Engagement Objective

Devise various methods to (1) obtain confidential information which has been discarded and (2) manipulate employees to divulge confidential information (3) test physical access controls (4) test employee awareness to falling prey to phishing attacks

Alternative Engagement Components

- Phone Pretexting

- Dumpster Dive, Workplace Search and Physical Access

- Target Email "Phishing" Attacks

- Malicious Portable Media

Next Steps