Learn Social Engineering & Open-source Intelligence (OSINT)

Name: Learn Social Engineering & Open-source Intelligence (OSINT)
Rating: 4.6 (964 reviews)

IT security is not just about firewalls or antiviruses, it is also about people.

Created byGabriel Avramescu

Last updated 5/2025

English

English [Auto],Japanese [Auto],

What you'll learn

Understand what Social Engineering is and how users can be affected
Perform social engineering attacks using tools and techniques

Course content

9 sections • 35 lectures • 4h 21m total length

About the instructor0:30
A few words about the author
What is Social Engineering. What to expect from this course1:55
In this video I will explain what the course is all about.
Types of Social Engineering3:53
In this video I will show you different types of social engineering.
Join Our Online Classroom!0:54
Social Engineering Quick Quiz
Awakeness.AI - Intelligent Cyber Security Awareness0:34
Awakeness.AI - Intelligent Cyber Security Awareness (video)1:07
Boost your cyber security awareness with awakeness.ai by learning how to defend against social engineering and apply open-source intelligence (OSINT) in protective strategies.

Information Gathering using Search Engines and Social Networks - part 112:58
In this video I will explain the difference between various search engines and social networks. You will find some search engines operators and ways to access deep web.
Information Gathering using Search Engines and Social Networks - part 217:17
Learn to use search operators and site constraints to gather targeted information from search engines and social networks, including deep web considerations, social media sources, and alerts.
Introduction to Maltego4:58
In this video I will present Maltego, o software used for gathering information about different items such as websites, domain, IP address, email, phone numbers, persons, etc.
Maltego - demo9:16
Explore maltego with the community edition to perform osint, using transformations to discover domain details, email addresses, pdfs, subdomains, dns data, and hosting, with plugins and api keys.
Quiz for Maltego and Information Gathering

Introduction to Metasploit2:51
In this video I will talk about Metasploit. Attached you can find a more detailed presentation about the framework and also the commands required to work with it.
Backdoor in Windows using Metasploit14:06
In this video I will show you how to create a backdoor for Windows and establish a remote session.
Backdoor in Android using Metasploit6:58
In this video I will show you how to create and exploit an Android device.
Metasploit Quiz

Introduction to Cross-Site Scripting and Beef-XSS8:27
In this video I will explain the basics of Cross-Site Scripting: how it can be discovered, exploited and also mitigated. You will find attached a pdf with detailed theoretical information about XSS (Cross-Site Scripting).
XSS example - reflected10:29
Explore reflected XSS vulnerability that echoes unsanitized user input in the response URL. See how injected JavaScript can steal cookies and perform session hijacking to impersonate a logged-in user.
XSS example - stored6:59
Demonstrates stored cross-site scripting by showing how unsanitized form submissions stored in a backend execute JavaScript for other users' browsers via forums or comments.
Beef-XSS Demo16:12
In this video I will show you how to get Facebook, Gmail, iCloud, LinkedIn and Windows passwords trough social engineering and cross-site scripting vulnerability.

Usernames and Passwords Brute-Forcing using Burp14:54
Learn how to brute-force usernames and passwords against a vulnerable web application using Burp proxy, Intruder, and cluster bomb, with example admin credentials.
Spider and Analyze a Website using Burp5:27
Learn to spider a website using Burp, map the site's resources and forms through a proxy, and reveal web server details for OSINT in a lab.
Brute-frocing Web Resources using Dirb and Dirbuster10:38
Learn to brute force hidden web resources not revealed by spidering using DirBuster and wordlists, and compare brute forcing with spidering on DVWA.
Bonus - OWASP Top 10 Vulnerabilities18:15
Explore mobile app security tools and the OWASP top ten vulnerabilities, with static and dynamic analysis, patch recommendations, and application of remedies to mobile and web apps.

Demo - Exploiting FTP Server Vulnerability using Metasploit9:38
Demonstrate vulnerability exploitation with Metasploit by identifying exploitable flaws and exploiting a Vsftpd 2.3.4 FTP vulnerability to gain control. Use Exploit-DB to locate exploits and configure payloads for access.
Demo - Hack SSH passwords using Hydra5:05
Explore dictionary-based password cracking with Hydra and offline tools like John the Ripper, including generating rule-based wordlists and testing ssh security.
Hack Linux Passwords using John the Ripper3:29
Crack Linux password hashes offline using John the Ripper, merging shadow files and applying dictionary or brute-force techniques to reveal user passwords.
Penetration Testing on Wireless Networks6:56
Explore wireless network security by examining standards and cracking methods for WEP and WPA/WPA2, using aircrack-ng in Kali Linux to sniff, inject, decrypt, and perform brute-force or dictionary attacks.
Case Study – Windows Hosted Network Bug or Feature10:42
Explore a case study of Windows hosted network vulnerabilities, including rogue and soft access points, backdoors, and worm propagation within an enterprise, and learn how to mitigate with policy controls.

APK file Structure. AndroidManifest XML file7:01
Explore the APK file structure and the AndroidManifest.xml, learn how resources, code, and dex files are packed, and understand how activities, services, and permissions shape Android apps.
Reversing to get Source code of the Application - decompiling with dex2jar10:53
Reverse Android apps by decompiling an APK to access XML, resources, and Java source, then analyze security, bypass certificate pinning, and recompile back to APK.
Reversing and Re-compiling With APKTool10:55
Demonstrate decompiling and recompiling an Android apk with apktool, inspecting resources and the manifest, signing the app, and installing it via adb.
Static Analysis of Android Application using QARK13:05
Perform a step-by-step static analysis of an Android APK with Quark, from setup and decompilation to vulnerability discovery and report generation.
Further information0:16
Social Engineering Awareness Role Play

Requirements

basic computer skills
basic web security and linux knowledge

Description

"Amateurs hack systems,professionals hack people." (Bruce Schneier)

In this course, meant for beginners with no previous knowledge about penetration testing or hacking, that will start with the basics of social engineering, and by end of it you'll be at an advanced level being able to hack into all major operating systems (windows, Android and so on), generate different types of trojans and deliver them using smart social engineering techniques.

To completely understand computer security, it's vital to step outside the fence and to think outside the box. Computer security is not just about firewalls, Intrusion Prevention Systems or antiviruses. It's also about tricking people into doing whatever a hacker wishes, for their benefit. A secure system, network or infrastructure is also about informed people. That's it what about this course is all about. Knowing how easy is for a hacker to make a regular user to do something harmful for himself, even being aware that is making a bit mistake.

This course covers both theoretical and practical aspects and contains hands-on labs.

Learn how to get Facebook, Gmail iCloud, Linkedin password trough social engineering, create backdoors and get remote control.

This courses have demos and labs using Kali Linux.

Disclaimer: this course is intended for ethical hackers and those who want to protect against this kind of attacks. Those are only theoretical examples in a lab environment. Hacking is illegal without legal permission!

Who this course is for:

IT Security Engineers
IT passionates
Chef Security Officers

Learn Social Engineering & Open-source Intelligence (OSINT)

What you'll learn

Explore related topics

Course content

Introduction - the basics6 lectures • 9min

Information Gathering4 lectures • 44min

Social Engineering Toolkit (SET)2 lectures • 8min

Social Engineering using Metasploit3 lectures • 24min

Attacking the users trough websites - XSS and Beef-XSS4 lectures • 42min

Final words2 lectures • 7min

(Bonus) Web attacks4 lectures • 49min

(Bonus) Network Attacks5 lectures • 36min

(Bonus) Android reverse Engineering6 lectures • 42min

Requirements

Description

Who this course is for: