01 - Introduction: The Psychology and Mechanics of Social Engineering
Social engineering is the art of manipulating people into performing actions or divulging confidential information. While technical attacks focus on s...
02 - Phishing Analysis and Email Security
Defending against phishing requires a deep understanding of how emails are delivered, verified, and parsed by Mail Transfer Agents (MTAs). This sectio...
03 - Credential Harvesting and MFA Bypass
While Multi-Factor Authentication (MFA) was once considered the silver bullet against credential theft, modern attackers have developed sophisticated ...
04 - Defensive Awareness and Simulation
Technical controls will inevitably fail. When a phishing email reaches an inbox, the employee is the final line of defense. Security awareness trainin...
05 - Technical Phishing Defenses
Beyond email authentication (DMARC) and user awareness, organizations must implement technical controls to analyze payloads and monitor the external t...
06. Hands-On Vulnerability Lab
In this hands-on lab, you will write a **Python Email Header & DMARC Audit Tool** to detect spoofed inbound emails, parse SPF/DKIM headers, and implem...
07 - References & Resources
Comprehensive security guide and practical technical implementation handbook.
Social Engineering & Phishing Defense
Social Engineering remains the most successful initial access vector for modern adversaries. By manipulating human psychology rather than exploiting t...