3 Hacking Skills EVERYONE has // FREE Security+ // EP 1

About this video

In episode one of a free Security+ series, the creator argues social engineering hacks the human operating system and that everyone already has three dangerous hacker skills. First, recon or reconnaissance: gathering information before an attack through OSINT, open source intelligence. Snooping on people on Facebook, LinkedIn, Twitter and Google is the same skill; he shows how public posts, friends, places and past jobs revealing a company’s technology, such as Cisco gear, can feed impersonation and targeted phishing. He demonstrates the OSINT Framework, a username checker, Twint for advanced Twitter searches including by location, Hunter.io for company email addresses, and mentions Google hacking/dorking. Protection is to assume anything posted, even as friends-only, can be seen, and for companies to train staff and set policies. Second, dumpster diving: pre-approval mail and discarded company documents, passwords, purchase orders, computers and drives in trash can expose usable information; he advises shredding personal documents and hiring third-party shredding and e-waste disposal. Third, shoulder surfing: looking over a shoulder in a cafe, in a line, or at an ATM, and its audio form, eavesdropping on work conversations in coffee shops near a target company. Protection is blocking sightlines, preferring biometrics over passcodes where possible, and not discussing work outside work. He stresses these non-technical, psychological stages set up later attacks and are hard to defend because they depend on people.

Key takeaways

• Recon is OSINT: public social media and Google searches reveal personal details and a company’s tech stack for later attacks
• Assume anything posted online can be seen, even with private or friends-only settings
• Dumpster diving exploits discarded mail, documents and hardware; shred paper and use third-party disposal for devices
• Shoulder surfing includes eavesdropping in public; guard screens and passcodes and do not discuss work in public
• These human-focused skills are usable by anyone and are the hardest attacks for individuals and companies to stop

Episode details: published October 19, 2020 · 13:21 long. Summary written by Self Growth Videos from the episode itself. Business results and any income figures mentioned are NetworkChuck’s own claims, shared for education — they are not typical or guaranteed.

← Previous: Data Center NETWORKS (what do they look like??) // FREE CCNA // EP 7 · Next: VMware on a Raspberry Pi!?!?! (ESXi Install) →

All NetworkChuck videos · NetworkChuck profile · NetworkChuck on YouTube