HF 2024 - OSINT/Social Engineering Bootcamp

Come learn the pro tips you need to digitally eviscerate your target, withthis comprehensive course offered by two time DEF CON black badgewinner Shane MacDougall. This intensive two day course will give youall the skills needed to profile, target, and attack your targets, be they people or institutions, with ruthless efficiency.

Day one will cover the basic tool and skill sets needed to hone your OSINT game. From profiling to data harvesting, students will be providedwith a pre-built virtual machine filled that they will be trained touse. The afternoon will be spent on individual and group exercises toidentifyindividual weaknesses to address before we move on, and to put themorning’s lessons to use.

Day two will focus on building social engineering skill sets, with topics ranging from body language to tactical pretext building. The afternoonwill be spent first with a people watching exercise, and then on a largescale exercise combining all of day one’s OSINT skills along with day two’s social engineering skills, where we will target a Fortune 500company and see how much information we can extract in an hour longdrill.

• 1 ticket Hackfest (talks, villages, beginner CTF, etc.)
• Food (lunch and coffee)
• 90 minutes free phone consulting time from the instructor, good for 2 years.

• Billet CTF (Classic or Pro)

All students must provide a laptop capable with a minimumof 16GbRAM, with VirtualBox preinstalled, and 500mb free space. Basic proficiency with Linux is advised but not mandatory.

Morning

• Introduction to the OSINT toolkit
• Profiling Basics
• Advanced Profiling
• Selecting Your Target
• Putting our tools to use

Afternoon

• Review
• Individual Exercise: Capture The Flag
• Debrief
• Group Exercise: Team Capture The Flag
• Debrief
• Homework

Morning

• Social Engineering Basics
• Body language - micro and macro expressions
• Building a bullet proof pretext
• Bypassing physical security systems
• Exercise

Afternoon

• Field Trip: People Watching exercise
• Public speaking exercise
• Group exercise: Fortune 500
• Debrief/Lessons Learned

Shane MacDougall has been involved in the information security worldon both the black hat and white hat sides since 1989. He has workedasapenetration tester, a sneaker, and as a corporate infosec wonk as well. He has been hired to break into national and regional banks, defencecontractors, and government agencies, and has instructed peoplefrommany of the 3 letter agencies around the world. He has lectured at various international conferences, and is a two time black badge winner from DEF CON for the SECTF, and was the first contestant to ever get aperfect score. He now spends his time doing the occasional infosec gigfor hire, as well as running the HackFest SECTF. He’s also currently a paramedic in San Diego, California.

Host or Publisher Hackfest Communication