offensive-social-engineering - Authorized Social Engineering Red Team Testing
Supports authorized red-team and physical penetration-testing exercises using pretexting, voice and SMS phishing, physical access, USB, watering-hole, and OSINT techniques.
Tags
Updated: 2026-10-16Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Conduct OSINT targeting
- Develop personas and pretexts
- Configure voice infrastructure
- Simulate vishing attacks
- Simulate smishing attacks
- Assess physical access
- Deploy USB payload devices
- Plan watering-hole attacks
- Document interaction outcomes
- Map activities to MITRE ATT&CK
Inputs
- Engagement objectives
- Written authorization
- Rules of engagement
- Target organization information
- Communication infrastructure
- Physical testing equipment
Outputs
- Documented interaction records
- Attack timestamps
- Permitted recordings
- Engagement outcomes
- Client debrief
- Security recommendations
Requirements
- Authorized red-team engagement
- Defined rules of engagement
- Applicable legal permissions
- VoIP or SMS infrastructure
- Relevant testing tools