I Get Hired By Companies To Hack

Both Social Engineering And Technical Attacks Played A Big Part In What I Was Able To Do. It Was A Hybrid. I Used Social Engineering When It Was Appropriate, And Exploited Technical Vulnerabilities When It Was Appropriate.

I Can Go Into Linkedin And Search For Network Engineers And Come Up With A List Of Great Spear-phishing Targets Because They Usually Have Administrator Rights Over The Network. Then I Go Onto Twitter Or Facebook And Trick Them Into Doing Something, And I Have Privileged Access.

The Methods That Will Most Effectively Minimize The Ability Of Intruders To Compromise Information Security Are Comprehensive User Training And Education. Enacting Policies And Procedures Simply Won't Suffice. Even With Oversight The Policies And Procedures May Not Be Effective: My Access To Motorola, Nokia, Att, Sun Depended Upon The Willingness Of People To Bypass Policies And Procedures That Were In Place For Years Before I Compromised Them Successfully.

The Human. Now You Know All About Your Target

As A Young Boy, I Was Taught In High School That Hacking Was Cool.