<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
---
name: performing-pretexting-attacks
description: >-
  Develop and execute pretexting scenarios to test defenses against identity deception and social manipulation.
domain: cybersecurity
subdomain: social-engineering
tags:
  - pretexting
  - social-engineering
  - red-team
  - identity-deception
version: "1.0"
author: defconxt
license: AGPL-3.0
metadata:
  mitre-attack: ["T1598.003"]
---

# Performing Pretexting Attacks

## Overview

Develop and execute pretexting scenarios to test defenses against identity deception and social manipulation.

## Prerequisites

| Requirement | Install |
|---|---|
| OSINT tools | For target research |
| Scenario framework | Planning documents |
| Python 3.10+ | For agent tooling |

## Key Concepts

Pretexting creates fabricated scenarios to manipulate targets into
divulging information. Requires research, persona development,
and scenario planning with decision trees.

## Quick Reference

```bash
node agent.js research --target acme-corp --depth full
node agent.js build-persona --role vendor --department IT
node agent.js execute --scenario helpdesk-reset --target jsmith
node agent.js report --engagement E-2026-001
```

## Workflow

1. Gather OSINT on target organization
2. Identify high-value targets and access paths
3. Develop persona with verifiable backstory
4. Create scenario script with decision trees
5. Execute pretext via selected channel
6. Document all interactions and outcomes
7. Compile findings with recommendations

## Verification

- Verify persona withstands basic verification
- Confirm script covers common objections
- Validate evidence captures all interactions
- Check report includes timeline and impact
- Verify recommendations address gaps

## References

- OWASP Testing Guide — https://owasp.org/www-project-web-security-testing-guide/
- MITRE ATT&CK — https://attack.mitre.org/
- NIST SP 800-53 — https://csf.tools/reference/nist-sp-800-53/
