-engineering-penetration-test - Conducting Social Engineering Penetration Test
Design and execute social engineering penetration tests to measure human security resilience and identify training gaps.
Tags
Updated: 2026-09-23Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Gather employee OSINT intelligence
- Set up phishing infrastructure
- Execute phishing campaigns
- Conduct vishing campaigns
- Perform physical pretexting assessments
- Analyze social engineering metrics
Inputs
- Written authorization from management
- Defined testing scope
- Target employee profiles
- Phishing domain and VPS
Outputs
- OSINT reconnaissance results
- Phishing campaign metrics
- Risk scoring dashboard
- Remediation recommendation report
Requirements
- Written authorization from senior management
- Legal review and compliance confirmation
- GoPhish server and infrastructure
- OSINT tools installation