Lesson 36 : Social Engineering Attacks Video Lecture | Ethical Hacking using Kali Linux (in English) - Software Development

hey guys welcome to the next tutorial of
ethical hacking and penetration testing
vehicle Linux so in the previous
tutorial we saw took a look at different
types of social engineering and how they
are executed so the next thing would be
to go ahead and prevent these things so
there are different types of things that
you would want to know but before that
you need to know that the weakest thing
is all your organization is not your
firewall intrusion detection system
cryptography or antivirus software you
are the weakest link in your computer
security people are mostly vulnerable
more than the computers and that is
famous dialogues set by the kevin
Mitnick so i'll go ahead with the ways
to go ahead and prevent social
engineering attack the person the most
important would be the training that is
user or awareness users need to know
that which information they are giving
out could be bad for business or for
them and they need to know that they
should not give out such information
because that can be risky after that we
have policies in place and should not be
allowed to divulge private information
this will prevent employees from being
socially pressured or trick you into
giving out some random information that
can be proved hazardous to the company
so and lastly would be the third-party
test that means a company should conduct
some ethical hacking or third-party
tests with their company having a third
party come to your company and attempt
to attack in your own network third
party will attempt to glean information
from employees using social engineering
and it helps detect the company problems
that people have with the security and
finally the thing you need to know is
that you need to be smart before
transmitting personal information over
the internet you need to check whether
the connection to the connection is
secure and you need to check that the
URL that you are going ahead and
accessing is correct if you're unsure if
an email messages they are not
legitimate you should contact the person
or the company by another means to
verify the same and you always need to
be paranoid and aware when interacting
with anything that needs protected
smallest information could compromise
what you are trying to protect and it
can be very harmful
so these are the different ways by
preventing social engineering attacks no
matter how much you know about hacking
or not you will not be able to go ahead
and prevent these kind of attacks
because they are quite or you can say
they are much more properly targeted
when you go and do these kind of attacks
so you know now enough of these let's
say any of these theories and now let's
go ahead and take a look at some
practical thing let's go ahead and open
our Kali Linux system we have it over
here let's go ahead and do some actual
attacks perfect so let's go down to some
practical problems that will go ahead
and help us gather much more information
so now you know the different types of
hacking that is social engineering a
technical non-technical creating fake
accounts phone calls and fishing without
Kali Linux yeah that is one more part
which I have not yet taught you fishing
without Kali and this is something that
you can do even if you don't have Kali
Linux so before I proceed with that I
will teach you so just in case if you
don't have any this for if you're trying
to go ahead and get access to some
random system let's say for example the
gmail ID of any specific person and you
don't have Kali Linux with you at that
point of time then what you could do is
that you just need to have a computer
with the internet connection and you
could simply go ahead and do this simple
thing as well so I'll be just using my
Chrome before I show you it's quite far
easier in Kali Linux but it's also
easier if you go and try to do it
something in a different way so just go
ahead and type Gmail and I already have
that over here and when you get this
step this good and click right click
save as and save it in any of your
random space and make sure that it is
the gmail period HTML any random page
name period HTML and just click Save and
when you have it you need to go on to
your folder so just go in my folder and
you can see you have your Gmail protects
tml you go ahead and right click and
edit with
any text editing file and go ahead and
type ctrl F over here and when you come
over here so select action AC tion and
hit enter and you have this first acts
in this leave it as it is click find
next and when you see this one over here
equals to HTTP service log in go ahead
and change I will change this with your
own IP address that's let's say for my
IP address that I know IP address be
192.168 point
68 point or 23 any random IP address and
this would be my IP address and I just
go ahead and put this out and everything
will be the same and over here the
instead of post go ahead and type get
perfect so after you do these things is
good and save this in your file and send
this to to the any party that you want
to go and hack into and the venue the
party goes ahead and tries to click on
this link your own fake page will be
created with your own IP address or if
you don't have an IP address the better
other better part would be intro with
the IP IP address you can go ahead and
create random domain let me check if
MANET is still on so this would and
create a random domain ok Bible II my it
is down if you are me check so don't
mind so if you can just quote unquote in
random domain for let's say e for Gmail
you can type g GM ail comm or any random
which is a name with this almost similar
to Gmail and you can go ahead and check
it over here as well mine it is not
working as I would have showed you over
here as well so these are different ways
as to how you can go and create fake
offline Facebook accounts or Gmail
accounts that if you want word and
catherine anyone else's information you
can straight away go ahead and do that
another method would be to go to new ski
logger or remotely install key logger in
the third parties computer but you need
to have remote access to that or you
need to have physical access to the
computer or you can go ahead and send
some kind of virus to that person and
ask him to go ahead and run let's say
any mp3 file and ass
came to go to install so these are
different ways of going ahead and
gathering information without ethical
without using Kali Linux so that is one
thing but now in this tutorial I will be
teaching you more about going out and
gathering information using Kali Linux
so that would be it for this tutorial
in the next tutorial starting with the
main points as how we can go and get the
information and different types of
social engineering attacks through Kali
Linux