Udemy
Turn what you know into an opportunity and reach millions around the world.
Learn More
Your cart is empty.
Keep shopping
The Complete Social Engineering, Phishing, OSINT & Malware
Rating: 4.5 out of 5(7,732 ratings)
26,504 students

The Complete Social Engineering, Phishing, OSINT & Malware

Learn how hackers hack Windows, Linux & Android by using Social Engineering and protect yourself from phishing attacks
Last updated 11/2026
English
English [Auto],Japanese [Auto],

What you'll learn

  • Ethical hacking involves a hacker agreeing with an organization or individual who authorizes the hacker to levy cyber attacks on a system.
  • Becoming an ethical hacker involves learning at least one programming language and having a working knowledge of other common languages like Python, SQL, C++
  • Many hackers use the Linux operating system (OS) because Linux is a free and open-source OS, meaning that anyone can modify it. It’s easy to access.
  • Ethical hacking is legal because the hacker has full, expressed permission to test the vulnerabilities of a system
  • The Certified Ethical Hacker (CEH) certification exam supports and tests the knowledge of auditors, security officers, site administrators, security.
  • Learn how to create undetectable malware using MSFvenom, Veil, TheFatRat, Empire Project, etc
  • Passing the Certified Information Security Manager (CISM) exam indicates that the credentialed individual is an expert in the governance of information security
  • The different types of hackers include white hat hackers who are ethical hackers and are authorized to hack systems, black hat hackers who are cybercriminals.
  • Learn embedding malware in pdf and doc files
  • Learn the working mechanism of Social Engineering Toolkit
  • Learn social engineering techniques and terminologies
  • Learn about the Metasploit Framework
  • Learn how to achieve a realistic "vishing" attack: hacking people by phone
  • Learn how to collect information about people by using OSINT (Open Source Intelligence)
  • Learn how to use Empire
  • Learn how to use FOCA, Web Archieve, The Harvester & Recon-NG
  • ethical hacking
  • cyber security
  • android hacking
  • hacking
  • Ethical Intelligence
  • Ethical Hacker

Course content

12 sections • 48 lectures • 3h 28m total length
  • Introduction to OSINT (Open Source Intelligent ), social engineering, phishing0:58

    Introduction to social engineering in ethical hacking

Requirements

  • 4 GB (Gigabytes) of RAM or higher (8 GB recommended)
  • 64-bit system processor is mandatory
  • 10 GB or more disk space
  • Enable virtualization technology on BIOS settings, such as “Intel-VTx”
  • Modern Browsers like Google Chrome (latest), Mozilla Firefox (latest), Microsoft Edge (latest)
  • All items referenced in this course are Free
  • A computer for installing all the free software and tools needed to practice
  • A strong desire to understand hacker tools and techniques
  • Be able to download and install all the free software and tools needed to practice
  • A strong work ethic, willingness to learn and plenty of excitement about the back door of the digital world
  • Nothing else! It’s just you, your computer and your ambition to get started today

Description

Welcome to The Complete Social Engineering, Phishing, OSINT & Malware course!

Go Beyond Cybersecurity Theory: Explore Social Engineering, Phishing, OSINT & Malware in a Hands-On Virtual Lab.

Many cyberattacks begin long before malware runs. A convincing email, a phone call, or a few details found online can give an attacker the opportunity they need. To understand these threats, you need to know how attackers approach their targets, which tools they use, and how seemingly small actions can create serious security risks.

This course brings these techniques together in one practical learning path. You’ll start by setting up a virtual lab with Kali Linux, Windows targets, and Metasploitable using VirtualBox or VMware. Then you’ll explore social engineering, malware-related tools such as MSFvenom, Veil, and TheFatRat, post-exploitation concepts with Empire, Java vulnerabilities, and the Social Engineering Toolkit (SET).

You’ll also examine phishing and vishing techniques before diving into OSINT. Using tools and resources such as search engines, Google hacking, Shodan, web archives, FOCA, theHarvester, Recon-ng, and Maltego, you’ll explore how publicly available information can reveal useful clues about a target.

Whether you’re starting in cybersecurity, exploring ethical hacking, or learning how attackers target people and organizations, this course helps you build a foundation across these closely connected topics. You don’t need previous experience in social engineering, malware, reverse engineering, Metasploit, or information security to get started. Begin with your lab, follow the lessons, and build your understanding step by step.

Enroll today and start exploring the techniques behind modern social engineering and cyberattacks in a controlled learning environment.

What Skills Will You Learn in This Course?

Lab Setup: Install VirtualBox or VMware, Kali Linux, Windows targets, and Metasploitable, and create a NAT network to practice safely.

Social Engineering Terminology: The core terms and concepts behind social engineering attacks.

Creating Malware: Create malware with MSFvenom, Veil, and TheFatRat, and work through common installation issues.

Embedding Malware: Embed malware in a PDF, a Word document, and a Firefox add-on.

Empire Project: Install and use Empire for post-exploitation.

Exploiting Java Vulnerabilities: How Java vulnerabilities are exploited.

Social Engineering Toolkit: How to use the Social Engineering Toolkit (SET) to run social engineering attacks.

Phishing and Vishing: How to send fake emails for phishing, and the techniques behind vishing (voice phishing).

OSINT and Information Gathering: Google hacking and search engine tools, Shodan, gathering information about people, web archives, FOCA, theHarvester, Recon-ng, and Maltego.

Who Is This Course For?

Aspiring Ethical Hackers and Penetration Testers: Learners who want a structured, beginner-friendly path into social engineering and OSINT.

Security Analysts and Blue Team Members: Defenders who want to understand how social engineering and phishing attacks work so they can recognize and stop them.

IT and Security Managers: People who want to see how employees are targeted, to train and protect their organization.

OSINT Beginners: Learners who want to understand how attackers gather information before an attack.

Students and Career Changers: People moving into cybersecurity who want hands-on practice.

IT Professionals: Anyone who wants to check how exposed their own information and systems are.

You don't need previous experience with social engineering, reverse engineering, malware, the Metasploit framework, or information security. You do need a computer that can run virtual machines. The course starts with the lab setup and builds from there.

Why Learn Social Engineering and OSINT?

Most attacks don't start with breaking software, they start with tricking a person or using information that is already public. Understanding social engineering, phishing, and OSINT shows you how attackers plan and run these attacks, which is the first step to defending against them.

These skills apply to roles such as penetration tester, security analyst, and security awareness trainer, and to anyone responsible for protecting an organization's people, not only its systems. Recognizing a phishing email or an OSINT-driven attack is a skill that stays useful long after any single tool changes.

Why Choose This Course?

You build your own lab. Kali Linux, Windows targets, and Metasploitable run in VirtualBox or VMware, so you practice real techniques safely, without affecting your main system.

Free tools only. The course uses free tools and platforms, so you don't need to buy any tool or application.

You create and embed real malware samples. MSFvenom, Veil, and TheFatRat, embedded in a PDF, a Word document, and a Firefox add-on, turn the concepts into something you have actually built, in your own lab.

OSINT covered in depth. Google hacking, Shodan, web archives, FOCA, theHarvester, Recon-ng, and Maltego show you how attackers gather information before they ever send a message.

Phishing and vishing included. You learn how fake emails are sent and how voice phishing works, the techniques behind many real-world breaches.

Focused lessons. The course skips unnecessary talk and waiting and gets to the point, so you cover a lot in about three hours.

You test yourself as you go. Eight quizzes show you what you understood while it is still fresh.

You study at your own pace. Revisit any lesson as often as you like.

Frequently Asked Questions

What is social engineering?

Social engineering is the manipulation of people, rather than software, into giving up information or taking an action that weakens security, such as opening a file, following a link, or sharing a password. This course shows how these attacks are built, from phishing and vishing to malware delivery and OSINT, so you can recognize and defend against them.

Is this course suitable for beginners?

Yes. The course starts with lab setup and foundational terminology before introducing the tools and techniques covered in the curriculum. You don’t need previous knowledge of social engineering, reverse engineering, malware, Metasploit, or information security. You will need a computer capable of running virtual machines.

What will I learn in this course?

You’ll explore social engineering fundamentals, malware-related concepts, phishing and vishing, OSINT, and tools used in cybersecurity testing. The curriculum includes Kali Linux lab setup, MSFvenom, Veil, TheFatRat, the Empire Project, Java vulnerability examples, the Social Engineering Toolkit, and OSINT tools such as Shodan, FOCA, theHarvester, Recon-ng, and Maltego.

Does the course include hands-on practice?

Yes. You build a virtual lab with Kali Linux, Windows targets, and Metasploitable in VirtualBox or VMware, then create malware samples, use the Social Engineering Toolkit, and run OSINT tools inside it. Exact results can vary with your system configuration and tool versions.

Which tools and applications are covered?

The curriculum includes Kali Linux, VirtualBox or VMware, Metasploitable, MSFvenom, Veil, TheFatRat, the Empire Project, the Social Engineering Toolkit (SET), Shodan, FOCA, theHarvester, Recon-ng, Maltego, web archives, and Google search techniques used for information gathering.

Will I learn about malware and how it is delivered?

Yes. The course explores malware-related tools and delivery concepts, including examples involving PDF files, Word documents, and a Firefox add-on. These topics should be studied only in a controlled lab on systems you own or are explicitly authorized to test. The purpose of understanding these techniques is to recognize attack methods and their associated security risks.

What is the difference between phishing and vishing?

Phishing typically uses deceptive emails or messages to influence a recipient into taking an action, such as opening a file or following a link. Vishing, or voice phishing, uses phone calls and spoken interaction to manipulate a target. The course introduces both techniques and explains their place in social engineering.

What is OSINT, and why is it important in cybersecurity?

Open Source Intelligence (OSINT) involves gathering and analyzing information from publicly available sources. In cybersecurity, this can help reveal an organization’s public-facing technologies, exposed information, or potential attack surface. The course introduces a range of OSINT tools and search techniques used to investigate publicly accessible information.

Do I need programming or reverse-engineering experience?

No previous experience in programming, reverse engineering, or malware analysis is listed as a requirement for starting the course. Some exercises may involve technical tools and configurations, so a willingness to follow instructions and troubleshoot your lab environment will be helpful.

What computer do I need for the course?

You’ll need a computer capable of running virtualization software such as VirtualBox or VMware and supporting the virtual machines used in the exercises. Available memory, storage, and processor capacity can affect how smoothly the lab runs, so check the requirements of your chosen virtualization software and virtual machines before beginning.

Is this course focused on offense or defense?

It teaches the attacker’s side of social engineering, phishing, malware, and OSINT inside a controlled lab, so you can recognize these attacks and defend against them. It suits both aspiring ethical hackers and defenders, but it is not a full blue-team or malware-analysis program.

Can this course help me start a career in cybersecurity?

It can provide an introduction to several relevant cybersecurity topics and help you decide which areas you want to study further. Roles such as penetration tester, security analyst, and security awareness specialist require additional knowledge and practical experience beyond a single course. Completing this course does not guarantee a job or professional qualification.

Do I need to buy additional tools?

No. The course uses free tools and platforms. Because tool versions and installation steps change over time, the course also walks through common installation issues.

Why Learn Social Engineering and OSINT with Muharrem Aydın?

Muharrem Aydın brings years of teaching and real-world experience to this course, with a practical, no-fluff approach: clear explanations, real examples, and every topic in a logical order. You study at your own pace and always have a way to ask when something is unclear.

Clear Video and Audio: See clearly, hear clearly, and learn without distractions.

Lifetime Access: Come back to any lesson whenever you want to review a topic.

Fast, Friendly Q&A Support: Ask your questions in the course Q&A section.

Certificate of Completion: Download your Udemy certificate when you finish the course.

Start Your Social Engineering and OSINT Journey Today

Build your lab, create and embed malware safely, learn how phishing and OSINT attacks are built, and learn how to defend against them.

Enroll today in The Complete Social Engineering, Phishing, OSINT & Malware course and take your next step toward a career in cybersecurity.

Important: This course is created for educational purposes. Use what you learn only on systems you are authorized to test.

Who this course is for:

  • Anyone who wants to learn social engineering tools and techniques
  • Anyone who wants to learn about how malware is created and distributed
  • Cyber Security Consultants who will support organizations for creating a more secure environment
  • People who are willing to make a career in Cyber Security
  • Anyone who wants to be a White Hat Hacker